$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: ct3e60lCToyEhkiss02rn+pzpNttHmbVLk/Tvs86hwk= Subject key identifier: E4:66:18:FB:E7:C3:A3:04:9E:2A:4C:BB:76:3B:23:36:67:4E:D5:09 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 013A Signing time: Sun 05 Apr 2026 04:56:00 +0000 Manifest this update: Sun 05 Apr 2026 04:56:00 +0000 Manifest next update: Sun 12 Apr 2026 04:56:00 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: E8dWGpZawW0GCOByt0XvWsk+zMgJg5rsgzN55I4VanA=) 2: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) 4: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Apr 5 04:56:00 2026 GMT Not After : Apr 12 04:56:00 2026 GMT Subject: CN=69d1eb60-7120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:af:df:a6:ef:23:9e:9e:07:8e:34:a9:c4: a0:52:ce:72:4f:fd:22:69:10:97:56:97:c9:3e:b8: 59:88:ca:b1:06:81:e0:97:bb:4d:14:63:6d:68:2a: 5d:63:a1:58:68:97:99:78:dc:13:6b:80:0f:4e:6e: 59:a7:74:20:d4:fd:9e:c0:a8:13:49:72:a2:d9:1f: 80:d4:6e:85:86:f7:d1:7d:39:c3:e6:11:5f:24:fa: 36:d9:d8:0b:01:76:39:ef:88:a7:ad:38:94:d3:7c: 4f:c1:de:ba:e9:9e:f0:51:17:61:c6:da:af:77:fb: 5d:d2:7e:56:2a:53:25:b1:5e:17:cf:4d:b3:a8:b9: 78:99:13:d7:b3:8e:2a:cf:17:b3:24:5d:d6:85:1f: 3d:c6:51:e8:24:89:c2:25:a2:6d:39:45:74:a1:81: 68:59:1c:09:b7:03:e5:e9:a2:3c:6e:94:e4:b2:81: 9c:94:62:8a:f9:d9:47:1e:fd:9e:ff:9a:4a:14:a3: 54:8c:cd:4a:fa:70:45:05:94:1a:77:e6:11:ca:8e: 93:48:3a:02:3a:12:d1:92:50:09:c0:df:b3:3d:37: 57:39:e5:f9:e5:30:e8:7b:1d:17:f3:48:e3:f0:a2: 03:44:19:34:1e:40:82:82:b0:ec:47:12:ba:33:10: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:18:FB:E7:C3:A3:04:9E:2A:4C:BB:76:3B:23:36:67:4E:D5:09 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b3:50:8d:4b:26:5f:f4:45:61:f7:6b:c0:78:fa:14:b4:c1: 84:82:0b:f4:60:2d:97:53:47:75:7c:43:97:a6:aa:56:9e:00: 09:63:47:9d:d1:2e:87:39:a8:5b:48:78:20:02:49:18:c4:81: 23:41:d5:d3:45:35:5c:98:b1:5f:51:4f:8a:bd:15:ad:d4:80: 02:77:b9:2b:fb:5a:a2:f5:40:e9:27:d2:bd:6d:74:6a:a3:cc: 56:85:75:0e:f9:52:19:c0:6b:17:7f:86:bc:79:ee:8e:18:61: 2d:cb:89:5c:d0:64:2d:70:56:ea:3c:1c:01:95:aa:57:c6:f6: 9a:c4:21:7e:e2:78:d7:de:f4:12:e2:3e:32:1f:9f:bf:96:4e: 21:95:17:fd:ae:23:4c:4f:6a:3f:6e:50:6f:1a:8c:bb:f8:bb: 0e:f8:c2:c1:7c:33:cc:bd:46:f7:90:cf:43:fc:e0:72:c8:a1: 1c:b3:2a:c2:f4:72:ab:c0:0f:db:c0:f4:fd:9f:01:c5:7a:3f: c2:da:67:5a:cb:e2:f3:57:e1:54:3a:17:84:ef:86:19:c8:89: 8f:fd:2e:e2:f9:e6:6e:79:31:15:9d:1d:3e:ea:16:f9:a6:f8: f4:dc:68:12:0b:9c:c5:fd:7e:2a:52:9e:ee:bf:a3:36:6d:13: 2c:fc:d9:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwNDA1MDQ1NjAwWhcNMjYwNDEyMDQ1NjAwWjAYMRYwFAYD VQQDEw02OWQxZWI2MC03MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV+v36bvI56eB440qcSgUs5yT/0iaRCXVpfJPrhZiMqxBoHgl7tNFGNtaCpd Y6FYaJeZeNwTa4APTm5Zp3Qg1P2ewKgTSXKi2R+A1G6FhvfRfTnD5hFfJPo22dgL AXY574inrTiU03xPwd666Z7wURdhxtqvd/td0n5WKlMlsV4Xz02zqLl4mRPXs44q zxezJF3WhR89xlHoJInCJaJtOUV0oYFoWRwJtwPl6aI8bpTksoGclGKK+dlHHv2e /5pKFKNUjM1K+nBFBZQad+YRyo6TSDoCOhLRklAJwN+zPTdXOeX55TDoex0X80jj 8KIDRBk0HkCCgrDsRxK6MxC8mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORmGPvn w6MEnipMu3Y7IzZnTtUJMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbLNQjUsmX/RFYfdrwHj6FLTBhIIL9GAtl1NHdXxDl6aqVp4ACWNHndEuhzmo W0h4IAJJGMSBI0HV00U1XJixX1FPir0VrdSAAne5K/taovVA6SfSvW10aqPMVoV1 DvlSGcBrF3+GvHnujhhhLcuJXNBkLXBW6jwcAZWqV8b2msQhfuJ41970EuI+Mh+f v5ZOIZUX/a4jTE9qP25QbxqMu/i7DvjCwXwzzL1G95DPQ/zgcsihHLMqwvRyq8AP 28D0/Z8BxXo/wtpnWsvi81fhVDoXhO+GGciJj/0u4vnmbnkxFZ0dPuoW+ab49Nxo Egucxf1+KlKe7r+jNm0TLPzZMg== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:45 2026 by rpki-client