$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: yoyjijM/WBsskRDtNSPCtQ0/R5Wixw9xkLKkobIUVrU= Subject key identifier: 2F:DD:D1:55:41:61:BD:E2:FD:BA:A0:9F:92:78:6A:0F:F2:A9:D1:18 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 1141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 1125 Signing time: Sat 04 Apr 2026 17:08:44 +0000 Manifest this update: Sat 04 Apr 2026 17:08:44 +0000 Manifest next update: Sat 11 Apr 2026 17:08:44 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: j7kFKOYMNYWBNW3t8jfGD80bCT45T0bwgQoJ2Yy2RsU=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: 3o6dj/XokqZdrY5E0NL8+hP2E/G8Ccuo1K+sm8MmmjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4417 (0x1141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: Apr 4 17:08:44 2026 GMT Not After : Apr 11 17:08:44 2026 GMT Subject: CN=69d1459c-d6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:0b:20:b2:85:32:52:d6:1f:60:b4:c6:b1: a0:58:fa:78:dc:da:7f:ba:61:28:54:58:a1:81:ce: e6:3a:6b:cd:1e:d0:e9:24:cf:5d:0f:2f:cd:1a:2e: 77:13:de:97:aa:b2:0c:f6:c1:d0:a5:c0:dd:58:23: a0:b6:be:43:0a:2d:40:64:e5:90:bb:a6:c2:d8:30: 1a:c0:11:51:db:ff:11:64:ad:73:45:e9:a9:21:05: 5c:87:15:ec:cd:4d:4d:67:68:56:85:74:3d:ee:87: 69:b0:44:5b:ae:67:69:50:03:bf:2c:f6:2b:bb:0e: f4:e9:e6:91:6b:e9:05:c5:95:44:5b:34:a7:d9:bd: 9f:ab:84:ec:aa:58:f8:18:fd:9c:98:8c:57:1a:60: d5:d2:82:25:d4:55:7b:70:fe:47:4e:bc:30:68:b1: fd:cb:0d:57:a2:04:2f:d5:17:8e:e6:44:e8:5e:af: 4e:c6:62:1e:33:d3:e3:1d:b4:fc:82:35:2c:1f:3f: 55:6b:e9:75:99:46:3a:66:00:da:37:fd:c3:d6:53: 08:b4:f3:51:83:f4:2a:78:af:7f:ce:08:09:79:eb: a1:5d:8d:d1:29:43:c8:1e:be:9f:9f:d4:bf:e6:50: 2a:21:9b:ef:91:e7:4c:f4:cf:f0:6f:1e:fc:af:a3: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DD:D1:55:41:61:BD:E2:FD:BA:A0:9F:92:78:6A:0F:F2:A9:D1:18 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:c3:94:cc:30:e3:0e:59:ac:79:4f:69:4b:73:de:33:13: 1b:3d:73:91:c2:2b:7e:a8:ce:25:50:0d:41:d4:51:83:2c:18: bd:af:c0:54:fb:97:77:98:5b:db:34:76:e4:c6:5f:2b:08:d6: 3b:60:a8:7b:6f:3d:f6:a6:30:12:1d:31:a9:43:2a:ca:2c:22: 1d:95:67:9c:68:21:a7:aa:e2:f7:97:8a:00:15:69:90:b3:d2: 41:96:ee:ee:f4:a9:5c:2c:02:25:96:83:cb:64:1a:89:51:72: cd:c3:e5:e4:47:45:f7:4b:30:64:42:4f:9e:16:d2:18:45:6b: 2c:2e:a9:ab:4b:d3:ec:2d:cd:f6:49:b1:3d:3e:1c:1c:01:20: 9d:3f:1d:53:6d:a5:d5:15:85:db:18:59:c8:1d:9d:6a:81:19: 86:85:98:f2:fa:20:67:9c:09:65:e5:dc:cf:8f:5d:ca:37:63: 0e:b0:c4:fd:60:a9:05:2f:e8:c4:c8:ac:49:ed:6b:97:d2:1a: 08:f6:be:92:76:78:b3:c2:e2:a7:49:62:de:a1:49:0c:27:05: ba:45:7c:94:55:a9:c1:fa:c2:53:79:2d:a6:76:8f:ea:59:eb: 66:5a:43:e2:5c:8c:cf:e0:cd:bf:6f:5d:c4:32:41:8e:9e:00: 45:42:0f:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjYwNDA0MTcwODQ0WhcNMjYwNDExMTcwODQ0WjAYMRYwFAYD VQQDEw02OWQxNDU5Yy1kNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3cLILKFMlLWH2C0xrGgWPp43Np/umEoVFihgc7mOmvNHtDpJM9dDy/NGi53 E96XqrIM9sHQpcDdWCOgtr5DCi1AZOWQu6bC2DAawBFR2/8RZK1zRempIQVchxXs zU1NZ2hWhXQ97odpsERbrmdpUAO/LPYruw706eaRa+kFxZVEWzSn2b2fq4Tsqlj4 GP2cmIxXGmDV0oIl1FV7cP5HTrwwaLH9yw1XogQv1ReO5kToXq9OxmIeM9PjHbT8 gjUsHz9Va+l1mUY6ZgDaN/3D1lMItPNRg/QqeK9/zggJeeuhXY3RKUPIHr6fn9S/ 5lAqIZvvkedM9M/wbx78r6PCEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/d0VVB Yb3i/bqgn5J4ag/yqdEYMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASarDlMww4w5ZrHlPaUtz3jMTGz1zkcIrfqjOJVANQdRRgywYva/AVPuXd5hb 2zR25MZfKwjWO2Coe2899qYwEh0xqUMqyiwiHZVnnGghp6ri95eKABVpkLPSQZbu 7vSpXCwCJZaDy2QaiVFyzcPl5EdF90swZEJPnhbSGEVrLC6pq0vT7C3N9kmxPT4c HAEgnT8dU22l1RWF2xhZyB2daoEZhoWY8vogZ5wJZeXcz49dyjdjDrDE/WCpBS/o xMisSe1rl9IaCPa+knZ4s8Lip0li3qFJDCcFukV8lFWpwfrCU3ktpnaP6lnrZlpD 4lyMz+DNv29dxDJBjp4ARUIPuw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:16 2026 by rpki-client