$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: 0+eX9QQT2Osx8WvS3Xutb/g03GYU5wnc7G0EVw7bY14= Subject key identifier: 19:C9:B6:26:84:39:2B:A9:A3:15:0E:96:84:E8:DA:4B:84:8D:F4:41 Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 0215 Signing time: Tue 21 Apr 2026 02:45:24 +0000 Manifest this update: Tue 21 Apr 2026 02:45:24 +0000 Manifest next update: Tue 28 Apr 2026 02:45:24 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: nrtt/W9ABovVkzPQe+aMMv44JqsGAcs/grAoEXy8QVc=) 2: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=) 3: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=) 4: 6445C13C2D1511F18C0F846BB3833773.roa (hash: 9QqpnJcWgyDf2mtA4MnObByXA5vEs6rKETFijGykNxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 02:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Apr 21 02:45:24 2026 GMT Not After : Apr 28 02:45:24 2026 GMT Subject: CN=69e6e4c4-a08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8b:48:59:1a:29:8c:3d:15:f8:1c:4f:37:cf: f6:14:e3:32:11:4e:56:2b:2c:a5:c5:df:35:a4:3c: b0:44:8b:a3:51:d8:e6:48:48:ef:d0:55:4f:a5:a7: 27:64:33:bc:8f:8b:b6:2b:2f:ed:1b:53:95:a3:f1: 8a:84:37:ed:58:53:4b:c7:ec:8b:ec:67:4c:ac:e8: 21:a3:81:ca:86:33:a5:db:42:47:ee:f4:83:8b:9e: 23:ac:64:85:ab:d5:01:51:9a:a5:0e:98:2e:03:aa: 50:4b:8b:42:db:e4:47:24:4b:c5:51:40:df:fe:b8: 29:ab:17:0f:11:06:f9:6f:1a:33:97:12:82:e7:1b: 5a:5f:79:d5:75:ab:5b:46:eb:8e:3b:69:95:2a:ea: f1:f9:a0:d9:4e:58:1c:ee:47:6e:6c:67:50:dc:37: 07:63:ed:bd:ac:6d:a4:1c:68:b6:c3:55:72:58:7e: c8:f7:c0:c6:fa:02:7e:14:8f:67:15:53:01:56:73: 87:94:81:92:0f:09:76:f3:3d:4c:b1:d7:fc:8b:23: b3:92:f1:21:d4:96:ce:98:52:33:e1:8f:30:8c:4a: 72:8a:c0:28:a5:bb:4b:94:2c:5f:4e:c8:6e:d4:60: ce:fa:0d:b7:c4:40:0d:3b:3d:35:b8:93:be:13:8f: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:B6:26:84:39:2B:A9:A3:15:0E:96:84:E8:DA:4B:84:8D:F4:41 X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a8:52:29:83:a3:ab:f8:41:d2:20:7a:c2:22:c1:dc:57:cf: af:c5:85:30:27:0b:fc:a5:bc:38:6d:82:1e:d3:f1:7c:59:e9: 9e:43:75:3b:1f:1c:c4:b1:12:0a:ef:db:76:c4:c4:97:89:e9: b6:83:98:bc:f5:d5:45:aa:1f:88:d3:b2:2e:83:e2:24:d2:0b: a8:36:1b:c4:79:35:9c:03:b5:8f:43:ee:df:54:32:e7:0e:cb: 2c:42:ee:72:e5:ae:8e:a1:5f:14:ed:a2:6f:a7:5f:c6:08:fb: d9:d1:fc:fa:e1:6b:13:10:76:5a:44:ef:89:b8:82:07:19:f2: d3:eb:dd:f5:86:0e:67:62:4b:78:08:0f:cf:49:06:bb:1c:f5: 6c:f8:ce:dc:0a:b5:83:66:dc:18:d1:14:27:4a:7a:8e:27:68: 08:77:61:bc:8c:70:78:b7:68:4b:74:fa:6c:9d:18:5d:46:2e: b7:4c:e6:cd:b7:44:a8:fc:cc:fe:e1:e8:e8:c8:8a:a7:f4:f1: 47:02:70:10:f5:37:83:1b:02:64:92:33:b0:9a:27:e7:a2:e7: 13:bc:b8:b7:61:6c:f5:e4:19:e8:96:72:22:11:c1:0e:74:c9: 0a:f0:3a:87:78:d8:aa:6f:5a:e2:5b:06:2a:26:1e:1d:d3:ff: a4:e1:d2:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjYwNDIxMDI0NTI0WhcNMjYwNDI4MDI0NTI0WjAYMRYwFAYD VQQDEw02OWU2ZTRjNC1hMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9YtIWRopjD0V+BxPN8/2FOMyEU5WKyylxd81pDywRIujUdjmSEjv0FVPpacn ZDO8j4u2Ky/tG1OVo/GKhDftWFNLx+yL7GdMrOgho4HKhjOl20JH7vSDi54jrGSF q9UBUZqlDpguA6pQS4tC2+RHJEvFUUDf/rgpqxcPEQb5bxozlxKC5xtaX3nVdatb RuuOO2mVKurx+aDZTlgc7kdubGdQ3DcHY+29rG2kHGi2w1VyWH7I98DG+gJ+FI9n FVMBVnOHlIGSDwl28z1Msdf8iyOzkvEh1JbOmFIz4Y8wjEpyisAopbtLlCxfTshu 1GDO+g23xEANOz01uJO+E49DnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnJtiaE OSupoxUOloTo2kuEjfRBMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvqhSKYOjq/hB0iB6wiLB3FfPr8WFMCcL/KW8OG2CHtPxfFnpnkN1Ox8cxLES Cu/bdsTEl4nptoOYvPXVRaofiNOyLoPiJNILqDYbxHk1nAO1j0Pu31Qy5w7LLELu cuWujqFfFO2ib6dfxgj72dH8+uFrExB2WkTvibiCBxny0+vd9YYOZ2JLeAgPz0kG uxz1bPjO3Aq1g2bcGNEUJ0p6jidoCHdhvIxweLdoS3T6bJ0YXUYut0zmzbdEqPzM /uHo6MiKp/TxRwJwEPU3gxsCZJIzsJon56LnE7y4t2Fs9eQZ6JZyIhHBDnTJCvA6 h3jYqm9a4lsGKiYeHdP/pOHSiw== -----END CERTIFICATE-----Generated at Tue Apr 21 19:04:53 2026 by rpki-client