$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: 6FqBcBhmjScsCyl8dwMnHhQG+0gcLSYfb+Xtcqc+hXc= Subject key identifier: 1F:78:2E:C3:0E:09:6F:2A:8D:3C:1F:D9:89:5A:A1:1E:C7:A8:1A:2C Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 0755 Signing time: Sat 04 Apr 2026 21:31:43 +0000 Manifest this update: Sat 04 Apr 2026 21:31:43 +0000 Manifest next update: Sat 11 Apr 2026 21:31:43 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: 07n4HOGTbMvuG0Ffv70rRyT7ZwVI9qMAyZl3emoa2yo=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Apr 4 21:31:43 2026 GMT Not After : Apr 11 21:31:43 2026 GMT Subject: CN=69d1833f-705b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:f0:27:77:d3:7d:99:6a:8f:97:8a:b9:dc: 48:b4:fc:a8:1a:89:e5:c3:e9:a7:f1:5a:e9:d7:c7: 42:f7:c5:18:d6:aa:a5:86:7b:3b:ab:9f:84:bf:20: ec:c1:f3:f1:64:7d:ae:3e:fc:05:31:9d:bd:25:c4: 22:de:8b:33:bd:b0:ad:91:b3:fd:11:cf:aa:9f:fb: fc:52:85:5e:8c:c9:dd:ff:6b:41:c5:08:28:78:40: c1:aa:1c:91:f8:af:26:d3:88:b7:38:4a:87:de:a2: de:ac:73:54:37:0b:f1:0f:e6:c5:02:dc:9c:2e:af: 90:f6:5a:35:c4:08:af:45:c0:c4:4e:34:11:e3:40: 62:88:46:f6:ea:72:09:1b:40:85:ee:e4:a1:b6:f0: c8:72:9c:28:dc:8f:78:09:fc:ef:dc:d7:27:24:bd: 61:a7:5a:94:cf:fc:7a:a0:d2:92:c8:6f:c5:60:c5: e7:a9:37:04:87:7e:57:f9:0a:ee:52:50:1e:5f:e7: 29:67:f4:43:8f:44:fb:80:b5:76:e4:9c:9f:05:d1: 93:71:cb:8f:d8:97:b0:03:98:bb:6a:0a:3f:6f:0f: a1:86:1f:a2:d2:20:ce:ca:6f:99:e1:07:20:4a:03: dc:28:e5:31:8a:4a:56:ac:9a:14:33:51:d6:bc:8d: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:78:2E:C3:0E:09:6F:2A:8D:3C:1F:D9:89:5A:A1:1E:C7:A8:1A:2C X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:26:29:58:f0:f2:72:e3:88:ea:68:44:fd:63:3c:5a:7e:d7: 9e:7a:2c:3a:55:5a:86:5a:ec:e1:2a:cb:b6:a4:ca:a3:49:50: 82:47:13:17:a6:82:ea:da:c6:24:d5:27:2d:c9:51:64:ab:c9: 6f:3f:03:6f:11:ff:ec:6a:7b:17:f6:3b:d3:9c:0e:35:e7:48: 76:2c:4f:bc:63:cc:30:9a:0a:02:6e:78:20:1c:de:f8:32:8e: 43:0f:10:39:5c:fd:4b:43:06:61:06:a3:f9:e6:5b:94:b3:e7: e1:a9:b0:34:4a:a6:8f:e6:b9:0c:b2:1e:6e:00:1c:a1:3d:a1: ab:a3:3e:90:4a:0b:f5:cf:94:8a:92:68:1d:b6:8b:b8:cd:63: 49:57:9e:2b:bc:77:48:78:3b:d4:0a:19:37:ed:da:21:cb:e0: 25:e1:36:2a:07:72:41:cd:a7:8b:bc:76:bd:e3:7b:18:35:3c: 9f:6b:b8:46:96:ee:bb:51:f6:15:cf:9c:22:7b:7f:40:c5:4e: 25:da:f8:e6:3c:b9:2f:9d:97:e7:43:7a:47:82:b8:f4:b6:3d: c5:25:dd:db:75:7b:f2:83:16:6a:42:9b:19:b7:c7:88:f1:bc: 3f:6c:f3:dd:0d:30:9c:ee:40:4f:e6:fb:51:95:21:9d:73:7a: 50:34:27:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjYwNDA0MjEzMTQzWhcNMjYwNDExMjEzMTQzWjAYMRYwFAYD VQQDEw02OWQxODMzZi03MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5rwJ3fTfZlqj5eKudxItPyoGonlw+mn8Vrp18dC98UY1qqlhns7q5+EvyDs wfPxZH2uPvwFMZ29JcQi3oszvbCtkbP9Ec+qn/v8UoVejMnd/2tBxQgoeEDBqhyR +K8m04i3OEqH3qLerHNUNwvxD+bFAtycLq+Q9lo1xAivRcDETjQR40BiiEb26nIJ G0CF7uShtvDIcpwo3I94Cfzv3NcnJL1hp1qUz/x6oNKSyG/FYMXnqTcEh35X+Qru UlAeX+cpZ/RDj0T7gLV25JyfBdGTccuP2JewA5i7ago/bw+hhh+i0iDOym+Z4Qcg SgPcKOUxikpWrJoUM1HWvI1BPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB94LsMO CW8qjTwf2YlaoR7HqBosMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOyYpWPDycuOI6mhE/WM8Wn7XnnosOlVahlrs4SrLtqTKo0lQgkcTF6aC6trG JNUnLclRZKvJbz8DbxH/7Gp7F/Y705wONedIdixPvGPMMJoKAm54IBze+DKOQw8Q OVz9S0MGYQaj+eZblLPn4amwNEqmj+a5DLIebgAcoT2hq6M+kEoL9c+UipJoHbaL uM1jSVeeK7x3SHg71AoZN+3aIcvgJeE2KgdyQc2ni7x2veN7GDU8n2u4Rpbuu1H2 Fc+cInt/QMVOJdr45jy5L52X50N6R4K49LY9xSXd23V78oMWakKbGbfHiPG8P2zz 3Q0wnO5AT+b7UZUhnXN6UDQntQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:36 2026 by rpki-client