$ rpki-client -vvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft File: 2QhrDfk0LcKwkbrobLd5_GJZvXs.mft (raw, json) Hash identifier: WhPB7fgBFsPUftZnXcX/H7I1YrcyGnkWHhOmCdBnfuo= Subject key identifier: 68:9A:3B:D7:E6:D0:7C:EE:AF:87:86:F7:9D:6A:13:B7:84:92:E4:FA Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Certificate serial: 353B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft Manifest number: 3530 Signing time: Sat 04 Apr 2026 14:57:04 +0000 Manifest this update: Sat 04 Apr 2026 14:57:04 +0000 Manifest next update: Sat 11 Apr 2026 14:57:04 +0000 Files and hashes: 1: 2QhrDfk0LcKwkbrobLd5_GJZvXs.crl (hash: pju//v1aqRbGMLbX5zsgNiVF5NW2zOfFk2IXQQsmFA0=) 2: 588BD7269A1211E8B97A623AC4F9AE02.roa (hash: WIHf/g57A92kBt+M1v/6HUGwLpZi39D8KAuOlAkvShg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13627 (0x353b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F2EC, serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Validity Not Before: Apr 4 14:57:04 2026 GMT Not After : Apr 11 14:57:04 2026 GMT Subject: CN=69d126c0-f1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:08:30:dc:ea:dd:40:8d:21:cc:1a:8a:a3: 37:ee:2b:c7:55:79:b8:f6:70:ea:08:17:94:52:ef: 91:b9:46:6a:0e:b0:ba:03:bc:3a:91:c2:b5:a7:c7: fd:17:59:91:a0:55:89:e7:01:a2:07:96:22:a9:ef: ac:82:be:b9:ce:96:d8:f3:f4:ca:24:9d:16:62:48: 35:8a:78:f4:98:1d:ff:ca:58:28:c0:ef:2c:0b:a2: 7e:11:0a:54:a5:b1:fc:1b:14:f5:98:5a:cd:5f:84: 4c:40:10:56:bf:0e:7a:d1:33:5a:d5:a4:99:cb:96: 25:00:fe:7a:36:4d:5f:8a:28:fb:37:11:8f:2a:e8: 99:a3:5e:27:a5:78:89:9c:d6:4c:e1:c4:5d:5e:23: 3e:02:8b:fb:c2:60:2c:f5:ea:f3:5f:19:26:32:c8: 45:d2:e2:c1:04:e5:c6:1c:e4:3f:49:1d:00:13:46: e5:76:51:2b:ce:db:a8:bc:81:23:8a:68:cb:b6:43: 9b:de:fc:78:a6:36:82:00:b9:82:bf:3e:d1:92:d2: 9b:00:7a:55:3b:1f:2a:69:c7:2a:02:ab:3a:9c:a0: 36:83:fd:5f:41:a5:e2:f4:a9:c4:d9:ec:9e:ec:a7: 2a:08:e4:6c:76:76:13:13:c1:e2:93:14:c4:af:01: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:3B:D7:E6:D0:7C:EE:AF:87:86:F7:9D:6A:13:B7:84:92:E4:FA X509v3 Authority Key Identifier: keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ba:f4:20:62:93:03:05:39:62:9a:a3:ce:8f:4b:26:d3:20: 64:74:d5:13:a8:3c:e3:0c:7c:60:f8:f9:10:cc:be:cd:0f:6c: e9:c4:7f:16:da:a3:42:54:88:b6:a9:06:ed:65:9d:7b:03:ce: e9:08:d1:25:77:e3:6a:49:76:4f:0d:35:0d:87:0c:19:78:17: b7:f2:a9:e7:37:83:3e:0c:90:85:74:e1:f0:fc:4f:6f:8c:91: 46:df:1c:27:07:42:4c:74:bf:db:a1:62:ef:a6:d0:29:e9:cd: c3:07:36:34:f6:a4:51:52:a5:c6:da:af:67:09:9a:c3:53:1b: b3:d9:3d:27:13:d0:6b:a1:cf:81:41:38:19:78:5f:6b:3a:da: 77:d3:83:c3:d0:4e:fa:4c:75:79:1e:1e:f8:17:ba:8d:fd:9a: 33:39:b7:b4:7e:ec:08:24:6f:a0:c9:f3:05:c6:25:68:dc:16: 47:3f:9e:62:2e:68:45:5a:dd:ff:55:ec:e7:6c:ca:0b:33:df: 00:cf:e8:5c:40:6a:72:be:86:08:3e:6b:bf:ff:bc:78:94:1a: f3:4d:b4:61:40:83:79:50:44:58:61:9f:a9:04:f1:19:ee:2a: 61:de:f8:07:8e:8d:a1:dd:59:30:1b:86:7a:a8:c0:72:e7:a1: ca:c8:b1:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyRUMxMTAvBgNVBAUTKEQ5MDg2QjBERjkzNDJEQzJCMDkxQkFFODZDQjc3OUZD NjI1OUJEN0IwHhcNMjYwNDA0MTQ1NzA0WhcNMjYwNDExMTQ1NzA0WjAYMRYwFAYD VQQDEw02OWQxMjZjMC1mMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDEIMNzq3UCNIcwaiqM37ivHVXm49nDqCBeUUu+RuUZqDrC6A7w6kcK1p8f9 F1mRoFWJ5wGiB5Yiqe+sgr65zpbY8/TKJJ0WYkg1inj0mB3/ylgowO8sC6J+EQpU pbH8GxT1mFrNX4RMQBBWvw560TNa1aSZy5YlAP56Nk1fiij7NxGPKuiZo14npXiJ nNZM4cRdXiM+Aov7wmAs9erzXxkmMshF0uLBBOXGHOQ/SR0AE0bldlErztuovIEj imjLtkOb3vx4pjaCALmCvz7RktKbAHpVOx8qaccqAqs6nKA2g/1fQaXi9KnE2eye 7KcqCORsdnYTE8HikxTErwG6zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGiaO9fm 0Hzur4eG951qE7eEkuT6MB8GA1UdIwQYMBaAFNkIaw35NC3CsJG66Gy3efxiWb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjJFQy9ENThBMjI2QzFE OUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExjS3drYnJvYkxkNV9HSlp2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaHJEZmswTGNLd2ticm9iTGQ1X0dKWnZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjJFQy9ENThBMjI2QzFEOUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExj S3drYnJvYkxkNV9HSlp2WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS7r0IGKTAwU5Ypqjzo9LJtMgZHTVE6g84wx8YPj5EMy+zQ9s6cR/FtqjQlSI tqkG7WWdewPO6QjRJXfjakl2Tw01DYcMGXgXt/Kp5zeDPgyQhXTh8PxPb4yRRt8c JwdCTHS/26Fi76bQKenNwwc2NPakUVKlxtqvZwmaw1Mbs9k9JxPQa6HPgUE4GXhf azrad9ODw9BO+kx1eR4e+Be6jf2aMzm3tH7sCCRvoMnzBcYlaNwWRz+eYi5oRVrd /1Xs52zKCzPfAM/oXEBqcr6GCD5rv/+8eJQa8020YUCDeVBEWGGfqQTxGe4qYd74 B46Nod1ZMBuGeqjAcuehysixxQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:28 2026 by rpki-client