$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: pw6eV6plwum8E1IGomVYDUdcoVFnyhOdWTgufgPOI4Q= Subject key identifier: B7:A2:A7:A9:1C:99:B5:A7:9F:39:65:E8:02:36:9E:45:D9:27:F4:01 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0DB7 Signing time: Sat 04 Apr 2026 17:46:09 +0000 Manifest this update: Sat 04 Apr 2026 17:46:08 +0000 Manifest next update: Sat 11 Apr 2026 17:46:08 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: kWP3HQlkjAeBQXBoHN43LvecPfCMlKeAtOmIjmT5NI0=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: iRh85DKNgJv3AbDIde7UD24KtZKvMF6kuxGkkUfsSeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Apr 4 17:46:08 2026 GMT Not After : Apr 11 17:46:08 2026 GMT Subject: CN=69d14e61-e30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:74:d5:b3:ef:5f:99:2f:09:69:44:3c:70: 37:9c:b8:47:f3:79:97:3d:a2:51:38:84:58:8c:ff: 90:40:d0:4a:9d:5b:71:ae:94:6c:3f:76:e3:27:f2: d8:9e:22:68:d2:a8:5b:75:c7:3e:5e:a1:e3:59:5f: 50:79:10:e7:70:1d:60:44:b4:c7:d1:c3:2b:36:20: 4d:f0:d0:16:2d:ff:36:56:ce:ab:99:56:1c:50:da: 96:69:0c:22:4a:23:a0:41:74:d2:48:34:6e:b1:8f: 3c:9b:64:dc:ec:d7:1c:13:a2:bc:d5:e9:27:85:5c: e2:6e:3c:11:ca:45:26:e0:de:ce:cf:bb:a9:30:a6: d4:ca:4e:6e:b2:bf:9a:5a:3b:c0:29:fb:55:68:69: b0:41:f6:13:a1:f6:3a:ef:93:cd:64:5a:9c:a0:e4: 3f:8e:53:8a:b0:2c:06:71:d5:76:2d:c1:a8:a1:45: 14:45:55:47:72:92:db:8e:ca:c8:20:fe:03:eb:f0: a2:56:94:fd:f3:bc:e4:5a:92:76:46:51:74:b2:93: e6:4a:7d:9e:af:72:5a:cc:11:e5:8c:08:20:31:b1: e8:b0:79:c6:85:d4:9a:55:9c:54:99:18:f4:73:54: ea:37:47:14:9c:d5:44:0a:f6:c2:e6:0d:57:91:e4: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A2:A7:A9:1C:99:B5:A7:9F:39:65:E8:02:36:9E:45:D9:27:F4:01 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:91:c1:a8:a1:28:2f:bf:4b:d5:a6:b7:0a:32:46:10:49:73: 03:94:dc:21:29:6a:08:3f:1c:50:d0:8f:54:fa:3f:a6:a0:36: 7e:96:bd:c6:b9:db:bc:05:00:77:df:d0:be:86:d3:95:ca:8f: 0b:46:56:3c:f9:6d:2f:ea:8b:a5:b2:ef:4f:68:4e:f4:ea:03: a1:e5:d0:f1:1a:b8:6c:56:64:90:1b:2b:e0:33:f4:d1:dd:4f: c1:fb:9e:eb:1a:53:b6:f2:cd:5a:a5:b0:63:4e:70:4a:f7:ac: 87:47:b4:35:64:59:bc:40:28:29:bd:c0:18:33:51:38:07:85: 07:3c:68:93:64:55:64:ff:66:ef:b3:18:01:9a:6c:e6:1c:4a: 0d:0b:e6:86:88:fe:5b:b4:d1:a8:6f:78:72:03:be:86:a1:a7: 25:78:cf:56:47:ee:9d:90:b3:65:86:d8:df:c3:72:94:10:50: db:db:c4:ca:a7:e6:d4:9c:df:41:ac:3c:d5:4e:77:02:3e:95: 69:0d:5e:9b:12:6e:c8:b5:92:04:7c:f1:46:9b:1f:4e:19:5a: d1:58:36:68:52:bc:50:9d:6e:3e:1e:3d:95:bb:3a:e8:2c:ee: db:e5:40:33:37:5a:ca:00:78:93:25:a2:71:27:44:f8:ff:db: 32:6a:13:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjYwNDA0MTc0NjA4WhcNMjYwNDExMTc0NjA4WjAYMRYwFAYD VQQDEw02OWQxNGU2MS1lMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNx01bPvX5kvCWlEPHA3nLhH83mXPaJROIRYjP+QQNBKnVtxrpRsP3bjJ/LY niJo0qhbdcc+XqHjWV9QeRDncB1gRLTH0cMrNiBN8NAWLf82Vs6rmVYcUNqWaQwi SiOgQXTSSDRusY88m2Tc7NccE6K81eknhVzibjwRykUm4N7Oz7upMKbUyk5usr+a WjvAKftVaGmwQfYTofY675PNZFqcoOQ/jlOKsCwGcdV2LcGooUUURVVHcpLbjsrI IP4D6/CiVpT987zkWpJ2RlF0spPmSn2er3JazBHljAggMbHosHnGhdSaVZxUmRj0 c1TqN0cUnNVECvbC5g1XkeQpCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeip6kc mbWnnzll6AI2nkXZJ/QBMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx5HBqKEoL79L1aa3CjJGEElzA5TcISlqCD8cUNCPVPo/pqA2fpa9xrnbvAUA d9/QvobTlcqPC0ZWPPltL+qLpbLvT2hO9OoDoeXQ8Rq4bFZkkBsr4DP00d1Pwfue 6xpTtvLNWqWwY05wSvesh0e0NWRZvEAoKb3AGDNROAeFBzxok2RVZP9m77MYAZps 5hxKDQvmhoj+W7TRqG94cgO+hqGnJXjPVkfunZCzZYbY38NylBBQ29vEyqfm1Jzf Qaw81U53Aj6VaQ1emxJuyLWSBHzxRpsfThla0Vg2aFK8UJ1uPh49lbs66Czu2+VA MzdaygB4kyWicSdE+P/bMmoTBg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:00:42 2026 by rpki-client