$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: oznA7PjthU5I5BhG75upgjM6eYj7RZV26byetbIyWlM= Subject key identifier: FE:54:9A:BD:F4:C1:DF:8C:D8:7E:75:90:F0:05:EF:08:7E:4F:93:22 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 07DD Signing time: Sat 04 Apr 2026 21:05:06 +0000 Manifest this update: Sat 04 Apr 2026 21:05:06 +0000 Manifest next update: Sat 11 Apr 2026 21:05:06 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: amaQ049ErXecDrPN0I6Oi7QbyjOQTr2HVhAjafWrpiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Apr 4 21:05:06 2026 GMT Not After : Apr 11 21:05:06 2026 GMT Subject: CN=69d17d02-2aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:99:00:06:70:c8:2c:fb:15:1e:49:db:22: a9:a8:1e:c6:43:83:cb:0c:0f:e5:ce:8c:ca:4e:51: 49:50:0d:db:ec:b4:16:1a:d3:66:14:5f:93:a9:ff: 3f:b8:15:59:77:4f:08:e6:b5:50:4e:3a:56:7b:7a: f2:ef:e3:c3:f6:8c:dd:fc:ce:6b:b0:77:09:36:0b: 6a:83:f5:e2:b1:70:84:1e:7c:44:fb:9e:40:46:45: 2b:54:88:55:5a:b1:27:d9:1b:7a:1d:64:09:62:be: b6:fc:f5:d1:df:8c:06:9b:1e:bf:1f:6c:35:42:a0: a7:0e:fe:99:4a:e7:8e:ab:1a:33:99:76:06:e7:22: 14:a8:1e:06:98:e9:44:1b:68:8c:0b:e0:ec:37:7f: 6a:a6:ce:e0:c5:1b:10:2c:3f:84:16:78:86:ef:ca: f5:7b:21:a6:a5:e3:80:27:0a:75:e0:d3:74:86:0c: 21:28:9d:9a:fa:3a:fc:3c:58:bb:08:ca:22:41:e9: fa:84:bb:cd:cc:35:46:bc:09:ab:f5:03:0b:2f:8f: 80:15:ed:dc:ba:c1:88:1f:8f:d9:6c:12:e2:d1:16: 81:80:c5:df:e4:2d:5e:ac:e8:5d:12:b4:ae:91:bc: 47:d0:b1:fc:6a:23:a6:75:e2:07:06:78:e0:9b:e5: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:9A:BD:F4:C1:DF:8C:D8:7E:75:90:F0:05:EF:08:7E:4F:93:22 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9f:a9:00:48:46:93:af:4e:d9:f8:02:a9:6a:b7:68:57:d4: 83:92:d1:96:12:0c:1c:a9:7d:69:15:2f:8c:25:10:a5:3d:0d: 9b:78:8c:bd:44:6d:89:6c:06:30:67:d5:56:fb:33:03:9b:0f: 99:2b:41:a5:57:59:cb:27:6d:ee:df:a9:55:78:e5:78:04:d8: fa:40:64:80:a3:4f:22:e1:8c:93:f1:c8:62:d7:62:cd:ea:f4: e9:9f:53:85:9c:86:61:aa:01:df:95:af:b2:50:68:ec:cf:9b: 59:a4:63:b3:db:54:69:95:08:4f:68:9c:e1:83:d4:df:db:8a: 0e:39:5d:0a:d8:1e:0c:56:54:89:e8:19:29:35:f4:7e:f2:78: 25:34:71:e9:b1:7c:8d:5c:20:93:52:cd:65:95:11:8b:17:af: b3:a2:a0:93:60:7b:a5:47:30:3a:66:bf:92:9d:08:30:3b:d3: ba:c1:f8:bd:70:8c:49:48:8b:ba:f5:23:64:20:93:76:fc:ec: 46:32:2f:f8:25:2e:1a:01:20:3d:db:16:96:07:80:01:c9:c7: 56:c2:2b:22:32:61:dc:c3:c2:18:72:e4:41:56:02:a1:85:05: ae:ce:86:a9:49:f0:35:3a:41:fe:6e:4d:af:31:90:72:d3:cb: 24:af:58:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjYwNDA0MjEwNTA2WhcNMjYwNDExMjEwNTA2WjAYMRYwFAYD VQQDEw02OWQxN2QwMi0yYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M2ZAAZwyCz7FR5J2yKpqB7GQ4PLDA/lzozKTlFJUA3b7LQWGtNmFF+Tqf8/ uBVZd08I5rVQTjpWe3ry7+PD9ozd/M5rsHcJNgtqg/XisXCEHnxE+55ARkUrVIhV WrEn2Rt6HWQJYr62/PXR34wGmx6/H2w1QqCnDv6ZSueOqxozmXYG5yIUqB4GmOlE G2iMC+DsN39qps7gxRsQLD+EFniG78r1eyGmpeOAJwp14NN0hgwhKJ2a+jr8PFi7 CMoiQen6hLvNzDVGvAmr9QMLL4+AFe3cusGIH4/ZbBLi0RaBgMXf5C1erOhdErSu kbxH0LH8aiOmdeIHBnjgm+VURwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5Umr30 wd+M2H51kPAF7wh+T5MiMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI5+pAEhGk69O2fgCqWq3aFfUg5LRlhIMHKl9aRUvjCUQpT0Nm3iMvURtiWwG MGfVVvszA5sPmStBpVdZyydt7t+pVXjleATY+kBkgKNPIuGMk/HIYtdizer06Z9T hZyGYaoB35WvslBo7M+bWaRjs9tUaZUIT2ic4YPU39uKDjldCtgeDFZUiegZKTX0 fvJ4JTRx6bF8jVwgk1LNZZURixevs6Kgk2B7pUcwOma/kp0IMDvTusH4vXCMSUiL uvUjZCCTdvzsRjIv+CUuGgEgPdsWlgeAAcnHVsIrIjJh3MPCGHLkQVYCoYUFrs6G qUnwNTpB/m5NrzGQctPLJK9Yiw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:40:50 2026 by rpki-client