$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: hO5hyVkExHz4d5twUD3OS+5Gb+DLd3AauvOwc7moG64= Subject key identifier: 62:68:85:28:3B:37:93:8B:9D:CD:D5:E0:E3:E0:57:CF:A2:0E:6A:2B Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 01B6 Signing time: Sun 05 Apr 2026 03:26:08 +0000 Manifest this update: Sun 05 Apr 2026 03:26:08 +0000 Manifest next update: Sun 12 Apr 2026 03:26:08 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: WSzdWxsEJvTGy9T4seCGkuAddf2y4F1LXDlqOVivslI=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 0KtoQs3ZoY6PT4dwxV6hf2YTYqT+rVXqQSGuTHbMQFg=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Apr 5 03:26:08 2026 GMT Not After : Apr 12 03:26:08 2026 GMT Subject: CN=69d1d650-43c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:61:7f:5f:f8:49:cf:bc:19:7c:de:1d:a2: 0f:82:88:91:01:27:e1:73:82:83:2a:18:a1:2d:87: 2d:29:3b:f7:78:a1:d1:64:21:3d:ed:70:14:b7:4b: 12:58:bf:0f:37:90:ae:9a:05:c3:0d:9c:6e:b6:09: 30:04:c7:a0:11:ad:40:d1:72:cf:17:91:a7:af:52: 40:4c:d7:a6:b2:ed:09:33:b7:cc:d8:82:69:bf:15: 90:0a:4b:1e:06:ad:7c:a1:28:9d:49:13:96:db:ee: f4:d1:dd:23:b2:ee:4a:63:6e:67:34:ca:76:43:65: be:9d:94:51:77:63:a4:7c:06:b2:2d:56:af:fd:fa: c0:6c:eb:39:93:ab:f2:05:3e:40:7b:31:5c:fd:5a: 2d:c3:61:69:52:73:0b:d4:71:44:c8:90:32:53:70: 83:54:48:d5:9b:45:98:96:16:4b:d3:c6:a2:c9:d7: e0:5e:b5:26:d6:a2:58:36:74:a0:d1:01:6e:db:59: ea:25:e4:aa:52:6c:22:dd:61:5e:67:75:8f:5f:00: 4a:d9:7a:73:4f:05:c5:9e:15:8c:93:72:1b:db:06: 4a:e0:2c:11:45:5c:b4:80:99:3c:34:4a:d0:10:30: 6d:b2:70:1d:77:aa:a7:99:eb:1f:ff:f5:24:19:c8: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:85:28:3B:37:93:8B:9D:CD:D5:E0:E3:E0:57:CF:A2:0E:6A:2B X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6f:11:44:b9:f3:49:7a:c8:91:ac:33:44:5d:30:15:3b:0f: 49:cd:22:1f:29:e4:97:be:b5:b8:46:e7:d2:6b:f7:6b:2f:eb: 37:e7:84:0c:93:93:89:a4:42:d6:d0:80:37:44:d4:40:9a:e6: ef:17:c0:3d:27:2c:e8:8e:75:a4:c5:84:c9:a0:12:2d:20:24: 39:4d:54:5e:49:2f:4b:85:9b:00:6e:cf:2d:21:d7:a1:f8:2b: 15:c3:ff:97:7a:23:51:3c:20:57:cf:1a:b6:c2:c3:6b:88:c1: 53:18:f1:8a:a7:85:ad:67:5a:1a:70:7b:0d:7b:e9:ae:d9:98: d4:fe:9e:d2:f8:52:a2:15:30:3f:13:5a:ed:28:d8:63:c7:d9: fb:4c:22:e9:f2:2b:a7:af:df:ba:74:7b:11:f1:b8:3f:6a:32: 10:bd:6f:15:93:34:23:e3:66:95:ca:77:cd:9c:88:c9:2e:ac: 72:16:c7:26:59:cd:cc:1e:66:3d:0a:c5:2d:9b:6a:32:e5:36: 1b:ff:4e:21:27:a2:8b:ce:66:44:89:64:f3:af:f7:3c:00:18: c0:75:0e:38:eb:65:b6:17:ca:c2:ba:f2:ea:ca:22:9f:bd:4c: 1f:b6:f9:eb:79:87:82:98:1f:7d:cf:86:98:dd:5f:7d:d2:1c: 60:5f:a4:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYwNDA1MDMyNjA4WhcNMjYwNDEyMDMyNjA4WjAYMRYwFAYD VQQDEw02OWQxZDY1MC00M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygthf1/4Sc+8GXzeHaIPgoiRASfhc4KDKhihLYctKTv3eKHRZCE97XAUt0sS WL8PN5CumgXDDZxutgkwBMegEa1A0XLPF5Gnr1JATNemsu0JM7fM2IJpvxWQCkse Bq18oSidSROW2+700d0jsu5KY25nNMp2Q2W+nZRRd2OkfAayLVav/frAbOs5k6vy BT5AezFc/Votw2FpUnML1HFEyJAyU3CDVEjVm0WYlhZL08aiydfgXrUm1qJYNnSg 0QFu21nqJeSqUmwi3WFeZ3WPXwBK2XpzTwXFnhWMk3Ib2wZK4CwRRVy0gJk8NErQ EDBtsnAdd6qnmesf//UkGcgVXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJohSg7 N5OLnc3V4OPgV8+iDmorMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEm8RRLnzSXrIkawzRF0wFTsPSc0iHynkl761uEbn0mv3ay/rN+eEDJOTiaRC 1tCAN0TUQJrm7xfAPScs6I51pMWEyaASLSAkOU1UXkkvS4WbAG7PLSHXofgrFcP/ l3ojUTwgV88atsLDa4jBUxjxiqeFrWdaGnB7DXvprtmY1P6e0vhSohUwPxNa7SjY Y8fZ+0wi6fIrp6/funR7EfG4P2oyEL1vFZM0I+Nmlcp3zZyIyS6schbHJlnNzB5m PQrFLZtqMuU2G/9OISeii85mRIlk86/3PAAYwHUOOOtlthfKwrry6soin71MH7b5 63mHgpgffc+GmN1ffdIcYF+kmw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:58 2026 by rpki-client