$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: r6MyLDMjvgL4IpRWhgT6hGiMC2PMhMVGn6zvrQNKOuI= Subject key identifier: 20:0D:E3:82:80:E1:8C:49:42:46:96:79:33:80:21:3D:99:62:69:26 Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 14 Signing time: Thu 07 May 2026 08:52:15 +0000 Manifest this update: Thu 07 May 2026 08:52:14 +0000 Manifest next update: Thu 14 May 2026 08:52:14 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: lzi/Qv3Dn9hbyFJm/pM4xFH31Wd0nmNPqrXA7xexZzE=) 2: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) 3: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: May 7 08:52:14 2026 GMT Not After : May 14 08:52:14 2026 GMT Subject: CN=69fc52bf-c908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:04:1a:c3:4e:81:0b:29:4f:21:3b:1d:84: f7:8a:6d:ed:b5:60:fe:8d:d5:1f:3c:e8:ae:72:ab: 91:4f:35:26:d3:bd:a2:3b:b1:1d:0c:7c:42:8a:df: 00:1a:59:ea:e6:40:6a:e4:ea:e6:2b:20:2e:05:5b: 10:21:e9:87:f7:40:84:8b:c3:7d:75:b4:c6:b7:ee: e5:17:cc:e7:a5:f8:b8:9c:69:80:ea:cc:f3:5c:63: 5e:b8:8a:fb:1b:db:0f:e5:66:d8:70:73:fe:07:e5: f0:b1:76:36:a8:be:9c:c0:19:6a:4f:a4:62:89:7f: b6:24:27:34:36:d5:d2:7b:97:4f:6a:e0:4d:8c:b3: c4:be:fb:6a:37:3e:d6:a3:72:25:d3:28:26:f9:52: 4a:e3:75:10:91:89:1c:6f:a5:60:cd:4a:90:6c:f5: f7:80:dc:31:96:12:b1:7e:ce:c1:15:90:b5:08:78: 3d:48:b1:c2:c5:38:64:63:4f:39:0a:19:8d:03:21: 09:e9:39:df:0c:9f:bf:96:cf:fc:c3:98:ee:a6:8f: 69:ec:e7:53:10:df:ed:1b:8b:74:9a:74:ec:97:a5: b1:ed:14:3e:67:dd:67:bd:2e:03:88:d1:06:7e:d0: 59:47:16:eb:bd:15:dd:e9:4b:8d:da:c4:8a:fe:2a: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:E3:82:80:E1:8C:49:42:46:96:79:33:80:21:3D:99:62:69:26 X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:75:ce:f2:4d:6a:25:95:45:e1:de:3d:20:7a:7d:ab:01:6b: e0:48:cc:13:8a:a2:74:e7:c6:6e:00:9c:69:26:3d:99:b2:3e: 42:61:fe:ea:4d:e4:a9:24:66:26:0f:80:4a:99:b6:ac:39:b7: 08:5e:91:70:0a:5f:ec:e9:39:84:e4:ce:b8:85:fc:85:9a:b8: e0:bd:c6:c5:61:69:7e:6d:9e:42:dd:71:c6:95:76:a8:e8:3e: df:0a:c7:7e:0a:7c:ba:bc:46:b3:b2:97:3f:9b:af:b2:82:f1: 86:b6:ab:56:97:0e:2c:c5:76:74:d3:54:bf:97:ab:cb:ae:be: 5f:c8:af:ee:a9:fe:31:b8:28:42:18:af:66:50:67:17:46:f0: 2c:0a:d8:3b:70:97:7d:b6:0c:15:79:b3:42:30:ec:c0:1b:28: 16:49:6a:11:47:30:76:36:a2:0a:dd:cb:1a:df:e5:14:4a:15: c7:88:55:31:a3:df:73:67:6d:46:4a:92:75:98:3b:15:1d:90: 24:63:4d:20:26:89:f0:bf:28:16:0d:f8:13:29:39:ad:c4:64: df:37:67:d7:80:5f:64:ba:03:89:96:e8:ba:59:c2:75:35:13: e5:b7:21:44:78:e7:66:fb:c8:a1:43:42:1d:1c:fd:b0:e2:95: d9:22:75:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjA1MDcwODUyMTRaFw0yNjA1MTQwODUyMTRaMBgxFjAUBgNV BAMTDTY5ZmM1MmJmLWM5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkNwQaw06BCylPITsdhPeKbe21YP6N1R886K5yq5FPNSbTvaI7sR0MfEKK3wAa WermQGrk6uYrIC4FWxAh6Yf3QISLw311tMa37uUXzOel+LicaYDqzPNcY164ivsb 2w/lZthwc/4H5fCxdjaovpzAGWpPpGKJf7YkJzQ21dJ7l09q4E2Ms8S++2o3Ptaj ciXTKCb5UkrjdRCRiRxvpWDNSpBs9feA3DGWErF+zsEVkLUIeD1IscLFOGRjTzkK GY0DIQnpOd8Mn7+Wz/zDmO6mj2ns51MQ3+0bi3SadOyXpbHtFD5n3We9LgOI0QZ+ 0FlHFuu9Fd3pS43axIr+Kqm/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIA3jgoDh jElCRpZ5M4AhPZliaSYwHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXdc7yTWollUXh3j0gen2rAWvgSMwTiqJ058ZuAJxpJj2Zsj5CYf7qTeSpJGYm D4BKmbasObcIXpFwCl/s6TmE5M64hfyFmrjgvcbFYWl+bZ5C3XHGlXao6D7fCsd+ Cny6vEazspc/m6+ygvGGtqtWlw4sxXZ001S/l6vLrr5fyK/uqf4xuChCGK9mUGcX RvAsCtg7cJd9tgwVebNCMOzAGygWSWoRRzB2NqIK3csa3+UUShXHiFUxo99zZ21G SpJ1mDsVHZAkY00gJonwvygWDfgTKTmtxGTfN2fXgF9kugOJlui6WcJ1NRPltyFE eOdm+8ihQ0IdHP2w4pXZInV6 -----END CERTIFICATE-----Generated at Fri May 8 22:00:51 2026 by rpki-client