$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft File: LThammVNvyfyEuUykzG0AdAlKDo.mft (raw, json) Hash identifier: gG5rR016SSVPh5ZJyFReZRpNnTV9Wf50tohTLEsGtxg= Subject key identifier: FC:15:D5:4D:E3:92:8E:F9:A6:C0:23:3C:94:C7:24:61:F1:84:E9:D6 Authority key identifier: 2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A Certificate issuer: /CN=A9178AFC/serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft Manifest number: 1D Signing time: Sun 05 Apr 2026 08:17:24 +0000 Manifest this update: Sun 05 Apr 2026 08:17:23 +0000 Manifest next update: Sun 12 Apr 2026 08:17:23 +0000 Files and hashes: 1: LThammVNvyfyEuUykzG0AdAlKDo.crl (hash: JoBSAWeBCQA/BSnj5TYG/DxmaaF3w+Gl23QxTEi/ajw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Validity Not Before: Apr 5 08:17:23 2026 GMT Not After : Apr 12 08:17:23 2026 GMT Subject: CN=69d21a94-b5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:bb:ce:15:65:6e:96:18:b0:0e:e8:e0:0a: 27:df:77:8a:93:d5:d5:ae:b9:b3:0a:80:3c:6c:57: 6d:15:cb:77:a6:c3:ae:cd:35:40:d1:20:36:92:0f: ff:cb:95:b9:41:fe:b2:68:14:dc:63:ab:ee:92:fb: 2d:d7:eb:68:79:87:54:46:e5:cd:40:b2:10:75:9c: 6c:b6:ab:bf:9d:e4:e5:d5:13:d1:f0:2f:a1:e5:03: a5:2f:e0:37:1f:46:6a:b6:c4:c5:a4:0c:6c:7b:6f: 46:94:97:86:e3:d2:80:c2:71:3c:00:19:0d:2d:2e: 33:a8:0d:4f:5d:f1:ed:3a:75:5e:47:92:72:1a:a9: f8:9b:ac:d7:76:40:1d:f1:38:bc:db:e4:29:08:9f: b8:01:6a:72:cd:3b:29:84:65:d9:d2:31:36:8e:72: 03:e8:7f:e5:c1:87:68:e5:1b:18:ef:55:0e:f5:02: f2:66:50:a9:45:70:b4:82:9e:a3:de:39:2e:d2:ff: d0:0d:b7:8a:ca:c9:5a:1c:f9:98:dc:5e:26:b4:14: cf:79:a1:f2:66:8f:3e:02:0d:c4:51:79:49:aa:56: c3:50:cc:b6:d8:7c:d7:17:56:4d:72:52:df:c0:6e: f5:13:73:46:58:46:22:d1:2c:61:36:d3:82:ee:81: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:D5:4D:E3:92:8E:F9:A6:C0:23:3C:94:C7:24:61:F1:84:E9:D6 X509v3 Authority Key Identifier: keyid:2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:78:ac:c8:52:53:8d:d7:6c:b3:47:b4:f3:d0:74:39:cb:b5: 4d:f9:73:d3:cd:17:93:0d:31:4e:34:d8:35:17:6a:54:76:69: 9c:cc:25:fc:bb:dd:9b:07:16:08:5a:e0:45:d8:c8:8c:5a:a1: 88:f0:c3:a3:1c:42:b7:7a:e2:7a:18:49:c6:20:fb:3b:46:30: 84:0f:80:d7:9f:f7:6a:2c:e9:b3:a4:60:f3:0b:9b:fc:f8:63: 7f:7f:5f:08:e8:3a:f1:0b:64:70:27:9b:c9:52:40:a7:51:77: f3:ab:fd:59:3b:5f:6b:c7:74:d7:a1:88:bb:5c:b3:76:56:44: 2b:da:30:f7:bd:64:44:0d:c9:47:6c:05:4c:5e:bf:9f:5c:7d: 78:91:d8:24:c1:56:dd:d6:8a:dc:aa:30:35:a9:91:48:e3:31: 35:f7:a0:da:2d:aa:4c:bf:7e:44:48:9c:6a:ea:89:46:54:44: b3:f6:e0:38:4a:b1:99:5c:ba:25:43:64:87:72:ac:a1:83:41: 88:9f:e9:b5:c7:28:1a:58:42:13:6f:c6:b5:30:3c:a7:fa:b9: b5:2e:67:15:84:da:9c:a6:8f:76:4b:4d:a7:19:41:9f:0d:46: f9:9e:c4:9b:f7:e0:cb:7b:6c:43:f5:8c:f0:c5:e7:91:5d:af: 66:85:f2:13 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoMkQzODVBOUE2NTREQkYyN0YyMTJFNTMyOTMzMUI0MDFE MDI1MjgzQTAeFw0yNjA0MDUwODE3MjNaFw0yNjA0MTIwODE3MjNaMBgxFjAUBgNV BAMTDTY5ZDIxYTk0LWI1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWIrvOFWVulhiwDujgCiffd4qT1dWuubMKgDxsV20Vy3emw67NNUDRIDaSD//L lblB/rJoFNxjq+6S+y3X62h5h1RG5c1AshB1nGy2q7+d5OXVE9HwL6HlA6Uv4Dcf Rmq2xMWkDGx7b0aUl4bj0oDCcTwAGQ0tLjOoDU9d8e06dV5HknIaqfibrNd2QB3x OLzb5CkIn7gBanLNOymEZdnSMTaOcgPof+XBh2jlGxjvVQ71AvJmUKlFcLSCnqPe OS7S/9ANt4rKyVoc+ZjcXia0FM95ofJmjz4CDcRReUmqVsNQzLbYfNcXVk1yUt/A bvUTc0ZYRiLRLGE204LugUpDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/BXVTeOS jvmmwCM8lMckYfGE6dYwHwYDVR0jBBgwFoAULThammVNvyfyEuUykzG0AdAlKDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzI5MjFEMUQ0MEZE QTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlmeUV1VXlrekcwQWRBbEtE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFRoYW1tVk52eWZ5RXVVeWt6RzBBZEFsS0RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzI5MjFEMUQ0MEZEQTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlm eUV1VXlrekcwQWRBbEtEby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9eKzIUlON12yzR7Tz0HQ5y7VN+XPTzReTDTFONNg1F2pUdmmczCX8u92bBxYI WuBF2MiMWqGI8MOjHEK3euJ6GEnGIPs7RjCED4DXn/dqLOmzpGDzC5v8+GN/f18I 6DrxC2RwJ5vJUkCnUXfzq/1ZO19rx3TXoYi7XLN2VkQr2jD3vWREDclHbAVMXr+f XH14kdgkwVbd1orcqjA1qZFI4zE196DaLapMv35ESJxq6olGVESz9uA4SrGZXLol Q2SHcqyhg0GIn+m1xygaWEITb8a1MDyn+rm1LmcVhNqcpo92S02nGUGfDUb5nsSb 9+DLe2xD9YzwxeeRXa9mhfIT -----END CERTIFICATE-----Generated at Sun Apr 5 19:37:43 2026 by rpki-client