$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: eXkUKileuvUhSAmN8zmU+GNas3wv4Bh094aZa3EikmU= Subject key identifier: 15:15:6D:52:6A:EF:07:2D:B0:9F:25:B0:D1:6E:34:D6:8E:E2:0D:55 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 0990 Signing time: Thu 16 Apr 2026 19:58:24 +0000 Manifest this update: Thu 16 Apr 2026 19:58:24 +0000 Manifest next update: Thu 23 Apr 2026 19:58:24 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: q4TLJLJzQ1S4TxL2ygotdev1ChvzTNQl4tGT0cC9lxo=) 2: 747D425621DE11F18A474186263D8C67.roa (hash: xP79zLwtYSCF6ndpebvOS6TZdhJzSuHBPrF45hmwl/o=) 3: 5F7685142CA811F1BD4A3469C6833773.roa (hash: 1LSfp7hXsSm6wdz0BXmx5yD2/iLKKMt13t4PnmZLbew=) 4: 73F46EA421DE11F18A474186263D8C67.roa (hash: vnIYIAxb9jKhOykc5SH0nHz3rDLATOnUkgoBD81OJHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Apr 16 19:58:24 2026 GMT Not After : Apr 23 19:58:24 2026 GMT Subject: CN=69e13f60-1f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:f3:87:03:f4:93:03:b4:ae:e4:a0:40:ad: 78:db:d3:c3:41:9e:db:3b:bd:8b:7d:d6:be:b2:d5: 91:98:2f:21:b7:b7:e7:6b:9f:ab:d6:be:72:be:6c: f6:ae:46:bc:4c:c9:f3:73:98:1e:db:3b:3a:20:46: a9:f6:e1:32:4c:8b:ef:d8:11:4e:b4:1c:1f:e5:bd: 07:c9:24:f8:56:4e:89:c0:66:43:5e:15:2c:bd:0c: 28:6e:6b:c1:53:7c:a0:49:76:c7:dc:9d:4d:dc:5f: cb:62:df:05:94:53:0e:f6:0c:68:5b:68:c4:19:7f: cd:49:1d:e8:9c:f9:56:10:3f:df:fc:dc:e3:6a:25: 96:b1:ae:9b:b0:80:66:8f:26:58:1d:4f:16:1a:1c: 32:54:5e:cc:5e:04:56:29:c9:b3:00:a0:eb:9d:3e: ca:54:09:8e:2f:2d:96:51:60:b4:d7:5e:6c:ba:31: 85:73:1e:69:78:0d:87:49:be:75:4c:f5:60:5e:bd: cf:17:92:19:a7:bf:a8:2b:13:64:22:cb:75:d3:99: 98:66:83:d5:64:96:50:8c:b7:59:a7:b0:a2:12:22: 1f:59:51:fb:b5:27:94:e0:87:1e:e2:6d:f5:e2:9f: 1c:11:d2:b6:53:8b:7d:61:96:8e:11:ea:1b:36:4b: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:15:6D:52:6A:EF:07:2D:B0:9F:25:B0:D1:6E:34:D6:8E:E2:0D:55 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cd:4a:19:b6:3e:53:e8:d9:34:00:94:5f:57:fd:89:27:40: d8:82:67:f0:a2:bb:80:d9:b1:52:cc:d3:55:6b:3c:6b:3c:86: 36:12:b7:e1:a2:6c:a1:da:e0:c8:1d:06:d0:fc:ef:49:47:23: cb:fa:e7:53:c8:58:4b:ba:88:b3:e7:76:dd:57:e5:f4:0b:2f: ed:2f:64:72:90:6e:3e:3e:6f:25:60:22:13:5d:d1:0f:65:0f: f0:51:22:8b:e5:ef:11:49:d5:78:d6:0f:c0:ac:d3:b3:0b:1e: 4c:20:b0:df:14:22:0f:86:d8:b9:af:04:cd:d6:c0:0b:80:9d: ca:32:48:11:02:27:00:f9:ed:eb:6b:1a:4b:04:3e:0c:a7:9e: 61:93:63:b3:5e:a1:58:38:9e:c8:7d:b2:65:26:bb:fa:0b:78: cb:d7:0a:56:2d:96:ac:09:82:f5:37:bf:d8:ac:04:87:57:a4: 61:d0:7d:33:3f:dc:89:4c:d6:d9:55:94:2e:c1:de:38:1e:8e: e1:e4:43:89:a5:7c:e4:d4:9e:4e:fe:97:9b:82:f4:9f:1d:11: 42:76:b0:e3:93:f6:f4:d0:92:33:13:ef:c1:c2:52:22:d4:7a: 1c:de:db:0c:62:c0:b7:df:73:be:0c:41:e3:aa:ba:8f:3b:da: 1a:ab:0a:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwNDE2MTk1ODI0WhcNMjYwNDIzMTk1ODI0WjAYMRYwFAYD VQQDEw02OWUxM2Y2MC0xZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs3zhwP0kwO0ruSgQK1429PDQZ7bO72Lfda+stWRmC8ht7fna5+r1r5yvmz2 rka8TMnzc5ge2zs6IEap9uEyTIvv2BFOtBwf5b0HyST4Vk6JwGZDXhUsvQwobmvB U3ygSXbH3J1N3F/LYt8FlFMO9gxoW2jEGX/NSR3onPlWED/f/NzjaiWWsa6bsIBm jyZYHU8WGhwyVF7MXgRWKcmzAKDrnT7KVAmOLy2WUWC0115sujGFcx5peA2HSb51 TPVgXr3PF5IZp7+oKxNkIst105mYZoPVZJZQjLdZp7CiEiIfWVH7tSeU4Ice4m31 4p8cEdK2U4t9YZaOEeobNkv5OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUVbVJq 7wctsJ8lsNFuNNaO4g1VMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC81KGbY+U+jZNACUX1f9iSdA2IJn8KK7gNmxUszTVWs8azyGNhK34aJsodrg yB0G0PzvSUcjy/rnU8hYS7qIs+d23Vfl9Asv7S9kcpBuPj5vJWAiE13RD2UP8FEi i+XvEUnVeNYPwKzTswseTCCw3xQiD4bYua8EzdbAC4CdyjJIEQInAPnt62saSwQ+ DKeeYZNjs16hWDieyH2yZSa7+gt4y9cKVi2WrAmC9Te/2KwEh1ekYdB9Mz/ciUzW 2VWULsHeOB6O4eRDiaV85NSeTv6Xm4L0nx0RQnaw45P29NCSMxPvwcJSItR6HN7b DGLAt99zvgxB46q6jzvaGqsKpg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:18:54 2026 by rpki-client