$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: 8g76uUKKUcM6XQ1WABUS4XFQBe5aS2NJOpgtuDNUrYo= Subject key identifier: E9:32:49:3A:F5:D0:97:A2:8F:7A:37:85:C9:69:AD:C2:1D:9A:0A:D7 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 01BC Signing time: Fri 17 Apr 2026 03:36:45 +0000 Manifest this update: Fri 17 Apr 2026 03:36:44 +0000 Manifest next update: Fri 24 Apr 2026 03:36:44 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: 4B3ZZcv/IEIeNvc68uQNW9lu/0SiLeNqOtY/uCqgBaY=) 2: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=) 3: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 0KtoQs3ZoY6PT4dwxV6hf2YTYqT+rVXqQSGuTHbMQFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Apr 17 03:36:44 2026 GMT Not After : Apr 24 03:36:44 2026 GMT Subject: CN=69e1aacd-c45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:d9:13:6a:3f:b2:91:68:81:c7:e6:d9:43: 5c:84:a9:42:6e:7f:e8:c2:7b:6f:d7:e4:61:16:f4: fb:e7:d4:a2:5c:a9:1b:ea:b6:d8:67:d0:31:1e:c3: bc:0d:bd:3a:de:48:3b:b3:32:ea:a1:81:29:85:ea: c9:c1:08:1d:3a:8f:c8:8a:1e:21:cf:e9:ca:6e:60: 46:8e:b5:25:d2:62:5a:ac:cf:f7:93:e3:59:2e:9b: b4:3d:4d:74:e9:ac:53:e6:59:cc:60:2d:20:6a:a6: df:f0:e6:1e:0d:a6:14:5b:a4:cc:be:28:56:41:1c: 9d:e6:86:02:13:83:36:76:ff:a2:6b:4c:37:d7:77: 2f:2c:94:8a:cd:d8:78:fd:9a:e9:ea:44:52:79:3c: 36:67:72:7f:60:a2:de:db:0e:a6:eb:5d:df:1f:c2: f9:f6:9b:a5:f2:93:9b:57:f6:75:e1:63:0e:81:65: 4f:2d:3c:e2:53:a2:37:87:f5:3f:14:ca:3e:be:d2: fe:c7:8a:19:6e:9c:36:71:14:0c:e8:24:7a:5e:92: a1:7f:fa:98:8c:cd:ce:80:73:90:10:36:3b:12:46: 92:a9:5a:8c:a3:42:1c:19:cf:9b:c3:ee:09:cd:74: 84:a2:a0:95:d0:c0:1a:d2:4a:93:8d:93:29:f1:ea: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:49:3A:F5:D0:97:A2:8F:7A:37:85:C9:69:AD:C2:1D:9A:0A:D7 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:cd:76:a9:2f:06:ad:c8:f0:b8:45:cf:57:e6:8c:04:ef: 2a:ac:96:20:5b:84:3f:19:9f:f2:90:1f:c1:aa:f9:77:2b:ab: c8:bd:ca:d7:50:62:eb:83:64:52:e0:fa:0b:e2:3f:b3:b3:08: 14:af:1a:5f:7a:03:0c:72:a2:18:7a:7a:d0:84:04:49:3e:2b: 3b:5b:f5:f9:c9:5c:d3:42:9d:75:26:cc:50:68:93:ae:fc:e0: 0c:04:3b:48:38:df:a7:27:20:db:50:37:26:06:28:2c:3d:85: f6:b9:01:da:aa:3c:2a:3b:af:40:44:8c:e2:8c:b2:46:87:1d: a0:b1:f5:19:3b:e7:54:66:b6:ce:97:db:b1:d5:03:dd:cf:dd: 7c:b0:e1:23:ac:90:7f:90:8c:42:12:bf:34:8c:8e:66:df:6a: e1:73:97:94:9b:47:38:6f:77:47:af:99:bf:67:a5:9a:31:82: a0:5b:1f:d4:84:40:29:7c:8a:88:d1:ba:bb:64:1d:15:28:cc: a5:4f:73:31:fb:5b:09:22:8d:cd:a8:3f:1c:d1:9d:72:98:69: ca:4e:b7:45:d6:b6:93:0a:cb:d1:c1:f5:0b:93:22:f0:37:df: d1:28:04:69:8f:74:66:b4:ef:15:36:d2:76:63:0e:27:9e:70: e2:cf:0c:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYwNDE3MDMzNjQ0WhcNMjYwNDI0MDMzNjQ0WjAYMRYwFAYD VQQDEw02OWUxYWFjZC1jNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjJrZE2o/spFogcfm2UNchKlCbn/owntv1+RhFvT759SiXKkb6rbYZ9AxHsO8 Db063kg7szLqoYEpherJwQgdOo/Iih4hz+nKbmBGjrUl0mJarM/3k+NZLpu0PU10 6axT5lnMYC0gaqbf8OYeDaYUW6TMvihWQRyd5oYCE4M2dv+ia0w313cvLJSKzdh4 /Zrp6kRSeTw2Z3J/YKLe2w6m613fH8L59pul8pObV/Z14WMOgWVPLTziU6I3h/U/ FMo+vtL+x4oZbpw2cRQM6CR6XpKhf/qYjM3OgHOQEDY7EkaSqVqMo0IcGc+bw+4J zXSEoqCV0MAa0kqTjZMp8er31QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkySTr1 0Jeij3o3hclprcIdmgrXMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJXDNdqkvBq3I8LhFz1fmjATvKqyWIFuEPxmf8pAfwar5dyuryL3K11Bi64Nk UuD6C+I/s7MIFK8aX3oDDHKiGHp60IQEST4rO1v1+clc00KddSbMUGiTrvzgDAQ7 SDjfpycg21A3JgYoLD2F9rkB2qo8KjuvQESM4oyyRocdoLH1GTvnVGa2zpfbsdUD 3c/dfLDhI6yQf5CMQhK/NIyOZt9q4XOXlJtHOG93R6+Zv2elmjGCoFsf1IRAKXyK iNG6u2QdFSjMpU9zMftbCSKNzag/HNGdcphpyk63Rda2kwrL0cH1C5Mi8Dff0SgE aY90ZrTvFTbSdmMOJ55w4s8MJg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:47:07 2026 by rpki-client