$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: 09IqLKpqM1/neUQoMC0z7c7/fmaKV37B6Abrb+CrerI= Subject key identifier: 21:FB:A6:96:B1:CB:58:69:45:61:C0:4A:39:3D:85:A2:A9:63:01:73 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0898 Signing time: Sat 04 Apr 2026 20:21:07 +0000 Manifest this update: Sat 04 Apr 2026 20:21:06 +0000 Manifest next update: Sat 11 Apr 2026 20:21:06 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: ifU0k3BZ/LU0zQngtv1iUSpzYQIYemb1skcOUe8VDCA=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: My4vP+7ejMRWzliSWfidB1ey8yz0H3py9TXfGkF1uec=) 3: FB53E88A2D9F11F19981FFD49F833773.roa (hash: Vb5kye3Zp6BaCgKROMOkNqG+CyfGhNDOhiNWrHaqH5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Apr 4 20:21:06 2026 GMT Not After : Apr 11 20:21:06 2026 GMT Subject: CN=69d172b3-8f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:13:0a:7b:4f:ec:3b:fe:f2:4c:15:5e:a8: 04:ef:b9:f1:8c:59:86:34:fa:c1:77:63:d8:39:96: 23:b3:65:fa:c8:a7:37:e0:fb:55:08:83:ea:10:4e: 87:21:27:6e:14:2b:6a:c3:79:b0:81:c1:4d:e4:1c: f4:d6:0f:9b:08:fc:31:6f:d6:fd:99:26:8c:b1:74: df:c3:63:45:e4:24:58:d7:17:85:ed:c4:8f:b2:8b: 43:49:59:07:47:19:23:d5:50:e4:d7:fc:f4:f8:f9: f9:64:0e:d1:bb:17:dd:43:c2:70:d9:c8:d4:d3:48: b1:a4:4f:80:a8:65:19:40:27:2e:7b:24:39:dc:70: 6d:5e:ab:c0:91:41:77:87:e2:b4:71:e0:2b:f0:b0: b8:e5:89:81:4d:dc:36:0b:86:de:a9:9b:6e:c5:20: b1:11:e2:7d:40:2f:5d:49:da:ce:94:ba:d3:52:92: cc:4d:f3:81:50:59:05:5f:8f:38:fc:cf:64:d6:a7: 9b:a0:ce:a5:82:2c:0b:cc:2c:bf:6e:e7:bc:93:25: 5f:92:b9:3c:26:e7:a9:cc:13:47:5f:ad:fa:5a:dc: 2f:82:5b:58:74:1b:79:aa:c5:7d:2c:cc:2f:4a:d4: 25:55:e0:c3:5f:f6:fe:b4:8a:bd:a8:53:ea:46:d0: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:A6:96:B1:CB:58:69:45:61:C0:4A:39:3D:85:A2:A9:63:01:73 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7d:ad:30:25:23:d6:da:37:9c:20:19:5b:0d:da:f9:63:85: 85:e9:5e:a7:2a:60:9c:21:b9:61:42:2f:e1:d9:c8:05:22:e2: a8:4c:a5:ff:c5:0c:70:7b:22:80:7d:ff:57:92:1b:57:f6:64: f8:df:05:c6:78:e5:97:06:e6:73:ec:29:91:73:13:43:57:0a: b1:1e:17:29:ab:88:86:93:ef:63:23:a3:fe:9d:a4:9f:37:d5: ab:ff:02:82:ee:3e:7d:c9:69:07:38:74:b8:4b:53:e4:90:67: d9:e7:f5:5a:3b:11:f6:96:88:c9:1b:3b:3f:78:64:4b:c8:40: 16:d9:8a:53:31:94:d6:9a:6d:90:68:da:17:07:1e:96:47:22: 98:4e:30:87:d2:18:c2:a2:f8:3d:f0:86:06:d5:04:ef:d6:76: 28:e4:9c:a9:2f:04:da:8c:7d:dc:0b:1f:14:1f:46:9c:f9:bf: 2d:65:3b:3e:a7:7e:bf:ca:41:25:0e:e0:e2:c8:7c:71:af:0c: 6a:f6:0e:41:f2:e2:82:54:e4:66:0a:a3:b9:11:3c:95:36:0c: d7:9e:53:4d:91:92:d8:db:6c:cf:36:2a:4c:94:ab:44:aa:24: 1a:6c:5e:61:64:6f:72:42:55:33:ee:7d:02:d2:fa:bd:6e:38: 19:08:2b:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwNDA0MjAyMTA2WhcNMjYwNDExMjAyMTA2WjAYMRYwFAYD VQQDEw02OWQxNzJiMy04ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9QTCntP7Dv+8kwVXqgE77nxjFmGNPrBd2PYOZYjs2X6yKc34PtVCIPqEE6H ISduFCtqw3mwgcFN5Bz01g+bCPwxb9b9mSaMsXTfw2NF5CRY1xeF7cSPsotDSVkH Rxkj1VDk1/z0+Pn5ZA7RuxfdQ8Jw2cjU00ixpE+AqGUZQCcueyQ53HBtXqvAkUF3 h+K0ceAr8LC45YmBTdw2C4beqZtuxSCxEeJ9QC9dSdrOlLrTUpLMTfOBUFkFX484 /M9k1qeboM6lgiwLzCy/bue8kyVfkrk8JuepzBNHX636WtwvgltYdBt5qsV9LMwv StQlVeDDX/b+tIq9qFPqRtD84wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH7ppax y1hpRWHASjk9haKpYwFzMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnX2tMCUj1to3nCAZWw3a+WOFhelepypgnCG5YUIv4dnIBSLiqEyl/8UMcHsi gH3/V5IbV/Zk+N8Fxnjllwbmc+wpkXMTQ1cKsR4XKauIhpPvYyOj/p2knzfVq/8C gu4+fclpBzh0uEtT5JBn2ef1WjsR9paIyRs7P3hkS8hAFtmKUzGU1pptkGjaFwce lkcimE4wh9IYwqL4PfCGBtUE79Z2KOScqS8E2ox93AsfFB9GnPm/LWU7Pqd+v8pB JQ7g4sh8ca8MavYOQfLiglTkZgqjuRE8lTYM155TTZGS2NtszzYqTJSrRKokGmxe YWRvckJVM+59AtL6vW44GQgrxg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:14 2026 by rpki-client