$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: cJLv1eqyuS3X3zwzma3IR9AsVi+q9hEhTf46XK81axM= Subject key identifier: 0F:B6:4A:F6:5C:74:1F:59:02:ED:7E:1C:7A:31:F6:A7:02:9B:53:34 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 088E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 0881 Signing time: Sat 04 Apr 2026 20:23:54 +0000 Manifest this update: Sat 04 Apr 2026 20:23:54 +0000 Manifest next update: Sat 11 Apr 2026 20:23:54 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: 3bW+ua8u1rQllrSUhMbAD2JkGeUA9X5QE0mLBlfnXl0=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: 1GModq8GVTp3VBZ+WmjSYkW1Bqq/2XyaBR4joVrXKaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Apr 4 20:23:54 2026 GMT Not After : Apr 11 20:23:54 2026 GMT Subject: CN=69d1735a-2ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:2c:4b:d1:af:87:4d:37:8f:a2:b6:94:e1: bc:37:50:2e:ab:d4:73:5c:e9:e3:6b:68:db:ff:94: 57:53:59:6b:80:b7:4e:52:dc:34:bf:12:e0:6f:2d: aa:84:85:c1:da:a8:93:11:c7:be:67:5a:a7:51:bf: d3:a2:93:72:80:d0:7e:12:46:01:c7:1f:7f:8e:35: 3e:6f:af:d7:3f:71:f6:cc:28:d3:f3:e5:89:d2:af: 78:2f:ae:98:af:77:bb:19:d4:2c:d6:30:e0:a8:d2: 22:4f:ea:7b:88:29:d4:46:7a:f1:ca:02:ac:63:cf: b0:19:67:0f:a9:32:60:11:d2:24:2b:e0:6d:b5:bf: 1e:fd:6a:d0:f6:9a:d6:88:c3:01:fb:ea:ee:88:d2: 84:3b:55:e0:8f:3b:44:38:c4:cc:97:2d:c5:71:a4: 04:fa:21:03:7e:90:d0:f1:3f:0c:f8:c5:e7:f1:7c: f1:aa:d9:96:5a:a4:7e:27:3c:4f:85:74:62:73:fd: 42:aa:7e:56:54:f0:73:e8:29:c8:1d:7b:d9:32:c4: 00:f2:55:45:f1:3c:23:e5:9c:e9:e5:dd:2d:6c:b5: d8:9e:7d:ec:af:67:e0:21:e4:5d:11:ce:18:8a:33: af:e8:6a:17:41:83:a3:ce:ad:30:fb:8b:3d:8e:21: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B6:4A:F6:5C:74:1F:59:02:ED:7E:1C:7A:31:F6:A7:02:9B:53:34 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3d:10:27:d5:03:66:55:c6:b9:c0:92:fb:6d:29:46:1e:b1: 7b:17:5a:bd:12:d7:d5:4e:28:23:c2:40:ba:4c:27:82:7c:7a: f8:7d:e3:15:b9:57:5a:cf:ff:1f:d7:57:06:07:4d:a0:89:c7: bb:50:68:29:43:e9:4c:43:c2:83:1c:6f:bd:66:9a:79:7a:dd: 64:21:50:53:15:f2:90:2a:57:ba:82:14:9e:11:be:85:1d:e2: 2b:21:91:83:e1:45:48:ac:6f:91:06:3b:a3:cd:40:2f:e8:3d: 8b:f0:27:89:de:a3:22:d2:0c:4a:24:f2:47:51:72:06:0e:78: e1:fe:5f:88:f1:83:da:cc:6c:be:5a:7b:f3:4c:9f:e0:46:e4: 33:fd:8c:a7:4c:04:81:47:88:9f:80:64:2d:ee:82:d6:cd:54: 5f:d1:5d:30:db:e3:4d:f1:76:3e:2a:22:d9:bb:d7:3a:18:8b: ad:00:d3:95:14:a4:fb:23:1b:ba:a3:f2:a7:2c:b0:61:55:db: f5:99:1a:78:42:cc:8d:81:dd:6a:d2:82:85:ae:cb:83:5a:62: b5:f4:65:20:59:d4:ff:1e:22:cd:bb:d9:81:2d:84:b4:bc:ce: de:22:2c:12:ce:b5:b7:55:47:7e:c3:26:b9:91:65:ca:e7:13: 5f:4f:28:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjYwNDA0MjAyMzU0WhcNMjYwNDExMjAyMzU0WjAYMRYwFAYD VQQDEw02OWQxNzM1YS0yZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvYsS9Gvh003j6K2lOG8N1Auq9RzXOnja2jb/5RXU1lrgLdOUtw0vxLgby2q hIXB2qiTEce+Z1qnUb/TopNygNB+EkYBxx9/jjU+b6/XP3H2zCjT8+WJ0q94L66Y r3e7GdQs1jDgqNIiT+p7iCnURnrxygKsY8+wGWcPqTJgEdIkK+Bttb8e/WrQ9prW iMMB++ruiNKEO1XgjztEOMTMly3FcaQE+iEDfpDQ8T8M+MXn8XzxqtmWWqR+JzxP hXRic/1Cqn5WVPBz6CnIHXvZMsQA8lVF8Twj5Zzp5d0tbLXYnn3sr2fgIeRdEc4Y ijOv6GoXQYOjzq0w+4s9jiG9jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+2SvZc dB9ZAu1+HHox9qcCm1M0MB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABD0QJ9UDZlXGucCS+20pRh6xexdavRLX1U4oI8JAukwngnx6+H3jFblXWs// H9dXBgdNoInHu1BoKUPpTEPCgxxvvWaaeXrdZCFQUxXykCpXuoIUnhG+hR3iKyGR g+FFSKxvkQY7o81AL+g9i/Anid6jItIMSiTyR1FyBg544f5fiPGD2sxsvlp780yf 4EbkM/2Mp0wEgUeIn4BkLe6C1s1UX9FdMNvjTfF2Pioi2bvXOhiLrQDTlRSk+yMb uqPypyywYVXb9ZkaeELMjYHdatKCha7Lg1pitfRlIFnU/x4izbvZgS2EtLzO3iIs Es61t1VHfsMmuZFlyucTX08osA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:29 2026 by rpki-client