$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: zG3E0V5ukH7U0rTbZCLfxvHLfEns8Pdw2fWAJ/MGOng= Subject key identifier: 09:CA:5E:9B:79:D9:80:75:E1:EC:74:84:C5:C8:A3:A3:09:1B:95:3E Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 06DE Signing time: Sat 18 Apr 2026 22:08:12 +0000 Manifest this update: Sat 18 Apr 2026 22:08:12 +0000 Manifest next update: Sat 25 Apr 2026 22:08:12 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: 1TEqZCjyCmmOPO7NyVZ86KvkXDOzRJ2qf3reaQ9/CgU=) 2: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: v9b/yGtqVwFD8gxkWfJo/P1ZI/EvbUBmOLRUxAaLNxY=) 3: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: I0WpDgMmllreaPhV65poRHSHDSmFE5dRW9kHHGyYH/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 22:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Apr 18 22:08:12 2026 GMT Not After : Apr 25 22:08:12 2026 GMT Subject: CN=69e400cc-18e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5c:86:70:58:5a:6f:43:38:94:cd:0f:d7:39: e0:a8:bc:ea:37:71:5e:31:b6:5d:84:e1:e6:8f:19: 5a:aa:3b:c0:66:c9:cf:82:e2:54:6c:53:b0:96:ac: 30:0b:77:0f:7b:50:ed:f4:57:ec:92:5c:fd:2a:a6: cf:a9:27:02:78:84:63:5a:fe:54:74:a0:34:b0:39: 4a:e3:e3:3d:ff:08:51:03:16:b8:a0:98:1a:a3:95: 87:94:58:66:db:fd:cf:b3:53:d7:b5:ee:54:64:43: 02:e0:d9:1b:f0:47:84:81:77:08:a0:ea:d8:70:0d: aa:5c:e9:a7:55:b2:a3:6c:11:99:1d:6e:c0:36:ad: a4:78:e7:98:70:43:90:7b:16:64:78:27:bc:b9:89: c0:d8:d1:8c:af:fe:5d:f7:97:b2:5f:60:31:ea:0f: 76:8f:b6:75:6f:ca:c4:da:8a:19:ba:2b:91:23:b2: 6b:01:7e:7b:43:10:04:0b:70:37:5d:b4:65:47:8d: fa:d6:72:f3:c5:c6:30:89:5a:e3:36:ba:e0:e1:cd: 5e:c1:bc:11:cd:e6:4f:c1:62:b9:96:12:98:9f:f0: c4:ff:3c:bd:04:a9:b3:96:d3:6b:50:a5:b3:5b:b3: 7c:57:49:d2:4b:19:89:27:14:c2:71:f4:ef:71:17: 66:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:5E:9B:79:D9:80:75:E1:EC:74:84:C5:C8:A3:A3:09:1B:95:3E X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:13:98:e7:4e:34:30:fc:82:30:46:bb:d6:95:9d:8a:00:36: 3a:24:2b:51:a1:a2:e0:2a:b2:23:ce:58:4c:dc:cb:5a:c9:7f: 3b:c9:3c:f6:b1:4f:34:96:b0:4b:dd:11:ac:74:df:e0:6a:5b: 66:71:bf:bb:7a:da:80:b9:c3:d4:2d:1a:ab:34:00:35:be:7e: c0:9c:a2:eb:ce:7e:5d:2f:3f:44:2f:1b:78:cf:de:0f:dc:78: 72:30:c5:12:62:45:d9:ee:7f:bd:4e:16:1a:56:df:72:cd:f5: 03:66:f0:54:e0:8a:d0:2c:67:63:1c:da:30:b5:6c:73:c9:80: 85:97:1e:87:35:d6:ee:c0:f9:a6:c7:23:49:87:12:4c:83:7a: 54:e6:73:65:60:05:03:3c:06:07:7c:70:b8:7c:78:ba:c3:93: 67:1e:29:3e:75:78:e6:66:c1:ac:32:ac:54:01:96:77:67:a3: a4:41:a0:58:32:47:12:3b:76:41:dc:d8:12:14:47:4f:06:96: 0e:36:49:a2:94:8e:a8:20:d0:d1:6d:63:ab:b6:ac:a5:b4:e6: e1:b1:3d:01:66:dc:17:a5:64:b5:52:ec:76:e4:84:59:6c:7d: 24:7c:2b:9b:61:b2:0a:ce:1e:ca:68:af:1c:ac:ce:7e:47:9c: 1e:ac:4b:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjYwNDE4MjIwODEyWhcNMjYwNDI1MjIwODEyWjAYMRYwFAYD VQQDEw02OWU0MDBjYy0xOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FyGcFhab0M4lM0P1zngqLzqN3FeMbZdhOHmjxlaqjvAZsnPguJUbFOwlqww C3cPe1Dt9Ffsklz9KqbPqScCeIRjWv5UdKA0sDlK4+M9/whRAxa4oJgao5WHlFhm 2/3Ps1PXte5UZEMC4Nkb8EeEgXcIoOrYcA2qXOmnVbKjbBGZHW7ANq2keOeYcEOQ exZkeCe8uYnA2NGMr/5d95eyX2Ax6g92j7Z1b8rE2ooZuiuRI7JrAX57QxAEC3A3 XbRlR4361nLzxcYwiVrjNrrg4c1ewbwRzeZPwWK5lhKYn/DE/zy9BKmzltNrUKWz W7N8V0nSSxmJJxTCcfTvcRdmawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnKXpt5 2YB14ex0hMXIo6MJG5U+MB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1xOY5040MPyCMEa71pWdigA2OiQrUaGi4CqyI85YTNzLWsl/O8k89rFPNJaw S90RrHTf4GpbZnG/u3ragLnD1C0aqzQANb5+wJyi685+XS8/RC8beM/eD9x4cjDF EmJF2e5/vU4WGlbfcs31A2bwVOCK0CxnYxzaMLVsc8mAhZcehzXW7sD5pscjSYcS TIN6VOZzZWAFAzwGB3xwuHx4usOTZx4pPnV45mbBrDKsVAGWd2ejpEGgWDJHEjt2 QdzYEhRHTwaWDjZJopSOqCDQ0W1jq7aspbTm4bE9AWbcF6VktVLsduSEWWx9JHwr m2GyCs4eymivHKzOfkecHqxLbg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:00:53 2026 by rpki-client