$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: F3UQvDSBFiWjWoplxrI4c5ghiwDleYg5kqd7jVwFHPs= Subject key identifier: A5:B8:0B:E9:ED:D3:A2:5F:77:EC:85:78:4C:BA:03:10:D6:05:14:67 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 2554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 253C Signing time: Sat 04 Apr 2026 15:41:40 +0000 Manifest this update: Sat 04 Apr 2026 15:41:39 +0000 Manifest next update: Sat 11 Apr 2026 15:41:39 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: FdAJXnsm8ZQL1Ih6GSQM5NSwXe+M7Ptj99PQfsKIb4Q=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9556 (0x2554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Apr 4 15:41:39 2026 GMT Not After : Apr 11 15:41:39 2026 GMT Subject: CN=69d13134-9487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:5e:57:bf:6b:29:6a:c2:4c:61:e3:59:b2: 0b:9d:a1:a4:d4:2b:e6:f9:fb:00:7d:b2:a5:8b:df: 27:a1:20:d9:bd:c9:24:05:8f:11:b6:13:11:88:01: 27:c8:76:e4:36:c2:4b:a7:6f:1a:0c:93:70:87:6b: 4d:e9:d0:dd:2c:e1:b6:2c:1c:c7:1a:0d:05:12:06: ff:da:98:04:6b:83:23:bb:eb:dc:9d:19:ea:5a:58: 56:59:7e:09:b1:b3:d0:34:8f:6a:d1:5a:ba:09:bb: 9c:e0:c1:3a:14:44:55:92:93:0b:b8:4a:31:5e:e4: e3:a3:9c:b8:df:95:74:0d:9b:58:1d:e9:70:16:b1: f8:43:48:f3:23:e2:6b:80:28:fb:4a:ab:e5:fb:1f: e9:d1:e7:66:46:1c:36:03:c6:ec:ea:2f:70:0f:da: e7:01:88:df:90:94:bf:fc:e2:00:fe:b2:f0:e6:05: 8f:d4:bf:ac:ba:9b:d7:fc:b4:af:a2:94:53:e5:f7: a4:29:f4:99:bc:49:c5:32:d4:cd:60:4b:8f:50:9a: 01:c8:44:3b:61:6b:40:90:2a:18:c1:da:fc:4c:b2: 95:d8:dc:5f:24:96:31:6a:3f:f1:df:b4:5c:1b:0f: c2:26:7d:db:b2:67:05:e3:19:f2:cd:f5:3e:22:7f: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B8:0B:E9:ED:D3:A2:5F:77:EC:85:78:4C:BA:03:10:D6:05:14:67 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5f:24:bc:9a:e3:d7:d6:80:04:fd:d9:2e:8c:4f:85:fb:a0: 3f:a5:5a:a3:7f:ec:4f:98:c5:c0:03:1f:51:cf:85:86:01:05: 05:07:cd:bd:e9:e2:7b:52:dd:7a:30:c8:93:39:94:c3:2a:54: ee:c1:44:e8:88:f1:2e:3f:fe:cf:b9:28:58:13:fa:57:31:8f: 04:da:c0:33:f8:0e:38:a5:30:af:94:b4:cb:87:fe:23:ea:e2: c4:25:e3:50:9f:0b:1d:95:51:00:ef:3a:81:ba:dd:05:ec:fd: 09:d0:77:6e:93:97:ed:74:48:10:82:e6:d7:c8:7e:88:66:9c: c7:e4:2e:7b:e5:91:cd:74:07:bf:97:ea:8d:6e:6f:ad:0a:e2: c5:ca:44:ba:5b:42:3c:f2:fd:a1:55:94:0e:c5:bb:cc:64:0d: 6c:4c:41:ea:37:a2:c1:15:80:e9:3d:90:37:80:ac:de:30:d8: f5:e5:e0:fd:58:1d:4c:a6:4e:94:1b:d6:a6:67:35:90:d2:44: 8e:b7:5c:18:eb:49:01:53:cf:65:de:25:0b:df:86:b0:65:e7: ca:0b:b9:8a:de:e2:4f:0d:bd:09:39:22:11:5d:cb:e8:77:36: 55:32:00:78:6b:6e:be:0e:5c:85:51:cb:78:c4:59:20:88:1d: 3d:b1:b9:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjYwNDA0MTU0MTM5WhcNMjYwNDExMTU0MTM5WjAYMRYwFAYD VQQDEw02OWQxMzEzNC05NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYBeV79rKWrCTGHjWbILnaGk1Cvm+fsAfbKli98noSDZvckkBY8RthMRiAEn yHbkNsJLp28aDJNwh2tN6dDdLOG2LBzHGg0FEgb/2pgEa4Mju+vcnRnqWlhWWX4J sbPQNI9q0Vq6Cbuc4ME6FERVkpMLuEoxXuTjo5y435V0DZtYHelwFrH4Q0jzI+Jr gCj7Sqvl+x/p0edmRhw2A8bs6i9wD9rnAYjfkJS//OIA/rLw5gWP1L+supvX/LSv opRT5fekKfSZvEnFMtTNYEuPUJoByEQ7YWtAkCoYwdr8TLKV2NxfJJYxaj/x37Rc Gw/CJn3bsmcF4xnyzfU+In/bcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKW4C+nt 06Jfd+yFeEy6AxDWBRRnMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZF8kvJrj19aABP3ZLoxPhfugP6Vao3/sT5jFwAMfUc+FhgEFBQfNvenie1Ld ejDIkzmUwypU7sFE6IjxLj/+z7koWBP6VzGPBNrAM/gOOKUwr5S0y4f+I+rixCXj UJ8LHZVRAO86gbrdBez9CdB3bpOX7XRIEILm18h+iGacx+Que+WRzXQHv5fqjW5v rQrixcpEultCPPL9oVWUDsW7zGQNbExB6jeiwRWA6T2QN4Cs3jDY9eXg/VgdTKZO lBvWpmc1kNJEjrdcGOtJAVPPZd4lC9+GsGXnygu5it7iTw29CTkiEV3L6Hc2VTIA eGtuvg5chVHLeMRZIIgdPbG5dg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:51 2026 by rpki-client