$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json) Hash identifier: a1AzLowpjrgPyH0KC5IZ083806SnYzixjAvibkyuzUA= Subject key identifier: DC:A9:B9:BD:9D:00:81:BC:40:40:A6:90:49:4D:EA:1A:78:03:E2:46 Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft Manifest number: 26 Signing time: Tue 21 Apr 2026 08:38:25 +0000 Manifest this update: Tue 21 Apr 2026 08:38:25 +0000 Manifest next update: Tue 28 Apr 2026 08:38:25 +0000 Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: ibL6kEN8XIUpXKbvtAQvQuO1ut7VQ1iN7gS7XCoMEVQ=) 2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=) 3: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Validity Not Before: Apr 21 08:38:25 2026 GMT Not After : Apr 28 08:38:25 2026 GMT Subject: CN=69e73781-4b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:bc:fb:39:71:bd:1b:99:d6:f0:5b:c5:5a: d5:3d:3a:ca:55:f6:18:a6:2a:58:15:32:a4:14:be: d1:3f:d7:aa:f1:62:45:91:d7:f6:74:67:b7:dc:a6: cd:ec:b9:13:3b:ae:c7:a3:cf:69:04:b3:fe:ea:2b: ca:3b:bb:0d:e4:c8:4a:bd:36:fc:a3:41:aa:d0:2e: 1d:78:d6:67:a6:1b:be:15:24:b7:fe:ca:32:1d:9c: f9:61:bf:42:78:e0:e0:3d:97:e3:5f:c6:19:7f:5f: 0b:33:b1:29:2e:d5:c4:84:7d:88:2d:cf:6f:b9:fb: 38:e9:8d:4e:60:2d:e9:b8:c9:a9:f6:62:fa:61:c9: f9:00:94:94:e0:58:2e:2e:6a:db:25:dc:2f:1e:9c: 9f:09:be:63:5d:f7:36:bf:6c:72:5f:6f:5b:e8:3c: 94:7e:d0:3a:67:72:f2:15:af:26:a2:be:5c:ce:3d: 3e:01:b7:7e:30:79:93:da:40:d8:4d:de:96:e0:f5: 98:62:55:55:75:c0:fc:61:7e:a5:92:fa:a6:6b:fb: 46:68:c1:84:72:a0:d6:86:8b:17:6b:1e:bf:e3:9f: 7e:b2:9c:9b:a5:e5:53:7b:61:43:4c:bf:56:79:6e: f0:05:5c:d4:41:68:7a:3d:23:50:76:6f:a8:8b:28: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:B9:BD:9D:00:81:BC:40:40:A6:90:49:4D:EA:1A:78:03:E2:46 X509v3 Authority Key Identifier: keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:31:2b:cd:3b:e2:f5:24:de:2b:a9:b9:66:17:6b:cb:6c:19: fa:a2:a6:97:59:f7:e4:24:12:16:9e:90:70:65:3a:f3:05:d8: 56:8f:a5:26:a7:c7:45:ff:da:21:40:77:3f:bb:c6:28:dd:5d: b8:93:02:56:e9:90:16:48:36:23:65:6e:c5:1f:4d:f2:65:a3: 10:41:e8:10:71:0e:da:09:07:49:7d:39:b0:99:ac:0c:a8:2f: 36:25:e2:e1:88:79:5d:24:fa:00:d4:d1:fe:a8:36:95:93:3a: a6:09:7c:5d:7b:9e:f5:c5:9f:33:6e:33:75:22:1f:06:b9:ba: 41:68:a4:16:3b:f4:72:38:14:74:a9:5d:ae:33:a6:75:18:fe: 5d:27:21:16:42:dc:fc:34:a4:9d:76:67:38:e3:01:44:d4:7f: 65:7c:6f:7f:f8:a7:c0:c7:8c:32:83:f5:6b:5b:73:0f:c7:da: aa:c1:4b:18:4c:0c:20:12:83:4c:5f:28:d3:bd:2b:fe:c5:67: b7:14:ee:92:b2:26:8a:e9:cf:c9:25:75:cf:48:5e:ca:35:9b: b4:fc:69:92:ea:e9:7f:ba:f0:2a:6e:8b:f3:4b:c4:52:eb:50: 89:c7:f0:99:86:24:05:e3:1a:a5:79:82:d4:ea:f1:a9:8c:f8: 9d:8d:c9:5a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzM0NzExMC8GA1UEBRMoRDMxMkVFNTBFNjUxRkFGMDM5NjhFREY0RUEwMDExNDlF NTk1RkMwRTAeFw0yNjA0MjEwODM4MjVaFw0yNjA0MjgwODM4MjVaMBgxFjAUBgNV BAMTDTY5ZTczNzgxLTRiMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv2Lz7OXG9G5nW8FvFWtU9OspV9himKlgVMqQUvtE/16rxYkWR1/Z0Z7fcps3s uRM7rsejz2kEs/7qK8o7uw3kyEq9NvyjQarQLh141memG74VJLf+yjIdnPlhv0J4 4OA9l+Nfxhl/XwszsSku1cSEfYgtz2+5+zjpjU5gLem4yan2YvphyfkAlJTgWC4u atsl3C8enJ8JvmNd9za/bHJfb1voPJR+0DpncvIVryaivlzOPT4Bt34weZPaQNhN 3pbg9ZhiVVV1wPxhfqWS+qZr+0ZowYRyoNaGixdrHr/jn36ynJul5VN7YUNMv1Z5 bvAFXNRBaHo9I1B2b6iLKC0BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3Km5vZ0A gbxAQKaQSU3qGngD4kYwHwYDVR0jBBgwFoAU0xLuUOZR+vA5aO306gARSeWV/A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzQ3LzRBOTM3MkY2MEUz RjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZBNWFPMzA2Z0FSU2VXVl9B NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMHhMdVVPWlItdkE1YU8zMDZnQVJTZVdWX0E0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzQ3LzRBOTM3MkY2MEUzRjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZB NWFPMzA2Z0FSU2VXVl9BNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4MSvNO+L1JN4rqblmF2vLbBn6oqaXWffkJBIWnpBwZTrzBdhWj6Ump8dF/9oh QHc/u8Yo3V24kwJW6ZAWSDYjZW7FH03yZaMQQegQcQ7aCQdJfTmwmawMqC82JeLh iHldJPoA1NH+qDaVkzqmCXxde571xZ8zbjN1Ih8GubpBaKQWO/RyOBR0qV2uM6Z1 GP5dJyEWQtz8NKSddmc44wFE1H9lfG9/+KfAx4wyg/VrW3MPx9qqwUsYTAwgEoNM XyjTvSv+xWe3FO6SsiaK6c/JJXXPSF7KNZu0/GmS6ul/uvAqbovzS8RS61CJx/CZ hiQF4xqleYLU6vGpjPidjcla -----END CERTIFICATE-----Generated at Wed Apr 22 00:09:59 2026 by rpki-client