$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: BWSqsNiYQWzSLrcg4Dc6Zk1BjKA9E/X1yJS6PIsl+Hk= Subject key identifier: 5E:02:B6:CD:4E:65:21:18:FC:D2:7A:8F:7E:CE:5B:6B:68:5E:85:6F Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 0204 Signing time: Sun 05 Apr 2026 02:35:46 +0000 Manifest this update: Sun 05 Apr 2026 02:35:46 +0000 Manifest next update: Sun 12 Apr 2026 02:35:46 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: Bqx24BGtPT8hmIbgGrKy2a+UToGII2n+wApLaUVSnqw=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 2O1k5KDca2tfl/EQnQ5lVCtAgwjAnHM94uUoNTqPDZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Apr 5 02:35:46 2026 GMT Not After : Apr 12 02:35:46 2026 GMT Subject: CN=69d1ca82-cf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:bb:5c:21:45:d4:73:74:e0:14:b2:67:ff: c5:ce:a9:0f:67:04:05:26:8c:bb:ff:80:be:c6:f4: 17:d9:69:3b:c2:a9:f1:5c:e4:24:f4:3f:eb:26:96: 5b:bd:ca:6d:ff:30:9b:99:0d:fa:a3:cf:76:42:c6: 0b:d2:ce:24:97:c6:6e:0c:19:ec:01:45:0b:75:8a: 86:f3:80:47:75:30:9e:c3:ae:be:d6:7d:62:0f:97: 6b:be:33:b5:e8:ec:49:41:39:12:29:43:fa:2b:9d: 26:f6:a5:7c:be:d1:67:38:d7:ed:23:d0:05:4d:7f: dd:47:51:1b:5f:81:74:9b:de:ee:f7:5c:7f:de:fa: 96:65:d9:5a:9a:57:a9:5e:b6:9c:5b:9b:2d:b8:d3: 50:a5:d1:3b:b1:2e:59:78:cf:61:61:12:43:4e:c9: 76:f4:4a:f0:8b:63:53:47:05:ae:66:15:ed:0d:c4: 82:f8:f2:a0:9e:e7:d2:a6:ae:a3:5e:d6:85:54:f2: 87:bb:bf:4a:7b:6f:b1:7f:74:8e:fd:7a:4f:09:67: 08:fb:8e:9a:e4:af:07:b1:8c:31:de:41:fd:19:39: 5f:dd:b1:5f:0c:54:23:18:a3:c3:ee:9b:d0:bd:33: c1:6c:d4:4f:64:c3:dd:e3:09:24:a1:ff:9d:8a:6f: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:B6:CD:4E:65:21:18:FC:D2:7A:8F:7E:CE:5B:6B:68:5E:85:6F X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f1:5f:b6:19:5d:44:8b:9a:65:14:ca:26:42:72:ca:8a:60: 7c:42:89:82:9f:f5:47:38:39:7d:60:79:8b:82:21:09:f4:0f: d5:66:f1:ae:2e:44:3d:99:af:c6:38:1d:d9:80:65:01:d8:30: fa:61:59:16:d9:fd:c7:42:67:4d:0f:3a:de:af:26:c7:d6:72: 97:54:c7:0a:65:ed:57:03:20:c0:7e:77:30:b4:63:1a:3a:1a: a7:93:5b:97:36:06:f2:b1:93:49:39:ec:3a:2c:dd:18:eb:c7: 08:c2:4c:a3:5d:de:1c:10:37:be:04:ec:d6:c2:1a:99:89:f0: 18:6c:80:7e:8d:3b:74:7c:7e:33:b2:b9:6a:d7:dc:61:cd:c2: 54:14:b5:4c:19:b9:34:48:78:03:80:96:39:c3:19:23:a3:e1: 07:24:de:f7:e2:c2:90:88:b0:5c:36:df:06:34:00:fb:3e:a4: 26:8c:f5:44:f1:3d:31:87:e5:4a:b7:6b:d2:fd:df:a3:e6:46: 90:0b:57:47:40:2a:d6:62:e5:cc:05:90:e4:24:f2:10:46:f1: 90:22:c7:66:99:77:35:12:b1:eb:78:b1:e6:ab:a1:95:61:14: 89:35:ff:7a:b0:65:07:bf:2a:0d:bc:ae:49:47:4a:ff:15:6a: 8e:64:32:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjYwNDA1MDIzNTQ2WhcNMjYwNDEyMDIzNTQ2WjAYMRYwFAYD VQQDEw02OWQxY2E4Mi1jZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3y7XCFF1HN04BSyZ//FzqkPZwQFJoy7/4C+xvQX2Wk7wqnxXOQk9D/rJpZb vcpt/zCbmQ36o892QsYL0s4kl8ZuDBnsAUULdYqG84BHdTCew66+1n1iD5drvjO1 6OxJQTkSKUP6K50m9qV8vtFnONftI9AFTX/dR1EbX4F0m97u91x/3vqWZdlamlep XracW5stuNNQpdE7sS5ZeM9hYRJDTsl29Erwi2NTRwWuZhXtDcSC+PKgnufSpq6j XtaFVPKHu79Ke2+xf3SO/XpPCWcI+46a5K8HsYwx3kH9GTlf3bFfDFQjGKPD7pvQ vTPBbNRPZMPd4wkkof+dim/lnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4Cts1O ZSEY/NJ6j37OW2toXoVvMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYvFfthldRIuaZRTKJkJyyopgfEKJgp/1Rzg5fWB5i4IhCfQP1Wbxri5EPZmv xjgd2YBlAdgw+mFZFtn9x0JnTQ863q8mx9Zyl1THCmXtVwMgwH53MLRjGjoap5Nb lzYG8rGTSTnsOizdGOvHCMJMo13eHBA3vgTs1sIamYnwGGyAfo07dHx+M7K5atfc Yc3CVBS1TBm5NEh4A4CWOcMZI6PhByTe9+LCkIiwXDbfBjQA+z6kJoz1RPE9MYfl Srdr0v3fo+ZGkAtXR0Aq1mLlzAWQ5CTyEEbxkCLHZpl3NRKx63ix5quhlWEUiTX/ erBlB78qDbyuSUdK/xVqjmQyfg== -----END CERTIFICATE-----Generated at Sun Apr 5 23:50:53 2026 by rpki-client