$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: CeU70YNcrbzUOkyhjWH6f9m22RwU8eNQs/RJx4kwT2M= Subject key identifier: C9:9A:4B:08:6D:0D:F6:EB:5F:95:E2:8E:BA:49:AA:0F:92:8A:FC:3A Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 56 Signing time: Fri 17 Apr 2026 07:57:50 +0000 Manifest this update: Fri 17 Apr 2026 07:57:50 +0000 Manifest next update: Fri 24 Apr 2026 07:57:50 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: p15dBAOwDclKWty6zvX/5h5rcPqwf2eFw6YkoV24HLk=) 2: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) 3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) 4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Apr 17 07:57:50 2026 GMT Not After : Apr 24 07:57:50 2026 GMT Subject: CN=69e1e7fe-e3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:23:d9:30:8d:cb:05:d7:31:2f:00:50:82: 8d:31:09:d0:bc:e1:df:e3:25:68:03:d8:a0:fb:6f: 0e:4d:7c:2b:6c:c0:2c:53:d3:b4:4f:61:ab:fc:0c: 3f:77:14:93:de:19:3d:e8:1b:95:76:8b:2a:82:ce: e7:31:48:e1:d1:90:48:89:48:cb:9d:f3:72:98:93: 43:1d:11:73:8b:5d:74:6c:06:1b:4a:31:9c:17:25: 4e:d7:b6:84:e2:c9:b9:61:36:d7:3d:1d:7c:4a:dc: 5b:93:d3:27:6a:03:97:04:f2:13:bd:6d:68:1f:63: e5:30:43:25:61:fb:70:92:4e:f2:aa:74:a3:e4:9e: 98:cb:95:05:8c:9c:f3:d7:2d:28:4a:b2:77:f4:59: 2a:13:a9:e4:9a:16:a2:f3:64:3e:de:8a:53:2c:ff: e9:e0:9d:e2:41:1c:0f:65:f1:88:4f:fc:d9:02:48: 04:02:fa:f4:bc:b6:6e:be:2a:f7:b2:8b:fd:ba:01: 06:b6:5a:49:cf:6a:61:6b:e3:92:21:a7:85:f2:c8: 0c:76:6c:ba:79:12:e8:8d:f4:12:ba:bf:99:68:82: e2:91:a5:46:d4:f4:69:3d:52:b7:e4:f8:95:8f:e2: c6:a6:43:2f:01:e9:b2:05:d1:0b:be:4a:a5:03:c8: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:4B:08:6D:0D:F6:EB:5F:95:E2:8E:BA:49:AA:0F:92:8A:FC:3A X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:74:da:9d:8c:b8:54:4a:65:49:1d:f3:0a:79:22:60:31:f4: a2:9d:25:ef:eb:a2:37:12:4b:f4:80:34:ce:22:6c:0b:25:18: 4f:7b:24:3c:b9:20:73:b0:77:4e:e6:2d:15:79:f3:75:2e:f8: 8e:e5:38:1e:f2:d2:db:73:dc:75:dc:ad:b7:f0:44:5c:eb:a8: 07:7b:ff:2a:66:7f:b7:06:50:4a:41:ae:2d:36:88:7a:58:df: 76:26:dc:77:99:1f:af:e6:fc:9a:1b:1c:33:27:89:48:28:8b: 8d:72:88:11:ba:8e:cd:4b:ff:db:22:fc:c7:b5:30:34:f4:49: 6f:0a:13:42:f8:16:4e:3a:af:e1:7c:7e:03:e2:98:21:8f:71: ec:ff:09:10:4e:9c:d5:25:e8:54:17:c0:1b:7a:54:91:44:7d: 26:52:31:5c:71:e3:46:5e:0c:66:05:61:22:dc:8c:78:a9:b7: 4d:6e:0f:ba:d6:01:e9:d5:10:e2:54:3c:a2:a7:fe:df:07:c3: 70:9b:de:eb:89:83:18:84:f8:81:4c:78:9c:a2:37:1b:a4:95: a9:2f:97:4a:78:57:0c:8c:56:fc:2b:c4:48:66:64:74:a5:0b: d3:b9:2b:0c:3b:fd:ee:c9:c4:af:8c:77:f7:88:bf:21:33:af: 1b:d2:b0:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNjA0MTcwNzU3NTBaFw0yNjA0MjQwNzU3NTBaMBgxFjAUBgNV BAMTDTY5ZTFlN2ZlLWUzZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLAiPZMI3LBdcxLwBQgo0xCdC84d/jJWgD2KD7bw5NfCtswCxT07RPYav8DD93 FJPeGT3oG5V2iyqCzucxSOHRkEiJSMud83KYk0MdEXOLXXRsBhtKMZwXJU7XtoTi yblhNtc9HXxK3FuT0ydqA5cE8hO9bWgfY+UwQyVh+3CSTvKqdKPknpjLlQWMnPPX LShKsnf0WSoTqeSaFqLzZD7eilMs/+ngneJBHA9l8YhP/NkCSAQC+vS8tm6+Kvey i/26AQa2WknPamFr45Ihp4XyyAx2bLp5EuiN9BK6v5loguKRpUbU9Gk9Urfk+JWP 4samQy8B6bIF0Qu+SqUDyKrbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyZpLCG0N 9utfleKOukmqD5KK/DowHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtdNqdjLhUSmVJHfMKeSJgMfSinSXv66I3Ekv0gDTOImwLJRhPeyQ8uSBzsHdO 5i0VefN1LviO5Tge8tLbc9x13K238ERc66gHe/8qZn+3BlBKQa4tNoh6WN92Jtx3 mR+v5vyaGxwzJ4lIKIuNcogRuo7NS//bIvzHtTA09ElvChNC+BZOOq/hfH4D4pgh j3Hs/wkQTpzVJehUF8AbelSRRH0mUjFcceNGXgxmBWEi3Ix4qbdNbg+61gHp1RDi VDyip/7fB8Nwm97riYMYhPiBTHicojcbpJWpL5dKeFcMjFb8K8RIZmR0pQvTuSsM O/3uycSvjHf3iL8hM68b0rD4 -----END CERTIFICATE-----Generated at Sat Apr 18 18:24:59 2026 by rpki-client