$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: Vu2Vo2LrLFvW9Da/qKQBQKzCeKWWJUOL4BA8tmz5JW0= Subject key identifier: B4:17:EB:6D:71:A6:B3:A6:EF:4A:21:AF:26:15:10:71:30:29:DB:49 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 0386 Signing time: Thu 21 May 2026 00:52:24 +0000 Manifest this update: Thu 21 May 2026 00:52:23 +0000 Manifest next update: Thu 28 May 2026 00:52:23 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: DDubww3VyVDr0DrTY9mVc/Rr74uA8zUK4t+wh3RGuwA=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: eh2olN6asVC4zjOV+kS987T4rETGl4oNwPTcTkaLCEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: May 21 00:52:23 2026 GMT Not After : May 28 00:52:23 2026 GMT Subject: CN=6a0e5748-b567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:c2:e6:14:81:0e:3f:d5:02:c8:f0:6f:98: a1:ec:cd:ae:af:8e:79:21:bb:c3:a6:68:85:3a:77: e7:43:f3:11:07:a1:f2:d8:31:07:d6:56:ab:38:55: 92:98:3a:85:69:2b:9f:b0:e3:df:c0:15:da:e9:b7: cd:85:0e:85:db:60:21:d8:6d:93:68:67:5c:bb:52: 6f:53:19:7a:59:e6:84:b7:26:79:fe:3d:a7:4c:1d: f6:a9:a0:cf:54:6a:66:14:df:02:64:1c:78:91:96: 9e:ba:07:95:f6:db:82:22:c8:06:ec:f6:e7:b7:63: 04:f4:d0:71:3d:11:96:9b:c3:7b:b2:5a:16:f2:d9: d1:d5:56:34:59:80:84:ae:cc:5b:f1:e3:91:c5:fc: 82:9e:08:7b:55:c1:1d:ac:8e:10:cd:61:97:bd:d8: a1:36:2e:3e:d2:53:b0:04:b4:7e:72:a8:75:4e:9a: cc:89:44:b9:a3:86:d0:dd:d6:e7:4e:81:65:a2:dd: 2c:46:8b:bb:13:43:b4:88:a4:26:72:1a:9a:66:19: 98:37:ca:a7:60:8e:26:b9:87:5b:a7:a6:ce:1b:06: 0a:b1:02:c8:00:f0:95:31:4e:db:f0:b0:27:21:87: 4f:e8:50:14:22:6f:15:f2:d2:3e:d2:8c:bf:0b:e9: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:17:EB:6D:71:A6:B3:A6:EF:4A:21:AF:26:15:10:71:30:29:DB:49 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:21:a2:69:b7:90:c2:81:2c:b5:78:22:bf:56:1b:5e:64:6f: 94:5b:3b:fe:55:c3:07:cd:a0:e8:3f:e6:21:c0:3f:15:c3:ad: da:16:8b:db:e9:6d:7c:4d:98:68:01:d6:a3:b3:42:f0:f5:e8: 14:ba:eb:01:07:07:ae:18:c9:03:00:b6:7f:77:d1:f6:32:85: e2:48:64:65:a8:e2:96:e6:c0:2a:c2:74:b0:73:a7:09:55:5f: 30:bf:5e:e9:ef:67:79:b2:c0:32:03:3a:c5:78:43:2a:49:df: 35:15:a2:52:c1:81:11:d8:15:f2:26:55:7d:81:8c:85:4d:71: 32:dc:72:33:92:3f:95:e4:1e:96:f8:e0:ec:07:9e:46:19:85: 1e:7e:84:a5:00:ba:ba:17:6a:2b:3e:b8:e9:00:87:a5:20:d4: 2d:aa:66:5a:20:96:e8:2e:b1:d5:01:46:2a:1b:36:78:22:84: fc:46:0c:54:86:fc:e1:3b:a5:4a:c8:ae:7c:48:4f:64:a0:69: ed:e8:b9:e0:d3:22:c5:de:b9:3b:88:e7:a8:91:22:25:1b:30: 40:f5:57:83:e8:52:07:e2:d3:6c:3d:1a:1a:ea:22:cb:1d:5f: ee:a5:d1:cb:22:0f:5b:52:f8:a0:f2:60:a8:2d:d8:c0:d8:a5: 4e:11:66:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjYwNTIxMDA1MjIzWhcNMjYwNTI4MDA1MjIzWjAYMRYwFAYD VQQDEw02YTBlNTc0OC1iNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvELC5hSBDj/VAsjwb5ih7M2ur455IbvDpmiFOnfnQ/MRB6Hy2DEH1larOFWS mDqFaSufsOPfwBXa6bfNhQ6F22Ah2G2TaGdcu1JvUxl6WeaEtyZ5/j2nTB32qaDP VGpmFN8CZBx4kZaeugeV9tuCIsgG7Pbnt2ME9NBxPRGWm8N7sloW8tnR1VY0WYCE rsxb8eORxfyCngh7VcEdrI4QzWGXvdihNi4+0lOwBLR+cqh1TprMiUS5o4bQ3dbn ToFlot0sRou7E0O0iKQmchqaZhmYN8qnYI4muYdbp6bOGwYKsQLIAPCVMU7b8LAn IYdP6FAUIm8V8tI+0oy/C+nvEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQX621x prOm70ohryYVEHEwKdtJMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKSGiabeQwoEstXgiv1YbXmRvlFs7/lXDB82g6D/mIcA/FcOt2haL2+ltfE2Y aAHWo7NC8PXoFLrrAQcHrhjJAwC2f3fR9jKF4khkZajilubAKsJ0sHOnCVVfML9e 6e9nebLAMgM6xXhDKknfNRWiUsGBEdgV8iZVfYGMhU1xMtxyM5I/leQelvjg7Aee RhmFHn6EpQC6uhdqKz646QCHpSDULapmWiCW6C6x1QFGKhs2eCKE/EYMVIb84Tul SsiufEhPZKBp7ei54NMixd65O4jnqJEiJRswQPVXg+hSB+LTbD0aGuoiyx1f7qXR yyIPW1L4oPJgqC3YwNilThFm9A== -----END CERTIFICATE-----Generated at Thu May 21 10:53:41 2026 by rpki-client