$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: nBJweGOv4NB8tnL6q4R5wZD3bU2yfrzyPfrjk/5IpWg= Subject key identifier: 9F:AE:7B:5E:1E:41:BC:CF:49:9D:59:94:66:47:E4:95:E0:87:92:81 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 01B2 Signing time: Sun 05 Apr 2026 03:32:00 +0000 Manifest this update: Sun 05 Apr 2026 03:32:00 +0000 Manifest next update: Sun 12 Apr 2026 03:32:00 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: Ge/QcJOvob8hhHYTbcM+yqZHmt3ePaKrcd7FOsUlPgk=) 2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Apr 5 03:32:00 2026 GMT Not After : Apr 12 03:32:00 2026 GMT Subject: CN=69d1d7b0-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:a5:ea:40:ef:d9:d4:2a:dc:2b:19:ce:d8: b1:65:95:46:b9:b4:58:27:b3:35:43:a8:fa:a8:df: e9:48:e0:62:86:48:74:38:ba:c2:cf:c2:f0:36:21: e5:13:48:11:6c:f1:24:2e:f9:11:0b:1b:a1:6f:7a: d0:c0:2d:43:4b:15:85:59:3c:c2:24:ac:ed:ad:4f: 39:80:5d:f7:b2:49:ee:07:0e:32:93:c9:65:81:fc: 88:36:7d:fa:d2:95:6a:80:ca:c9:5b:2f:2d:1a:ae: 01:e2:81:08:57:f9:c9:9b:4c:f3:ec:0e:ce:e0:d8: 1b:11:2c:2c:93:67:b0:9b:8d:f5:55:20:d0:59:cc: 0a:d9:54:cf:6f:a6:1b:9d:c1:c9:1c:ef:18:72:20: 27:23:ed:e8:97:c5:ed:88:13:c6:ae:9b:f4:41:29: 79:9e:44:e9:92:69:78:4a:3d:b4:be:b9:2c:0d:bc: 89:46:d8:85:60:b0:c3:79:a5:77:00:f4:8b:20:77: b8:e1:00:97:eb:c1:f2:61:34:d7:1e:c1:f3:08:70: 12:6d:84:a9:7e:f8:ac:d5:52:c7:21:77:07:bc:5a: 3a:57:a0:0f:9d:fb:ce:0c:01:a7:b9:81:44:f2:bb: e0:ef:6e:57:26:94:34:68:f6:ef:a9:a3:3b:34:2d: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AE:7B:5E:1E:41:BC:CF:49:9D:59:94:66:47:E4:95:E0:87:92:81 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:bd:13:43:f9:fe:f0:88:90:74:a4:3d:c1:02:26:42:14: 57:40:8f:c1:18:ab:ab:e5:c5:b3:f6:c9:1d:29:3f:1d:9c:25: 0f:d6:13:2b:a2:5d:ea:29:a0:c6:6e:5c:a0:a1:1c:6f:37:71: b4:65:d4:3e:df:21:ad:13:9c:66:35:f4:d6:4c:da:a9:c5:8a: cf:85:55:ef:74:ea:ea:a9:f0:4a:9f:f2:70:0c:90:93:ce:c8: 99:57:2d:e9:01:23:bf:0e:8f:19:cf:55:dc:28:7f:a0:31:15: 51:13:69:8b:af:f0:f4:b1:ff:ab:00:cd:97:6f:c9:d7:ab:3a: e4:09:05:16:10:6b:d0:a1:f1:92:4e:f3:b4:cc:29:8d:a2:59: 32:7d:1e:1a:34:30:09:5a:bc:53:5b:24:4b:25:28:98:80:6b: 18:1e:22:ff:65:47:f0:9e:f7:7a:0d:51:89:8e:50:91:68:24: 49:e2:d4:86:f8:8f:10:65:7b:35:61:b9:0a:e8:a9:0a:ee:c1: 6f:66:18:09:6f:f2:e4:f8:b7:02:0f:4a:b3:7b:d3:84:a4:60: 3f:8d:83:79:6a:cb:1b:e4:5a:a4:07:11:c0:77:7e:be:57:74: 07:81:88:52:52:e0:0d:4e:80:9e:4e:4a:ff:cf:ca:78:2a:1b: 5a:33:43:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjYwNDA1MDMzMjAwWhcNMjYwNDEyMDMzMjAwWjAYMRYwFAYD VQQDEw02OWQxZDdiMC1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEGl6kDv2dQq3CsZztixZZVGubRYJ7M1Q6j6qN/pSOBihkh0OLrCz8LwNiHl E0gRbPEkLvkRCxuhb3rQwC1DSxWFWTzCJKztrU85gF33sknuBw4yk8llgfyINn36 0pVqgMrJWy8tGq4B4oEIV/nJm0zz7A7O4NgbESwsk2ewm431VSDQWcwK2VTPb6Yb ncHJHO8YciAnI+3ol8XtiBPGrpv0QSl5nkTpkml4Sj20vrksDbyJRtiFYLDDeaV3 APSLIHe44QCX68HyYTTXHsHzCHASbYSpfvis1VLHIXcHvFo6V6APnfvODAGnuYFE 8rvg725XJpQ0aPbvqaM7NC1o5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+ue14e QbzPSZ1ZlGZH5JXgh5KBMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHRq9E0P5/vCIkHSkPcECJkIUV0CPwRirq+XFs/bJHSk/HZwlD9YTK6Jd6img xm5coKEcbzdxtGXUPt8hrROcZjX01kzaqcWKz4VV73Tq6qnwSp/ycAyQk87ImVct 6QEjvw6PGc9V3Ch/oDEVURNpi6/w9LH/qwDNl2/J16s65AkFFhBr0KHxkk7ztMwp jaJZMn0eGjQwCVq8U1skSyUomIBrGB4i/2VH8J73eg1RiY5QkWgkSeLUhviPEGV7 NWG5CuipCu7Bb2YYCW/y5Pi3Ag9Ks3vThKRgP42DeWrLG+RapAcRwHd+vld0B4GI UlLgDU6Ank5K/8/KeCobWjND5A== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:40 2026 by rpki-client