$ rpki-client -vvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft File: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft (raw, json) Hash identifier: yVPpKR1/ui1eIf2UVfdyCyQ3WZnfnutVWOF1VicoPq0= Subject key identifier: 8C:7E:4E:65:CA:D4:56:E3:F0:6C:00:E3:7A:3A:6F:D9:83:D3:F1:04 Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft Manifest number: 2A Signing time: Sun 05 Apr 2026 08:07:24 +0000 Manifest this update: Sun 05 Apr 2026 08:07:23 +0000 Manifest next update: Sun 12 Apr 2026 08:07:23 +0000 Files and hashes: 1: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl (hash: 9P4MiCpByGTKBtydeGHUUlB5AwL8mVOBbETR+3siq40=) 2: 8A145232FCFC11F0A8CB3974376F56BC.roa (hash: Xjz1s0MQRu7MQA5suGipgKZp8P0BW1VYHZCCTuVLDsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Validity Not Before: Apr 5 08:07:23 2026 GMT Not After : Apr 12 08:07:23 2026 GMT Subject: CN=69d2183c-6b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:7c:4d:41:3f:35:55:57:5b:c9:2d:a2:22: fb:fb:d1:75:68:fd:00:cc:fd:04:ec:c3:ce:37:d5: 89:2a:ec:20:80:e3:1e:e8:19:a8:46:6d:09:b9:6b: 83:42:c7:7a:ce:13:0d:00:43:ce:d5:6a:18:61:2e: ef:7f:78:cf:4e:c0:e2:ac:f0:ff:39:03:2a:5c:a0: c2:1c:c1:e1:d8:fd:70:73:7d:6c:07:06:e2:de:1b: ff:a8:33:1e:63:8f:bd:b3:34:62:00:8b:b9:11:18: 5f:1c:e3:51:e3:1a:4d:6f:80:51:1d:e4:ac:54:e4: 52:e1:c0:44:9f:c7:ff:8f:e1:13:02:cb:33:24:c2: 59:8d:49:67:13:46:95:59:09:a4:02:95:04:61:4f: ee:ef:04:d9:44:08:8c:1e:ef:91:de:fc:cb:10:9a: c1:34:14:bf:aa:7a:35:a7:a8:ab:e3:9e:2d:c3:c2: e1:af:a5:36:08:42:56:d7:88:16:ab:99:09:1f:c7: 07:20:21:c4:c6:39:e0:23:e0:75:77:76:36:3a:e1: ad:1d:ca:36:31:4f:02:b5:44:39:64:c3:a5:24:a7: e6:24:55:6f:12:f7:fb:12:68:23:73:e1:89:9e:2c: ce:b6:e9:1e:92:8c:cb:4b:20:5a:c3:0f:ca:bc:d8: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:4E:65:CA:D4:56:E3:F0:6C:00:E3:7A:3A:6F:D9:83:D3:F1:04 X509v3 Authority Key Identifier: keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:8e:7d:6f:57:6a:66:2a:99:c5:46:81:a2:4a:0d:cb:d5:2a: ff:d2:0a:05:f8:a7:6b:db:5a:ae:79:2f:0c:76:5b:e7:8d:75: a9:a1:40:4a:01:7d:a9:06:da:0b:73:5f:e0:f6:22:72:a8:f5: e9:99:42:2f:91:3e:81:51:7e:e1:59:99:aa:e6:91:b5:2d:a6: 27:53:12:1d:d7:0d:46:c6:18:fe:a5:ce:aa:0b:58:4a:65:07: 6b:69:0a:14:45:be:ce:60:68:5a:fb:e2:4e:04:35:5b:61:7a: 82:58:8b:5c:18:3c:f7:4b:73:aa:d1:cf:a4:64:9a:be:1a:ea: f9:af:bc:ff:6d:f0:e1:40:e7:89:91:fe:0a:59:0a:a1:c4:ec: 0c:a1:64:b5:f3:82:30:9f:f0:9f:46:9e:23:0d:55:71:0b:53: d9:2c:8c:da:1c:e1:3f:de:4e:67:33:99:77:08:67:ff:24:3e: 4b:c8:e2:51:b4:fb:4f:07:1e:2d:c8:fa:c3:0d:56:86:20:0e: a2:df:28:ea:32:b6:32:96:6b:da:98:fc:24:c9:af:23:d0:e8: 33:88:ee:5b:a6:f5:1b:0e:a0:c8:fa:f4:02:72:41:03:f5:38: e3:d2:b2:68:11:2a:97:f7:24:18:42:42:59:f7:fd:a0:8e:ab: b7:3d:66:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDI3RjExMC8GA1UEBRMoOTU2MEJDQTlBQjZDNjhCRDkwOUYzMDRDNUIyMkJBNjM2 MzlDRjAxQzAeFw0yNjA0MDUwODA3MjNaFw0yNjA0MTIwODA3MjNaMBgxFjAUBgNV BAMTDTY5ZDIxODNjLTZiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxGnxNQT81VVdbyS2iIvv70XVo/QDM/QTsw8431Ykq7CCA4x7oGahGbQm5a4NC x3rOEw0AQ87VahhhLu9/eM9OwOKs8P85AypcoMIcweHY/XBzfWwHBuLeG/+oMx5j j72zNGIAi7kRGF8c41HjGk1vgFEd5KxU5FLhwESfx/+P4RMCyzMkwlmNSWcTRpVZ CaQClQRhT+7vBNlECIwe75He/MsQmsE0FL+qejWnqKvjni3DwuGvpTYIQlbXiBar mQkfxwcgIcTGOeAj4HV3djY64a0dyjYxTwK1RDlkw6Ukp+YkVW8S9/sSaCNz4Yme LM626R6SjMtLIFrDD8q82DpbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjH5OZcrU VuPwbADjejpv2YPT8QQwHwYDVR0jBBgwFoAUlWC8qatsaL2QnzBMWyK6Y2Oc8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjdGLzNCQkRBQ0UyRkMw NjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwyUW56Qk1XeUs2WTJPYzhC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFdDOHFhdHNhTDJRbnpCTVd5SzZZMk9jOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MjdGLzNCQkRBQ0UyRkMwNjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwy UW56Qk1XeUs2WTJPYzhCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDPjn1vV2pmKpnFRoGiSg3L1Sr/0goF+Kdr21queS8MdlvnjXWpoUBKAX2pBtoL c1/g9iJyqPXpmUIvkT6BUX7hWZmq5pG1LaYnUxId1w1Gxhj+pc6qC1hKZQdraQoU Rb7OYGha++JOBDVbYXqCWItcGDz3S3Oq0c+kZJq+Gur5r7z/bfDhQOeJkf4KWQqh xOwMoWS184Iwn/CfRp4jDVVxC1PZLIzaHOE/3k5nM5l3CGf/JD5LyOJRtPtPBx4t yPrDDVaGIA6i3yjqMrYylmvamPwkya8j0OgziO5bpvUbDqDI+vQCckED9Tjj0rJo ESqX9yQYQkJZ9/2gjqu3PWYo -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:48 2026 by rpki-client