$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: nUFakycCQpgDoZQ8Mcphj8ZQLYbCVh5/S4XdH98ra8I= Subject key identifier: EB:AA:AB:7B:F3:2A:41:27:C8:FB:FC:FC:50:8D:2E:FF:E1:7A:C4:5B Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: 95 Signing time: Sun 05 Apr 2026 06:59:49 +0000 Manifest this update: Sun 05 Apr 2026 06:59:48 +0000 Manifest next update: Sun 12 Apr 2026 06:59:48 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: MWySgI93FH2YmMrC4v9z1Yf9oVVQNOIYQiGo+AjHlIU=) 2: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) 3: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Apr 5 06:59:48 2026 GMT Not After : Apr 12 06:59:48 2026 GMT Subject: CN=69d20865-8814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:4a:ed:bb:cb:6e:3e:ca:1a:b0:43:98:2a: c5:94:e2:1a:24:44:e7:6e:60:39:f3:6e:13:5f:d4: 69:db:f9:51:e2:7a:af:fc:d5:cf:92:a8:f9:a6:b5: 17:8a:e2:19:fb:62:fb:12:8b:4e:de:c7:a3:1a:b6: c3:2d:ba:81:30:60:e4:e3:fb:5c:e0:b1:73:9f:3f: 26:50:55:2e:00:48:c4:ff:48:66:76:77:58:ae:63: f4:1c:dd:e7:2b:e6:a5:23:7b:ba:4e:5d:01:df:85: 43:8c:90:4b:5a:62:39:95:05:5c:2d:1c:f2:93:6f: 25:b5:2a:1d:8e:ef:9e:19:51:e2:f7:d6:65:d9:4c: 38:02:29:3d:72:66:cb:72:38:0c:e3:72:c2:9c:a3: 12:c2:f6:88:68:9f:a3:98:ca:c0:01:04:0c:f3:4b: 2a:50:0c:5a:70:25:64:17:b8:42:18:5e:b1:69:b9: df:0a:91:21:1b:30:9f:b7:01:23:44:d0:7d:bc:66: b2:18:5c:b8:9a:d3:e0:c0:0c:ed:2a:d4:11:0d:61: 0d:ea:ba:3b:08:4d:dc:66:c5:de:be:6a:83:ee:68: 9d:ef:9c:5a:21:44:31:39:32:6e:f2:ac:51:0f:2d: 33:96:a2:ea:c4:2e:d8:be:a5:3a:42:ad:e2:ff:f6: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AA:AB:7B:F3:2A:41:27:C8:FB:FC:FC:50:8D:2E:FF:E1:7A:C4:5B X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:84:bc:be:1c:df:99:91:9f:07:d8:99:10:5a:ba:4a:b4: d8:a7:12:89:d8:f7:5f:85:d3:82:9b:a2:c2:d3:b6:94:e2:8f: 18:17:fd:90:6b:92:1f:37:c5:ae:61:28:94:24:be:c6:e5:3e: 5d:f0:12:1d:22:e8:6c:d3:d7:7b:70:ad:67:75:91:41:41:3c: 0c:36:8e:1e:34:6f:e9:c6:17:25:ce:62:c4:fd:8f:63:e9:c5: 7a:c7:24:4c:69:28:ad:0a:94:af:c3:c0:a2:b2:4b:f5:9f:32: 94:80:0e:5f:b7:46:c5:7b:bc:d8:f5:a0:f3:4d:9d:10:78:36: e0:0f:47:21:0e:b4:b0:26:7d:70:c7:2b:3a:96:05:73:ff:98: 54:85:ba:f4:1a:6e:69:e6:02:cb:d7:5d:14:7b:27:f3:be:5a: 1b:f4:08:93:5c:8d:bc:c3:28:41:ed:5a:34:f0:7c:44:d5:f4: 44:87:4f:8e:50:8d:33:7e:ee:7e:4a:01:2b:d7:62:00:0c:86: a5:c6:36:06:bd:87:d8:07:ae:fe:0b:0b:16:92:00:98:74:b9: 39:e3:46:3f:ff:13:8e:ff:1e:e4:54:06:40:33:dc:04:49:b6: f4:5a:21:62:c5:5b:70:f5:a6:e2:6e:59:f8:9f:99:48:89:74: 9a:67:67:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYwNDA1MDY1OTQ4WhcNMjYwNDEyMDY1OTQ4WjAYMRYwFAYD VQQDEw02OWQyMDg2NS04ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlC1K7bvLbj7KGrBDmCrFlOIaJETnbmA5824TX9Rp2/lR4nqv/NXPkqj5prUX iuIZ+2L7EotO3sejGrbDLbqBMGDk4/tc4LFznz8mUFUuAEjE/0hmdndYrmP0HN3n K+alI3u6Tl0B34VDjJBLWmI5lQVcLRzyk28ltSodju+eGVHi99Zl2Uw4Aik9cmbL cjgM43LCnKMSwvaIaJ+jmMrAAQQM80sqUAxacCVkF7hCGF6xabnfCpEhGzCftwEj RNB9vGayGFy4mtPgwAztKtQRDWEN6ro7CE3cZsXevmqD7mid75xaIUQxOTJu8qxR Dy0zlqLqxC7YvqU6Qq3i//a05QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuqq3vz KkEnyPv8/FCNLv/hesRbMB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASAuEvL4c35mRnwfYmRBaukq02KcSidj3X4XTgpuiwtO2lOKPGBf9kGuSHzfF rmEolCS+xuU+XfASHSLobNPXe3CtZ3WRQUE8DDaOHjRv6cYXJc5ixP2PY+nFesck TGkorQqUr8PAorJL9Z8ylIAOX7dGxXu82PWg802dEHg24A9HIQ60sCZ9cMcrOpYF c/+YVIW69BpuaeYCy9ddFHsn875aG/QIk1yNvMMoQe1aNPB8RNX0RIdPjlCNM37u fkoBK9diAAyGpcY2Br2H2Aeu/gsLFpIAmHS5OeNGP/8Tjv8e5FQGQDPcBEm29Foh YsVbcPWm4m5Z+J+ZSIl0mmdnaA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:34 2026 by rpki-client