$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft File: 2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json) Hash identifier: xMdX/UI+NFoHKEmteO0zlHlBKH5EkhwXqWMaO1Gkks8= Subject key identifier: 58:82:39:0A:F1:84:FE:E3:F3:0F:5B:85:C1:5A:F2:E5:AE:B0:BF:08 Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62 Certificate issuer: /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft Manifest number: 0A Signing time: Sun 26 Apr 2026 20:21:55 +0000 Manifest this update: Sun 26 Apr 2026 20:21:55 +0000 Manifest next update: Sun 03 May 2026 20:21:55 +0000 Files and hashes: 1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: EZ/hkxFQubcive+oB9zUZX//Ht8EoaiAoS8kZrEcdGw=) 2: 08AE48C23CEB11F1B92AFD80C4833773.roa (hash: 6tcLUJAPpXxMhDjYEZ6Foh2oBrAUGB58QWwlBnxvt7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062 Validity Not Before: Apr 26 20:21:55 2026 GMT Not After : May 3 20:21:55 2026 GMT Subject: CN=69ee73e3-99e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:07:e3:2c:ef:5c:99:c3:6d:1c:e1:55:78: 1b:18:2e:96:9c:ea:c5:87:c8:4f:c7:98:a2:46:1b: d9:e3:2c:fb:e0:5f:99:3f:86:12:fd:49:34:61:f4: 53:60:50:dc:3b:b2:df:86:16:57:c5:7d:9e:e7:d3: 2d:b4:8a:49:89:76:9a:3b:ff:f4:4f:49:c0:66:cc: 2d:fa:9b:76:f0:ad:e3:1b:95:d2:a1:c9:22:d9:63: 32:84:e5:1a:5c:ee:bd:ab:da:75:df:61:7b:34:c6: cd:d0:cd:81:66:14:83:ee:d4:ae:41:43:41:cd:5f: 6e:dc:1b:04:2a:72:51:91:81:3c:6e:0d:4c:ce:11: 54:51:ee:5c:70:bc:be:e2:35:ac:36:dd:0a:69:38: 60:6f:5c:53:af:92:11:fd:af:d2:02:c5:6d:55:aa: 24:f5:c4:3e:57:8c:cd:c6:47:03:83:27:ce:29:e4: 4a:73:be:a2:8d:e3:56:cf:d7:cb:ff:e6:0c:4a:f6: d8:60:85:e8:72:5a:f4:64:c8:71:2b:f3:12:9a:75: 1f:f6:f7:83:5f:08:70:5c:17:5b:ff:b9:32:68:fa: e2:d5:de:ad:18:26:91:c2:7f:06:e3:bd:29:5f:00: 3b:d1:a1:ce:c1:08:b6:82:3e:b9:61:e7:ef:2a:cd: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:82:39:0A:F1:84:FE:E3:F3:0F:5B:85:C1:5A:F2:E5:AE:B0:BF:08 X509v3 Authority Key Identifier: keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:d1:dd:e2:c6:2d:89:bf:0a:8f:ab:47:db:e6:d0:5a:e7: 75:8e:00:bf:64:d5:a7:3f:0e:0b:2a:12:82:57:26:f9:e5:e6: 68:fc:7d:1b:fc:5e:20:d6:fb:7a:e5:8f:82:29:5b:82:c4:69: ef:bb:5e:10:80:75:8d:94:9f:7f:d2:0d:d6:97:09:d6:dc:f8: f8:e2:1c:8a:7d:12:a7:9e:64:00:80:3c:b8:5b:20:41:87:7d: 0a:44:e9:48:b7:1d:d3:e9:17:24:61:d2:b2:10:e3:c1:f4:a0: 2b:28:39:a6:3f:96:42:8b:81:bf:2e:73:ea:c3:76:f4:18:cb: a5:7c:33:d7:37:3a:44:cf:0c:99:95:9e:2c:7f:64:37:f5:eb: be:f5:64:11:75:45:04:70:0a:bc:c6:fb:df:e4:3f:b2:f1:c8: be:f3:6c:09:f8:96:8c:dc:ff:bb:eb:1f:62:7e:ff:eb:de:91: 22:00:11:ed:ad:15:ef:69:29:4d:94:d5:2b:be:9c:59:23:e3: 9f:af:8c:63:2f:c2:69:5e:37:67:35:eb:1c:d2:3b:28:f1:d6: d2:79:75:ca:ba:52:c9:41:a5:5a:55:75:2a:00:4b:9a:ab:8f: 9a:06:67:ac:4d:82:46:6d:d2:86:31:c9:03:e2:25:b0:11:f9: a5:00:ef:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NThERjExMC8GA1UEBRMoREIwNTRENEZGNDgzQjg5NEQ4MDg1RTBGRTM3ODZDRTJF OUI1MzA2MjAeFw0yNjA0MjYyMDIxNTVaFw0yNjA1MDMyMDIxNTVaMBgxFjAUBgNV BAMTDTY5ZWU3M2UzLTk5ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAAwfjLO9cmcNtHOFVeBsYLpac6sWHyE/HmKJGG9njLPvgX5k/hhL9STRh9FNg UNw7st+GFlfFfZ7n0y20ikmJdpo7//RPScBmzC36m3bwreMbldKhySLZYzKE5Rpc 7r2r2nXfYXs0xs3QzYFmFIPu1K5BQ0HNX27cGwQqclGRgTxuDUzOEVRR7lxwvL7i Naw23QppOGBvXFOvkhH9r9ICxW1VqiT1xD5XjM3GRwODJ84p5EpzvqKN41bP18v/ 5gxK9thghehyWvRkyHEr8xKadR/294NfCHBcF1v/uTJo+uLV3q0YJpHCfwbjvSlf ADvRoc7BCLaCPrlh5+8qzSSFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWII5CvGE /uPzD1uFwVry5a6wvwgwHwYDVR0jBBgwFoAU2wVNT/SDuJTYCF4P43hs4um1MGIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OERGLzBDNEJBODIwMzUx QzExRjFBQjI4NkNBNzdDRUU1MjhFLzJ3Vk5UX1NEdUpUWUNGNFA0M2hzNHVtMU1H SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvMndWTlRfU0R1SlRZQ0Y0UDQzaHM0dW0xTUdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OERGLzBDNEJBODIwMzUxQzExRjFBQjI4NkNBNzdDRUU1MjhFLzJ3Vk5UX1NEdUpU WUNGNFA0M2hzNHVtMU1HSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2PtHd4sYtib8Kj6tH2+bQWud1jgC/ZNWnPw4LKhKCVyb55eZo/H0b/F4g1vt6 5Y+CKVuCxGnvu14QgHWNlJ9/0g3WlwnW3Pj44hyKfRKnnmQAgDy4WyBBh30KROlI tx3T6RckYdKyEOPB9KArKDmmP5ZCi4G/LnPqw3b0GMulfDPXNzpEzwyZlZ4sf2Q3 9eu+9WQRdUUEcAq8xvvf5D+y8ci+82wJ+JaM3P+76x9ifv/r3pEiABHtrRXvaSlN lNUrvpxZI+Ofr4xjL8JpXjdnNesc0jso8dbSeXXKulLJQaVaVXUqAEuaq4+aBmes TYJGbdKGMckD4iWwEfmlAO8z -----END CERTIFICATE-----Generated at Mon Apr 27 23:35:07 2026 by rpki-client