$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: hoRuWh+eVXDVjBALEgwTsXvEoHtfPlg8SXvHGzBST3I= Subject key identifier: 17:6B:CC:E7:D3:2E:85:58:1F:F3:7B:23:A7:50:9A:4D:B6:E6:7B:0F Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 0A59 Signing time: Sat 04 Apr 2026 19:28:16 +0000 Manifest this update: Sat 04 Apr 2026 19:28:16 +0000 Manifest next update: Sat 11 Apr 2026 19:28:16 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: Gvx4ySORl47/I3l8HnYtCs+dHDNYk34XNdxSQYTghjM=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: xYf6QNwyh/TfYBwfKMFox0Y2KD6yEqZCCyhoM2C9YaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: Apr 4 19:28:16 2026 GMT Not After : Apr 11 19:28:16 2026 GMT Subject: CN=69d16650-eab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9d:c9:65:6d:4e:89:8f:f2:ed:1e:a4:cd:96: cb:5c:c6:33:d9:d0:f8:b0:41:c6:7a:3c:d7:86:02: 0b:e7:ec:55:6b:0a:44:04:c9:88:0c:d4:55:96:28: ad:17:de:18:f2:84:b5:3b:55:a9:50:55:a6:b0:a9: 55:f5:e5:66:f3:be:34:42:a7:94:e4:aa:5c:7f:c3: a7:bd:54:2e:da:06:ef:af:ba:44:4b:0f:90:b5:68: 3d:62:fd:a6:ec:7a:cb:a4:78:c7:a9:7b:1d:0a:41: 51:95:91:e9:a9:e7:3d:7c:25:29:99:f7:f5:d1:6b: 87:0d:22:db:c0:39:ae:40:f4:f2:51:cc:b5:ab:f9: 0f:14:a6:c8:4b:eb:06:e0:9e:af:8d:f1:33:ab:5b: 9f:8d:29:13:c3:d0:4b:27:2a:fe:03:72:fd:00:1c: b7:5a:ad:e8:ed:98:a8:83:a8:39:34:fc:73:24:0e: 60:26:8e:0c:3a:ef:a1:a4:bc:f7:25:71:f9:0d:b1: c6:34:a9:7b:24:a6:0d:9e:dc:f8:41:6d:06:c9:f1: b6:82:81:ba:d6:d6:a1:e5:85:bf:84:2b:fa:6d:f3: da:cc:23:7c:c0:57:37:72:39:ec:9e:a8:78:f4:ba: d0:ec:77:10:b7:be:a7:78:94:b9:03:80:5d:3b:3d: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6B:CC:E7:D3:2E:85:58:1F:F3:7B:23:A7:50:9A:4D:B6:E6:7B:0F X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:27:87:36:99:81:8e:70:4d:e4:89:64:a3:70:54:40:29:d5: 81:bd:a3:68:55:0c:d0:bc:fe:12:27:6b:3b:99:e3:dd:15:de: bc:9b:c7:b6:35:b3:64:63:f1:be:5c:df:c5:1a:de:23:d0:01: c6:60:6a:4e:a9:2e:27:e0:db:17:17:db:2e:3a:71:d1:dd:40: c8:c4:ad:60:2e:d5:74:9a:ca:e3:7e:6b:d1:5c:f4:ff:ad:99: 02:c5:62:01:0d:49:0a:eb:1f:04:99:18:cf:f7:12:3d:4b:f3: 23:f3:e1:89:b6:0c:ed:3d:5c:68:e4:20:7c:6b:9b:fc:f5:3d: f9:34:9c:5e:10:9e:bd:e1:6f:a8:0e:6a:38:3f:d9:fa:70:cd: f1:97:31:88:87:10:78:ee:3d:55:ce:bc:6f:6b:1b:50:18:b3: a2:91:2d:d4:80:48:82:22:7f:d6:88:af:72:d5:1e:73:c6:2e: 44:ea:ad:a2:4d:77:55:42:17:35:e8:e9:b0:29:f6:59:ad:1b: ca:1a:6b:dd:1c:c1:22:09:9c:b4:25:49:de:30:e6:37:3f:6c: 20:ee:97:55:a2:e4:8c:7a:e0:f0:8a:d3:65:d3:13:fe:60:13: 7f:b1:74:ac:bd:4b:78:f9:94:e8:8b:92:a3:ad:92:c5:60:db: 8a:8b:b0:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjYwNDA0MTkyODE2WhcNMjYwNDExMTkyODE2WjAYMRYwFAYD VQQDEw02OWQxNjY1MC1lYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA653JZW1OiY/y7R6kzZbLXMYz2dD4sEHGejzXhgIL5+xVawpEBMmIDNRVliit F94Y8oS1O1WpUFWmsKlV9eVm8740QqeU5Kpcf8OnvVQu2gbvr7pESw+QtWg9Yv2m 7HrLpHjHqXsdCkFRlZHpqec9fCUpmff10WuHDSLbwDmuQPTyUcy1q/kPFKbIS+sG 4J6vjfEzq1ufjSkTw9BLJyr+A3L9ABy3Wq3o7Ziog6g5NPxzJA5gJo4MOu+hpLz3 JXH5DbHGNKl7JKYNntz4QW0GyfG2goG61tah5YW/hCv6bfPazCN8wFc3cjnsnqh4 9LrQ7HcQt76neJS5A4BdOz0uBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdrzOfT LoVYH/N7I6dQmk225nsPMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKCeHNpmBjnBN5Ilko3BUQCnVgb2jaFUM0Lz+EidrO5nj3RXevJvHtjWzZGPx vlzfxRreI9ABxmBqTqkuJ+DbFxfbLjpx0d1AyMStYC7VdJrK435r0Vz0/62ZAsVi AQ1JCusfBJkYz/cSPUvzI/PhibYM7T1caOQgfGub/PU9+TScXhCeveFvqA5qOD/Z +nDN8ZcxiIcQeO49Vc68b2sbUBizopEt1IBIgiJ/1oivctUec8YuROqtok13VUIX NejpsCn2Wa0byhpr3RzBIgmctCVJ3jDmNz9sIO6XVaLkjHrg8IrTZdMT/mATf7F0 rL1LePmU6IuSo62SxWDbiouwsA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:05 2026 by rpki-client