$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft File: 2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json) Hash identifier: la4YJESeUU7o6szhWlIu2s3B+KXrC+YGj39umQvX6QU= Subject key identifier: 14:FB:71:C6:0C:FE:16:35:A0:27:DB:88:87:43:20:02:0C:14:30:88 Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft Manifest number: 16 Signing time: Tue 21 Apr 2026 04:19:53 +0000 Manifest this update: Tue 21 Apr 2026 04:19:53 +0000 Manifest next update: Tue 28 Apr 2026 04:19:53 +0000 Files and hashes: 1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: lDK2IUenzOwX7IZLJ0Z2xEsoqsTY5XwCbvqk7unhMIc=) 2: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=) 3: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Validity Not Before: Apr 21 04:19:53 2026 GMT Not After : Apr 28 04:19:53 2026 GMT Subject: CN=69e6fae9-233d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:c1:e9:f7:ca:50:b1:82:44:fc:9f:04:24: 5e:4b:6a:e5:ec:7d:05:a8:3a:b2:dd:5f:d5:bb:e3: 64:a0:54:6a:3b:80:3c:b1:7e:72:6c:20:26:ba:b0: 47:78:e4:27:de:d6:f9:46:b3:45:46:f0:82:31:7f: ef:f0:b0:94:70:0a:87:fd:df:54:3b:b9:2f:ec:d6: d0:da:0f:43:83:0f:07:42:46:14:47:59:54:86:51: 1e:f3:89:a0:39:03:17:9f:ae:01:2b:e9:e6:1f:02: 3f:64:a1:3c:5b:ba:b2:e2:2b:fb:af:e7:9a:aa:bd: fe:40:3c:79:3a:d0:a9:a3:9d:65:58:79:4f:14:92: 2f:f5:93:91:6a:04:6c:cf:e7:41:a5:6b:ae:2a:f7: 52:ad:82:eb:8b:ca:64:f7:45:27:fe:c9:d6:5d:40: 90:09:14:47:df:c2:df:1f:dc:64:8c:13:ee:14:1b: 7c:4d:4c:69:46:a6:b6:33:36:0c:1e:05:b6:84:29: 73:e1:c1:30:5c:8e:75:b7:89:a2:ef:9b:85:cf:9f: c5:39:4d:c7:30:6c:b1:bb:f0:08:db:a7:1a:b6:25: 51:d8:e8:8e:fe:75:96:4d:4e:e8:7f:f4:d3:14:ec: c5:63:e5:0b:0e:69:ad:05:eb:0d:ca:da:21:66:41: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:71:C6:0C:FE:16:35:A0:27:DB:88:87:43:20:02:0C:14:30:88 X509v3 Authority Key Identifier: keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2d:ab:4d:71:5f:9a:3b:bc:07:03:9c:a1:07:4f:8c:ed:f4: 25:e7:ee:04:10:e9:e6:47:d0:1c:51:ca:96:fc:6e:f0:f8:01: ed:f9:9b:f6:f7:e0:85:72:d0:c1:3f:79:d1:34:5e:26:60:28: 14:eb:a7:97:60:08:15:f7:d4:e0:a1:0e:ae:8c:08:44:bd:40: 6f:4e:50:7b:39:1b:9e:a1:06:a1:31:3d:22:2b:3b:22:fd:a9: 56:88:9e:34:bd:97:35:a9:54:0b:c0:41:fa:f1:49:56:9d:90: c6:29:b7:17:2e:fb:b5:97:eb:21:c4:80:18:88:af:98:ae:bf: 87:72:84:f5:7d:90:15:42:e7:d2:28:58:c9:27:60:6c:bb:4d: 36:f3:dd:5d:4a:db:78:97:58:b5:ed:3e:66:22:87:68:c5:56: 2e:08:16:88:72:21:47:c7:ed:2a:9d:5d:49:7e:cf:cf:7b:cf: d4:f5:3a:b9:4e:01:f8:34:44:b6:20:64:03:9d:f3:ee:4e:df: 4c:2d:28:41:72:9d:97:5e:be:2f:fd:ca:93:16:56:73:43:e5: 1c:8c:39:68:a7:bf:19:52:cb:b4:33:ac:f6:51:53:cc:12:6e: ad:8f:fe:d9:b7:da:dd:7f:50:57:51:ca:ad:9c:32:64:43:0b: da:04:09:1d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoREE2REVCM0Y2NUNDMjM2Nzg0ODNBNzZCQjc4RTM5MUYy RjlDNjQyMTAeFw0yNjA0MjEwNDE5NTNaFw0yNjA0MjgwNDE5NTNaMBgxFjAUBgNV BAMTDTY5ZTZmYWU5LTIzM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEOMHp98pQsYJE/J8EJF5LauXsfQWoOrLdX9W742SgVGo7gDyxfnJsICa6sEd4 5Cfe1vlGs0VG8IIxf+/wsJRwCof931Q7uS/s1tDaD0ODDwdCRhRHWVSGUR7ziaA5 AxefrgEr6eYfAj9koTxburLiK/uv55qqvf5APHk60KmjnWVYeU8Uki/1k5FqBGzP 50Gla64q91KtguuLymT3RSf+ydZdQJAJFEffwt8f3GSME+4UG3xNTGlGprYzNgwe BbaEKXPhwTBcjnW3iaLvm4XPn8U5TccwbLG78Ajbpxq2JVHY6I7+dZZNTuh/9NMU 7MVj5QsOaa0F6w3K2iFmQZUJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFPtxxgz+ FjWgJ9uIh0MgAgwUMIgwHwYDVR0jBBgwFoAU2m3rP2XMI2eEg6drt445Hy+cZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0Y0Nzc1NUI4MjFC MjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJlRWc2ZHJ0NDQ1SHktY1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMm0zclAyWE1JMmVFZzZkcnQ0NDVIeS1jWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF OTU5L0Y0Nzc1NUI4MjFCMjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJl RWc2ZHJ0NDQ1SHktY1pDRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVLatNcV+aO7wHA5yhB0+M7fQl5+4EEOnmR9AcUcqW/G7w+AHt+Zv29+CFctDB P3nRNF4mYCgU66eXYAgV99TgoQ6ujAhEvUBvTlB7ORueoQahMT0iKzsi/alWiJ40 vZc1qVQLwEH68UlWnZDGKbcXLvu1l+shxIAYiK+Yrr+HcoT1fZAVQufSKFjJJ2Bs u002891dStt4l1i17T5mIodoxVYuCBaIciFHx+0qnV1Jfs/Pe8/U9Tq5TgH4NES2 IGQDnfPuTt9MLShBcp2XXr4v/cqTFlZzQ+UcjDlop78ZUsu0M6z2UVPMEm6tj/7Z t9rdf1BXUcqtnDJkQwvaBAkd -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:08 2026 by rpki-client