$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: aaRj8277dvlCNCrXvInnieEQ42dfB1qsq0uKdY07P/A= Subject key identifier: AB:9D:2C:A3:EA:28:23:E5:C0:F2:50:1B:0D:70:26:0C:C4:5D:1C:B6 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 0150 Signing time: Sun 05 Apr 2026 04:36:04 +0000 Manifest this update: Sun 05 Apr 2026 04:36:03 +0000 Manifest next update: Sun 12 Apr 2026 04:36:03 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: DGhL8ABsOVTFDjkdgU1QCJS2NXIKfXyeo8mzJGM51ys=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: oEK7UbEneVnN8s/S/N5Woyft7ItBdFqqTJalpL6CP44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Apr 5 04:36:03 2026 GMT Not After : Apr 12 04:36:03 2026 GMT Subject: CN=69d1e6b4-8764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:e2:6b:9e:bd:bc:4d:4c:f9:8b:d7:55:f7: 92:32:25:fa:5d:19:04:48:2e:d8:ed:01:bd:2f:02: e1:f1:9a:5b:3d:bf:2c:d3:72:74:c7:3e:1f:12:11: 8a:55:d8:cb:22:d8:e7:19:ee:c1:c6:58:a6:7f:41: 41:52:8c:0f:23:7b:a5:ad:73:83:f9:8a:62:d7:15: 92:76:9f:a1:b7:b0:9a:8d:93:98:56:a7:9d:0e:04: 2d:a0:a3:69:95:d8:9e:90:ca:a7:97:b6:36:bd:a2: ad:cc:60:a4:81:01:71:da:81:62:65:7e:fd:ee:44: c7:01:08:33:60:60:a6:43:71:25:80:bc:91:68:56: 6b:62:ef:e5:9d:18:db:af:57:f4:3c:ec:17:8b:11: ef:57:06:09:f4:af:83:cd:34:9e:22:b7:36:d1:0a: ac:c0:52:10:37:9a:9f:4d:e1:97:53:67:ac:15:35: 89:fe:55:14:05:ca:51:75:fa:62:0e:b4:e9:34:f7: 12:be:2b:08:df:f9:fc:48:28:f6:74:a6:e0:1e:ae: 24:a2:9a:7a:b6:7b:7f:90:71:78:58:af:2c:ca:4f: a7:ff:db:e4:ac:51:8e:78:e7:49:24:36:8b:f5:bc: 65:a1:c7:0d:28:85:fd:e0:54:c3:a2:e8:2f:7e:90: 3f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:2C:A3:EA:28:23:E5:C0:F2:50:1B:0D:70:26:0C:C4:5D:1C:B6 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:3d:28:59:f5:2e:e6:b3:96:7e:8b:2d:51:c3:af:e6:ae:63: 81:83:1d:86:e4:02:a8:0e:cb:65:35:a7:6a:50:5f:3f:c5:50: 6c:79:03:8d:a5:58:fa:af:86:46:a3:ef:20:ac:5a:1b:9a:d0: 07:c8:3e:ed:61:31:9e:f9:f7:7d:4e:ee:4c:8f:c9:0e:d8:61: d3:ba:fe:99:82:10:c6:18:a5:0a:8c:c7:4c:c4:d1:e9:ac:f1: ca:88:46:c5:2a:ff:24:5d:08:21:c0:04:c4:d2:a7:60:18:82: 36:14:60:aa:60:fc:50:c2:df:55:e2:0e:98:9e:7d:33:b4:79: 30:4e:75:7e:6e:54:7b:72:9c:2c:5c:67:bd:02:74:e2:0e:6b: e6:56:bd:77:d4:27:0c:2a:3c:d0:d5:4e:25:fb:d1:bb:46:83: e7:29:17:cc:6b:82:fc:06:57:19:66:c3:67:58:b7:ba:a9:8c: 71:e9:5d:15:2f:f2:d1:04:c2:6e:6d:0e:68:4d:dc:d5:e4:34: 27:48:0c:33:1e:fb:a6:c6:3a:e4:5d:d8:32:44:0b:84:b9:03: 39:be:fd:72:54:7d:2e:12:2a:dd:7f:9e:8e:5d:6d:76:bf:8b: f4:23:a3:a7:6f:b0:8d:e7:ed:e2:36:c1:7f:e5:d0:81:ad:77: 74:89:a2:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjYwNDA1MDQzNjAzWhcNMjYwNDEyMDQzNjAzWjAYMRYwFAYD VQQDEw02OWQxZTZiNC04NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiTia569vE1M+YvXVfeSMiX6XRkESC7Y7QG9LwLh8ZpbPb8s03J0xz4fEhGK VdjLItjnGe7Bxlimf0FBUowPI3ulrXOD+Ypi1xWSdp+ht7CajZOYVqedDgQtoKNp ldiekMqnl7Y2vaKtzGCkgQFx2oFiZX797kTHAQgzYGCmQ3ElgLyRaFZrYu/lnRjb r1f0POwXixHvVwYJ9K+DzTSeIrc20QqswFIQN5qfTeGXU2esFTWJ/lUUBcpRdfpi DrTpNPcSvisI3/n8SCj2dKbgHq4kopp6tnt/kHF4WK8syk+n/9vkrFGOeOdJJDaL 9bxloccNKIX94FTDougvfpA/4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKudLKPq KCPlwPJQGw1wJgzEXRy2MB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUD0oWfUu5rOWfostUcOv5q5jgYMdhuQCqA7LZTWnalBfP8VQbHkDjaVY+q+G RqPvIKxaG5rQB8g+7WExnvn3fU7uTI/JDthh07r+mYIQxhilCozHTMTR6azxyohG xSr/JF0IIcAExNKnYBiCNhRgqmD8UMLfVeIOmJ59M7R5ME51fm5Ue3KcLFxnvQJ0 4g5r5la9d9QnDCo80NVOJfvRu0aD5ykXzGuC/AZXGWbDZ1i3uqmMceldFS/y0QTC bm0OaE3c1eQ0J0gMMx77psY65F3YMkQLhLkDOb79clR9LhIq3X+ejl1tdr+L9COj p2+wjeft4jbBf+XQga13dImiWg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:53 2026 by rpki-client