$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: 8r7d6ZVXDC4Nlv82U+EWDy5HT45/9KAyBt1hklKBhVc= Subject key identifier: 92:F8:61:0A:8F:6B:7C:A2:D2:30:2E:18:1D:87:70:E1:78:ED:C4:B8 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0D57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0D2F Signing time: Sun 05 Apr 2026 12:22:30 +0000 Manifest this update: Sun 05 Apr 2026 12:22:29 +0000 Manifest next update: Sun 12 Apr 2026 12:22:29 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: CXRiKcrGjMs3KllPAOcVftTFyAR3Th62Zc2qxph24E8=) 2: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: 9eVW8q201teZAFGXXlr75mIPBbOGURlsiVyxRbpYboo=) 3: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 12:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Apr 5 12:22:29 2026 GMT Not After : Apr 12 12:22:29 2026 GMT Subject: CN=69d25406-7ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d1:40:f3:4b:4b:3f:44:90:73:15:e3:4f:71: bf:f8:96:c3:c1:12:0d:08:6f:84:55:ad:5c:ac:13: ce:95:5b:9a:56:3a:9d:ed:ef:ce:5c:fb:96:3b:d0: c9:94:61:f3:8b:26:a9:a7:77:c0:90:38:3e:78:d2: 11:9b:84:d4:a2:6c:d5:f7:53:01:74:49:e0:15:a3: e5:18:88:8b:26:01:c6:9c:c4:99:20:19:5b:cb:e0: 0d:c0:41:d8:09:4f:81:17:73:e1:13:de:04:65:f2: 3a:94:8f:80:f8:3b:9a:ca:18:3a:bf:c9:ce:a2:ca: ca:99:10:3b:82:41:f4:d1:39:56:4e:5a:27:13:89: 04:8c:c7:49:89:68:01:61:b0:5d:89:3d:b3:da:a8: 53:0e:05:41:f8:08:5f:fb:68:c5:3e:c8:71:ac:1a: 0f:4e:ff:88:77:ae:48:53:ef:44:01:c1:43:d2:0b: 6f:ee:1e:48:24:e6:87:66:4c:d1:9c:01:11:48:05: 91:8a:17:f6:76:82:be:18:f3:ab:da:34:7a:13:18: 54:85:7b:94:0a:a2:f4:9d:2c:7a:d2:9d:0c:40:ef: 5f:99:48:2f:0d:c3:b1:05:2a:7c:fc:69:d1:5e:1a: b1:7a:a8:ca:a0:2d:0d:3d:e7:5c:b3:b9:51:c1:00: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F8:61:0A:8F:6B:7C:A2:D2:30:2E:18:1D:87:70:E1:78:ED:C4:B8 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:c2:3c:13:78:09:f7:ed:ea:5a:d2:94:bf:3a:eb:06:8c:df: fe:0d:83:03:7b:ae:1b:99:9f:5e:93:b6:9a:a6:15:bc:42:1b: bd:84:e7:99:5d:30:5d:dd:1e:05:50:c8:5c:0a:f1:87:4f:5f: 3e:eb:ee:ee:90:66:14:e6:03:3d:67:bb:51:31:ba:d5:47:fa: 46:53:dc:84:a2:83:88:2c:85:71:ea:79:28:c7:1a:a3:25:93: 1a:d8:26:79:7e:5c:41:a6:34:bd:68:e8:f5:63:5c:c9:d5:f0: 3b:96:76:40:3e:13:5c:7e:fc:27:54:37:46:61:da:26:1b:28: b0:6f:65:38:9e:44:68:cb:bc:8a:70:82:5f:ca:0d:7f:ca:78: 0e:cb:5b:1b:1f:5b:54:a3:4f:00:af:55:02:36:d4:01:75:9d: eb:23:55:8f:83:6f:83:52:6a:ac:f4:70:e1:2a:05:66:8f:75: 92:3b:72:8f:d2:3f:16:61:cc:49:ae:d6:4f:4f:7f:41:42:c8: 94:c8:5f:2b:a5:8c:82:6e:34:04:6d:63:6d:12:c4:d4:17:06: 5b:7c:67:8b:28:8a:87:ba:94:fe:aa:3b:bc:4d:8c:c8:3e:5b: f3:5c:7a:0a:3d:0d:43:01:7f:31:7f:20:ab:a3:ac:44:a1:31: ea:1a:db:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjYwNDA1MTIyMjI5WhcNMjYwNDEyMTIyMjI5WjAYMRYwFAYD VQQDEw02OWQyNTQwNi03YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tFA80tLP0SQcxXjT3G/+JbDwRINCG+EVa1crBPOlVuaVjqd7e/OXPuWO9DJ lGHziyapp3fAkDg+eNIRm4TUomzV91MBdEngFaPlGIiLJgHGnMSZIBlby+ANwEHY CU+BF3PhE94EZfI6lI+A+Duayhg6v8nOosrKmRA7gkH00TlWTlonE4kEjMdJiWgB YbBdiT2z2qhTDgVB+Ahf+2jFPshxrBoPTv+Id65IU+9EAcFD0gtv7h5IJOaHZkzR nAERSAWRihf2doK+GPOr2jR6ExhUhXuUCqL0nSx60p0MQO9fmUgvDcOxBSp8/GnR XhqxeqjKoC0NPedcs7lRwQCUrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJL4YQqP a3yi0jAuGB2HcOF47cS4MB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArMI8E3gJ9+3qWtKUvzrrBozf/g2DA3uuG5mfXpO2mqYVvEIbvYTnmV0wXd0e BVDIXArxh09fPuvu7pBmFOYDPWe7UTG61Uf6RlPchKKDiCyFcep5KMcaoyWTGtgm eX5cQaY0vWjo9WNcydXwO5Z2QD4TXH78J1Q3RmHaJhsosG9lOJ5EaMu8inCCX8oN f8p4DstbGx9bVKNPAK9VAjbUAXWd6yNVj4Nvg1JqrPRw4SoFZo91kjtyj9I/FmHM Sa7WT09/QULIlMhfK6WMgm40BG1jbRLE1BcGW3xniyiKh7qU/qo7vE2MyD5b81x6 Cj0NQwF/MX8gq6OsRKEx6hrb1w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:24 2026 by rpki-client