$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: IT/w6rZmNStUTD17OK1u8DyimZq4/ikM9BJ87r08ZUY= Subject key identifier: 75:A0:58:F8:6F:F0:97:A3:7E:12:23:5F:C3:66:91:94:5B:FD:E4:EC Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 01AE Signing time: Wed 01 Apr 2026 04:02:48 +0000 Manifest this update: Wed 01 Apr 2026 04:02:48 +0000 Manifest next update: Wed 08 Apr 2026 04:02:48 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: TPwkcLiDv5bVzbM+1qVFPlbfCBEvmO8Xv16Xh+eWy8k=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 341ByImzn/WsspGGEhwYJpQ72ArO+/p3lUbnRz/LSbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Apr 1 04:02:48 2026 GMT Not After : Apr 8 04:02:48 2026 GMT Subject: CN=69cc98e8-49e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:93:c9:68:82:db:49:7f:85:51:6b:85:eb: b7:87:e3:d8:80:09:0f:79:39:43:de:20:8f:5d:f5: f7:9b:9a:e0:a9:db:43:12:3e:b6:f4:07:e5:c8:0c: 27:a2:fc:79:e4:18:70:92:f0:8d:64:b5:2b:a9:67: 38:14:b4:57:9c:55:f3:7f:23:ec:b3:3b:42:57:23: 43:09:62:45:78:b0:90:2b:a9:cc:ef:ce:bc:b7:e2: 15:fd:b9:3f:95:1f:91:80:28:30:62:12:cc:5e:ae: 59:29:56:e1:7d:e5:f4:86:3e:d3:da:f3:cd:21:0c: 44:d2:85:a4:08:ac:21:e6:63:d1:ab:25:33:c0:02: af:fd:bf:45:18:de:4f:44:63:36:48:7f:00:5a:32: e9:9f:6c:12:76:5e:b4:f3:c1:ed:9a:54:2b:0f:ca: 09:68:51:8a:4f:7d:bf:f7:2f:a8:bf:0d:e6:f9:0d: 2c:fc:83:aa:0b:a8:c7:33:a2:79:7e:5a:03:3d:e1: 93:47:a5:a9:5d:e3:0e:dd:54:bf:8c:a5:2c:71:ab: 13:d4:83:16:d7:70:51:d4:fe:67:5c:00:20:ee:3d: cd:d0:4e:87:65:df:03:cd:39:10:e7:61:0e:29:f6: 99:66:40:d7:be:42:12:60:89:5f:01:34:ce:58:61: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A0:58:F8:6F:F0:97:A3:7E:12:23:5F:C3:66:91:94:5B:FD:E4:EC X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:28:f7:09:f0:99:4c:14:39:ef:00:6b:50:5b:cf:fb:a9:49: d8:a2:08:6d:f9:d1:e5:3a:0e:f9:c1:b6:e7:bf:00:fe:9c:d9: dc:4d:01:10:ed:6b:28:ec:ed:aa:e6:e9:7e:f3:d0:91:9f:fd: 5f:44:79:6d:c2:7f:dd:fd:3f:fc:ee:e3:b5:38:dc:4e:0a:0a: ec:54:b8:ac:e1:00:bb:94:76:9c:3d:f5:96:de:f7:1e:1a:fa: e3:1d:82:0e:20:3f:0e:65:28:7b:27:9f:15:1d:99:01:92:f3: ec:85:dc:8d:6f:1d:4a:77:b2:f5:7b:c7:28:11:e6:0e:71:44: 9c:ed:c3:74:19:98:11:cf:70:2d:d8:7b:52:9c:30:1a:a6:d0: ee:b3:e1:5e:b5:7c:9a:f5:28:72:19:f4:2d:8f:e5:be:8d:42: 47:5f:5c:3b:39:d9:e0:b4:6c:ba:e9:5a:84:b7:f5:73:4a:e2: a9:26:c9:eb:3a:44:df:47:2a:8e:82:73:2c:de:df:f4:78:24: 9b:3c:06:0d:db:e5:0f:5a:c4:94:25:93:f7:d4:ef:8d:6e:31: 3e:dd:14:9a:90:7b:7b:16:6f:db:30:a3:10:21:bd:db:40:2a: 63:10:2e:db:2e:84:48:16:b6:e0:e5:a6:e7:8e:1a:1a:28:6a: cb:33:07:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjYwNDAxMDQwMjQ4WhcNMjYwNDA4MDQwMjQ4WjAYMRYwFAYD VQQDEw02OWNjOThlOC00OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/2TyWiC20l/hVFrheu3h+PYgAkPeTlD3iCPXfX3m5rgqdtDEj629AflyAwn ovx55BhwkvCNZLUrqWc4FLRXnFXzfyPssztCVyNDCWJFeLCQK6nM7868t+IV/bk/ lR+RgCgwYhLMXq5ZKVbhfeX0hj7T2vPNIQxE0oWkCKwh5mPRqyUzwAKv/b9FGN5P RGM2SH8AWjLpn2wSdl6088HtmlQrD8oJaFGKT32/9y+ovw3m+Q0s/IOqC6jHM6J5 floDPeGTR6WpXeMO3VS/jKUscasT1IMW13BR1P5nXAAg7j3N0E6HZd8DzTkQ52EO KfaZZkDXvkISYIlfATTOWGGz/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWgWPhv 8JejfhIjX8NmkZRb/eTsMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeij3CfCZTBQ57wBrUFvP+6lJ2KIIbfnR5ToO+cG2578A/pzZ3E0BEO1rKOzt qubpfvPQkZ/9X0R5bcJ/3f0//O7jtTjcTgoK7FS4rOEAu5R2nD31lt73Hhr64x2C DiA/DmUoeyefFR2ZAZLz7IXcjW8dSney9XvHKBHmDnFEnO3DdBmYEc9wLdh7Upww GqbQ7rPhXrV8mvUochn0LY/lvo1CR19cOznZ4LRsuulahLf1c0riqSbJ6zpE30cq joJzLN7f9HgkmzwGDdvlD1rElCWT99TvjW4xPt0UmpB7exZv2zCjECG920AqYxAu 2y6ESBa24OWm544aGihqyzMH1A== -----END CERTIFICATE-----Generated at Wed Apr 1 14:06:16 2026 by rpki-client