$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json) Hash identifier: zHMs37e6RZ49BftjEdd29OJpybVAnQfVxeVRRtGYV4E= Subject key identifier: 2E:C9:ED:9F:73:A2:4F:A3:F2:DF:CE:37:40:D2:28:78:73:4F:BD:D7 Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft Manifest number: AF Signing time: Sun 05 Apr 2026 06:32:57 +0000 Manifest this update: Sun 05 Apr 2026 06:32:56 +0000 Manifest next update: Sun 12 Apr 2026 06:32:56 +0000 Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: yLNrbcEurYLJAtQVugP43BgM3Ax8bU9UZbfmWLni2gg=) 2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: QFbRVf66lkbe54l2PG3KMXf9eXUVn8c/LsTJGZHTzRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Validity Not Before: Apr 5 06:32:56 2026 GMT Not After : Apr 12 06:32:56 2026 GMT Subject: CN=69d20219-7bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:08:ed:46:31:9b:c6:fb:5d:59:e2:20:46: f1:63:23:52:85:8f:d3:a2:f3:de:27:b6:80:6b:c4: 0f:52:34:2b:4f:57:01:8e:36:fe:78:ee:3a:83:4a: 20:bb:48:77:55:11:f8:6b:18:5c:85:02:13:4f:46: 3f:4b:72:bb:d4:1f:e7:94:5e:4b:96:d5:51:57:a3: 71:0a:86:e6:43:a9:1f:75:7a:58:12:cf:74:00:da: 6d:f5:c6:4e:8c:75:57:74:66:7c:d7:e7:fc:22:82: 97:ac:43:db:ed:21:b7:e4:65:bb:ef:d4:6e:0a:81: a8:27:62:e1:a4:53:a5:7d:3a:7e:db:7b:47:7c:bc: dd:5c:dd:5e:c0:56:06:e6:d1:7f:20:62:be:ef:65: 30:9e:c5:e4:d8:15:b8:27:e2:89:cc:89:98:d0:0f: 45:b2:61:ff:ef:e1:4f:b0:fa:b1:c5:44:50:54:14: ab:85:c0:21:61:a6:bd:7b:88:96:02:13:a8:60:8a: ee:90:a8:ca:7c:49:fd:f7:5a:2d:35:ed:a1:29:1e: 86:20:7d:20:e7:b7:49:1e:4a:44:41:6e:e6:7d:be: ee:6d:ce:0e:f7:3a:3a:24:fc:67:f1:cd:e8:90:53: e3:2b:63:77:a3:98:ff:ca:43:9f:87:dc:77:27:13: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C9:ED:9F:73:A2:4F:A3:F2:DF:CE:37:40:D2:28:78:73:4F:BD:D7 X509v3 Authority Key Identifier: keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a5:7f:02:22:66:48:10:58:ba:2e:76:8a:46:6d:88:fe:cb: b6:5d:93:42:72:3e:33:cb:85:00:aa:a6:11:f3:70:2c:5c:3d: 94:a8:44:fc:c8:70:40:35:ac:21:a5:a2:25:8d:8d:46:43:16: b9:e7:a9:68:39:9f:45:34:70:44:20:77:c4:15:b8:44:5c:8c: 0f:74:de:ab:17:7d:b2:39:7a:52:39:4d:f6:75:35:df:7d:e9: 7e:f3:e5:bb:6a:b7:fc:61:7c:b3:3f:45:bf:1a:28:af:7f:0d: db:13:ef:38:1e:b9:44:1f:27:72:cb:37:b3:48:05:c9:ac:bc: 6e:b4:a0:d4:14:94:50:c2:b7:55:b1:d0:f2:a8:6d:40:2d:84: 2c:99:79:bf:2c:07:83:fa:7e:aa:49:cf:34:ef:ad:74:57:de: 8b:62:e1:7c:56:26:eb:e7:92:7c:80:65:c7:7f:40:f2:64:d3: 21:bb:03:4e:13:32:31:23:1a:b9:09:ac:6a:52:92:40:08:d1: 72:85:46:c1:f3:73:6e:b3:c6:a6:a7:0b:ff:22:ad:90:66:d0: 9a:d3:6b:a1:ed:2c:8a:ec:4f:b2:5f:e5:0e:28:6c:87:ec:25: 77:25:99:b7:2c:d4:0c:86:aa:cd:c2:18:06:d5:7b:5c:2f:85: 04:81:2e:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGRDkxMTAvBgNVBAUTKDk3MkI5MEQ5QzUxOTIyNTZBRDk2NDc1QjM5MkJBQjFB N0E3OUNDMkQwHhcNMjYwNDA1MDYzMjU2WhcNMjYwNDEyMDYzMjU2WjAYMRYwFAYD VQQDEw02OWQyMDIxOS03YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZcI7UYxm8b7XVniIEbxYyNShY/TovPeJ7aAa8QPUjQrT1cBjjb+eO46g0og u0h3VRH4axhchQITT0Y/S3K71B/nlF5LltVRV6NxCobmQ6kfdXpYEs90ANpt9cZO jHVXdGZ81+f8IoKXrEPb7SG35GW779RuCoGoJ2LhpFOlfTp+23tHfLzdXN1ewFYG 5tF/IGK+72UwnsXk2BW4J+KJzImY0A9FsmH/7+FPsPqxxURQVBSrhcAhYaa9e4iW AhOoYIrukKjKfEn991otNe2hKR6GIH0g57dJHkpEQW7mfb7ubc4O9zo6JPxn8c3o kFPjK2N3o5j/ykOfh9x3JxOv0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7J7Z9z ok+j8t/ON0DSKHhzT73XMB8GA1UdIwQYMBaAFJcrkNnFGSJWrZZHWzkrqxp6ecwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZEOS83RjlBNzAzNDJC QjUxMUYwOURFNUJBNEVDNEY5QUUwMi9seXVRMmNVWklsYXRsa2RiT1N1ckducDV6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x5dVEyY1VaSWxhdGxrZGJPU3VyR25wNXpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZEOS83RjlBNzAzNDJCQjUxMUYwOURFNUJBNEVDNEY5QUUwMi9seXVRMmNVWkls YXRsa2RiT1N1ckducDV6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa6V/AiJmSBBYui52ikZtiP7Ltl2TQnI+M8uFAKqmEfNwLFw9lKhE/MhwQDWs IaWiJY2NRkMWueepaDmfRTRwRCB3xBW4RFyMD3Teqxd9sjl6UjlN9nU1333pfvPl u2q3/GF8sz9Fvxoor38N2xPvOB65RB8ncss3s0gFyay8brSg1BSUUMK3VbHQ8qht QC2ELJl5vywHg/p+qknPNO+tdFfei2LhfFYm6+eSfIBlx39A8mTTIbsDThMyMSMa uQmsalKSQAjRcoVGwfNzbrPGpqcL/yKtkGbQmtNroe0siuxPsl/lDihsh+wldyWZ tyzUDIaqzcIYBtV7XC+FBIEuOA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:58 2026 by rpki-client