$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: oV7UyMlZaY4SbphB7KZukiQeYulapeZ8cF7rbaEl0J4= Subject key identifier: BB:BB:0A:9A:BD:5F:3E:F6:C2:F1:BE:B9:03:10:39:A4:0C:0C:01:7E Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 0165 Signing time: Sun 05 Apr 2026 04:20:07 +0000 Manifest this update: Sun 05 Apr 2026 04:20:07 +0000 Manifest next update: Sun 12 Apr 2026 04:20:07 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: fBE4XUfC1w32S1OcSkLYJyjaFE6M13cADgIxDTnX2yU=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Apr 5 04:20:07 2026 GMT Not After : Apr 12 04:20:07 2026 GMT Subject: CN=69d1e2f7-315c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:fa:ef:95:64:b8:58:46:fb:b6:ff:8c:f1: c1:b6:5b:27:c0:66:cd:e8:9a:14:52:4c:dd:49:f4: c4:b6:23:7b:13:ba:3a:a9:24:09:8f:34:1f:1d:1d: 7e:5e:21:a9:5e:f7:4a:d1:8d:d8:12:d0:ec:aa:75: 53:b5:10:9d:e3:29:43:dc:b9:1e:11:7e:e7:58:4c: 9b:55:13:85:c1:5e:33:00:0d:dd:4c:56:34:a2:3f: 77:8c:29:5c:8a:70:3f:86:a7:ad:5b:33:2b:5f:83: 7a:79:d3:41:9f:b4:b7:b5:63:06:47:07:f7:52:f3: cb:12:fb:7d:42:31:c9:d6:97:60:81:9a:0f:df:f1: 7c:82:d6:b7:45:48:db:72:15:50:93:4f:b8:4d:b8: cc:6a:2c:ed:35:88:00:09:5c:ca:1f:64:65:15:ca: 6d:cc:64:e0:0b:64:97:9d:8d:23:db:8f:0b:53:76: f9:86:b2:01:17:0d:eb:1c:b4:5d:04:bb:09:c2:38: 5d:9e:20:51:12:dd:78:3f:f5:0f:b0:5f:59:01:c3: f7:fc:2a:06:b3:10:d7:d0:25:c0:de:3c:f0:7f:b7: 26:5d:71:4d:fe:ff:68:4d:0d:f9:1b:e6:58:14:ff: 78:b5:90:de:d6:e3:f2:d3:c1:94:cc:4d:81:32:47: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BB:0A:9A:BD:5F:3E:F6:C2:F1:BE:B9:03:10:39:A4:0C:0C:01:7E X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d7:59:c7:40:fb:3b:fd:19:a3:78:f3:cf:89:65:08:b0:46: 99:de:07:39:7d:e5:78:5e:6d:32:89:2f:2c:98:4f:6a:0e:f7: f4:a4:43:26:c3:71:3d:df:08:2e:e5:3a:b0:fe:d3:e1:3f:8d: 95:14:cb:5f:65:82:e6:df:62:bc:c6:a5:be:82:0a:2e:4b:d4: 0b:e6:c5:6a:48:d0:8a:75:06:7f:4b:c9:de:b6:42:e0:8d:34: b3:50:54:33:71:d5:c5:20:9c:19:8f:3d:65:ca:b0:5d:42:a5: 3d:b4:ca:fc:f5:69:46:4d:61:66:3d:c7:84:da:95:c0:2d:61: bc:01:9b:72:d0:e3:cc:34:e7:11:8e:2b:fd:f0:36:b5:71:ec: e0:29:a2:30:dd:aa:e0:ce:b7:e4:bf:2e:29:ea:75:06:a7:c1: 13:22:fe:31:a5:26:04:4b:37:a8:75:28:35:df:14:44:ab:84: 13:e3:e9:b6:3c:b3:22:a5:df:77:ba:1d:78:cd:04:ce:64:95: 53:4e:2b:1d:2f:69:2e:a6:41:63:3a:3c:6d:c2:60:d0:7d:7a: 8f:fa:d2:a1:c6:07:93:26:10:5b:3d:ab:3a:cb:e5:04:7e:a6: 91:e8:9e:74:b9:bd:6b:d1:4c:71:9c:16:5b:63:b3:7a:a0:54: 62:ed:c2:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjYwNDA1MDQyMDA3WhcNMjYwNDEyMDQyMDA3WjAYMRYwFAYD VQQDEw02OWQxZTJmNy0zMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAivD675VkuFhG+7b/jPHBtlsnwGbN6JoUUkzdSfTEtiN7E7o6qSQJjzQfHR1+ XiGpXvdK0Y3YEtDsqnVTtRCd4ylD3LkeEX7nWEybVROFwV4zAA3dTFY0oj93jClc inA/hqetWzMrX4N6edNBn7S3tWMGRwf3UvPLEvt9QjHJ1pdggZoP3/F8gta3RUjb chVQk0+4TbjMaiztNYgACVzKH2RlFcptzGTgC2SXnY0j248LU3b5hrIBFw3rHLRd BLsJwjhdniBREt14P/UPsF9ZAcP3/CoGsxDX0CXA3jzwf7cmXXFN/v9oTQ35G+ZY FP94tZDe1uPy08GUzE2BMkeDiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLu7Cpq9 Xz72wvG+uQMQOaQMDAF+MB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhNdZx0D7O/0Zo3jzz4llCLBGmd4HOX3leF5tMokvLJhPag739KRDJsNxPd8I LuU6sP7T4T+NlRTLX2WC5t9ivMalvoIKLkvUC+bFakjQinUGf0vJ3rZC4I00s1BU M3HVxSCcGY89ZcqwXUKlPbTK/PVpRk1hZj3HhNqVwC1hvAGbctDjzDTnEY4r/fA2 tXHs4CmiMN2q4M635L8uKep1BqfBEyL+MaUmBEs3qHUoNd8URKuEE+PptjyzIqXf d7odeM0EzmSVU04rHS9pLqZBYzo8bcJg0H16j/rSocYHkyYQWz2rOsvlBH6mkeie dLm9a9FMcZwWW2OzeqBUYu3CfA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:58:17 2026 by rpki-client