$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: GL1mkTiokqiYtgbBtMlZx+murB3wSrfu0YHrLNpv20k= Subject key identifier: E4:EB:39:D3:79:BC:99:4F:1E:8A:60:FC:01:5E:D4:1C:E5:81:5B:B4 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0BCC Signing time: Fri 24 Apr 2026 18:55:24 +0000 Manifest this update: Fri 24 Apr 2026 18:55:23 +0000 Manifest next update: Fri 01 May 2026 18:55:23 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: oRBWNoM9ZX9C8qm0u5q2rElvJ0pQixAm5YIrLcCOrLY=) 2: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vQgKkU+QtQWKKcMm6jhL0g3J0MHWWdGeRCmjJbM/2vU=) 3: F62847A2177911F18F01239F253D8C67.roa (hash: JBeW1rdY6GlTOUqqMMum9prGSAeNYsK+P09Gd+alKfI=) 4: F6A7E804177911F18F01239F253D8C67.roa (hash: Aqvsakafkw8x+1EMnuzVKvyQkhXbGYvngvcI/pmGvzY=) 5: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: nALmFx4QbD9mgsNW6j0fno4vQEX9hP6WHdbPbuXctXM=) 6: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: 7++VXIIQ/2BV1xHqCF3NwkqZGS7smz3wo59HOc5L1qA=) 7: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: QNaa4w23l7Y82bTjgOsQxPiCwaFcnV0djxntPTBPsOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 May 2026 16:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Apr 24 18:55:23 2026 GMT Not After : May 1 18:55:23 2026 GMT Subject: CN=69ebbc9c-8d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:4a:bf:7a:a0:2c:35:95:c7:96:50:c7:47: 98:1c:c2:13:eb:e3:51:52:fa:29:60:3f:56:d1:b2: 30:90:9e:77:d6:11:fc:c6:ab:22:ef:11:68:6f:32: ec:a1:06:fd:f2:9d:9e:1f:29:40:e1:1f:d6:72:b5: f5:e4:e0:ad:97:02:4a:58:d9:ac:87:5a:d9:77:65: e1:22:d1:f0:39:63:c8:9e:f8:87:bb:a8:2c:8a:d9: d4:3f:b2:78:2e:98:03:fe:8a:6b:86:68:59:46:49: f8:5e:8c:00:a3:c4:67:ab:5d:f7:1c:2b:1c:3d:a0: 22:fd:10:be:de:ea:cd:44:eb:5b:92:30:6c:fd:12: 1b:d2:22:f7:34:aa:e1:9a:f5:2d:1a:bf:73:e6:a2: 95:e5:3f:9e:2c:b1:f1:55:68:ab:dd:52:4c:53:1f: 38:45:dd:f8:22:e1:b6:a1:2d:78:b4:7a:e4:0a:7d: f4:a4:f6:16:82:e7:17:58:01:55:d6:ea:57:5b:c8: fc:f5:4b:4f:bf:3c:00:08:ca:ab:56:17:c3:ae:48: 81:c4:09:ba:03:35:a5:49:de:29:18:1a:59:38:93: af:76:72:e7:d0:d3:f4:a0:c2:e0:f8:bf:36:a5:30: 43:bd:5a:60:19:74:55:da:1a:c6:0e:85:48:f3:f1: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EB:39:D3:79:BC:99:4F:1E:8A:60:FC:01:5E:D4:1C:E5:81:5B:B4 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b0:8f:bc:30:57:1c:f6:bf:1c:75:b3:14:b2:5e:7c:bf:a2: 06:61:fc:66:c3:d3:3f:cb:93:0a:37:6d:54:38:e7:4e:06:19: 45:f2:b0:66:09:1b:06:18:37:01:93:3e:b3:7d:4a:d3:4a:42: fa:f9:16:5c:31:e3:60:ce:e6:cc:04:84:c4:51:6c:b9:2e:2f: d2:2d:22:ff:ef:85:b7:0a:87:af:5b:0e:ca:63:98:4f:06:2d: bd:16:dd:af:d3:87:b7:df:c3:60:94:69:5c:e1:15:72:e7:4f: ca:84:c4:3d:f8:73:cb:39:e2:d5:b4:8e:7f:d2:ce:fe:f6:4c: f8:11:ca:a4:08:1f:ea:86:ff:8f:39:51:a6:7d:79:3d:8c:e8: e2:1d:3d:45:21:53:60:44:9a:23:48:35:6d:60:86:59:04:d1: 82:2f:e0:1b:3d:4a:dd:a4:80:e1:9a:7b:dc:88:d0:66:24:e7: 3e:54:f0:f5:79:69:eb:a2:df:c2:17:65:a1:bd:93:f0:54:71: d9:25:71:0a:6f:21:bb:0e:4b:ad:7e:41:d8:2c:d3:de:3b:d6: b6:96:72:30:15:5a:e6:39:5a:dc:21:9a:1f:0f:23:90:a6:59: 15:b6:fa:e7:85:31:a9:09:0c:f0:c4:4f:b7:f6:e6:b7:97:4b: 08:51:a3:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwNDI0MTg1NTIzWhcNMjYwNTAxMTg1NTIzWjAYMRYwFAYD VQQDEw02OWViYmM5Yy04ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LBKv3qgLDWVx5ZQx0eYHMIT6+NRUvopYD9W0bIwkJ531hH8xqsi7xFobzLs oQb98p2eHylA4R/WcrX15OCtlwJKWNmsh1rZd2XhItHwOWPInviHu6gsitnUP7J4 LpgD/oprhmhZRkn4XowAo8Rnq133HCscPaAi/RC+3urNROtbkjBs/RIb0iL3NKrh mvUtGr9z5qKV5T+eLLHxVWir3VJMUx84Rd34IuG2oS14tHrkCn30pPYWgucXWAFV 1upXW8j89UtPvzwACMqrVhfDrkiBxAm6AzWlSd4pGBpZOJOvdnLn0NP0oMLg+L82 pTBDvVpgGXRV2hrGDoVI8/Hz4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTrOdN5 vJlPHopg/AFe1BzlgVu0MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR7CPvDBXHPa/HHWzFLJefL+iBmH8ZsPTP8uTCjdtVDjnTgYZRfKwZgkbBhg3 AZM+s31K00pC+vkWXDHjYM7mzASExFFsuS4v0i0i/++FtwqHr1sOymOYTwYtvRbd r9OHt9/DYJRpXOEVcudPyoTEPfhzyzni1bSOf9LO/vZM+BHKpAgf6ob/jzlRpn15 PYzo4h09RSFTYESaI0g1bWCGWQTRgi/gGz1K3aSA4Zp73IjQZiTnPlTw9Xlp66Lf whdlob2T8FRx2SVxCm8huw5LrX5B2CzT3jvWtpZyMBVa5jla3CGaHw8jkKZZFbb6 54UxqQkM8MRPt/bmt5dLCFGjRw== -----END CERTIFICATE-----Generated at Fri Apr 24 21:20:57 2026 by rpki-client