$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: x7BsZr4yAd+GdoLdda2xP+ZD5hzb69L/VxgIJVC/tWI= Subject key identifier: 59:1A:59:1E:B9:B9:3D:A1:20:DA:C9:01:BB:12:73:EA:74:31:3F:20 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0D4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0D24 Signing time: Tue 24 Mar 2026 18:00:00 +0000 Manifest this update: Tue 24 Mar 2026 17:59:59 +0000 Manifest next update: Tue 31 Mar 2026 17:59:59 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: pdXLd3sWKjesXVW3ZCUdFV7Dw+HxiTOyj8vL8yYGVko=) 2: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: Dr/HYACygZ7h17XgOtesN899+mAiqWiSYucDyi+yqlA=) 4: BC36A3E8A67E11F0A35CBF40C4F9AE02.roa (hash: iXhnwf/klA+xcRwxUiw09zRjj/31dDPcCbC/JYSI9HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Mar 24 17:59:59 2026 GMT Not After : Mar 31 17:59:59 2026 GMT Subject: CN=69c2d120-b651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:36:a5:d0:39:2a:57:7a:7f:c7:e0:e9:8e: e9:d5:e1:80:ef:aa:ee:2d:3d:4f:97:25:25:3e:88: d1:be:e9:b0:d0:b9:b3:17:50:b2:fd:8f:eb:d7:74: 54:b8:ba:a7:0e:a8:4f:64:d6:c1:36:82:80:b8:c6: 74:d6:fb:09:a4:1a:e0:6c:16:fe:38:4b:58:23:e3: 4d:84:6c:0f:3e:15:0f:54:62:b4:d3:d9:5a:39:e1: 0b:fb:f9:1f:b8:25:9b:24:cf:eb:ac:e3:8e:82:fd: a6:b5:f2:64:2b:19:49:c4:a1:b7:69:32:13:da:55: f2:1d:52:10:8f:47:2e:6e:e1:86:92:86:87:f6:17: 15:a6:01:77:e6:44:9c:ba:6d:60:3f:79:44:d0:4d: 42:1b:82:a7:f4:95:2c:cd:7d:52:b5:5b:53:55:45: 4d:a0:12:af:4e:85:68:4e:da:40:a3:60:cd:71:ca: 69:5e:ad:97:fc:29:b3:cf:84:4d:e9:86:21:6a:de: 5c:d7:0e:a2:83:09:56:a4:73:c0:50:03:68:64:b3: ad:ec:53:40:d1:48:92:4d:c7:55:d8:1e:13:8e:a6: c7:de:a8:77:0a:6d:3a:32:51:61:a7:4c:a7:e8:ad: 49:99:69:85:a0:eb:1a:7c:a2:7a:c0:04:14:2d:6f: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1A:59:1E:B9:B9:3D:A1:20:DA:C9:01:BB:12:73:EA:74:31:3F:20 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:9e:06:bd:eb:41:9c:2f:ae:d7:c9:94:dc:e3:40:25:bc: 64:5d:15:9d:86:f0:54:d6:4f:15:53:c5:92:51:0c:2a:90:6d: 26:b5:36:99:b4:ad:e6:8b:ed:69:19:38:51:16:59:59:4e:5b: f1:d1:2c:66:a7:ae:a6:4c:77:d0:10:ec:6a:f0:6d:88:a3:e0: 65:7b:ca:02:f0:89:43:66:c4:39:17:71:7b:04:a4:7d:47:4d: 55:fe:73:d8:c0:d4:66:f0:41:52:ac:80:84:16:ea:b9:41:dd: e0:71:69:86:c4:2d:fc:be:ab:85:70:da:eb:5d:b2:d4:73:3f: 37:de:7b:8a:c3:2f:6c:15:4b:3e:1e:dc:be:e3:72:01:cc:98: a9:a2:b0:49:6e:9d:f3:ec:a0:d6:1c:a7:e6:6a:b2:8b:b5:de: ac:d2:b5:ad:9b:c3:2f:05:bd:f0:9f:c0:c8:99:5b:9a:b1:fd: 42:8c:fd:72:ef:e4:51:22:55:99:ef:2c:65:bb:d9:21:49:34: 5d:2a:d9:98:4f:2f:e8:67:23:34:29:a0:c6:bd:18:16:ae:b5: 64:c3:6f:4b:e9:b4:41:7a:93:b1:bc:8d:50:b3:43:ef:73:ea: c6:92:83:3e:55:04:57:15:b8:3d:ca:e0:d0:66:06:4f:10:19: 79:0f:f3:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjYwMzI0MTc1OTU5WhcNMjYwMzMxMTc1OTU5WjAYMRYwFAYD VQQDEw02OWMyZDEyMC1iNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXI2pdA5Kld6f8fg6Y7p1eGA76ruLT1PlyUlPojRvumw0LmzF1Cy/Y/r13RU uLqnDqhPZNbBNoKAuMZ01vsJpBrgbBb+OEtYI+NNhGwPPhUPVGK009laOeEL+/kf uCWbJM/rrOOOgv2mtfJkKxlJxKG3aTIT2lXyHVIQj0cubuGGkoaH9hcVpgF35kSc um1gP3lE0E1CG4Kn9JUszX1StVtTVUVNoBKvToVoTtpAo2DNccppXq2X/Cmzz4RN 6YYhat5c1w6igwlWpHPAUANoZLOt7FNA0UiSTcdV2B4TjqbH3qh3Cm06MlFhp0yn 6K1JmWmFoOsafKJ6wAQULW/hkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkaWR65 uT2hINrJAbsSc+p0MT8gMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgBKeBr3rQZwvrtfJlNzjQCW8ZF0VnYbwVNZPFVPFklEMKpBtJrU2mbSt5ovt aRk4URZZWU5b8dEsZqeupkx30BDsavBtiKPgZXvKAvCJQ2bEORdxewSkfUdNVf5z 2MDUZvBBUqyAhBbquUHd4HFphsQt/L6rhXDa612y1HM/N957isMvbBVLPh7cvuNy AcyYqaKwSW6d8+yg1hyn5mqyi7XerNK1rZvDLwW98J/AyJlbmrH9Qoz9cu/kUSJV me8sZbvZIUk0XSrZmE8v6GcjNCmgxr0YFq61ZMNvS+m0QXqTsbyNULND73PqxpKD PlUEVxW4Pcrg0GYGTxAZeQ/zZw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:32 2026 by rpki-client