$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json) Hash identifier: GvEoFPcJtYiSMOvsqxvp8+X8srUAmUZg7EEjMpAXSDo= Subject key identifier: 8C:B0:00:C3:DE:84:75:1B:A1:DE:DE:06:26:E5:FC:66:F2:44:C7:11 Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft Manifest number: 1791 Signing time: Sat 04 Apr 2026 16:32:19 +0000 Manifest this update: Sat 04 Apr 2026 16:32:18 +0000 Manifest next update: Sat 11 Apr 2026 16:32:18 +0000 Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: XiV2byid1DDclrkUAuDRCq71s0SAsRP5blP8nUu3+Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Validity Not Before: Apr 4 16:32:18 2026 GMT Not After : Apr 11 16:32:18 2026 GMT Subject: CN=69d13d13-b430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:3e:c9:17:16:eb:d6:4c:c7:3e:8d:9f:5f: 07:55:2d:af:4d:5f:13:c7:cb:5f:76:d1:f5:76:db: 0f:13:c8:af:b5:d3:af:3a:69:46:63:ac:01:0b:57: 18:92:f8:a5:b0:b3:0e:1b:c3:57:22:9d:1b:03:5f: 05:60:3a:73:5a:27:bc:9e:62:55:7a:b6:99:0c:d8: e1:dd:45:ba:ec:a8:bf:eb:fe:86:e8:7f:7d:c4:54: 83:31:b3:54:7f:98:54:5d:52:ca:bc:17:da:79:1d: 16:ce:cd:bb:fc:87:6f:11:85:6b:f8:ca:32:0e:41: 7b:84:8e:1e:39:a6:32:3d:19:1b:18:4a:1b:ad:0f: 5c:ad:fb:14:89:70:8a:c6:ce:57:91:fc:79:ec:e2: e2:e7:a4:20:5a:a0:1a:88:27:c0:59:b4:da:c3:cc: 9d:4c:3d:18:fd:02:16:ad:8d:a0:6d:f9:85:5e:04: be:b2:7f:88:37:43:53:1b:dd:f6:54:5e:47:ad:c8: 25:59:64:d5:70:07:4b:f9:5a:e0:34:5a:51:51:9c: 09:1c:c9:8d:65:4b:dc:0f:88:de:5d:c4:99:01:db: 47:75:43:73:e6:7e:d1:51:0a:bb:ed:0b:58:d0:61: ae:26:29:f6:86:5f:55:06:8b:89:ce:d5:e9:f4:d3: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:00:C3:DE:84:75:1B:A1:DE:DE:06:26:E5:FC:66:F2:44:C7:11 X509v3 Authority Key Identifier: keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f2:6c:79:cf:8d:ba:a4:56:48:4f:2b:89:1e:cf:6b:b4:2c: c6:f5:30:3d:8e:30:e4:e0:6c:b9:f2:81:b4:e5:bc:1c:ee:27: 76:d7:3f:b6:c8:95:d9:e6:f6:8e:1a:e8:43:b4:ad:70:46:76: a4:53:6a:36:cf:e5:7e:42:bf:64:09:78:71:17:51:d0:f7:0c: 5a:28:38:26:94:73:ed:7a:eb:14:ce:04:b3:70:64:8b:5e:61: 23:02:e8:8d:a6:57:c5:5b:a6:48:1a:22:77:9c:d0:e0:16:44: 31:44:c0:21:fa:a8:7f:8f:dc:68:00:50:fc:0e:70:1d:a8:72: 00:9b:0b:cb:67:0c:50:d8:ec:17:53:6b:b4:0f:ee:c8:8d:de: 38:44:6f:f7:93:1e:a1:4a:ef:73:bf:6e:ee:14:a2:53:1a:61: 5b:47:15:ec:7f:4b:02:af:a1:15:ff:5e:71:3d:e1:f1:90:47: dc:42:04:1a:19:03:fb:1d:f2:9d:5a:90:b2:47:6f:6c:96:03: a9:e8:c9:25:16:6b:a4:ad:ad:62:2b:bb:a9:fd:d5:85:41:eb: d7:1f:b0:f3:ec:99:0f:95:91:38:d8:cb:f7:3b:a4:f8:79:b0: 96:43:fa:84:a7:f2:7a:07:dd:4f:17:0e:20:96:30:36:70:ff: 3e:c0:ec:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDk0MkUyN0Q2NUM0N0FGQjU5NzBBOUFGRTgyODA5QjMx NzlEOEI0NjYwHhcNMjYwNDA0MTYzMjE4WhcNMjYwNDExMTYzMjE4WjAYMRYwFAYD VQQDEw02OWQxM2QxMy1iNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhWA+yRcW69ZMxz6Nn18HVS2vTV8Tx8tfdtH1dtsPE8ivtdOvOmlGY6wBC1cY kvilsLMOG8NXIp0bA18FYDpzWie8nmJVeraZDNjh3UW67Ki/6/6G6H99xFSDMbNU f5hUXVLKvBfaeR0Wzs27/IdvEYVr+MoyDkF7hI4eOaYyPRkbGEobrQ9crfsUiXCK xs5Xkfx57OLi56QgWqAaiCfAWbTaw8ydTD0Y/QIWrY2gbfmFXgS+sn+IN0NTG932 VF5HrcglWWTVcAdL+VrgNFpRUZwJHMmNZUvcD4jeXcSZAdtHdUNz5n7RUQq77QtY 0GGuJin2hl9VBouJztXp9NNCvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIywAMPe hHUbod7eBibl/GbyRMcRMB8GA1UdIwQYMBaAFJQuJ9ZcR6+1lwqa/oKAmzF52LRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9sQzRuMWx4SHI3V1hDcHItZ29DYk1Ybll0 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDNG4xbHhIcjdXWENwci1nb0NiTVhuWXRHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9sQzRuMWx4SHI3 V1hDcHItZ29DYk1Ybll0R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApfJsec+NuqRWSE8riR7Pa7QsxvUwPY4w5OBsufKBtOW8HO4ndtc/tsiV2eb2 jhroQ7StcEZ2pFNqNs/lfkK/ZAl4cRdR0PcMWig4JpRz7XrrFM4Es3Bki15hIwLo jaZXxVumSBoid5zQ4BZEMUTAIfqof4/caABQ/A5wHahyAJsLy2cMUNjsF1NrtA/u yI3eOERv95MeoUrvc79u7hSiUxphW0cV7H9LAq+hFf9ecT3h8ZBH3EIEGhkD+x3y nVqQskdvbJYDqejJJRZrpK2tYiu7qf3VhUHr1x+w8+yZD5WRONjL9zuk+HmwlkP6 hKfyegfdTxcOIJYwNnD/PsDsfw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:56:32 2026 by rpki-client