$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: 44LhIMliDTrqjahFPBB02h6Vgt6OoNB/+nfoROo11hw= Subject key identifier: 41:46:BB:AF:AF:43:3D:5A:E5:DB:88:8B:40:5A:B0:05:BE:37:33:D6 Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 01C1 Signing time: Sun 05 Apr 2026 03:16:45 +0000 Manifest this update: Sun 05 Apr 2026 03:16:44 +0000 Manifest next update: Sun 12 Apr 2026 03:16:44 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: gUoh2aHqTiNDT+vY5As//w6fI/HYmWO7M1vV+varNNI=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: v1uuoVFUnedlDTjjrQCWqm2VkiqYxyN2FpeHQY4I9y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: Apr 5 03:16:44 2026 GMT Not After : Apr 12 03:16:44 2026 GMT Subject: CN=69d1d41d-c8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ce:56:4a:29:ed:44:95:1b:01:48:cf:dc:a8: c4:c5:59:32:9a:e3:44:e6:4d:e8:95:ed:55:9f:5f: 00:60:1e:bc:e9:fd:f0:99:e2:39:14:98:3b:bc:cf: 32:58:4a:c6:59:9e:35:46:6f:ba:d9:21:8d:29:4d: c7:40:79:e9:7a:78:8d:33:1e:c2:b3:f4:96:26:2d: 83:ed:31:0d:97:d8:71:29:f6:19:ee:28:89:04:46: 31:24:72:d1:73:5e:80:13:2d:d7:c1:ea:3b:e4:33: 6a:14:da:49:d7:bd:5b:54:3d:2c:ac:e0:e0:8a:02: 24:94:bd:03:2c:25:a3:bb:52:bc:bd:9d:d9:c6:66: af:2c:13:cc:87:aa:53:98:e6:85:c5:c8:a6:d7:04: d8:a0:c5:17:75:7c:d4:76:5d:ff:38:e5:82:70:9b: 34:f3:45:8e:6e:19:28:36:44:39:dd:36:de:6d:5b: c4:5d:c4:13:15:35:96:ba:0b:d7:0b:b0:10:9c:33: ed:68:7e:57:d7:ef:f5:3a:91:85:0a:15:4a:c2:d9: d7:2f:d7:68:0b:13:a7:f8:43:91:25:11:bf:d1:c3: 2f:3d:dc:b3:71:9a:ed:a8:95:2e:61:a6:4b:6c:06: ff:64:fa:31:fc:4c:6d:e4:9a:9a:59:bc:27:50:76: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:46:BB:AF:AF:43:3D:5A:E5:DB:88:8B:40:5A:B0:05:BE:37:33:D6 X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b2:37:cf:f2:55:41:32:96:40:89:1c:4a:e7:09:8d:61:fc: 24:8c:2b:57:7a:87:f5:dc:a6:11:2a:ce:36:a8:20:ab:db:55: 39:c0:dc:03:25:88:c4:3b:bd:9f:f7:47:a9:0a:ef:2f:20:30: 1e:3a:f3:51:72:64:52:bd:0e:57:49:f6:f2:24:5b:15:75:4d: a1:b4:b6:02:c7:8d:ca:28:e0:b8:e6:20:0f:a5:7d:a4:a5:24: 71:9b:98:a5:b4:f1:5f:db:f8:eb:0e:83:ae:09:14:5a:ea:d4: 3d:da:c3:fa:e0:67:e8:7b:8c:ba:28:1d:0e:e7:6d:b1:a9:05: 95:70:33:17:bc:1a:e7:d6:de:51:c6:18:db:0a:0e:26:a9:d0: f6:40:ba:78:63:d7:fb:ca:04:f5:72:28:d0:b5:f9:2a:8b:12: 7a:24:21:26:f7:df:0d:a7:07:95:84:22:94:68:c3:de:f1:bb: 10:87:31:5d:9a:0e:6b:d0:a9:d9:a4:b8:b0:b2:4b:cf:87:c2: 27:de:e5:0e:4d:e1:f3:aa:2c:6b:31:28:af:e2:b2:73:e3:57: f1:65:32:42:b8:e8:d3:69:a8:ee:a7:92:6f:79:8d:55:71:b9: f7:54:28:2b:75:fa:63:80:f0:fb:61:04:ac:2e:cf:ba:d4:9d: 91:3f:fb:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdERDUxMTAvBgNVBAUTKDk0QzNFRThDQzA3MjRFQkEzQ0IxMDMyNEY5RURCODFC QUM4NTAzMjAwHhcNMjYwNDA1MDMxNjQ0WhcNMjYwNDEyMDMxNjQ0WjAYMRYwFAYD VQQDEw02OWQxZDQxZC1jOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA785WSintRJUbAUjP3KjExVkymuNE5k3ole1Vn18AYB686f3wmeI5FJg7vM8y WErGWZ41Rm+62SGNKU3HQHnpeniNMx7Cs/SWJi2D7TENl9hxKfYZ7iiJBEYxJHLR c16AEy3Xweo75DNqFNpJ171bVD0srODgigIklL0DLCWju1K8vZ3ZxmavLBPMh6pT mOaFxcim1wTYoMUXdXzUdl3/OOWCcJs080WObhkoNkQ53TbebVvEXcQTFTWWugvX C7AQnDPtaH5X1+/1OpGFChVKwtnXL9doCxOn+EORJRG/0cMvPdyzcZrtqJUuYaZL bAb/ZPox/Ext5JqaWbwnUHYo0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFGu6+v Qz1a5duIi0BasAW+NzPWMB8GA1UdIwQYMBaAFJTD7ozAck66PLEDJPntuBushQMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RENS8xNkQ0QjBEQzgx Q0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRybzhzUU1rLWUyNEc2eUZB eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RENS8xNkQ0QjBEQzgxQ0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRy bzhzUU1rLWUyNEc2eUZBeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7I3z/JVQTKWQIkcSucJjWH8JIwrV3qH9dymESrONqggq9tVOcDcAyWIxDu9 n/dHqQrvLyAwHjrzUXJkUr0OV0n28iRbFXVNobS2AseNyijguOYgD6V9pKUkcZuY pbTxX9v46w6DrgkUWurUPdrD+uBn6HuMuigdDudtsakFlXAzF7wa59beUcYY2woO JqnQ9kC6eGPX+8oE9XIo0LX5KosSeiQhJvffDacHlYQilGjD3vG7EIcxXZoOa9Cp 2aS4sLJLz4fCJ97lDk3h86osazEor+Kyc+NX8WUyQrjo02mo7qeSb3mNVXG591Qo K3X6Y4Dw+2EErC7PutSdkT/7dg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:25:59 2026 by rpki-client