$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: BCfN4T21zydXlHVKkBn2e3rngPheN4/nx9srXsKiwmw= Subject key identifier: 13:C6:DF:EC:D6:5A:83:61:84:B9:3A:9C:1A:DA:AF:28:94:84:5D:7E Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: DC Signing time: Sun 05 Apr 2026 06:19:55 +0000 Manifest this update: Sun 05 Apr 2026 06:19:54 +0000 Manifest next update: Sun 12 Apr 2026 06:19:54 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: 46F4aQIgV0cMAVqoWMDXUXNPqMhUwvk2MenlKUYP6vk=) 2: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: KaHspWR0HemZK0q9LOChU8le2zgj9l3UI0kexYlJ+/g=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=) 5: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=) 6: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Apr 5 06:19:54 2026 GMT Not After : Apr 12 06:19:54 2026 GMT Subject: CN=69d1ff0b-a85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:7e:b1:29:36:e3:57:a5:a0:48:b5:ac:ba: 3d:30:72:6e:a3:46:74:7d:2d:9c:d1:cb:0a:34:a7: f8:0f:4e:98:6a:1a:50:6b:89:f5:63:0a:19:78:96: 16:52:06:2e:52:96:ae:e4:50:18:8a:dd:0b:bc:e7: a4:cb:6d:95:de:6c:78:db:98:80:7f:a1:6a:af:45: 8e:38:87:a4:fe:21:08:c9:68:3d:57:8e:7a:64:17: 85:a8:ef:c1:66:a7:1f:8b:0d:d1:06:1a:45:f6:d2: 46:83:a4:39:1f:7f:74:19:32:c3:67:fa:ff:df:18: f2:0b:58:c8:8f:49:a8:a2:d8:b6:3e:3a:87:2a:fd: 79:f5:25:ec:1b:ff:90:ac:e4:e0:47:09:71:2a:53: 2b:67:3b:28:f7:e2:ac:c3:7c:58:a1:87:9f:02:7a: 40:00:76:ce:09:23:f8:e5:87:1c:de:95:ca:14:73: 0d:11:f6:df:24:3f:a2:bc:c3:c2:2e:1a:6f:27:46: 0d:de:f9:0b:96:15:26:7f:46:df:2d:e2:c7:53:36: 08:e7:61:27:a1:66:cf:13:67:eb:d9:05:03:3c:35: fd:86:e0:57:05:c2:aa:0b:d9:44:cd:2c:5e:7b:ab: c0:57:b5:42:5f:a9:6f:98:85:4d:db:26:0a:f2:61: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C6:DF:EC:D6:5A:83:61:84:B9:3A:9C:1A:DA:AF:28:94:84:5D:7E X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:52:02:e8:f1:49:e9:d4:4b:dd:7c:b1:8a:86:53:9c:6c: 1b:ad:fa:62:d8:64:d5:b5:2e:b5:df:15:a8:b1:13:67:2a:1b: 28:31:ed:f5:f6:d6:91:50:0a:86:40:4b:13:49:fd:aa:54:c9: e7:67:9e:f9:21:bc:76:d5:50:2a:d5:bb:75:ed:a0:81:eb:95: a6:17:77:18:6a:a1:76:fa:e5:68:07:f7:70:66:5f:13:af:68: c0:3e:50:c2:e0:59:ae:ca:bc:11:2f:56:b6:3f:86:19:44:72: e6:f4:35:24:c2:bc:ad:f0:2a:41:47:6c:91:b8:5d:3f:b3:ad: 2a:39:6a:bf:8b:c2:90:1c:86:64:d5:62:79:6d:69:bc:eb:df: f5:14:e3:a3:c5:27:b0:c7:0a:22:46:82:b5:00:0b:74:1a:ac: 81:d5:f5:74:d4:fb:e4:ca:5d:49:ed:2c:7d:3e:82:f4:91:fb: cb:98:f6:06:fa:bb:93:4d:4b:4d:6c:11:a4:0b:a3:6b:8a:7d: 76:dc:bf:cf:13:69:da:a0:ba:8e:a8:75:64:68:15:1c:a4:f8: 5e:5b:89:62:38:59:1b:f3:4a:36:6a:f7:68:3e:cf:12:ae:55: e2:89:90:33:e2:e9:2e:5f:34:ee:7c:e0:99:28:63:4d:2e:aa: 35:de:b9:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYwNDA1MDYxOTU0WhcNMjYwNDEyMDYxOTU0WjAYMRYwFAYD VQQDEw02OWQxZmYwYi1hODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpt+sSk241eloEi1rLo9MHJuo0Z0fS2c0csKNKf4D06YahpQa4n1YwoZeJYW UgYuUpau5FAYit0LvOeky22V3mx425iAf6Fqr0WOOIek/iEIyWg9V456ZBeFqO/B Zqcfiw3RBhpF9tJGg6Q5H390GTLDZ/r/3xjyC1jIj0mooti2PjqHKv159SXsG/+Q rOTgRwlxKlMrZzso9+Ksw3xYoYefAnpAAHbOCSP45Ycc3pXKFHMNEfbfJD+ivMPC LhpvJ0YN3vkLlhUmf0bfLeLHUzYI52EnoWbPE2fr2QUDPDX9huBXBcKqC9lEzSxe e6vAV7VCX6lvmIVN2yYK8mFsqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPG3+zW WoNhhLk6nBraryiUhF1+MB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnJSAujxSenUS918sYqGU5xsG636Ythk1bUutd8VqLETZyobKDHt9fbWkVAK hkBLE0n9qlTJ52ee+SG8dtVQKtW7de2ggeuVphd3GGqhdvrlaAf3cGZfE69owD5Q wuBZrsq8ES9Wtj+GGURy5vQ1JMK8rfAqQUdskbhdP7OtKjlqv4vCkByGZNVieW1p vOvf9RTjo8UnsMcKIkaCtQALdBqsgdX1dNT75MpdSe0sfT6C9JH7y5j2Bvq7k01L TWwRpAuja4p9dty/zxNp2qC6jqh1ZGgVHKT4XluJYjhZG/NKNmr3aD7PEq5V4omQ M+LpLl807nzgmShjTS6qNd65qg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:30 2026 by rpki-client