$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json) Hash identifier: kB0i2X9DYLSETjM/l9scAiCRfjvh0Ham1NpcnXyV5UM= Subject key identifier: 11:BB:29:F6:CF:B5:97:35:80:1C:7E:15:88:A3:89:3A:CA:0A:F3:B6 Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft Manifest number: 3C Signing time: Sun 05 Apr 2026 07:49:47 +0000 Manifest this update: Sun 05 Apr 2026 07:49:46 +0000 Manifest next update: Sun 12 Apr 2026 07:49:46 +0000 Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: YZtgYhh/yoyJ0SepIytOEycmIq1wEDGRrMFVgz6hfM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Validity Not Before: Apr 5 07:49:46 2026 GMT Not After : Apr 12 07:49:46 2026 GMT Subject: CN=69d2141b-fa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:c7:86:06:f7:97:1d:7a:f1:ed:71:ab:f5: 0f:94:43:df:a1:23:f9:2f:12:cb:7d:97:bb:15:e4: b5:7b:08:e4:db:d6:af:2f:18:3a:4b:e6:f0:0b:51: 9c:f0:ae:78:b7:4f:c1:24:db:d2:36:39:cb:ee:93: 11:66:a9:1e:0d:27:d7:9a:94:04:53:e5:79:b6:29: 67:8b:3d:ac:c8:ee:f1:d2:98:2e:59:18:ff:aa:a4: 9f:4c:b6:1a:57:c1:97:ea:8a:ba:28:07:c4:5c:d8: 88:75:fc:6b:c9:86:cd:69:2b:f7:84:71:6d:7a:f8: 0c:33:3c:9d:b8:0d:a5:69:29:84:95:d2:5e:03:8f: f6:c6:bc:ae:e7:17:dd:6d:49:dc:d4:25:f9:16:7a: a7:bc:1e:7d:25:bc:d7:3c:c6:d2:d5:0b:30:56:69: cf:bd:cd:9f:f1:c9:fd:a9:12:b9:a1:24:4b:e7:64: ae:de:e2:bf:94:bc:18:0e:e0:c6:03:d6:d4:37:8a: 32:37:21:13:a1:9d:04:02:08:85:dc:e1:32:e5:50: 70:5b:67:a3:22:4c:1b:3e:9c:db:48:91:0f:03:03: 2a:d1:7d:20:0c:8c:6d:5f:4c:66:40:c5:0a:e0:4e: 91:ad:9e:95:4b:e1:78:9a:7f:cc:cd:dd:70:54:df: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BB:29:F6:CF:B5:97:35:80:1C:7E:15:88:A3:89:3A:CA:0A:F3:B6 X509v3 Authority Key Identifier: keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:08:58:de:c4:10:1d:6c:7f:98:ed:61:69:5e:69:21:14:4f: bd:fb:3b:f3:46:73:17:59:89:78:90:12:d7:ea:4f:96:35:54: e8:22:04:27:0a:d9:8d:14:f1:7b:48:5f:14:5d:cd:44:7b:f7: d0:3c:87:12:ed:25:2d:ed:ee:73:2b:03:70:05:cc:27:4f:45: a8:e7:93:5a:2f:76:d6:34:74:a0:5b:f7:66:0a:32:1b:fd:fc: 65:42:d9:2f:d1:60:e6:01:61:d3:a8:df:6a:4f:d5:65:d7:da: 14:12:d7:98:fa:06:64:8b:9c:19:b0:66:97:7b:60:8e:95:10: 4e:a9:05:92:ef:f6:ee:9d:31:24:87:4a:57:46:30:7e:80:0a: bc:7d:4b:f0:2e:fd:5d:4e:75:0a:b4:17:8e:15:cb:41:77:95: f9:10:f3:65:f7:34:5b:35:f6:a7:93:8a:4a:ff:06:6e:31:8a: e9:c5:45:66:ab:d6:bd:8e:a0:34:7c:d4:a7:47:b0:80:b9:a5: e1:73:84:b2:37:db:ca:c1:a1:fc:73:87:89:ef:75:67:a5:40: aa:51:90:90:f6:91:04:88:74:ac:8f:da:0a:a8:54:c1:d6:49: 22:6b:16:bd:a2:6b:6f:12:a2:50:80:b6:24:f5:15:6a:01:34: f8:62:1b:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoOTc0NjREM0EzMjJGMDA2N0Y4QUNFM0I3NzVBOTNBRkVC OUZDODlFQzAeFw0yNjA0MDUwNzQ5NDZaFw0yNjA0MTIwNzQ5NDZaMBgxFjAUBgNV BAMTDTY5ZDIxNDFiLWZhMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3KMeGBveXHXrx7XGr9Q+UQ9+hI/kvEst9l7sV5LV7COTb1q8vGDpL5vALUZzw rni3T8Ek29I2OcvukxFmqR4NJ9ealART5Xm2KWeLPazI7vHSmC5ZGP+qpJ9MthpX wZfqirooB8Rc2Ih1/GvJhs1pK/eEcW16+AwzPJ24DaVpKYSV0l4Dj/bGvK7nF91t SdzUJfkWeqe8Hn0lvNc8xtLVCzBWac+9zZ/xyf2pErmhJEvnZK7e4r+UvBgO4MYD 1tQ3ijI3IROhnQQCCIXc4TLlUHBbZ6MiTBs+nNtIkQ8DAyrRfSAMjG1fTGZAxQrg TpGtnpVL4Xiaf8zN3XBU36ZRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEbsp9s+1 lzWAHH4ViKOJOsoK87YwHwYDVR0jBBgwFoAUl0ZNOjIvAGf4rOO3dak6/rn8ieww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0Y0NDhDOTc0RDY4 OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdmNHJPTzNkYWs2X3JuOGll dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDBaTk9qSXZBR2Y0ck9PM2RhazZfcm44aWV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdm NHJPTzNkYWs2X3JuOGlldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAuCFjexBAdbH+Y7WFpXmkhFE+9+zvzRnMXWYl4kBLX6k+WNVToIgQnCtmNFPF7 SF8UXc1Ee/fQPIcS7SUt7e5zKwNwBcwnT0Wo55NaL3bWNHSgW/dmCjIb/fxlQtkv 0WDmAWHTqN9qT9Vl19oUEteY+gZki5wZsGaXe2COlRBOqQWS7/bunTEkh0pXRjB+ gAq8fUvwLv1dTnUKtBeOFctBd5X5EPNl9zRbNfank4pK/wZuMYrpxUVmq9a9jqA0 fNSnR7CAuaXhc4SyN9vKwaH8c4eJ73VnpUCqUZCQ9pEEiHSsj9oKqFTB1kkiaxa9 omtvEqJQgLYk9RVqATT4YhtZ -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:11 2026 by rpki-client