$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft File: L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json) Hash identifier: 0p7AG1Y7bPfF8tHS3GUB/0jdFhLqX49y3baik1cfGa8= Subject key identifier: B9:D4:B3:7F:60:CA:D4:78:3F:7B:CB:79:8B:69:09:2C:B3:A9:5E:EE Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F Certificate issuer: /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft Manifest number: 26 Signing time: Sun 05 Apr 2026 08:08:28 +0000 Manifest this update: Sun 05 Apr 2026 08:08:28 +0000 Manifest next update: Sun 12 Apr 2026 08:08:28 +0000 Files and hashes: 1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: iY3ujNNURPEJIxPX5wkm5LkViv8ldPQrpjuwNb2ezZI=) 2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: BSJrDK4V2E7MvwhAcVSpnI4UVhMcWhhRV5ZmWLsrKWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F Validity Not Before: Apr 5 08:08:28 2026 GMT Not After : Apr 12 08:08:28 2026 GMT Subject: CN=69d2187c-f20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:b2:d3:14:4c:f0:96:25:7b:b2:f2:72:b8: 60:9a:4e:58:e7:20:b4:25:08:ca:ed:35:17:66:09: 69:5d:5f:73:25:e2:39:9e:bc:75:dc:8e:15:58:73: 39:4b:05:36:29:1d:3a:5a:3a:c8:ac:ec:e4:63:b2: ed:59:35:14:ff:e7:e8:83:c0:0c:6f:68:9d:4b:17: 4d:c9:5e:27:07:c2:56:8f:0f:90:87:35:d0:28:20: ea:7f:67:31:d6:78:d0:46:27:66:5b:49:31:67:08: f0:6f:05:8c:78:7d:3e:04:ff:4f:c1:1d:4e:cd:f1: 22:4a:0b:23:db:1c:bf:d9:60:09:ef:7d:d8:59:14: 3e:c9:d0:9c:e1:63:39:50:1b:da:44:11:cd:64:b5: 90:7d:44:d9:ca:d9:2c:5d:1c:8d:57:0c:3f:4d:c6: 33:6a:9e:87:eb:a4:ea:61:0a:80:fb:50:55:7c:a4: 77:47:e3:8e:18:2b:cf:a0:74:f9:49:50:69:08:34: 43:34:86:d2:b6:ec:7a:0f:08:d2:41:3e:15:ea:a9: 07:47:2b:27:f8:a7:1f:7d:88:dc:2f:f5:6e:dc:2a: fe:24:f4:02:44:84:fe:3c:9f:ec:f2:1f:99:23:d4: 89:35:44:55:98:08:d9:f8:ed:c8:f0:55:e5:73:04: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D4:B3:7F:60:CA:D4:78:3F:7B:CB:79:8B:69:09:2C:B3:A9:5E:EE X509v3 Authority Key Identifier: keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:57:f8:57:35:ef:df:38:14:b9:e2:d7:66:a6:3b:5d:ef:f5: 8d:d0:35:5b:6d:9d:e1:0b:b0:41:e8:8a:d6:0d:f2:ac:fd:7e: 16:c7:f7:76:3f:5d:a6:37:94:27:14:4a:dc:70:62:18:f6:0b: 00:c2:a1:36:e9:39:42:7e:3e:c8:e8:a5:dc:f0:74:68:60:45: 84:e7:8f:2f:40:d9:03:fb:ed:40:a6:6a:0c:5e:2f:bf:cf:83: 21:3b:77:c6:a1:3d:c9:69:e5:1b:e3:3d:03:28:74:eb:bf:59: 67:53:02:49:6c:09:97:d2:75:d4:c0:5b:87:ee:cb:bd:7a:b4: c3:4d:e2:6f:a5:68:a8:0e:15:65:f4:1c:17:d0:1c:b3:59:2e: 1a:c6:07:16:74:9c:a1:5c:cc:ce:26:7b:64:3b:3b:20:d4:d0: 10:49:1c:ae:6a:31:e5:0f:07:ad:c2:4c:83:4e:ba:d9:7e:8a: 94:19:b2:1a:47:e3:9a:ce:d5:42:92:84:9b:25:49:38:e3:cb: ea:1d:6b:e0:d5:48:0c:cb:4b:a0:1f:80:a0:2e:a7:a5:c5:81: b5:7a:72:29:92:f0:6a:55:0c:02:96:98:9c:28:dd:e7:51:4b: e3:4d:34:ee:7c:db:5b:b2:12:13:dd:7f:1e:87:5b:ec:91:4a: 4c:25:25:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NURGQjExMC8GA1UEBRMoMkZBOTcxQTYzQkMyNjNBRUI0REFFQkYyMEMyRkM3MTE4 M0NBNjQ4RjAeFw0yNjA0MDUwODA4MjhaFw0yNjA0MTIwODA4MjhaMBgxFjAUBgNV BAMTDTY5ZDIxODdjLWYyMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNu7LTFEzwliV7svJyuGCaTljnILQlCMrtNRdmCWldX3Ml4jmevHXcjhVYczlL BTYpHTpaOsis7ORjsu1ZNRT/5+iDwAxvaJ1LF03JXicHwlaPD5CHNdAoIOp/ZzHW eNBGJ2ZbSTFnCPBvBYx4fT4E/0/BHU7N8SJKCyPbHL/ZYAnvfdhZFD7J0JzhYzlQ G9pEEc1ktZB9RNnK2SxdHI1XDD9NxjNqnofrpOphCoD7UFV8pHdH444YK8+gdPlJ UGkINEM0htK27HoPCNJBPhXqqQdHKyf4px99iNwv9W7cKv4k9AJEhP48n+zyH5kj 1Ik1RFWYCNn47cjwVeVzBPTbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUudSzf2DK 1Hg/e8t5i2kJLLOpXu4wHwYDVR0jBBgwFoAUL6lxpjvCY6602uvyDC/HEYPKZI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1REZCLzQ3Rjc0REU2RkRC RjExRjBBNUZFOENFNjY3NkY1NkJDL0w2bHhwanZDWTY2MDJ1dnlEQ19IRVlQS1pJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDZseHBqdkNZNjYwMnV2eURDX0hFWVBLWkk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 REZCLzQ3Rjc0REU2RkRCRjExRjBBNUZFOENFNjY3NkY1NkJDL0w2bHhwanZDWTY2 MDJ1dnlEQ19IRVlQS1pJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQARV/hXNe/fOBS54tdmpjtd7/WN0DVbbZ3hC7BB6IrWDfKs/X4Wx/d2P12mN5Qn FErccGIY9gsAwqE26TlCfj7I6KXc8HRoYEWE548vQNkD++1ApmoMXi+/z4MhO3fG oT3JaeUb4z0DKHTrv1lnUwJJbAmX0nXUwFuH7su9erTDTeJvpWioDhVl9BwX0Byz WS4axgcWdJyhXMzOJntkOzsg1NAQSRyuajHlDwetwkyDTrrZfoqUGbIaR+OaztVC koSbJUk448vqHWvg1UgMy0ugH4CgLqelxYG1enIpkvBqVQwClpicKN3nUUvjTTTu fNtbshIT3X8eh1vskUpMJSWA -----END CERTIFICATE-----Generated at Sun Apr 5 19:49:57 2026 by rpki-client