$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: yeb8vMn54wlCcd+gyfZsrPAMD99TeyWHdc+8hFD2ceA= Subject key identifier: ED:EF:C8:A1:AE:B0:55:FC:2D:A0:19:75:C5:33:85:F4:FC:29:E7:FF Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: 0132 Signing time: Sun 05 Apr 2026 05:56:37 +0000 Manifest this update: Sun 05 Apr 2026 05:56:37 +0000 Manifest next update: Sun 12 Apr 2026 05:56:37 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: NBssVSqRwPXmlc0YMYPFjEMrfJS0moc/HV/MZCrgV9M=) 2: F526E31C122011F1ACA5537B1D3D8C67.roa (hash: enStohQFnFb+r0zk+PqrIbAeF36NZLUhIXYRdDD2ymg=) 3: 4E9801F4122311F1A005593E1F3D8C67.roa (hash: 9NUw/Vlq1cG4rvMjm7Tf+mY/SPVFiZPsiEtV3MAG4ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Apr 5 05:56:37 2026 GMT Not After : Apr 12 05:56:37 2026 GMT Subject: CN=69d1f995-c7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:ff:bd:0a:fd:0a:2e:54:56:20:43:09:05: 14:1a:88:dd:e6:5f:b8:85:18:dd:72:b3:87:fc:ae: 2e:1b:a3:8f:b7:c5:a7:40:1b:99:8b:23:4c:57:ca: 86:ef:47:fc:6d:e9:e8:ed:0c:3d:5b:55:2b:15:22: 2e:ec:a7:7d:6c:61:0a:92:06:6c:d0:57:e5:a6:d0: f6:82:ac:d0:2b:62:3e:50:f0:39:ed:06:29:c3:3c: be:05:bf:63:22:3c:76:b5:14:6d:42:f3:bf:69:bf: b4:ea:91:34:01:e7:c8:cf:d3:47:4d:5d:5c:cd:ef: 8a:31:47:bc:ca:88:5b:eb:2f:99:8c:51:d8:68:2f: eb:47:78:db:a9:3e:66:14:34:3c:ca:80:18:7c:3f: 5b:0d:fe:cb:2f:b6:f7:3f:55:b6:1d:b5:18:25:4d: e9:99:f8:18:5f:d9:47:f2:31:7a:fc:1b:bc:a7:c5: ce:6d:45:03:2f:bd:c1:40:12:c9:e6:58:4e:d7:de: 8f:d8:98:6e:49:f1:70:6e:ef:3f:ef:5c:d6:67:6d: 70:da:cc:d1:bb:f7:be:a0:a2:af:ac:1d:5c:3c:b1: 86:6c:82:92:30:42:ca:82:a4:3b:ac:2c:19:12:6f: 1c:13:5b:85:ae:f3:7b:ee:9b:f3:09:c9:a3:a5:51: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EF:C8:A1:AE:B0:55:FC:2D:A0:19:75:C5:33:85:F4:FC:29:E7:FF X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:b6:52:10:4c:5c:ec:a6:2a:65:c8:e6:95:db:f7:66:a7:6a: 19:a0:ee:49:35:14:d9:23:58:3c:21:6d:f6:f7:7e:fc:3e:0d: 63:69:4f:3e:b0:e3:4d:df:29:37:2b:8b:9c:40:5b:82:3c:35: b6:e1:a1:42:36:08:bb:9a:72:97:88:12:c9:3f:8c:b8:fa:d1: a2:9f:68:fe:22:88:da:dd:0a:73:4f:82:d3:3e:74:e7:8d:24: 61:8c:50:cd:15:e5:62:95:e1:c3:e8:4e:ad:c8:1c:ee:27:e2: d1:fa:6b:20:5c:84:61:1c:78:eb:18:50:6c:1a:05:df:e8:e3: 34:c4:6e:54:22:6d:eb:65:42:b5:e7:27:b4:d6:cf:bc:7f:ca: ac:1c:13:b0:78:15:2e:a6:2a:81:7f:cb:02:f0:81:eb:6c:85: e9:77:dc:d7:18:a7:d3:8b:8d:66:e6:19:57:5c:ae:c6:47:67: 93:ad:36:fe:38:7c:87:3a:3e:b2:47:1b:e2:c7:c1:dd:20:47: 10:5d:81:2e:1e:ec:5a:d5:6d:d5:20:47:cb:04:7e:ee:d5:ec: e8:7a:58:96:38:03:4f:b9:26:78:24:90:11:c7:8b:93:c2:e4: 8c:ea:88:26:41:8d:1a:55:d1:b1:f1:3e:19:85:45:70:61:27: bd:54:5f:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw NzcwRTI5MEQwHhcNMjYwNDA1MDU1NjM3WhcNMjYwNDEyMDU1NjM3WjAYMRYwFAYD VQQDEw02OWQxZjk5NS1jN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qn/vQr9Ci5UViBDCQUUGojd5l+4hRjdcrOH/K4uG6OPt8WnQBuZiyNMV8qG 70f8beno7Qw9W1UrFSIu7Kd9bGEKkgZs0FflptD2gqzQK2I+UPA57QYpwzy+Bb9j Ijx2tRRtQvO/ab+06pE0AefIz9NHTV1cze+KMUe8yohb6y+ZjFHYaC/rR3jbqT5m FDQ8yoAYfD9bDf7LL7b3P1W2HbUYJU3pmfgYX9lH8jF6/Bu8p8XObUUDL73BQBLJ 5lhO196P2JhuSfFwbu8/71zWZ21w2szRu/e+oKKvrB1cPLGGbIKSMELKgqQ7rCwZ Em8cE1uFrvN77pvzCcmjpVF8xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3vyKGu sFX8LaAZdcUzhfT8Kef/MB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX bmhQaHo5RmhzZllIY09LUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAubZSEExc7KYqZcjmldv3ZqdqGaDuSTUU2SNYPCFt9vd+/D4NY2lPPrDjTd8p NyuLnEBbgjw1tuGhQjYIu5pyl4gSyT+MuPrRop9o/iKI2t0Kc0+C0z50540kYYxQ zRXlYpXhw+hOrcgc7ifi0fprIFyEYRx46xhQbBoF3+jjNMRuVCJt62VCtecntNbP vH/KrBwTsHgVLqYqgX/LAvCB62yF6Xfc1xin04uNZuYZV1yuxkdnk602/jh8hzo+ skcb4sfB3SBHEF2BLh7sWtVt1SBHywR+7tXs6HpYljgDT7kmeCSQEceLk8LkjOqI JkGNGlXRsfE+GYVFcGEnvVRf0w== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:01 2026 by rpki-client