$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: 0JP7WDt3bk7sZqN1NgyLifMaBrf3JurVuTlA0exqbOI= Subject key identifier: 13:06:EC:5A:17:FE:44:0B:06:29:61:20:70:CD:9E:88:CA:25:51:09 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0C4E Signing time: Tue 28 Apr 2026 18:54:58 +0000 Manifest this update: Tue 28 Apr 2026 18:54:57 +0000 Manifest next update: Tue 05 May 2026 18:54:57 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: XaZpQB/fr+Y++7tay+3OXWTMrUT3IZnDlCa1ob7NJbo=) 2: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=) 3: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=) 4: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 18:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Apr 28 18:54:57 2026 GMT Not After : May 5 18:54:57 2026 GMT Subject: CN=69f10282-e855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:44:28:3f:45:e4:7d:19:fc:37:a7:e2:ee: 25:c1:4e:3d:41:a0:73:93:66:6b:83:fd:13:6e:a3: dd:4f:1c:b4:af:7f:76:c8:40:89:48:4a:14:7e:e8: de:41:10:b2:ba:c7:84:ed:8d:72:b5:09:95:c3:41: 52:eb:fc:ba:d6:af:06:bd:c1:bf:72:37:01:5e:e0: 5f:c4:60:63:27:64:07:91:ce:71:0d:76:61:a3:50: 9a:be:7e:dd:7f:e1:76:3b:b0:50:22:b6:f2:8f:e8: 99:74:00:54:fa:9d:ee:5e:e4:0d:a8:d5:9a:34:06: 6a:3b:f8:d7:8c:ba:48:bd:5b:3d:eb:b7:9a:f5:14: 18:b5:98:a0:fe:88:40:10:1d:c2:c8:23:eb:21:48: c9:35:4f:f2:d0:42:83:dc:8d:2e:62:13:75:1e:6e: d5:64:f1:8b:5d:83:02:08:69:3b:4a:9f:ee:4b:10: 47:24:f4:cb:b0:fe:da:f2:fb:33:41:6e:60:eb:c0: 29:cd:9d:25:67:7a:95:c6:c4:1f:9d:9a:bf:fb:c5: b0:bd:37:92:62:6a:82:0c:11:86:9a:dd:9c:d0:10: 55:a1:05:b1:4c:02:ac:a4:d4:94:e5:91:0e:11:b5: 04:29:67:4a:22:c5:74:0c:e8:87:bd:04:41:f7:48: ed:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:06:EC:5A:17:FE:44:0B:06:29:61:20:70:CD:9E:88:CA:25:51:09 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1c:b5:d2:c2:43:80:d6:93:80:14:41:ac:17:a3:ca:90:c0: 75:3b:68:e1:9c:84:9c:b2:ca:23:88:99:b5:dd:21:d5:e9:38: 01:16:19:33:fc:0a:af:63:e6:1f:b8:aa:91:25:d2:a4:e9:72: bf:30:46:c4:be:9a:df:bb:d6:18:82:d7:fc:e3:f9:59:7a:dd: 36:0a:07:da:f1:04:3a:fa:a7:3d:56:1b:cd:e9:bd:29:25:72: 19:56:95:1c:fd:de:8d:5c:e1:a0:54:21:2c:11:81:cd:2b:16: d9:82:f8:62:91:1f:03:fb:8a:5f:52:b5:8f:e9:76:5a:40:dd: cb:34:9e:e0:d9:ab:f7:23:c2:f7:8a:73:c2:51:2a:24:eb:e6: ff:b6:71:fa:70:95:a8:01:14:cf:7f:90:3a:49:d4:00:21:4a: 42:86:ca:68:06:be:43:83:39:38:0d:be:0e:19:07:a7:d9:35: 7a:34:5b:86:4d:f1:57:7f:92:7f:af:15:7a:fe:6a:54:7b:cf: 4f:86:42:e4:5b:f2:35:d9:5c:12:eb:98:a4:6c:74:05:cd:f2: 2f:9d:69:e5:52:cb:e1:a6:cf:54:7d:e0:f9:65:11:21:77:09: 50:d1:42:88:09:7f:21:03:22:87:53:11:c9:30:7d:a7:b3:9e: 74:83:7e:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjYwNDI4MTg1NDU3WhcNMjYwNTA1MTg1NDU3WjAYMRYwFAYD VQQDEw02OWYxMDI4Mi1lODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkQpEKD9F5H0Z/Den4u4lwU49QaBzk2Zrg/0TbqPdTxy0r392yECJSEoUfuje QRCyuseE7Y1ytQmVw0FS6/y61q8GvcG/cjcBXuBfxGBjJ2QHkc5xDXZho1Cavn7d f+F2O7BQIrbyj+iZdABU+p3uXuQNqNWaNAZqO/jXjLpIvVs967ea9RQYtZig/ohA EB3CyCPrIUjJNU/y0EKD3I0uYhN1Hm7VZPGLXYMCCGk7Sp/uSxBHJPTLsP7a8vsz QW5g68ApzZ0lZ3qVxsQfnZq/+8WwvTeSYmqCDBGGmt2c0BBVoQWxTAKspNSU5ZEO EbUEKWdKIsV0DOiHvQRB90jtcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMG7FoX /kQLBilhIHDNnojKJVEJMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWxy10sJDgNaTgBRBrBejypDAdTto4ZyEnLLKI4iZtd0h1ek4ARYZM/wKr2Pm H7iqkSXSpOlyvzBGxL6a37vWGILX/OP5WXrdNgoH2vEEOvqnPVYbzem9KSVyGVaV HP3ejVzhoFQhLBGBzSsW2YL4YpEfA/uKX1K1j+l2WkDdyzSe4Nmr9yPC94pzwlEq JOvm/7Zx+nCVqAEUz3+QOknUACFKQobKaAa+Q4M5OA2+DhkHp9k1ejRbhk3xV3+S f68Vev5qVHvPT4ZC5FvyNdlcEuuYpGx0Bc3yL51p5VLL4abPVH3g+WURIXcJUNFC iAl/IQMih1MRyTB9p7OedIN+0A== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:42 2026 by rpki-client