$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft File: lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json) Hash identifier: yGZ4RvqcIT1JH/CNn7hfl00Q/pFPK7yRngH10TNK/J4= Subject key identifier: BE:6B:A5:FD:85:EB:47:D0:62:DF:D4:68:5F:6C:98:8F:C9:9C:74:4E Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft Manifest number: 07 Signing time: Sun 05 Apr 2026 08:32:39 +0000 Manifest this update: Sun 05 Apr 2026 08:32:39 +0000 Manifest next update: Sun 12 Apr 2026 08:32:39 +0000 Files and hashes: 1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: 3cBEY4sFAmgTpTH8kZpQomYos6tcrsPGbaEeo0t4atA=) 2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Validity Not Before: Apr 5 08:32:39 2026 GMT Not After : Apr 12 08:32:39 2026 GMT Subject: CN=69d21e27-d6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:59:f8:3d:62:64:e2:b3:ee:69:2e:4f:ab: 96:66:5f:b0:94:95:3f:c6:f9:a6:b7:fe:58:32:35: 9d:3e:94:b7:44:e0:75:4a:b5:c4:a7:2a:14:cb:02: 53:91:3e:b3:70:c8:79:de:63:58:77:fe:de:bb:79: 41:09:4c:ba:1b:93:0c:63:6b:81:3f:1f:0b:28:e4: 57:5d:f8:e7:1a:32:3d:b0:4b:ed:1a:0e:f5:e4:19: d3:3b:cc:8a:d5:1e:d4:b3:75:12:97:5d:8a:14:fa: a6:4c:b1:2b:4e:41:66:46:4d:be:9f:b1:73:dc:27: 00:ac:7a:02:5f:d1:a7:04:5c:41:20:7b:f8:a2:b1: dd:0f:86:b6:b9:22:93:bc:69:31:b5:0a:0e:fa:af: 83:04:4b:e4:80:e8:27:20:1d:d7:b8:2f:52:e9:03: ca:ad:dc:02:11:d4:48:ae:4e:12:37:83:39:8e:82: 86:a2:34:8a:a4:8e:d9:e1:4e:95:48:d6:3d:9d:bd: 87:0e:d4:9c:92:54:74:f3:59:78:61:18:ce:51:15: 3f:97:43:f7:39:3e:68:f2:98:d6:e2:6b:d2:6b:98: 82:e7:7e:59:20:a8:ca:96:2e:45:bc:2a:e8:78:6c: 4a:e3:3a:30:ee:ff:06:3e:da:f5:e3:47:9c:ef:ae: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6B:A5:FD:85:EB:47:D0:62:DF:D4:68:5F:6C:98:8F:C9:9C:74:4E X509v3 Authority Key Identifier: keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:f5:41:76:cd:a7:bc:06:30:8b:04:d6:84:ba:e0:67:45: 03:c0:44:fc:e1:8d:ba:e3:bc:dc:cd:7c:76:56:5c:ea:27:ca: bb:12:98:4c:dd:1c:77:6c:61:26:4c:97:c2:6d:84:1c:3b:22: 22:25:d2:cb:ee:f4:16:21:de:e2:36:0c:f5:25:c0:94:61:ec: 28:aa:15:87:e3:86:ee:04:61:76:56:d9:45:38:47:50:47:25: 2b:b5:de:45:f2:50:6f:3c:37:28:f1:9c:d2:a8:7b:99:4d:ef: 7a:ff:c0:8d:e8:53:3f:41:99:cd:72:ef:68:19:40:a9:ec:73: f2:3f:7a:d3:a4:f9:8a:1f:c5:8a:6f:11:41:10:21:37:0c:44: 63:14:b6:26:74:68:8c:03:7c:c8:13:fd:36:df:6f:75:5f:33: e7:da:8f:91:78:94:f3:73:fb:80:31:22:ac:a0:1a:79:ad:1f: e5:5f:9c:7b:29:d2:58:d4:2e:af:1a:09:bd:a1:39:4b:c8:48: e0:3c:ce:38:72:29:e2:3d:a1:83:55:ce:6d:9b:26:73:af:2d: c1:05:b5:e9:5d:a9:be:69:e7:70:f0:b9:7e:87:e2:da:4f:cf: e3:cf:9d:f5:d5:52:7f:10:f8:40:6d:09:00:07:de:a1:95:de: b7:b8:4f:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz OUU5QUQwRjAeFw0yNjA0MDUwODMyMzlaFw0yNjA0MTIwODMyMzlaMBgxFjAUBgNV BAMTDTY5ZDIxZTI3LWQ2YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRUln4PWJk4rPuaS5Pq5ZmX7CUlT/G+aa3/lgyNZ0+lLdE4HVKtcSnKhTLAlOR PrNwyHneY1h3/t67eUEJTLobkwxja4E/Hwso5Fdd+OcaMj2wS+0aDvXkGdM7zIrV HtSzdRKXXYoU+qZMsStOQWZGTb6fsXPcJwCsegJf0acEXEEge/iisd0Phra5IpO8 aTG1Cg76r4MES+SA6CcgHde4L1LpA8qt3AIR1EiuThI3gzmOgoaiNIqkjtnhTpVI 1j2dvYcO1JySVHTzWXhhGM5RFT+XQ/c5PmjymNbia9JrmILnflkgqMqWLkW8Kuh4 bErjOjDu/wY+2vXjR5zvroBtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvmul/YXr R9Bi39RoX2yYj8mcdE4wHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NUMzLzJCQjJCQjI2MkNEQTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1f bzgxNW83Q1ZVR0RucHJROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChfPVBds2nvAYwiwTWhLrgZ0UDwET84Y2647zczXx2VlzqJ8q7EphM3Rx3bGEm TJfCbYQcOyIiJdLL7vQWId7iNgz1JcCUYewoqhWH44buBGF2VtlFOEdQRyUrtd5F 8lBvPDco8ZzSqHuZTe96/8CN6FM/QZnNcu9oGUCp7HPyP3rTpPmKH8WKbxFBECE3 DERjFLYmdGiMA3zIE/023291XzPn2o+ReJTzc/uAMSKsoBp5rR/lX5x7KdJY1C6v Ggm9oTlLyEjgPM44ciniPaGDVc5tmyZzry3BBbXpXam+aedw8Ll+h+LaT8/jz531 1VJ/EPhAbQkAB96hld63uE82 -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:48 2026 by rpki-client