$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: PNfbUqXrCvDaMCS9RX8VnFk5SMzB2k3EoY1t375JRUo= Subject key identifier: FF:E0:DA:EE:98:8E:74:8D:A4:94:E5:1D:1E:B2:66:94:48:2B:24:6A Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 0245 Signing time: Sun 05 Apr 2026 02:04:40 +0000 Manifest this update: Sun 05 Apr 2026 02:04:39 +0000 Manifest next update: Sun 12 Apr 2026 02:04:39 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: acKs2GGopjq0LkCn8HN/XXw134JBlFzySVXs9zCn2Ng=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: EQlBcz9bqMpqpDriLFM35Owqk71TepDYe/4O7SV3TS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Apr 5 02:04:39 2026 GMT Not After : Apr 12 02:04:39 2026 GMT Subject: CN=69d1c337-e8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:85:23:f6:14:77:91:73:78:62:45:6c:8e: f3:f8:30:58:78:c5:ff:c5:b5:ec:ca:70:d8:27:9d: 38:93:33:98:2e:1d:94:d3:1e:f5:ff:70:83:e1:b2: aa:54:a8:53:3b:a1:0e:54:41:72:4e:4a:b5:fa:31: 6d:5d:3a:b9:ac:c0:96:62:b5:0e:75:0b:eb:ef:d8: 6d:16:d0:2f:52:26:c8:ac:a0:36:eb:a2:f7:a1:25: 18:c5:4d:0a:3f:15:03:29:61:8c:79:2e:91:20:22: 82:db:67:b8:53:0e:a9:3f:50:22:4f:a5:ee:d0:62: c4:86:b9:2d:36:af:f0:ee:35:c1:6c:35:cd:ba:5c: cb:10:79:f4:82:b1:ac:b9:b6:bf:3e:7a:4e:fc:79: 92:d4:8d:ac:12:c6:9a:0c:32:26:09:cc:7d:41:55: ed:e8:0e:d8:ef:ce:7e:92:04:96:7c:a9:f6:4c:f7: 27:b2:71:20:00:4f:ae:e0:6f:5f:11:ad:33:51:04: 9a:b3:f9:b8:be:be:69:5b:f6:66:d2:e8:5c:19:fc: 4c:94:f2:22:a9:6d:dc:19:8b:48:d2:eb:c8:cd:42: 8f:b7:f1:cd:fb:34:44:99:0d:1b:16:db:2b:96:49: f2:c4:34:4f:09:ac:4c:b5:f0:c5:7a:04:88:b6:92: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E0:DA:EE:98:8E:74:8D:A4:94:E5:1D:1E:B2:66:94:48:2B:24:6A X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:63:57:41:89:ed:de:96:4d:e4:c0:61:35:5d:de:12:cf:30: 4f:63:b4:be:eb:a1:02:4c:9e:5b:7a:3b:d6:c6:15:d7:3f:c4: 08:19:d6:c6:a1:b7:a8:5b:bb:2d:3f:e8:4d:c3:a8:df:5a:92: da:63:34:c7:ea:89:36:63:57:80:9d:b4:81:61:8e:55:81:d5: 0f:93:81:dd:92:a8:27:33:88:1e:c7:58:d5:77:47:13:f4:5f: a0:8f:c3:2b:26:ee:30:80:91:1d:41:ca:a1:a4:32:9d:76:e6: cd:5e:2f:84:e5:9f:50:c7:92:1b:3e:5f:7a:13:57:e2:62:be: 8a:f8:51:20:48:01:5d:a7:5e:10:71:a0:52:67:94:35:f4:10: 1d:97:ca:0e:ed:b8:d6:41:f5:d6:f1:f4:e1:33:5c:9f:97:b9: 28:20:9e:a5:9f:f7:ca:b2:bc:8a:38:53:bd:e1:7d:42:79:27: 55:c2:61:e2:70:f2:8e:9e:ba:02:f3:cd:91:07:b9:e2:1f:23: c6:1a:e1:96:dc:1e:f9:f6:46:2e:1f:60:97:f4:de:84:b6:7a: b1:5b:e8:28:3b:9a:11:0f:b8:66:08:84:ee:47:92:88:84:b4: dd:cc:21:d5:02:61:14:d2:4d:2c:3e:dd:19:6c:6f:d6:b9:1b: 80:7c:d8:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjYwNDA1MDIwNDM5WhcNMjYwNDEyMDIwNDM5WjAYMRYwFAYD VQQDEw02OWQxYzMzNy1lOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulqFI/YUd5FzeGJFbI7z+DBYeMX/xbXsynDYJ504kzOYLh2U0x71/3CD4bKq VKhTO6EOVEFyTkq1+jFtXTq5rMCWYrUOdQvr79htFtAvUibIrKA266L3oSUYxU0K PxUDKWGMeS6RICKC22e4Uw6pP1AiT6Xu0GLEhrktNq/w7jXBbDXNulzLEHn0grGs uba/PnpO/HmS1I2sEsaaDDImCcx9QVXt6A7Y785+kgSWfKn2TPcnsnEgAE+u4G9f Ea0zUQSas/m4vr5pW/Zm0uhcGfxMlPIiqW3cGYtI0uvIzUKPt/HN+zREmQ0bFtsr lknyxDRPCaxMtfDFegSItpKV3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/g2u6Y jnSNpJTlHR6yZpRIKyRqMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY2NXQYnt3pZN5MBhNV3eEs8wT2O0vuuhAkyeW3o71sYV1z/ECBnWxqG3qFu7 LT/oTcOo31qS2mM0x+qJNmNXgJ20gWGOVYHVD5OB3ZKoJzOIHsdY1XdHE/RfoI/D KybuMICRHUHKoaQynXbmzV4vhOWfUMeSGz5fehNX4mK+ivhRIEgBXadeEHGgUmeU NfQQHZfKDu241kH11vH04TNcn5e5KCCepZ/3yrK8ijhTveF9QnknVcJh4nDyjp66 AvPNkQe54h8jxhrhltwe+fZGLh9gl/TehLZ6sVvoKDuaEQ+4ZgiE7keSiIS03cwh 1QJhFNJNLD7dGWxv1rkbgHzYJw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:45 2026 by rpki-client