$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: sjNdikVlt/IgrQIuX4lYxbyZQLKkgmeMlPKFQDhA/w0= Subject key identifier: 92:37:F6:08:6E:B9:2A:D7:B7:C5:29:55:2C:03:3C:A1:E5:62:FC:CE Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: 0152 Signing time: Sun 05 Apr 2026 04:29:58 +0000 Manifest this update: Sun 05 Apr 2026 04:29:57 +0000 Manifest next update: Sun 12 Apr 2026 04:29:57 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: 6/Y8fCRAjM4XcdJRijHVV93eI2b4QEJPrsvePMQVf5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Apr 5 04:29:57 2026 GMT Not After : Apr 12 04:29:57 2026 GMT Subject: CN=69d1e546-5761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:04:12:53:2b:6b:c1:21:f8:24:5d:65:4e: 1e:23:1c:0e:91:b2:b3:c2:85:05:4d:c3:95:40:d9: 80:55:1e:1b:f8:6f:1b:a9:e2:94:fb:6d:a0:1d:1b: 89:85:18:f3:60:8c:71:8f:11:4e:4c:57:ac:e1:0c: 50:18:9a:9e:23:d2:9f:17:18:3b:8a:cf:d4:7c:b3: 4c:ed:55:6e:c6:66:21:f9:ea:35:31:47:16:3d:c3: 2a:e1:99:7b:06:c1:40:40:5e:90:8c:1f:f7:49:5e: 46:71:cf:f5:a4:72:d9:31:4b:47:3a:fc:bd:be:07: 00:3f:71:55:52:34:a3:34:a9:e2:ab:88:1b:d0:71: 88:e3:92:67:d0:e1:65:d0:53:31:f2:f1:2e:92:5e: 0d:32:3a:4f:0a:ff:5c:bc:c9:15:7a:e4:5f:78:8a: 15:6c:e2:e5:8e:62:b4:cb:c3:7a:a9:b9:5f:d1:41: 33:de:0b:75:08:87:17:35:bd:6f:09:63:a4:94:cf: ba:00:07:f6:7d:96:c0:cd:43:c7:b7:1e:e6:fa:03: f5:a3:b3:97:8f:09:83:c1:0b:cc:9a:ff:50:af:d8: 15:8a:af:98:3f:4b:89:87:94:68:b6:14:15:d7:5e: 0c:cd:6f:32:04:9b:e2:07:ca:d8:3c:44:8f:53:c9: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:37:F6:08:6E:B9:2A:D7:B7:C5:29:55:2C:03:3C:A1:E5:62:FC:CE X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a3:cb:d1:5c:dc:91:15:2e:bf:53:f9:75:00:3f:41:05:8b: de:3a:fe:c8:a9:ca:eb:71:09:56:22:2b:27:8f:55:b6:2b:1f: 21:c5:d7:3f:fd:69:86:69:6b:19:32:73:c3:71:ce:28:ab:7c: 89:20:b1:5c:cd:9d:f0:10:91:49:fc:1b:a8:2c:79:e3:77:38: 25:45:49:30:85:dc:a5:23:fc:bf:b4:c8:a9:36:68:fb:97:b9: a7:bd:72:94:c5:af:54:a8:98:8a:43:63:eb:b9:91:57:a3:a4: a5:69:3f:6f:a3:4b:95:54:11:b3:3a:1d:79:35:7e:ef:60:90: d7:e6:9c:ee:0c:12:74:2f:e4:a9:e8:59:d2:26:c1:4e:23:c1: d2:50:59:45:7a:dc:f2:7e:6e:02:5e:00:5b:7a:9f:26:51:02: 1d:4f:2c:8a:a1:3b:dc:12:b8:b7:74:7c:55:22:84:9f:4c:36: a5:99:21:9e:82:17:44:33:a4:8c:9e:5f:f9:b3:6e:44:22:7c: bf:c6:d7:f0:50:dc:83:1c:21:d8:90:37:f8:55:22:9c:45:f5: 59:82:64:b7:dd:55:d4:09:b1:b7:36:c3:7f:a9:42:9c:ee:2a: 96:d7:3f:b9:7e:28:5d:e2:57:21:ed:77:5e:b7:86:79:99:1e: d4:34:50:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjYwNDA1MDQyOTU3WhcNMjYwNDEyMDQyOTU3WjAYMRYwFAYD VQQDEw02OWQxZTU0Ni01NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8IEElMra8Eh+CRdZU4eIxwOkbKzwoUFTcOVQNmAVR4b+G8bqeKU+22gHRuJ hRjzYIxxjxFOTFes4QxQGJqeI9KfFxg7is/UfLNM7VVuxmYh+eo1MUcWPcMq4Zl7 BsFAQF6QjB/3SV5Gcc/1pHLZMUtHOvy9vgcAP3FVUjSjNKniq4gb0HGI45Jn0OFl 0FMx8vEukl4NMjpPCv9cvMkVeuRfeIoVbOLljmK0y8N6qblf0UEz3gt1CIcXNb1v CWOklM+6AAf2fZbAzUPHtx7m+gP1o7OXjwmDwQvMmv9Qr9gViq+YP0uJh5RothQV 114MzW8yBJviB8rYPESPU8ljxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJI39ghu uSrXt8UpVSwDPKHlYvzOMB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArKPL0VzckRUuv1P5dQA/QQWL3jr+yKnK63EJViIrJ49VtisfIcXXP/1phmlr GTJzw3HOKKt8iSCxXM2d8BCRSfwbqCx543c4JUVJMIXcpSP8v7TIqTZo+5e5p71y lMWvVKiYikNj67mRV6OkpWk/b6NLlVQRszodeTV+72CQ1+ac7gwSdC/kqehZ0ibB TiPB0lBZRXrc8n5uAl4AW3qfJlECHU8siqE73BK4t3R8VSKEn0w2pZkhnoIXRDOk jJ5f+bNuRCJ8v8bX8FDcgxwh2JA3+FUinEX1WYJkt91V1AmxtzbDf6lCnO4qltc/ uX4oXeJXIe13XreGeZke1DRQ4g== -----END CERTIFICATE-----Generated at Mon Apr 6 10:33:40 2026 by rpki-client