$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: HDAyo0wEx97xmxpfZFTrSpH12BzDpjHxTewCVBvY0v8= Subject key identifier: 25:A4:9C:84:F2:6C:58:C7:55:F1:04:95:D1:CA:FE:B3:84:21:90:E3 Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 01C1 Signing time: Sun 05 Apr 2026 03:21:30 +0000 Manifest this update: Sun 05 Apr 2026 03:21:30 +0000 Manifest next update: Sun 12 Apr 2026 03:21:30 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: avnmprQ2oTR6l7OEwyt8VHiErHD2y1/7t4r5XNiObfw=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Apr 5 03:21:30 2026 GMT Not After : Apr 12 03:21:30 2026 GMT Subject: CN=69d1d53a-0df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:a3:e1:de:23:45:f9:09:40:94:84:2b:a7: 73:1e:20:45:d8:19:9e:15:5b:fb:c5:d8:72:f2:c0: 7f:64:67:e3:ca:4e:2f:a8:21:57:ea:a3:d0:34:ba: 93:4f:fe:dc:e8:44:cf:3d:77:d7:4a:92:fd:da:f7: 3d:48:ce:14:f9:d0:3b:59:e2:36:e1:8b:69:1d:14: 84:f8:8d:89:ca:31:80:ef:9b:c5:96:e2:7d:7d:fa: c6:9c:f3:e5:93:00:39:eb:96:14:1f:3f:1f:75:44: bc:26:bf:63:eb:7b:4a:c8:d5:b6:76:bf:a9:17:03: 79:5a:cb:a3:25:93:c0:69:04:ea:80:83:6d:30:07: 42:e0:2d:c1:cc:17:fc:51:72:eb:05:58:f8:48:da: 40:92:34:88:10:c7:c9:0f:c0:c0:85:2d:df:48:8c: a4:08:82:c1:0d:ae:ba:e4:dc:1a:26:ac:1e:4f:b5: 09:d1:1a:1e:77:72:47:0e:ff:b1:91:3e:5a:85:f6: c2:77:b6:56:91:22:92:53:1b:5c:e4:a6:78:1e:8e: d2:cd:40:16:df:65:ad:81:be:c9:f5:ac:bc:9c:13: 05:4f:5b:de:8b:d5:68:97:b5:3b:c9:96:34:b7:22: d0:55:a3:b1:72:39:68:61:de:99:21:75:02:26:f0: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:9C:84:F2:6C:58:C7:55:F1:04:95:D1:CA:FE:B3:84:21:90:E3 X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f9:f0:4c:9b:c4:1e:7c:f0:7a:28:72:bc:40:16:56:29:33: a4:a9:92:cc:f7:9f:91:a2:53:1a:31:17:d8:2d:8e:15:37:30: 16:17:83:98:84:ed:4a:1b:82:e4:aa:80:d6:c7:e7:d2:4c:4a: 04:c5:6e:e9:18:27:fb:05:38:33:33:3e:43:3f:4f:3d:81:4c: 67:59:9a:28:c3:71:9a:3f:1a:c1:ca:57:41:20:8e:ed:c1:ca: 55:97:26:cd:01:1e:93:a3:c5:e1:69:f6:80:ad:a3:fd:6f:e6: 96:c0:85:0f:ce:c1:6d:7a:72:ec:4d:9f:f7:6b:7b:23:83:0d: 37:ce:d3:7e:f0:58:ba:dd:42:a0:b9:e4:e0:e2:a6:75:96:08: 1a:51:c3:73:05:9a:f4:a5:54:3d:39:d2:b7:7a:e2:8c:23:33: 24:1b:6d:50:36:36:59:06:e0:01:0c:73:93:69:2d:97:e7:fb: 90:c9:a2:c7:96:44:ce:16:a5:d6:eb:e0:4d:ce:55:fc:bf:4c: 44:7f:63:33:80:65:95:8c:b2:8a:67:4f:1a:44:f2:e1:d6:10: f1:73:8e:87:3c:cd:9f:0c:74:2a:2a:92:94:ad:7d:9a:34:91: ca:27:6f:37:4a:82:a5:62:cf:b4:aa:ca:09:4a:21:ec:ca:db: ce:58:34:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjYwNDA1MDMyMTMwWhcNMjYwNDEyMDMyMTMwWjAYMRYwFAYD VQQDEw02OWQxZDUzYS0wZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBej4d4jRfkJQJSEK6dzHiBF2BmeFVv7xdhy8sB/ZGfjyk4vqCFX6qPQNLqT T/7c6ETPPXfXSpL92vc9SM4U+dA7WeI24YtpHRSE+I2JyjGA75vFluJ9ffrGnPPl kwA565YUHz8fdUS8Jr9j63tKyNW2dr+pFwN5WsujJZPAaQTqgINtMAdC4C3BzBf8 UXLrBVj4SNpAkjSIEMfJD8DAhS3fSIykCILBDa665NwaJqweT7UJ0Roed3JHDv+x kT5ahfbCd7ZWkSKSUxtc5KZ4Ho7SzUAW32Wtgb7J9ay8nBMFT1vei9Vol7U7yZY0 tyLQVaOxcjloYd6ZIXUCJvD9awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWknITy bFjHVfEEldHK/rOEIZDjMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHPnwTJvEHnzweihyvEAWVikzpKmSzPefkaJTGjEX2C2OFTcwFheDmITtShuC 5KqA1sfn0kxKBMVu6Rgn+wU4MzM+Qz9PPYFMZ1maKMNxmj8awcpXQSCO7cHKVZcm zQEek6PF4Wn2gK2j/W/mlsCFD87BbXpy7E2f92t7I4MNN87TfvBYut1CoLnk4OKm dZYIGlHDcwWa9KVUPTnSt3rijCMzJBttUDY2WQbgAQxzk2ktl+f7kMmix5ZEzhal 1uvgTc5V/L9MRH9jM4BllYyyimdPGkTy4dYQ8XOOhzzNnwx0KiqSlK19mjSRyidv N0qCpWLPtKrKCUoh7Mrbzlg0mQ== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:22 2026 by rpki-client