$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft File: sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json) Hash identifier: X7SU8vbO3uCvnwWJaD8fKPSynCY7nGkVM0vHeN511r0= Subject key identifier: 61:A3:81:35:AD:7A:F1:8C:B4:22:2A:0F:C1:C4:45:C7:D8:A5:FB:0B Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 Certificate issuer: /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft Manifest number: 36 Signing time: Tue 21 Apr 2026 08:23:01 +0000 Manifest this update: Tue 21 Apr 2026 08:23:00 +0000 Manifest next update: Tue 28 Apr 2026 08:23:00 +0000 Files and hashes: 1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: OUPDwMsYmVk0hitUILRU28zAP4rutCaJTOy8pYF+8UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Validity Not Before: Apr 21 08:23:00 2026 GMT Not After : Apr 28 08:23:00 2026 GMT Subject: CN=69e733e5-3769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:bc:a9:09:10:1a:f6:ab:f9:91:d2:55:f4: 10:c9:54:f9:9f:5b:49:19:0f:80:e2:a3:99:6a:ca: c7:78:44:c0:17:9d:a0:9b:13:80:d3:d7:df:48:e4: 1b:21:66:ae:52:87:73:ec:2c:b5:5a:be:a1:27:ee: dd:d4:29:03:c8:0c:22:be:89:41:39:3e:1a:26:01: 40:0a:01:dd:12:ce:36:55:7c:25:79:3d:e6:a8:40: 96:99:ba:07:e0:45:1d:69:af:f8:50:3d:1c:c2:67: 8b:08:63:8f:f2:ad:49:c2:64:58:7b:65:f0:5f:92: 16:f0:8f:8c:98:c5:65:4b:bd:c5:96:2e:17:e0:e3: db:e1:07:94:8f:7e:e9:5d:c4:a5:a9:44:e4:9e:f0: 2e:2e:7f:6b:3f:bc:e8:d0:be:93:73:9f:76:0c:c6: 69:c4:e9:14:5a:e1:1e:cb:5f:6d:d2:c4:c7:1c:22: 94:ac:c5:b4:f1:25:ba:25:a9:b1:f1:49:10:6a:6f: f2:17:76:94:ed:a1:53:ce:6b:a1:cb:e4:80:51:7b: a5:12:42:ab:71:ac:ae:fb:1f:e9:75:c7:6a:1b:d7: a5:d2:5d:c5:a7:0c:01:da:4a:34:37:d4:d5:b9:55: ed:59:61:7a:8d:ca:31:85:bd:98:2e:38:54:95:fe: af:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A3:81:35:AD:7A:F1:8C:B4:22:2A:0F:C1:C4:45:C7:D8:A5:FB:0B X509v3 Authority Key Identifier: keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1b:d0:59:dd:2d:4b:d3:9c:02:cd:42:8b:16:c6:d4:a7:9d: d0:77:dc:b6:0c:fd:9c:ed:83:a6:61:e2:dd:22:71:6f:b3:9a: a1:34:0f:80:ce:7c:2d:88:ca:2a:45:7f:13:a8:58:cb:b1:b7: 53:bb:03:25:f3:1c:8d:24:c6:40:19:58:9c:35:73:ab:48:79: b3:ae:9e:38:c8:df:46:e2:31:36:f8:67:43:de:41:ee:25:98: a9:3a:04:ab:81:5a:50:41:4c:3b:81:06:49:19:ef:6a:71:f0: 2d:f2:4e:36:1f:48:c9:8e:cf:42:fa:3f:b5:58:04:c5:bd:86: 4c:b3:4d:77:aa:62:25:37:90:43:86:6a:cb:bf:7d:db:92:51: 55:54:44:76:80:9a:f4:1c:b5:93:43:84:46:85:e1:db:f8:eb: e5:df:28:b0:4b:d8:d2:d2:e6:cb:f6:8b:0f:78:99:43:42:9e: fb:c0:2a:03:3e:8d:7c:ff:05:82:90:72:dc:18:38:2f:5e:27: 91:63:b8:95:ca:a3:d1:79:c1:94:77:f9:60:21:e5:cc:f9:26: e2:37:17:b0:f8:78:03:fb:df:61:40:83:cc:df:f6:d7:98:04: 9a:58:d5:bc:6a:6a:b9:1c:0e:76:c7:14:a6:51:16:8b:a8:a9: 05:5d:a0:63 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODQ5NzExMC8GA1UEBRMoQjFDRDgzQjg5OUNFNjAyOUFDOEE0MjJFREJCRjE1ODMz NTM5MUQwODAeFw0yNjA0MjEwODIzMDBaFw0yNjA0MjgwODIzMDBaMBgxFjAUBgNV BAMTDTY5ZTczM2U1LTM3NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKG7ypCRAa9qv5kdJV9BDJVPmfW0kZD4Dio5lqysd4RMAXnaCbE4DT199I5Bsh Zq5Sh3PsLLVavqEn7t3UKQPIDCK+iUE5PhomAUAKAd0SzjZVfCV5PeaoQJaZugfg RR1pr/hQPRzCZ4sIY4/yrUnCZFh7ZfBfkhbwj4yYxWVLvcWWLhfg49vhB5SPfuld xKWpROSe8C4uf2s/vOjQvpNzn3YMxmnE6RRa4R7LX23SxMccIpSsxbTxJbolqbHx SRBqb/IXdpTtoVPOa6HL5IBRe6USQqtxrK77H+l1x2ob16XSXcWnDAHaSjQ31NW5 Ve1ZYXqNyjGFvZguOFSV/q9/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYaOBNa16 8Yy0IioPwcRFx9il+wswHwYDVR0jBBgwFoAUsc2DuJnOYCmsikIu278VgzU5HQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDk3LzAzMzJCQzY0RjEz NDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNtc2lrSXUyNzhWZ3pVNUhR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvc2MyRHVKbk9ZQ21zaWtJdTI3OFZnelU1SFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NDk3LzAzMzJCQzY0RjEzNDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNt c2lrSXUyNzhWZ3pVNUhRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBkG9BZ3S1L05wCzUKLFsbUp53Qd9y2DP2c7YOmYeLdInFvs5qhNA+AznwtiMoq RX8TqFjLsbdTuwMl8xyNJMZAGVicNXOrSHmzrp44yN9G4jE2+GdD3kHuJZipOgSr gVpQQUw7gQZJGe9qcfAt8k42H0jJjs9C+j+1WATFvYZMs013qmIlN5BDhmrLv33b klFVVER2gJr0HLWTQ4RGheHb+Ovl3yiwS9jS0ubL9osPeJlDQp77wCoDPo18/wWC kHLcGDgvXieRY7iVyqPRecGUd/lgIeXM+SbiNxew+HgD+99hQIPM3/bXmASaWNW8 amq5HA52xxSmURaLqKkFXaBj -----END CERTIFICATE-----Generated at Tue Apr 21 22:59:48 2026 by rpki-client