$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: SGP78mj4BjLVvlipQ3l8cpcJYGj1TbFMqL+Madiu6jk= Subject key identifier: D9:EC:68:FE:64:9A:A2:35:55:6B:C3:45:95:39:DC:9C:02:52:49:72 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 06D7 Signing time: Sat 04 Apr 2026 22:02:32 +0000 Manifest this update: Sat 04 Apr 2026 22:02:31 +0000 Manifest next update: Sat 11 Apr 2026 22:02:31 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: EjHK/6r8b+TvGiqQ2PHZrHqbGA+01x2UPp1IKuE61/Q=) 2: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: v9b/yGtqVwFD8gxkWfJo/P1ZI/EvbUBmOLRUxAaLNxY=) 3: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: I0WpDgMmllreaPhV65poRHSHDSmFE5dRW9kHHGyYH/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Apr 4 22:02:31 2026 GMT Not After : Apr 11 22:02:31 2026 GMT Subject: CN=69d18a78-5d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:19:76:e4:a9:74:1e:a9:8b:41:72:e8:81: 71:15:8d:02:38:29:b7:1b:e3:f1:ed:cd:75:c1:b8: ff:6e:0f:48:46:68:72:50:28:46:82:a6:7b:29:0a: 09:7e:03:dd:73:0c:e4:e2:54:a5:b2:92:13:c2:a5: d3:fb:3f:9b:25:9d:5f:ac:74:ff:8e:6e:c1:c1:19: d2:71:d9:14:7e:99:80:9f:83:ad:9a:64:51:5f:f2: 87:ef:39:e2:c3:f5:27:2d:65:bd:1f:02:7a:63:c9: 19:7c:fb:8c:7e:be:33:dc:8d:4c:e3:7e:cb:13:22: c0:0f:21:73:e9:e8:10:fe:88:18:8e:b1:41:3c:cb: 2b:f6:08:ce:2b:fb:bb:7e:57:5b:ae:bd:eb:5c:6e: c0:50:e4:42:06:6c:3f:51:39:eb:9a:1e:9e:96:1f: c7:b1:26:9d:db:e3:d2:92:43:5f:ec:bc:e5:b9:40: e4:cb:57:34:51:4b:a3:01:41:f8:37:fa:69:91:c1: 8c:41:c1:87:3b:23:63:61:e8:d3:79:95:ec:76:3c: 88:8f:d6:45:d9:5e:18:d9:8c:d5:23:79:ba:0d:49: 20:e2:b6:5e:a4:9d:25:d7:d5:b2:aa:c1:3c:95:be: f2:14:3c:73:29:7b:13:cb:fb:74:68:f9:07:41:e4: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EC:68:FE:64:9A:A2:35:55:6B:C3:45:95:39:DC:9C:02:52:49:72 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:0a:51:5b:5f:00:36:9c:fc:f5:a6:4e:ba:ec:08:5d:02:28: fc:79:71:5a:28:06:1b:b0:90:8e:f8:a2:42:54:ea:4f:f9:14: be:69:d8:69:df:c4:5e:b5:30:4e:94:01:b6:33:47:b6:89:93: d6:6f:11:32:20:b7:e3:59:04:0f:0b:b8:7e:62:3d:25:a8:e5: 70:a9:e1:32:a3:1d:02:8a:0a:fd:e3:82:a7:da:19:2e:0b:93: 28:27:9b:04:b4:94:da:f7:cb:4c:ca:87:a9:b1:2c:ea:c2:54: 6d:ef:01:90:c1:86:fa:21:9f:74:a3:77:6f:5f:f3:c9:21:a5: ed:61:5d:ff:1f:57:b9:65:26:3a:ac:c3:18:85:1f:6d:e0:13: af:5d:78:c3:1c:ce:bd:3a:cb:7e:a9:20:ca:48:03:1b:d8:30: 76:64:97:a0:23:34:6a:ea:b4:c6:79:a3:9f:7a:3c:2e:a2:b0: 86:b9:8d:19:39:0a:a0:c7:56:26:3a:ad:4b:fd:0f:aa:24:ab: a7:a2:23:2e:96:e3:3a:1e:32:b6:56:0b:df:a1:9f:d9:c9:da: f3:17:56:fa:df:95:1c:2b:6d:cc:01:ef:be:67:bc:16:f3:33: 4f:34:5f:8a:4f:6a:a8:80:76:d2:45:bd:dd:ab:82:94:ab:6a: 35:68:b2:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjYwNDA0MjIwMjMxWhcNMjYwNDExMjIwMjMxWjAYMRYwFAYD VQQDEw02OWQxOGE3OC01ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq0ZduSpdB6pi0Fy6IFxFY0COCm3G+Px7c11wbj/bg9IRmhyUChGgqZ7KQoJ fgPdcwzk4lSlspITwqXT+z+bJZ1frHT/jm7BwRnScdkUfpmAn4OtmmRRX/KH7zni w/UnLWW9HwJ6Y8kZfPuMfr4z3I1M437LEyLADyFz6egQ/ogYjrFBPMsr9gjOK/u7 fldbrr3rXG7AUORCBmw/UTnrmh6elh/HsSad2+PSkkNf7LzluUDky1c0UUujAUH4 N/ppkcGMQcGHOyNjYejTeZXsdjyIj9ZF2V4Y2YzVI3m6DUkg4rZepJ0l19WyqsE8 lb7yFDxzKXsTy/t0aPkHQeRB+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnsaP5k mqI1VWvDRZU53JwCUklyMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaQpRW18ANpz89aZOuuwIXQIo/HlxWigGG7CQjviiQlTqT/kUvmnYad/EXrUw TpQBtjNHtomT1m8RMiC341kEDwu4fmI9JajlcKnhMqMdAooK/eOCp9oZLguTKCeb BLSU2vfLTMqHqbEs6sJUbe8BkMGG+iGfdKN3b1/zySGl7WFd/x9XuWUmOqzDGIUf beATr114wxzOvTrLfqkgykgDG9gwdmSXoCM0auq0xnmjn3o8LqKwhrmNGTkKoMdW JjqtS/0PqiSrp6IjLpbjOh4ytlYL36Gf2cna8xdW+t+VHCttzAHvvme8FvMzTzRf ik9qqIB20kW93auClKtqNWiySw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:29 2026 by rpki-client