$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: ZHSiLhIbVjQjmMmB6u7BFho/tsNPM5prJt5xlXOJEpY= Subject key identifier: 4A:68:C8:3E:82:B3:E0:67:5C:7A:9B:92:65:15:3E:4A:F1:E8:16:96 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 020A Signing time: Fri 17 Apr 2026 02:44:36 +0000 Manifest this update: Fri 17 Apr 2026 02:44:36 +0000 Manifest next update: Fri 24 Apr 2026 02:44:36 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: FBvVeLPLXA1M5jqcQJS8wQ91u+FTAmwhLZ3ykYKoxxQ=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 2O1k5KDca2tfl/EQnQ5lVCtAgwjAnHM94uUoNTqPDZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Apr 17 02:44:36 2026 GMT Not After : Apr 24 02:44:36 2026 GMT Subject: CN=69e19e94-ffd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:0a:41:dc:5b:f4:67:49:df:2d:11:17:26: 7f:26:35:82:96:51:c9:69:53:71:48:bd:44:45:1f: ff:2a:ca:bc:42:23:99:63:b7:5e:7e:8f:88:01:b8: 61:1e:39:f8:c4:36:4a:2d:86:42:37:b8:c6:06:9e: 99:bd:29:e3:94:8c:df:cd:1f:15:a7:55:70:15:9e: 3a:2f:18:a5:98:b1:0a:d4:07:51:54:bc:e9:42:12: f3:3c:cc:45:ba:ff:20:f6:0e:88:43:24:c9:a5:e0: c4:42:bb:9a:60:15:e6:c4:f7:ba:f2:46:22:7c:c5: 4f:30:59:54:00:b1:47:f1:e2:12:e2:78:86:02:e5: 76:0a:f0:06:ed:f3:bd:9c:48:33:8d:48:09:a8:2e: af:59:e4:5b:36:c5:2b:b2:30:65:2d:e0:77:65:98: e1:c2:48:ee:86:97:04:a6:18:4c:b7:99:c0:41:0d: de:13:0b:56:d9:32:70:94:e0:97:a3:31:80:21:ec: 8a:ea:8b:35:a4:68:a4:0a:97:b1:58:ef:3c:23:e7: 98:d2:a1:27:51:08:85:0e:6b:61:29:cc:01:6a:0c: 81:a5:9b:ab:07:88:28:b5:2d:bd:e8:de:5c:b8:76: 13:e6:36:bb:7c:93:c3:a4:7f:21:2f:b6:7a:87:c7: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:68:C8:3E:82:B3:E0:67:5C:7A:9B:92:65:15:3E:4A:F1:E8:16:96 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:d2:fb:af:b4:bb:3a:c2:0e:6a:b8:71:ea:8d:c2:91:af: f9:9e:15:9a:f4:6e:01:47:9b:75:4a:dd:70:1c:b6:8f:29:6e: 87:63:e4:4e:26:4a:70:6e:d7:31:91:d2:8e:39:da:0b:6d:3b: 8a:56:fc:7c:9b:ed:f1:c1:f2:df:f5:30:fd:63:a9:a4:aa:5c: 92:6a:cd:67:6f:2a:47:1e:09:e8:20:08:53:f3:3e:89:7c:02: a0:24:a2:77:9d:81:49:45:4b:2b:b2:9f:7c:9e:11:5d:fb:5b: 97:e1:81:3f:1d:62:2b:35:d9:70:e4:18:6a:2d:77:b8:0f:b9: 83:ff:68:6f:2f:15:26:96:39:e7:9b:e6:9d:c1:8a:59:8f:cb: e8:0a:da:60:4e:f8:51:1e:fc:c6:07:f5:50:64:62:71:ce:be: 4b:d0:bf:79:39:f0:87:49:1c:cc:b0:ed:81:f6:32:9b:07:d1: ad:7d:a5:85:39:2e:78:da:27:68:d1:f5:16:b7:ea:84:3e:98: c6:3c:d3:77:ed:0d:51:cb:b0:3c:01:36:b3:e1:14:a9:cc:87: ad:d4:f0:df:9a:35:a9:be:23:e5:07:d7:55:64:c8:99:8f:b1: 8f:20:3f:a3:4e:1c:f5:a9:6c:9c:76:6f:fe:43:01:08:05:32: 13:2b:a5:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjYwNDE3MDI0NDM2WhcNMjYwNDI0MDI0NDM2WjAYMRYwFAYD VQQDEw02OWUxOWU5NC1mZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDgKQdxb9GdJ3y0RFyZ/JjWCllHJaVNxSL1ERR//Ksq8QiOZY7defo+IAbhh Hjn4xDZKLYZCN7jGBp6ZvSnjlIzfzR8Vp1VwFZ46LxilmLEK1AdRVLzpQhLzPMxF uv8g9g6IQyTJpeDEQruaYBXmxPe68kYifMVPMFlUALFH8eIS4niGAuV2CvAG7fO9 nEgzjUgJqC6vWeRbNsUrsjBlLeB3ZZjhwkjuhpcEphhMt5nAQQ3eEwtW2TJwlOCX ozGAIeyK6os1pGikCpexWO88I+eY0qEnUQiFDmthKcwBagyBpZurB4gotS296N5c uHYT5ja7fJPDpH8hL7Z6h8f8iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpoyD6C s+BnXHqbkmUVPkrx6BaWMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdMPS+6+0uzrCDmq4ceqNwpGv+Z4VmvRuAUebdUrdcBy2jyluh2PkTiZKcG7X MZHSjjnaC207ilb8fJvt8cHy3/Uw/WOppKpckmrNZ28qRx4J6CAIU/M+iXwCoCSi d52BSUVLK7KffJ4RXftbl+GBPx1iKzXZcOQYai13uA+5g/9oby8VJpY555vmncGK WY/L6AraYE74UR78xgf1UGRicc6+S9C/eTnwh0kczLDtgfYymwfRrX2lhTkueNon aNH1FrfqhD6YxjzTd+0NUcuwPAE2s+EUqcyHrdTw35o1qb4j5QfXVWTImY+xjyA/ o04c9alsnHZv/kMBCAUyEyulIQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:04 2026 by rpki-client