$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json) Hash identifier: g6Zq3dAozXJX1nAF1A1XGom5dxKsKXXottK8VOCfGjg= Subject key identifier: AD:91:FF:EF:F3:64:26:14:B0:0A:D6:6D:D8:65:EE:A9:A3:E9:73:33 Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Certificate serial: 0D26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft Manifest number: 1EDD Signing time: Sun 26 Apr 2026 17:05:42 +0000 Manifest this update: Sun 26 Apr 2026 17:05:42 +0000 Manifest next update: Sun 03 May 2026 17:05:42 +0000 Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: ccO9Ua8L7zDYXX6zrXpztTDRyhhTIiG/nVKLUij3TiM=) 2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: pVllpqaYkicaFIWTL2XyjS6RmEOfq4yPCoNoR4rIsP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3366 (0xd26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Validity Not Before: Apr 26 17:05:42 2026 GMT Not After : May 3 17:05:42 2026 GMT Subject: CN=69ee45e6-a21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:ba:2b:fa:3f:24:eb:55:50:a4:cd:86:70: b1:6d:4c:5d:24:c8:ea:94:f7:8a:f4:26:e9:26:cc: 97:16:49:b1:ce:eb:9b:d5:0a:dc:d2:20:04:9b:b5: a0:ad:a3:0c:a5:c2:37:08:8e:80:fb:8b:77:d6:16: 60:bb:7c:92:1c:0e:cf:0c:85:a6:3e:e5:6f:e6:4c: 07:20:83:8e:0e:b8:bf:f4:99:6a:d5:7a:df:70:b8: 6a:51:20:d7:9c:42:dd:92:33:b5:db:22:2e:4b:fd: 78:78:10:49:ac:bd:1a:79:10:8b:00:8a:a7:ca:9b: 15:e2:0c:83:78:3c:d4:cd:a4:f5:e9:ef:02:98:38: 84:1e:31:51:bb:2b:e9:76:38:6c:15:85:b8:7c:af: 2d:ed:d9:e9:f5:d4:5b:94:4c:f0:cb:f8:ca:dc:42: 1b:6b:d2:fb:b6:0b:55:43:6a:e5:41:af:eb:a9:87: 52:f6:eb:b2:58:e4:b6:ac:48:73:4e:98:7d:41:8a: 22:9b:ca:65:93:7f:4f:38:3b:c2:b1:87:48:44:1b: 33:6e:77:2f:0f:34:fc:88:f0:bc:94:0d:d1:81:b2: 29:f9:d5:34:2c:40:fe:5d:12:64:2b:59:3a:6d:c5: e9:58:7c:27:78:2a:31:c3:e5:5d:ec:bd:e2:3c:a0: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:91:FF:EF:F3:64:26:14:B0:0A:D6:6D:D8:65:EE:A9:A3:E9:73:33 X509v3 Authority Key Identifier: keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:10:ba:ec:aa:bb:de:2f:a9:b7:7f:aa:23:0b:42:70:05:f0: 75:a6:fa:f9:5d:31:0f:17:d6:6c:a7:6d:ea:b5:84:73:e9:2b: a2:fe:41:b2:fe:40:d4:18:d4:af:4f:3d:70:42:1c:99:a9:e8: 10:10:fe:6b:e1:0a:78:f1:ce:bc:af:c3:af:6b:db:1a:4a:01: ce:0c:eb:92:8b:09:36:fe:99:af:77:b9:cc:9f:3d:95:5e:45: c4:3e:07:37:7e:99:03:da:e3:6f:63:b2:08:cf:5c:ef:79:75: 46:62:ce:0f:32:aa:f1:1f:44:ac:79:41:42:2e:14:0c:0c:8f: 3f:2a:47:ba:29:ea:d1:cb:12:3f:de:81:8a:f4:d4:8e:b8:b3: b6:c8:e7:02:f7:64:28:aa:97:ec:d1:ba:f5:c6:9d:96:7a:f9: f4:98:d3:c2:37:ee:4a:63:3b:06:06:1c:5c:5d:6c:f2:ce:38: 7a:9a:9e:96:9c:3b:c8:7b:ab:f0:03:68:60:98:53:5b:04:1a: 06:62:b6:d0:eb:ef:3b:cb:55:5f:01:5e:ff:cf:fe:10:fe:0e: 68:40:96:08:6f:bc:5a:22:0a:8b:70:2e:3a:18:7a:fd:6e:58: 3b:4e:b9:cf:4d:e8:99:0c:39:d8:a4:03:f5:a5:8c:16:d6:3b: 20:0e:5b:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG REE4NEMwN0EwHhcNMjYwNDI2MTcwNTQyWhcNMjYwNTAzMTcwNTQyWjAYMRYwFAYD VQQDEw02OWVlNDVlNi1hMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWe6K/o/JOtVUKTNhnCxbUxdJMjqlPeK9CbpJsyXFkmxzuub1Qrc0iAEm7Wg raMMpcI3CI6A+4t31hZgu3ySHA7PDIWmPuVv5kwHIIOODri/9Jlq1XrfcLhqUSDX nELdkjO12yIuS/14eBBJrL0aeRCLAIqnypsV4gyDeDzUzaT16e8CmDiEHjFRuyvp djhsFYW4fK8t7dnp9dRblEzwy/jK3EIba9L7tgtVQ2rlQa/rqYdS9uuyWOS2rEhz Tph9QYoim8plk39PODvCsYdIRBszbncvDzT8iPC8lA3RgbIp+dU0LED+XRJkK1k6 bcXpWHwneCoxw+Vd7L3iPKCGiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2R/+/z ZCYUsArWbdhl7qmj6XMzMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh NVVPRmNVam1NMUw5cUV3SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxhC67Kq73i+pt3+qIwtCcAXwdab6+V0xDxfWbKdt6rWEc+krov5Bsv5A1BjU r089cEIcmanoEBD+a+EKePHOvK/Dr2vbGkoBzgzrkosJNv6Zr3e5zJ89lV5FxD4H N36ZA9rjb2OyCM9c73l1RmLODzKq8R9ErHlBQi4UDAyPPypHuinq0csSP96BivTU jriztsjnAvdkKKqX7NG69cadlnr59JjTwjfuSmM7BgYcXF1s8s44epqelpw7yHur 8ANoYJhTWwQaBmK20OvvO8tVXwFe/8/+EP4OaECWCG+8WiIKi3AuOhh6/W5YO065 z03omQw52KQD9aWMFtY7IA5b2Q== -----END CERTIFICATE-----Generated at Tue Apr 28 11:38:06 2026 by rpki-client