$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: zjYjb97uxfpcBohTsWvFxZV8/bZiN1Ya+Xw19nK9Ja8= Subject key identifier: C6:21:72:5D:23:62:FC:DF:43:E7:02:35:D3:9B:44:BD:06:24:B5:9F Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 02DF Signing time: Mon 27 Apr 2026 01:17:48 +0000 Manifest this update: Mon 27 Apr 2026 01:17:48 +0000 Manifest next update: Mon 04 May 2026 01:17:48 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: cuM4T0Fn49kgZzXQfX6LBR+3fIO5PSfIlyyJqmKYpuA=) 2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=) 3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Apr 27 01:17:48 2026 GMT Not After : May 4 01:17:48 2026 GMT Subject: CN=69eeb93c-ea99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:35:96:2b:48:03:3f:5d:2f:be:67:58:4a: 94:62:b7:dd:d0:b5:16:c5:64:ac:fc:4e:ae:c6:1b: da:c2:18:ad:fc:b4:55:71:e5:44:c8:34:8d:e6:9a: f2:c0:d6:99:72:56:71:0b:eb:80:52:cb:58:11:65: d2:4b:ca:2b:e1:54:84:b5:9c:fb:24:12:ad:af:80: b0:23:5b:80:5b:8b:e4:8b:dc:03:35:68:10:8b:26: 25:4e:bb:87:a6:bd:12:84:b6:d1:58:47:ea:49:a3: 5c:ad:9a:c2:06:f2:17:f6:f9:1c:ec:8a:e1:4f:c5: 25:17:67:1e:fb:9e:72:ff:db:87:94:3c:69:79:0e: c6:f3:02:d2:a2:f7:4a:f4:91:eb:1d:e7:44:ac:aa: ff:bd:2b:9e:6d:9f:20:13:06:3f:3a:40:ff:8c:d6: 37:69:2c:19:a9:f7:e1:78:75:bc:f1:fb:94:21:c7: 3b:14:23:40:5a:ef:aa:4b:9d:0e:85:64:f3:b8:cb: 10:63:eb:2a:22:a4:53:4d:9b:81:84:41:63:9f:c1: 73:8e:48:4d:f7:0c:c6:d8:e4:99:69:6d:f4:e5:37: f2:7d:d3:e0:ee:c8:de:c3:5d:3f:e4:5b:b7:eb:23: 61:9d:06:b2:28:01:c7:55:d1:77:a8:2d:68:91:bd: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:72:5D:23:62:FC:DF:43:E7:02:35:D3:9B:44:BD:06:24:B5:9F X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0f:95:6d:66:ea:1c:59:0f:49:62:53:75:6e:28:2b:d5:26: 7e:41:8b:77:a3:96:3c:f8:a9:f5:f3:14:ea:47:4a:60:e4:e2: f8:6e:10:a9:56:4c:b2:32:3d:45:e3:a0:b1:3f:40:fe:2a:38: b6:ac:c1:0e:b0:62:8d:d1:05:af:4f:a5:a6:d0:2f:65:d0:e1: 9f:aa:4c:65:e3:f6:45:b1:b0:ac:47:1e:d0:4a:62:05:40:b7: 0e:cd:2e:7b:8f:81:9e:6e:29:6f:28:c5:87:fc:87:ec:fb:d9: 3e:27:60:0b:c6:0a:2a:93:6a:3e:21:3c:69:9f:6c:a6:10:8b: f1:df:10:e9:8c:ff:73:e3:4a:7f:f5:fa:c2:09:a8:8f:a1:c7: da:d4:5c:8a:d5:d0:bf:6f:52:5a:3e:42:ae:7c:ee:8b:ca:fa: 9f:7d:f5:88:45:a2:48:b6:74:f9:3b:a3:54:47:e4:34:94:b9: 21:61:02:93:1b:10:49:83:70:21:31:c0:60:bc:cf:10:77:4a: 94:11:aa:c5:75:33:92:be:e7:25:a6:f5:2e:42:9c:50:98:32: 53:a7:c3:26:19:73:55:7c:8c:f4:cd:a7:40:23:68:e0:3f:1a: a8:6d:2a:58:9f:59:6a:7c:48:40:4f:87:5e:c9:88:ca:3d:a0: 37:8f:ae:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjYwNDI3MDExNzQ4WhcNMjYwNTA0MDExNzQ4WjAYMRYwFAYD VQQDEw02OWVlYjkzYy1lYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov81litIAz9dL75nWEqUYrfd0LUWxWSs/E6uxhvawhit/LRVceVEyDSN5pry wNaZclZxC+uAUstYEWXSS8or4VSEtZz7JBKtr4CwI1uAW4vki9wDNWgQiyYlTruH pr0ShLbRWEfqSaNcrZrCBvIX9vkc7IrhT8UlF2ce+55y/9uHlDxpeQ7G8wLSovdK 9JHrHedErKr/vSuebZ8gEwY/OkD/jNY3aSwZqffheHW88fuUIcc7FCNAWu+qS50O hWTzuMsQY+sqIqRTTZuBhEFjn8FzjkhN9wzG2OSZaW305TfyfdPg7sjew10/5Fu3 6yNhnQayKAHHVdF3qC1okb1fjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYhcl0j YvzfQ+cCNdObRL0GJLWfMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQ+VbWbqHFkPSWJTdW4oK9UmfkGLd6OWPPip9fMU6kdKYOTi+G4QqVZMsjI9 ReOgsT9A/io4tqzBDrBijdEFr0+lptAvZdDhn6pMZeP2RbGwrEce0EpiBUC3Ds0u e4+Bnm4pbyjFh/yH7PvZPidgC8YKKpNqPiE8aZ9sphCL8d8Q6Yz/c+NKf/X6wgmo j6HH2tRcitXQv29SWj5Crnzui8r6n331iEWiSLZ0+TujVEfkNJS5IWECkxsQSYNw ITHAYLzPEHdKlBGqxXUzkr7nJab1LkKcUJgyU6fDJhlzVXyM9M2nQCNo4D8aqG0q WJ9ZanxIQE+HXsmIyj2gN4+uyQ== -----END CERTIFICATE-----Generated at Tue Apr 28 12:47:22 2026 by rpki-client