$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: cMT2bgI5+Koqwg1cHLikI/yWDTXCsMF1gNaMIjUm9s8= Subject key identifier: 5F:D7:9B:85:B3:12:8E:56:09:F0:D4:02:0B:0A:AC:A6:CB:8A:FE:A2 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 0288 Signing time: Fri 17 Apr 2026 01:50:27 +0000 Manifest this update: Fri 17 Apr 2026 01:50:26 +0000 Manifest next update: Fri 24 Apr 2026 01:50:26 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: h4RA/GVMyrDOo5sVLrAAajVZaWu0pWZd9rkChrtoyLA=) 2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Apr 17 01:50:26 2026 GMT Not After : Apr 24 01:50:26 2026 GMT Subject: CN=69e191e2-a3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:84:98:83:a2:a7:58:d1:44:ac:b8:67:a0: 18:7a:05:d6:84:bc:c3:db:dd:27:25:87:8a:d3:6c: 7c:ba:4a:8b:3f:59:53:c3:cb:44:aa:8c:c5:3f:4e: 11:3d:4f:9c:6f:e6:e8:22:76:d7:a4:b3:e9:31:8b: 63:62:59:50:55:ec:58:cb:bc:83:17:39:3d:db:b1: 7d:61:7f:9c:ac:a1:87:01:e3:f1:14:ef:de:8c:a0: 3c:5b:fd:61:b6:a6:e2:c8:2b:f2:dc:68:bb:72:da: de:86:74:55:51:b8:a2:8e:59:d3:31:b9:72:45:27: 2f:ab:7c:9c:98:e6:bb:95:d6:d8:2c:5a:73:a2:cf: 4f:08:19:ce:6c:f8:55:d7:86:20:63:31:cd:f7:32: 1a:2b:94:0c:b1:7d:11:5b:dc:f3:5e:05:23:3b:73: bf:24:b5:c5:14:95:77:38:df:91:e9:28:57:6b:b1: d2:aa:0b:de:09:2a:c0:ab:93:65:e4:8a:28:dc:6b: 9f:8c:11:d0:48:9f:2f:0c:ef:cf:84:ac:dc:ab:d8: 19:ef:42:a4:60:a0:8f:df:14:be:9d:10:cd:13:6c: 21:dc:12:ee:92:68:e6:98:fd:de:da:8c:21:8a:f4: 08:f7:67:e5:bd:65:54:db:8f:dd:98:8e:15:8a:a0: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D7:9B:85:B3:12:8E:56:09:F0:D4:02:0B:0A:AC:A6:CB:8A:FE:A2 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:72:71:e9:a2:c9:82:1b:69:ce:8d:2f:59:44:c2:c5:cf:09: fc:76:f3:61:f8:47:20:cf:51:cf:43:60:ce:e8:83:b1:48:73: 0e:1e:fb:74:0b:c2:28:d1:14:38:f0:f7:22:5d:d5:3f:96:b1: 79:65:8b:05:61:91:11:f3:13:17:c2:89:ae:6b:96:50:de:16: 09:88:25:b5:c7:bf:8d:22:d5:51:a5:5a:86:33:04:64:05:9f: d3:68:11:7b:cc:15:79:33:83:e7:79:f8:67:af:d6:d1:2d:ab: fb:00:e1:b4:cf:b5:ec:ef:1e:89:aa:fe:02:21:70:1d:fe:87: fc:61:d0:60:20:2f:00:e1:f6:7a:08:7a:48:db:8e:46:f9:5d: 92:5e:d5:89:74:8f:35:9d:a9:e5:ff:52:83:20:d2:ce:b5:21: f6:72:d0:17:7e:11:ec:65:6c:87:b0:68:ce:11:e0:2c:4a:f1: 9e:ce:f4:1c:01:80:f5:19:5e:94:c9:cb:d1:62:81:5e:56:db: 6b:bf:f7:6e:66:6d:a1:a9:69:7c:77:cd:1e:22:78:42:43:e9: 80:de:3c:d7:e6:b1:0c:09:82:ea:51:36:6e:a8:a9:8d:e8:ac: 08:34:ea:0f:c9:c1:a2:7c:0c:a2:38:43:12:6a:40:98:1f:2c: 70:06:01:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYwNDE3MDE1MDI2WhcNMjYwNDI0MDE1MDI2WjAYMRYwFAYD VQQDEw02OWUxOTFlMi1hM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjCEmIOip1jRRKy4Z6AYegXWhLzD290nJYeK02x8ukqLP1lTw8tEqozFP04R PU+cb+boInbXpLPpMYtjYllQVexYy7yDFzk927F9YX+crKGHAePxFO/ejKA8W/1h tqbiyCvy3Gi7ctrehnRVUbiijlnTMblyRScvq3ycmOa7ldbYLFpzos9PCBnObPhV 14YgYzHN9zIaK5QMsX0RW9zzXgUjO3O/JLXFFJV3ON+R6ShXa7HSqgveCSrAq5Nl 5Ioo3GufjBHQSJ8vDO/PhKzcq9gZ70KkYKCP3xS+nRDNE2wh3BLukmjmmP3e2owh ivQI92flvWVU24/dmI4ViqCobwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/Xm4Wz Eo5WCfDUAgsKrKbLiv6iMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHJx6aLJghtpzo0vWUTCxc8J/HbzYfhHIM9Rz0NgzuiDsUhzDh77dAvCKNEU OPD3Il3VP5axeWWLBWGREfMTF8KJrmuWUN4WCYgltce/jSLVUaVahjMEZAWf02gR e8wVeTOD53n4Z6/W0S2r+wDhtM+17O8eiar+AiFwHf6H/GHQYCAvAOH2egh6SNuO Rvldkl7ViXSPNZ2p5f9SgyDSzrUh9nLQF34R7GVsh7BozhHgLErxns70HAGA9Rle lMnL0WKBXlbba7/3bmZtoalpfHfNHiJ4QkPpgN481+axDAmC6lE2bqipjeisCDTq D8nBonwMojhDEmpAmB8scAYBZw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:11 2026 by rpki-client