$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: 52eOsB95Cive9suua7TgA/iVrg8WiluRe93qN9VOGv8= Subject key identifier: 1E:BA:85:E9:A9:0C:F6:71:F4:55:6E:F0:62:3A:4D:68:6B:E7:45:D7 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0F01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0EED Signing time: Sat 04 Apr 2026 17:30:54 +0000 Manifest this update: Sat 04 Apr 2026 17:30:54 +0000 Manifest next update: Sat 11 Apr 2026 17:30:54 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: ZKPZ1wa6Ytyap/zLJVg4diB3RDgaAcScYrVdD4mI3Mg=) 2: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: me+rFWsAlEbbeSVKyP+HO1shOhFMom4laprHvdMZ2FI=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: uBWEWqJrmwcOEYXcGkB5NWQu2MFKeCG+rZqU63QBeQo=) 4: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: xmXX2I3IErrJ4Tb+a2xOm3UuHMKaORzrEOx19VC0uEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3841 (0xf01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Apr 4 17:30:54 2026 GMT Not After : Apr 11 17:30:54 2026 GMT Subject: CN=69d14ace-bb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:d6:c1:d7:28:6d:6d:54:d1:8a:bc:6d:04: 4f:27:bf:23:e1:00:0f:ee:96:7a:78:6b:b8:35:64: 35:e7:c4:82:ff:6b:d6:02:70:27:4b:f1:a1:af:8f: 01:6f:6b:65:ab:84:ca:aa:ec:e6:f8:ba:88:4e:f6: 67:78:d7:4a:b5:24:a1:f8:0b:ac:f6:e4:a4:53:71: 31:72:19:67:22:8d:e5:30:3d:bd:4b:2b:e9:3b:5b: 3b:5d:e0:3d:66:e9:0a:02:2e:ed:92:e6:c0:61:6c: 13:1f:3c:a3:7f:e0:ed:c9:33:13:0b:ba:fa:b0:e3: 69:4d:ef:a6:19:3f:60:e4:cd:df:75:04:e8:14:fb: 0c:dd:8e:a4:7e:77:6a:56:f9:a8:73:ee:c5:e9:0d: ae:f3:ae:69:99:e0:e3:bf:70:4c:a5:cb:2a:58:b1: e9:a4:91:90:c6:33:28:f7:46:e6:05:6b:c7:85:37: f2:83:46:85:5c:01:53:31:ea:4a:27:c6:6b:3f:4a: e1:a6:92:87:7e:f8:59:29:79:33:94:c7:b7:20:e1: 6e:45:b0:35:50:30:e7:0a:e1:30:d1:8e:ab:4c:55: 71:86:49:b7:9b:73:01:bf:e6:ff:1a:4c:f4:05:49: fa:8e:33:b8:52:4d:5c:f2:f7:5b:b4:2a:70:d4:a9: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:85:E9:A9:0C:F6:71:F4:55:6E:F0:62:3A:4D:68:6B:E7:45:D7 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:bc:9d:6b:c0:b6:80:9f:8b:97:07:c2:72:12:29:38:b2:9a: c6:27:b6:84:a3:49:1f:c0:43:e1:5d:11:f7:a4:d2:7e:ba:d8: ce:ca:18:4c:e4:48:69:9f:39:1f:75:d5:84:2a:a8:a9:21:18: 90:36:5d:a1:a4:e7:44:75:3c:a9:22:fa:d2:02:40:7e:a3:e7: cd:0e:2d:e0:c7:b4:ac:28:14:95:d2:9a:57:8a:fa:30:7d:da: b6:1e:20:03:0c:f9:6f:da:00:61:10:35:b6:26:86:66:c9:fb: e3:78:28:93:8c:af:ab:e2:8d:3e:36:27:1a:50:80:40:9f:b6: dc:89:dc:c0:00:38:48:71:7e:c1:0f:8f:bd:05:d9:12:60:42: a6:57:81:95:5a:7e:58:c9:a3:26:28:b9:d0:36:b8:46:2c:b7: 02:18:57:ee:f8:6e:56:33:0c:7d:b6:e2:2b:f2:89:70:a4:b2: af:2b:8e:e6:ba:da:63:0a:d6:01:ad:af:5e:08:30:bf:24:6b: 71:0c:6f:32:1e:3a:99:bf:ef:a7:ed:92:b6:f4:20:97:97:cd: 49:4b:40:e4:9a:65:dd:f4:8c:7f:3a:64:e5:d5:4a:32:95:55: 86:39:c7:e0:70:36:8d:33:1f:8c:b2:5f:de:51:49:36:c6:08: 70:fb:6d:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjYwNDA0MTczMDU0WhcNMjYwNDExMTczMDU0WjAYMRYwFAYD VQQDEw02OWQxNGFjZS1iYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpLWwdcobW1U0Yq8bQRPJ78j4QAP7pZ6eGu4NWQ158SC/2vWAnAnS/Ghr48B b2tlq4TKquzm+LqITvZneNdKtSSh+Aus9uSkU3ExchlnIo3lMD29SyvpO1s7XeA9 ZukKAi7tkubAYWwTHzyjf+DtyTMTC7r6sONpTe+mGT9g5M3fdQToFPsM3Y6kfndq Vvmoc+7F6Q2u865pmeDjv3BMpcsqWLHppJGQxjMo90bmBWvHhTfyg0aFXAFTMepK J8ZrP0rhppKHfvhZKXkzlMe3IOFuRbA1UDDnCuEw0Y6rTFVxhkm3m3MBv+b/Gkz0 BUn6jjO4Uk1c8vdbtCpw1KnlbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB66hemp DPZx9FVu8GI6TWhr50XXMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmbyda8C2gJ+LlwfCchIpOLKaxie2hKNJH8BD4V0R96TSfrrYzsoYTORIaZ85 H3XVhCqoqSEYkDZdoaTnRHU8qSL60gJAfqPnzQ4t4Me0rCgUldKaV4r6MH3ath4g Awz5b9oAYRA1tiaGZsn743gok4yvq+KNPjYnGlCAQJ+23IncwAA4SHF+wQ+PvQXZ EmBCpleBlVp+WMmjJii50Da4Riy3AhhX7vhuVjMMfbbiK/KJcKSyryuO5rraYwrW Aa2vXggwvyRrcQxvMh46mb/vp+2StvQgl5fNSUtA5Jpl3fSMfzpk5dVKMpVVhjnH 4HA2jTMfjLJf3lFJNsYIcPttZA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:11 2026 by rpki-client