$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: QNWQ4pPST6MGAiAfBLwFgRMTr0wkys62MIxYar3OhG4= Subject key identifier: 24:B3:22:CA:B5:6F:84:8D:D4:6A:99:30:9E:F9:1D:FA:99:67:22:6C Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0D0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0CEF Signing time: Sat 04 Apr 2026 18:04:03 +0000 Manifest this update: Sat 04 Apr 2026 18:04:03 +0000 Manifest next update: Sat 11 Apr 2026 18:04:03 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: C+2HV2Ggo5C2K1QxKUticbq75VoCOOiKKNHxoUK3oEY=) 2: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: OGh3gB84SgLrNeV+oSTQFAGbvx7CV+eo340xHFNcHRk=) 3: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: pMrtGOs7uT1vXLuw6dCiCU+QFLRT1Z3tUfJSisugmVg=) 4: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: AZJ9Ikn6w4HKM1tU6KflkZ7ElKv1SQQyJlfS833ElRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Apr 4 18:04:03 2026 GMT Not After : Apr 11 18:04:03 2026 GMT Subject: CN=69d15293-c910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:df:d8:8b:4f:b7:d4:8d:8d:44:f1:bc:c1: 8d:be:87:aa:1a:10:5f:7e:1a:79:b2:2f:e3:f3:2a: f2:8e:af:8c:4a:91:3e:f0:46:25:15:d3:95:4f:47: 87:39:51:f4:a0:56:09:e9:bc:e1:40:61:89:17:db: 1f:fa:46:61:00:93:02:4d:a7:e7:07:85:a3:db:bc: 82:c2:f7:f4:b0:96:12:cd:c5:b6:42:d6:62:85:14: 9e:3f:f4:64:93:f5:46:41:4a:82:3e:1d:c4:97:7b: 74:7c:ab:94:eb:78:50:e7:04:a5:9e:fd:e5:eb:11: d8:a8:a8:98:66:a4:99:a8:d7:f6:3c:1f:52:69:b4: 7f:18:d9:53:ee:73:0e:94:8d:3d:8f:c8:b6:99:a0: bc:ea:8e:59:58:26:43:82:4d:83:90:c7:dd:2a:4c: 8f:1f:91:15:20:20:0c:94:96:a7:59:03:7c:21:81: 78:9a:23:01:61:b9:ae:6d:b5:23:b1:44:a4:5d:c5: 57:1f:b5:6c:c7:a6:7f:c5:a0:a7:06:e1:ed:c5:b5: ad:d2:8c:93:eb:ae:cc:73:8d:17:4e:24:68:4c:41: 1e:27:a9:9a:84:70:f1:e7:53:e4:92:5d:56:46:13: 42:58:bc:c3:e8:a3:9c:07:4e:aa:88:52:95:68:93: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B3:22:CA:B5:6F:84:8D:D4:6A:99:30:9E:F9:1D:FA:99:67:22:6C X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:a7:7d:9a:95:e3:cd:93:98:73:11:66:6f:99:e1:9c:7b: 92:bb:12:b2:a0:b1:8f:c4:6f:81:d4:fe:30:ba:9c:4c:e7:f8: 89:58:97:ff:4c:50:1f:c4:55:29:74:8a:f0:65:b9:25:f0:7c: 00:96:70:4e:03:c7:80:61:b2:51:68:b2:80:25:a2:50:9f:06: e1:fc:f5:55:47:48:72:b6:42:67:ff:fa:82:49:09:40:2c:a2: 68:64:eb:ff:03:c4:1b:ad:5e:2f:4b:0a:6d:71:8b:06:9a:8c: c5:1f:8c:9b:4e:70:35:b9:77:40:ed:f3:ec:02:ca:9e:10:c2: da:4c:b3:58:dc:ea:31:ee:69:eb:45:3e:98:9e:f8:2d:a9:cb: 9a:25:bf:ac:8f:a5:0f:33:86:3c:b5:ad:48:19:d2:a2:6f:4c: 54:04:3a:60:ad:91:b7:82:5a:2a:35:8d:b4:91:d5:7a:bb:9c: b4:28:ec:91:9e:bd:8c:2d:f2:75:32:09:e3:e6:7b:37:2d:34: 44:7a:9b:b2:65:63:b8:35:93:8d:0b:e2:d0:39:72:1c:9b:8b: 82:f5:5d:db:d5:1a:b8:3c:35:62:7a:8b:95:d5:3b:38:4d:56: 81:6b:5c:5c:3c:93:93:68:42:99:92:af:0a:fc:22:d5:c9:23: 20:dc:95:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjYwNDA0MTgwNDAzWhcNMjYwNDExMTgwNDAzWjAYMRYwFAYD VQQDEw02OWQxNTI5My1jOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8Tf2ItPt9SNjUTxvMGNvoeqGhBffhp5si/j8yryjq+MSpE+8EYlFdOVT0eH OVH0oFYJ6bzhQGGJF9sf+kZhAJMCTafnB4Wj27yCwvf0sJYSzcW2QtZihRSeP/Rk k/VGQUqCPh3El3t0fKuU63hQ5wSlnv3l6xHYqKiYZqSZqNf2PB9SabR/GNlT7nMO lI09j8i2maC86o5ZWCZDgk2DkMfdKkyPH5EVICAMlJanWQN8IYF4miMBYbmubbUj sUSkXcVXH7Vsx6Z/xaCnBuHtxbWt0oyT667Mc40XTiRoTEEeJ6mahHDx51Pkkl1W RhNCWLzD6KOcB06qiFKVaJP4DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSzIsq1 b4SN1GqZMJ75HfqZZyJsMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhh6nfZqV482TmHMRZm+Z4Zx7krsSsqCxj8RvgdT+MLqcTOf4iViX/0xQH8RV KXSK8GW5JfB8AJZwTgPHgGGyUWiygCWiUJ8G4fz1VUdIcrZCZ//6gkkJQCyiaGTr /wPEG61eL0sKbXGLBpqMxR+Mm05wNbl3QO3z7ALKnhDC2kyzWNzqMe5p60U+mJ74 LanLmiW/rI+lDzOGPLWtSBnSom9MVAQ6YK2Rt4JaKjWNtJHVeructCjskZ69jC3y dTIJ4+Z7Ny00RHqbsmVjuDWTjQvi0DlyHJuLgvVd29UauDw1YnqLldU7OE1WgWtc XDyTk2hCmZKvCvwi1ckjINyVIg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:26 2026 by rpki-client