$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: U/iB3BvSYPOPfXqIdk+AaXlJ0eNWqvKr7f3LAiIlV8w= Subject key identifier: 5B:0C:34:8F:DD:D1:5F:33:6B:64:32:40:47:27:36:CA:F6:49:82:BE Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 05A8 Signing time: Sat 04 Apr 2026 23:07:31 +0000 Manifest this update: Sat 04 Apr 2026 23:07:30 +0000 Manifest next update: Sat 11 Apr 2026 23:07:30 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: Omrli6BL6zkolqebXhjTAP5AUKt8UqadQWK5MfxB3Uc=) 2: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=) 3: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=) 4: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=) 5: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=) 6: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=) 7: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=) 8: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=) 9: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Apr 4 23:07:30 2026 GMT Not After : Apr 11 23:07:30 2026 GMT Subject: CN=69d199b3-f2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:a5:37:c3:9b:56:f5:82:da:db:36:5a:7e: 42:68:ee:29:56:f4:bf:d9:bb:5a:97:ac:f7:e9:05: 08:fc:e4:e0:0d:ac:6f:71:d7:ca:18:1c:7e:3d:90: 32:6f:df:a2:ac:4e:50:05:5f:8f:9c:8a:cd:f1:45: 4b:d2:de:f1:a8:c2:0e:d6:6a:78:4d:45:ce:bd:a9: a8:d8:1e:44:64:7b:09:b3:c1:2e:a6:59:a3:c6:50: f0:90:8c:0b:4e:65:9d:83:c3:ef:c5:16:d0:e2:64: 24:07:86:e4:45:56:c2:a9:93:ea:d2:2d:b2:1b:5a: 0a:7b:10:08:37:c3:91:54:4e:15:cc:e1:28:f8:91: 6d:c8:97:29:c7:f3:5b:a1:74:31:92:ba:a2:79:31: b5:a9:d6:ba:d4:6c:72:a9:d6:60:d9:a6:46:97:f0: 77:7c:b1:a7:c6:5a:e2:56:25:ba:29:46:d3:cf:76: 3d:6f:9b:f8:1c:cd:7b:fc:cc:7d:af:16:1c:38:a1: 10:37:fb:c9:6e:f4:33:e5:1f:4e:86:10:ee:de:dd: 34:91:22:f6:38:8f:fa:8b:98:0a:39:54:4d:a9:ae: 5f:42:0b:74:9e:d3:60:67:24:f0:2c:f1:fc:30:2e: 9b:83:4d:b4:79:96:e4:6a:c3:18:d0:ac:e5:d3:13: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0C:34:8F:DD:D1:5F:33:6B:64:32:40:47:27:36:CA:F6:49:82:BE X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f8:c0:e2:8c:61:75:89:9b:c9:5f:54:4b:e9:87:f3:1d:c5: 9b:7d:fb:50:27:6d:92:de:91:bb:fc:af:6d:0c:84:62:95:51: c8:31:3a:b6:aa:5d:e9:41:5e:28:91:61:42:41:a2:bb:ac:9a: fe:3e:7d:eb:6e:20:15:aa:dc:7d:28:da:a4:77:40:f0:40:42: 7c:c6:3f:0f:6e:06:13:2a:2a:41:ed:f7:63:42:35:19:0f:84: 7b:78:1b:16:d3:79:f5:5c:27:00:7f:4a:4e:fa:22:32:00:0b: 29:17:69:7e:f4:27:72:52:ca:19:f6:1f:eb:cf:c0:50:ff:8b: 7d:7e:3a:39:7b:42:c1:1b:27:08:2a:a0:b1:03:7d:40:fd:f4: 4a:e0:bf:43:80:39:97:1e:5e:07:23:4d:cb:c0:94:d1:79:7f: e7:8a:ec:b7:14:21:5a:ed:c1:07:92:e2:68:99:f3:ed:c2:99: 4d:1c:33:bc:3b:41:67:58:7f:a8:e9:d9:4a:43:95:a6:d6:7e: 3f:63:59:5a:af:e2:6b:94:a7:92:51:d9:2f:21:4d:0f:32:3a: e6:0f:28:eb:94:33:dd:48:04:0d:09:a1:bf:7a:c5:19:1f:48: 2b:4f:2d:0b:79:4d:54:25:ad:73:80:1d:40:0b:10:f0:bb:1f: 69:e9:e4:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjYwNDA0MjMwNzMwWhcNMjYwNDExMjMwNzMwWjAYMRYwFAYD VQQDEw02OWQxOTliMy1mMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeylN8ObVvWC2ts2Wn5CaO4pVvS/2btal6z36QUI/OTgDaxvcdfKGBx+PZAy b9+irE5QBV+PnIrN8UVL0t7xqMIO1mp4TUXOvamo2B5EZHsJs8EuplmjxlDwkIwL TmWdg8PvxRbQ4mQkB4bkRVbCqZPq0i2yG1oKexAIN8ORVE4VzOEo+JFtyJcpx/Nb oXQxkrqieTG1qda61GxyqdZg2aZGl/B3fLGnxlriViW6KUbTz3Y9b5v4HM17/Mx9 rxYcOKEQN/vJbvQz5R9OhhDu3t00kSL2OI/6i5gKOVRNqa5fQgt0ntNgZyTwLPH8 MC6bg020eZbkasMY0Kzl0xNnowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsMNI/d 0V8za2QyQEcnNsr2SYK+MB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs/jA4oxhdYmbyV9US+mH8x3Fm337UCdtkt6Ru/yvbQyEYpVRyDE6tqpd6UFe KJFhQkGiu6ya/j59624gFarcfSjapHdA8EBCfMY/D24GEyoqQe33Y0I1GQ+Ee3gb FtN59VwnAH9KTvoiMgALKRdpfvQnclLKGfYf68/AUP+LfX46OXtCwRsnCCqgsQN9 QP30SuC/Q4A5lx5eByNNy8CU0Xl/54rstxQhWu3BB5LiaJnz7cKZTRwzvDtBZ1h/ qOnZSkOVptZ+P2NZWq/ia5SnklHZLyFNDzI65g8o65Qz3UgEDQmhv3rFGR9IK08t C3lNVCWtc4AdQAsQ8LsfaenkZA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:10 2026 by rpki-client