$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: Q7FpQhroGVsKFhjYGZiTA9Y7h6GmeIUItRJ5WIVJqK8= Subject key identifier: 0B:C6:1A:9E:2E:95:34:42:F8:AF:14:4C:21:98:08:E5:94:D2:6E:EF Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 0854 Signing time: Mon 20 Apr 2026 20:28:29 +0000 Manifest this update: Mon 20 Apr 2026 20:28:28 +0000 Manifest next update: Mon 27 Apr 2026 20:28:28 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: D2gOdJbCCNpKNITQ3j+C5NO+qAM9SHHFg79i1vIVltA=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Apr 20 20:28:28 2026 GMT Not After : Apr 27 20:28:28 2026 GMT Subject: CN=69e68c6d-9d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:25:f0:28:a5:5f:19:64:43:f1:d8:fb:23: 31:e7:28:48:8e:a2:54:ea:c3:e1:ac:2f:fe:77:18: 70:b2:dd:56:5b:04:a5:b2:f1:3a:7d:ac:f6:f8:40: 77:e0:b7:76:82:4a:d2:69:ed:d2:56:e6:bd:6a:81: 07:5c:27:cf:36:22:fa:6d:16:e3:57:f1:15:16:a9: 80:5c:0c:58:f0:ac:1f:21:3b:71:a5:ec:5d:16:78: 0d:1b:9e:43:ff:68:64:72:c0:39:00:fc:0e:aa:5c: 68:63:19:84:8b:15:80:e8:27:d9:20:b0:2d:7e:9b: 59:06:2c:6d:40:02:74:17:32:27:d3:02:4e:fc:26: ee:1a:61:1b:9a:f4:c4:1f:7e:c0:0c:c2:cf:bb:69: ff:4b:c4:bc:6e:21:a8:f7:62:e3:dd:ef:07:e6:04: cc:02:56:6c:df:70:dd:5c:ba:0f:c0:a5:d5:a4:e6: 69:8d:d3:a6:2c:e7:10:a1:96:67:08:27:25:73:07: 41:d7:86:7d:9d:f1:3e:d2:86:be:ba:c3:7d:fe:26: a4:d0:82:87:7f:dc:bc:4e:4e:c5:fc:9a:ab:a1:bd: ff:a5:cf:16:0a:2e:2b:24:d7:02:b6:5b:dd:0c:d3: c3:44:1e:b9:66:dc:fd:9d:5b:1f:91:ed:96:1b:d5: 87:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C6:1A:9E:2E:95:34:42:F8:AF:14:4C:21:98:08:E5:94:D2:6E:EF X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1b:b8:52:65:c4:be:9c:d0:ac:d0:eb:75:ec:46:72:e7:4b: 1c:0e:bb:c5:07:df:e1:22:13:79:59:6e:92:a0:ed:c7:7a:45: 0f:30:22:43:e1:0d:78:0b:38:03:f3:14:bd:c3:9f:e1:78:92: 6c:fa:6c:1d:6d:3d:fa:83:de:f7:09:bf:d6:19:44:03:6c:df: 15:08:77:61:c5:6b:c3:e1:fb:41:91:22:e6:b6:b7:51:cf:9f: 73:0a:47:08:26:af:25:0a:5d:47:7d:cd:1e:08:d2:24:87:20: 70:36:b4:80:98:c8:69:0c:c2:e6:62:3e:db:df:b2:a5:04:35: fb:29:71:f7:b0:c8:11:e6:7c:fd:70:f9:81:95:d4:12:ec:e1: fa:8f:7b:ff:1f:94:89:da:22:d5:49:a8:28:76:28:ba:0c:de: 88:e2:76:fe:2c:58:3f:2a:cd:92:87:90:ba:6c:7f:07:57:7b: 12:79:e1:33:bd:f3:e1:30:69:54:0d:0c:fb:7e:dc:d2:e2:94: c8:a6:5d:d9:82:eb:a1:fe:69:e3:8a:ff:14:e7:c5:69:d0:3e: 30:8b:31:e4:b4:b1:b3:66:bf:a0:8e:14:df:b1:f0:ab:b7:f3: 8a:8a:77:0b:b1:be:8b:f7:c9:09:58:cf:b9:f8:e6:16:bc:8b: d5:4a:90:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjYwNDIwMjAyODI4WhcNMjYwNDI3MjAyODI4WjAYMRYwFAYD VQQDEw02OWU2OGM2ZC05ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqocl8CilXxlkQ/HY+yMx5yhIjqJU6sPhrC/+dxhwst1WWwSlsvE6faz2+EB3 4Ld2gkrSae3SVua9aoEHXCfPNiL6bRbjV/EVFqmAXAxY8KwfITtxpexdFngNG55D /2hkcsA5APwOqlxoYxmEixWA6CfZILAtfptZBixtQAJ0FzIn0wJO/CbuGmEbmvTE H37ADMLPu2n/S8S8biGo92Lj3e8H5gTMAlZs33DdXLoPwKXVpOZpjdOmLOcQoZZn CCclcwdB14Z9nfE+0oa+usN9/iak0IKHf9y8Tk7F/Jqrob3/pc8WCi4rJNcCtlvd DNPDRB65Ztz9nVsfke2WG9WHKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvGGp4u lTRC+K8UTCGYCOWU0m7vMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlhu4UmXEvpzQrNDrdexGcudLHA67xQff4SITeVlukqDtx3pFDzAiQ+ENeAs4 A/MUvcOf4XiSbPpsHW09+oPe9wm/1hlEA2zfFQh3YcVrw+H7QZEi5ra3Uc+fcwpH CCavJQpdR33NHgjSJIcgcDa0gJjIaQzC5mI+29+ypQQ1+ylx97DIEeZ8/XD5gZXU Euzh+o97/x+Uidoi1UmoKHYougzeiOJ2/ixYPyrNkoeQumx/B1d7EnnhM73z4TBp VA0M+37c0uKUyKZd2YLrof5p44r/FOfFadA+MIsx5LSxs2a/oI4U37Hwq7fziop3 C7G+i/fJCVjPufjmFryL1UqQng== -----END CERTIFICATE-----Generated at Wed Apr 22 15:48:46 2026 by rpki-client