$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: omJ4TfxSWt5mVNMTfZY8M+XWC3wkhwrvDD4xQSYpJFM= Subject key identifier: DB:3F:A5:66:80:57:2D:42:2F:63:AF:7B:DD:AB:09:A2:06:B0:59:13 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 12 Signing time: Sun 05 Apr 2026 08:24:55 +0000 Manifest this update: Sun 05 Apr 2026 08:24:54 +0000 Manifest next update: Sun 12 Apr 2026 08:24:54 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: DFndwqt+GiWRMV6wID8k3dl+HMzrdsV7P5wUhRfBhZg=) 2: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: YICsi1o5Z1QCNa3raABk0vbNZqKDNF4/heN9D5mwTtc=) 3: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Apr 5 08:24:54 2026 GMT Not After : Apr 12 08:24:54 2026 GMT Subject: CN=69d21c56-d609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:fd:ae:9a:1d:54:1b:c2:8c:86:b5:15:d2: 16:eb:ae:e8:0e:bc:8e:26:e5:95:a4:fb:27:c4:d0: 09:29:5e:91:6d:08:3b:a7:af:6c:3f:ab:7b:ef:47: a8:a9:22:43:72:42:2f:9e:e2:ea:a6:f3:7b:34:69: 90:62:f3:59:9c:a2:99:46:c4:bc:b8:d2:5a:52:93: 64:85:d5:1a:53:ad:67:01:0b:b5:52:aa:16:e5:33: 5f:60:17:1c:92:47:5f:ae:85:89:c7:b4:3b:f7:cb: d7:18:0c:69:df:84:90:bc:db:03:c1:24:2b:7b:6c: 45:dd:29:f1:71:34:22:5b:7f:42:73:bb:10:e2:c1: 43:f7:bf:14:ee:5e:d1:47:5d:36:f1:a5:d7:f1:23: 1b:a6:8f:a3:18:6f:a2:f9:a4:b5:c7:32:55:0b:a8: 46:e5:45:63:69:03:ae:c1:3b:2a:36:55:76:3b:a5: 6e:7c:00:2e:62:fb:9c:5a:93:fd:ef:3a:19:f2:fd: ef:c6:2f:3e:29:0d:55:47:f4:05:f0:59:b7:29:be: 17:4a:1a:7d:5a:de:00:e1:18:d6:73:c1:b2:59:59: 09:23:0d:0c:3c:a3:67:a4:5d:b5:a6:ad:ae:99:34: 59:f8:f3:90:40:80:d9:63:47:b1:55:29:c0:6d:a6: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3F:A5:66:80:57:2D:42:2F:63:AF:7B:DD:AB:09:A2:06:B0:59:13 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:31:6a:4b:5b:06:55:71:4d:8a:9b:3c:c8:02:fa:ca:2a:85: 54:eb:64:ce:8e:af:f3:5a:0c:df:9f:dd:e5:65:08:5c:bd:53: 49:7f:ae:4a:ad:40:87:07:3d:0b:ff:53:35:19:17:a5:69:ed: 26:10:1e:5c:a7:0a:e9:49:c3:90:8d:e9:d0:fa:93:dc:23:e7: 4b:fd:72:88:b4:00:d6:8e:ce:a4:b5:3b:7c:2e:af:02:ba:0a: d9:df:d7:36:14:8c:b4:9c:82:69:af:90:03:2b:16:05:96:5e: 47:23:26:b9:00:c2:12:98:2b:59:5e:f7:7f:0d:aa:a4:86:cb: b0:e0:55:c3:f8:ff:67:e6:a4:b6:97:d1:01:37:b8:1a:ed:bf: 0a:46:55:2d:d3:ca:dd:08:dc:14:9b:de:f5:01:ad:45:19:e5: af:40:b6:69:13:81:2a:84:5d:de:ed:07:58:02:b5:71:3a:df: 35:67:df:5d:7a:ae:fd:e5:9b:5a:c8:07:17:f0:bc:c3:d2:73: 30:35:0b:a0:f0:c2:51:44:f6:f9:60:f1:e6:6b:2e:c5:4d:5b: 5c:ed:cb:9b:2e:dd:15:6f:62:ae:f5:67:e6:52:75:36:1e:bb: b4:c9:3f:03:25:1f:bc:e8:4c:61:7f:47:a0:b1:f7:56:01:50: 6c:16:2f:1d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA0MDUwODI0NTRaFw0yNjA0MTIwODI0NTRaMBgxFjAUBgNV BAMTDTY5ZDIxYzU2LWQ2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcav2umh1UG8KMhrUV0hbrrugOvI4m5ZWk+yfE0AkpXpFtCDunr2w/q3vvR6ip IkNyQi+e4uqm83s0aZBi81mcoplGxLy40lpSk2SF1RpTrWcBC7VSqhblM19gFxyS R1+uhYnHtDv3y9cYDGnfhJC82wPBJCt7bEXdKfFxNCJbf0JzuxDiwUP3vxTuXtFH XTbxpdfxIxumj6MYb6L5pLXHMlULqEblRWNpA67BOyo2VXY7pW58AC5i+5xak/3v Ohny/e/GLz4pDVVH9AXwWbcpvhdKGn1a3gDhGNZzwbJZWQkjDQw8o2ekXbWmra6Z NFn485BAgNljR7FVKcBtpsLnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2z+lZoBX LUIvY6973asJogawWRMwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCiMWpLWwZVcU2KmzzIAvrKKoVU62TOjq/zWgzfn93lZQhcvVNJf65KrUCHBz0L /1M1GRelae0mEB5cpwrpScOQjenQ+pPcI+dL/XKItADWjs6ktTt8Lq8CugrZ39c2 FIy0nIJpr5ADKxYFll5HIya5AMISmCtZXvd/Daqkhsuw4FXD+P9n5qS2l9EBN7ga 7b8KRlUt08rdCNwUm971Aa1FGeWvQLZpE4EqhF3e7QdYArVxOt81Z99deq795Zta yAcX8LzD0nMwNQug8MJRRPb5YPHmay7FTVtc7cubLt0Vb2Ku9WfmUnU2Hru0yT8D JR+86Exhf0egsfdWAVBsFi8d -----END CERTIFICATE-----Generated at Sun Apr 5 19:37:36 2026 by rpki-client