$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: xMfwTwcNfezBpjWW8LhLV84LWDRrFOrZ+gRFZ/GN6lE= Subject key identifier: E6:16:30:44:80:AF:A9:9A:22:F9:96:44:5E:92:06:92:E8:94:62:4D Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0596 Signing time: Sat 04 Apr 2026 23:01:18 +0000 Manifest this update: Sat 04 Apr 2026 23:01:18 +0000 Manifest next update: Sat 11 Apr 2026 23:01:18 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: RC1uWAtTfmzNeWm8Cao5N0OjO9ZI5xEbIpQsqzOn7VE=) 2: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8=) 3: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Apr 4 23:01:18 2026 GMT Not After : Apr 11 23:01:18 2026 GMT Subject: CN=69d1983e-79c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:55:f6:55:70:66:2b:d3:b8:64:5a:96:98: f9:e1:ea:65:8c:f8:fe:4b:50:d5:ae:3f:c4:cd:9e: 2c:cb:2d:eb:72:48:f2:4f:a2:9e:c2:2b:ae:80:fb: 42:79:25:bc:3e:15:78:be:6c:96:92:ae:85:dd:34: a4:fe:85:a4:b5:f1:bf:09:1c:d5:b8:88:54:0c:44: 04:f6:aa:f2:6f:65:50:69:38:27:59:3a:86:73:f7: 6b:b7:d5:cc:20:cd:43:84:7c:7a:02:a1:1d:b0:fe: 41:00:ed:63:af:96:ca:3c:f4:95:40:cd:cc:f2:9a: a3:a9:ec:46:21:56:96:9a:d0:7b:c8:e5:bf:ed:8c: eb:dd:19:d8:ad:50:f2:0c:0a:38:88:33:6f:58:01: 5b:33:3a:07:64:e1:b6:3f:f3:ee:e6:fb:c7:99:00: 01:29:62:38:f0:65:8f:3f:62:44:4c:53:d7:60:fd: bb:dc:b8:fd:72:79:bf:55:37:ef:73:3c:8e:1e:53: e8:1d:c5:21:c4:3d:af:48:54:26:4e:c7:93:6d:52: a7:b2:93:de:46:db:dc:e4:de:f0:fd:19:c6:9f:a8: ce:e9:10:18:76:e3:7d:d1:82:c1:4b:66:41:aa:67: ed:8e:f3:04:91:67:c5:18:d0:61:52:d2:51:05:9b: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:16:30:44:80:AF:A9:9A:22:F9:96:44:5E:92:06:92:E8:94:62:4D X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:59:87:fb:21:9f:0f:37:ba:fa:e9:48:17:c0:77:3f:bc:94: 84:42:8e:96:85:af:2a:aa:09:2e:1f:bd:d1:a3:3f:ed:3a:c6: f0:72:20:c4:3a:35:3a:9b:75:55:c7:d2:ab:b1:09:e4:d7:3f: 59:3f:5f:95:11:f9:b5:49:c9:24:c8:b7:d4:35:0a:0c:ad:ac: 03:d3:43:2d:14:65:48:6c:0a:52:ac:1f:24:ec:70:a1:05:ab: d3:1e:d7:20:43:e9:a2:52:7f:0f:21:cf:5b:43:ef:24:ed:f5: 11:67:2a:99:a6:25:da:0d:03:f2:30:0c:31:9a:61:af:71:97: 9f:79:55:1e:06:e0:6c:fb:b8:12:4e:4f:94:4d:60:f5:c1:ba: c2:35:d5:6d:40:49:48:7f:8c:b6:d4:d0:37:f4:b9:0c:71:b2: 01:57:75:c4:22:e9:33:d9:19:02:39:bc:98:ba:fe:3b:a9:6c: 4c:53:8c:64:74:e1:2a:60:05:4d:7a:d8:00:5a:8a:f3:b3:01: 76:0a:fb:a7:10:39:91:b0:c1:99:5c:82:2e:05:51:59:41:cc: 54:2f:13:bb:62:9f:f5:48:cc:17:86:18:4e:3d:9a:d1:69:8b: df:73:e3:7f:78:e9:a8:f1:00:94:a4:76:b8:42:c3:a4:f3:c1: bf:dc:3b:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjYwNDA0MjMwMTE4WhcNMjYwNDExMjMwMTE4WjAYMRYwFAYD VQQDEw02OWQxOTgzZS03OWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyZV9lVwZivTuGRalpj54epljPj+S1DVrj/EzZ4syy3rckjyT6KewiuugPtC eSW8PhV4vmyWkq6F3TSk/oWktfG/CRzVuIhUDEQE9qryb2VQaTgnWTqGc/drt9XM IM1DhHx6AqEdsP5BAO1jr5bKPPSVQM3M8pqjqexGIVaWmtB7yOW/7Yzr3RnYrVDy DAo4iDNvWAFbMzoHZOG2P/Pu5vvHmQABKWI48GWPP2JETFPXYP273Lj9cnm/VTfv czyOHlPoHcUhxD2vSFQmTseTbVKnspPeRtvc5N7w/RnGn6jO6RAYduN90YLBS2ZB qmftjvMEkWfFGNBhUtJRBZsVMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOYWMESA r6maIvmWRF6SBpLolGJNMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATlmH+yGfDze6+ulIF8B3P7yUhEKOloWvKqoJLh+90aM/7TrG8HIgxDo1Opt1 VcfSq7EJ5Nc/WT9flRH5tUnJJMi31DUKDK2sA9NDLRRlSGwKUqwfJOxwoQWr0x7X IEPpolJ/DyHPW0PvJO31EWcqmaYl2g0D8jAMMZphr3GXn3lVHgbgbPu4Ek5PlE1g 9cG6wjXVbUBJSH+MttTQN/S5DHGyAVd1xCLpM9kZAjm8mLr+O6lsTFOMZHThKmAF TXrYAFqK87MBdgr7pxA5kbDBmVyCLgVRWUHMVC8Tu2Kf9UjMF4YYTj2a0WmL33Pj f3jpqPEAlKR2uELDpPPBv9w7WA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:03 2026 by rpki-client