$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json) Hash identifier: ZXZLp4L/3YZ+lB6P+qWPYFgygH/CqXxXOygS4oV/sO0= Subject key identifier: 65:24:F3:DD:33:8F:F0:85:94:C1:FF:06:3F:03:84:42:76:85:D8:BA Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft Manifest number: 3B Signing time: Thu 23 Apr 2026 08:22:01 +0000 Manifest this update: Thu 23 Apr 2026 08:22:00 +0000 Manifest next update: Thu 30 Apr 2026 08:22:00 +0000 Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: AW8KG4n5VlzVSaoKBQnYYKFf5UHVRq113W1V5eIixzI=) 2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 08:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Validity Not Before: Apr 23 08:22:00 2026 GMT Not After : Apr 30 08:22:00 2026 GMT Subject: CN=69e9d6a9-93c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:de:3b:15:ee:61:74:52:ca:5e:ba:a0:35: 26:a3:0b:49:97:b5:41:df:a8:14:2d:56:e8:8e:46: a7:28:08:56:fb:a0:7d:dd:7d:a8:a7:5e:ae:a4:ca: 21:4d:01:53:96:c4:b4:78:dd:e6:19:03:32:81:04: a3:6c:7a:84:b6:f1:08:1e:26:70:bd:6d:c3:5b:79: 98:96:68:80:4d:a4:54:5b:2c:b2:f8:95:4e:a1:a9: 80:fb:a1:fb:41:af:a6:ac:8e:13:7f:5d:dc:2a:5b: e5:47:31:1a:e4:5c:d0:38:03:bb:6d:09:23:12:ac: e1:72:12:ca:f2:fa:a4:ac:68:f2:67:79:8e:59:17: 74:82:b6:b6:d9:d9:7f:03:39:7e:bc:e0:16:14:20: ae:48:2b:a4:19:ff:91:69:52:79:17:8b:09:8b:91: f4:d9:f9:14:9f:9d:7b:a1:c3:4b:8e:e8:fc:ee:b0: 9d:2b:49:eb:48:ec:ae:21:9e:91:b3:1a:bb:81:2e: 9b:72:dc:f9:c6:4e:c7:a7:f0:91:1c:35:4c:78:50: 45:39:70:68:21:bb:c7:2b:a5:c5:c3:c3:50:31:aa: e3:56:c9:fd:8b:01:38:1b:53:89:c9:16:86:fc:5a: 8f:34:40:c4:9b:d0:a1:8c:33:14:18:8d:d5:41:6e: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:24:F3:DD:33:8F:F0:85:94:C1:FF:06:3F:03:84:42:76:85:D8:BA X509v3 Authority Key Identifier: keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:52:70:57:85:3a:61:49:18:83:8e:05:70:26:a4:5e:a1:be: 5b:57:20:7a:0f:d7:b8:c1:88:93:e4:7d:44:65:ef:dc:47:08: a5:f8:90:9a:93:8e:b5:5c:6a:fb:4d:2c:08:9d:fa:97:7f:ba: 2d:2c:43:d8:ca:5e:d6:60:10:cc:82:fe:e1:34:39:ef:bf:5e: 12:c4:6d:6e:5e:dc:fc:40:c0:0f:17:aa:ce:29:30:bb:79:31: d5:84:72:01:bc:7c:23:9c:af:28:2b:23:08:a5:4e:67:52:8d: 21:a8:b8:cf:f4:6d:9d:c7:b7:c6:96:33:87:91:ba:a7:6a:eb: a4:03:36:d5:f8:c6:cf:b4:41:43:7c:73:21:c9:72:66:69:8f: 2d:08:f2:69:60:44:31:50:e8:fd:03:e7:72:7d:56:45:d1:ea: db:84:41:f9:16:cb:c4:34:0b:d9:e4:98:34:58:5f:2e:dc:e9: 2e:13:85:f7:41:a8:de:0c:90:f9:71:75:f7:e3:ae:90:ff:6b: 5b:cd:40:c9:d7:8a:70:83:97:41:2f:b0:6a:96:e4:6d:85:d3: 9f:ad:81:62:7f:c2:c7:f8:6e:6e:57:c2:62:90:8e:7c:51:fd: ef:85:b0:3b:29:cd:5c:cb:73:16:db:cc:30:b2:05:9a:ef:b8: 0a:b2:71:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjQ2MDExMC8GA1UEBRMoOTQwRDI3QUUxNDRBQURDQTlFMzQ1MkNCMzhDMzIzNkFD QkY3MDI1QjAeFw0yNjA0MjMwODIyMDBaFw0yNjA0MzAwODIyMDBaMBgxFjAUBgNV BAMTDTY5ZTlkNmE5LTkzYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfk947Fe5hdFLKXrqgNSajC0mXtUHfqBQtVuiORqcoCFb7oH3dfainXq6kyiFN AVOWxLR43eYZAzKBBKNseoS28QgeJnC9bcNbeZiWaIBNpFRbLLL4lU6hqYD7oftB r6asjhN/XdwqW+VHMRrkXNA4A7ttCSMSrOFyEsry+qSsaPJneY5ZF3SCtrbZ2X8D OX684BYUIK5IK6QZ/5FpUnkXiwmLkfTZ+RSfnXuhw0uO6PzusJ0rSetI7K4hnpGz GruBLpty3PnGTsen8JEcNUx4UEU5cGghu8crpcXDw1AxquNWyf2LATgbU4nJFob8 Wo80QMSb0KGMMxQYjdVBbh3rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZSTz3TOP 8IWUwf8GPwOEQnaF2LowHwYDVR0jBBgwFoAUlA0nrhRKrcqeNFLLOMMjasv3Alsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCNDYwLzAyQUU0NjcyRUQy QTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fs cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEEwbnJoUktyY3FlTkZMTE9NTWphc3YzQWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC NDYwLzAyQUU0NjcyRUQyQTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNx ZU5GTExPTU1qYXN2M0Fscy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRUnBXhTphSRiDjgVwJqReob5bVyB6D9e4wYiT5H1EZe/cRwil+JCak461XGr7 TSwInfqXf7otLEPYyl7WYBDMgv7hNDnvv14SxG1uXtz8QMAPF6rOKTC7eTHVhHIB vHwjnK8oKyMIpU5nUo0hqLjP9G2dx7fGljOHkbqnauukAzbV+MbPtEFDfHMhyXJm aY8tCPJpYEQxUOj9A+dyfVZF0erbhEH5FsvENAvZ5Jg0WF8u3OkuE4X3QajeDJD5 cXX3466Q/2tbzUDJ14pwg5dBL7BqluRthdOfrYFif8LH+G5uV8JikI58Uf3vhbA7 Kc1cy3MW28wwsgWa77gKsnEq -----END CERTIFICATE-----Generated at Fri Apr 24 19:50:58 2026 by rpki-client