$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: WchQ4vMUGH6D7mgFmfMBVrzO6apbYcgYk+qHKQCbH3w= Subject key identifier: 96:F5:8C:D9:EB:4B:E6:32:64:25:99:67:F1:15:77:6F:19:9F:DE:44 Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: 01E6 Signing time: Sun 05 Apr 2026 02:55:57 +0000 Manifest this update: Sun 05 Apr 2026 02:55:57 +0000 Manifest next update: Sun 12 Apr 2026 02:55:57 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: biibYTYhGIPM6qz4KYmPc1JV9G5ZqJUT6yDvpE4ltCE=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: wKye+Bf4sTbbkGL0Ip13QuqoroMtLnMn7BDQ5dOtrUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: Apr 5 02:55:57 2026 GMT Not After : Apr 12 02:55:57 2026 GMT Subject: CN=69d1cf3d-9635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:9f:11:54:67:5c:af:80:a2:55:f8:00:9c: f7:62:bf:b0:c8:3a:ed:e3:36:76:78:61:13:d3:4e: 65:c8:c4:72:c9:72:5d:d7:40:bd:ec:35:b8:c3:38: 55:87:1d:0f:e8:d8:51:73:24:f5:dc:88:60:cd:8a: a6:fa:9c:22:f4:03:13:0f:f4:5e:26:88:2a:65:14: 7b:dd:7a:ef:f9:c1:7f:3d:65:72:53:e1:60:3b:68: 98:39:aa:63:05:ff:56:9d:7a:b1:c9:c7:4e:9c:3b: 19:08:8a:64:f2:3b:6b:69:bd:40:c6:96:40:5b:70: 8c:f2:2e:78:c4:f9:35:1a:40:56:bd:a1:c0:44:d4: 59:75:a8:62:53:7b:04:db:70:82:76:b3:db:56:30: 95:41:02:f8:ed:27:2a:d9:19:7f:9f:dc:71:3f:4f: 48:0a:ef:e6:0f:a1:ce:71:42:fd:77:6b:3c:22:82: d2:4f:d5:f0:d0:c4:64:17:0b:a7:c1:25:37:a2:0d: eb:cd:d6:67:9e:74:68:7e:e5:97:d4:be:65:f6:a6: e2:5f:e7:7b:96:8b:b3:65:e4:fb:2e:6f:6a:43:d3: 1f:a1:29:eb:2d:a9:fa:bc:37:91:d2:f1:84:41:c7: fc:e9:c9:a3:95:5d:14:3c:7f:9f:2c:b2:d5:b5:67: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F5:8C:D9:EB:4B:E6:32:64:25:99:67:F1:15:77:6F:19:9F:DE:44 X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:41:2a:54:e0:ec:00:e3:86:54:64:0d:ae:eb:ed:ae:5a:1e: fc:ec:21:75:e4:42:a3:ce:3d:7c:d0:ef:71:64:be:a8:2d:df: e5:2d:a1:6d:41:c4:19:cb:1d:30:5e:8f:d3:63:a7:2f:34:18: 25:0e:9d:0b:b2:2c:d4:4c:7c:84:cf:10:da:f7:1e:ce:ce:aa: c7:ce:78:2f:63:a6:74:1c:a1:94:2e:ca:d0:e4:5b:a2:09:d7: b1:0b:b1:38:44:f5:6f:93:35:f6:54:f4:61:56:fc:36:14:cc: 54:0b:83:c8:16:79:29:48:95:10:3b:77:c8:c0:10:3f:f7:8a: 65:16:70:8d:d3:d5:28:31:f2:ef:85:b9:6a:71:d8:88:06:12: 7b:db:9e:a7:ef:80:4a:8a:1d:5f:1f:54:87:21:ab:39:18:4d: f0:74:02:21:42:20:f4:b4:28:c3:19:00:5f:ec:e7:a4:e5:0e: ff:3c:76:81:33:fa:7c:43:8f:0e:00:e7:d8:7e:69:a1:0c:25: 8a:9e:6d:06:8e:38:60:33:ae:be:ba:6d:55:2d:6f:db:a0:40: c7:c1:0b:55:f1:4f:a2:aa:37:86:98:8e:4c:4c:b0:71:15:55: b9:a9:d5:b0:a5:9e:6c:fb:c0:56:1c:25:97:05:78:30:4e:4a: 20:ab:35:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjYwNDA1MDI1NTU3WhcNMjYwNDEyMDI1NTU3WjAYMRYwFAYD VQQDEw02OWQxY2YzZC05NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuufEVRnXK+AolX4AJz3Yr+wyDrt4zZ2eGET005lyMRyyXJd10C97DW4wzhV hx0P6NhRcyT13IhgzYqm+pwi9AMTD/ReJogqZRR73Xrv+cF/PWVyU+FgO2iYOapj Bf9WnXqxycdOnDsZCIpk8jtrab1AxpZAW3CM8i54xPk1GkBWvaHARNRZdahiU3sE 23CCdrPbVjCVQQL47Scq2Rl/n9xxP09ICu/mD6HOcUL9d2s8IoLST9Xw0MRkFwun wSU3og3rzdZnnnRofuWX1L5l9qbiX+d7louzZeT7Lm9qQ9MfoSnrLan6vDeR0vGE Qcf86cmjlV0UPH+fLLLVtWctYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJb1jNnr S+YyZCWZZ/EVd28Zn95EMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKUEqVODsAOOGVGQNruvtrloe/OwhdeRCo849fNDvcWS+qC3f5S2hbUHEGcsd MF6P02OnLzQYJQ6dC7Is1Ex8hM8Q2vcezs6qx854L2OmdByhlC7K0ORbognXsQux OET1b5M19lT0YVb8NhTMVAuDyBZ5KUiVEDt3yMAQP/eKZRZwjdPVKDHy74W5anHY iAYSe9uep++ASoodXx9UhyGrORhN8HQCIUIg9LQowxkAX+znpOUO/zx2gTP6fEOP DgDn2H5poQwlip5tBo44YDOuvrptVS1v26BAx8ELVfFPoqo3hpiOTEywcRVVuanV sKWebPvAVhwllwV4ME5KIKs1Uw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:35 2026 by rpki-client