$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: 27yAehbk7A16QZcTLJck0lUcKYQQCthrGMzzTmn/1Po= Subject key identifier: 47:80:7D:63:97:30:5E:D3:74:B1:58:98:C9:84:08:8D:F3:23:A6:AB Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 016F Signing time: Fri 17 Apr 2026 04:29:27 +0000 Manifest this update: Fri 17 Apr 2026 04:29:26 +0000 Manifest next update: Fri 24 Apr 2026 04:29:26 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: uQc6sCsUuLCpR/fDyd+TYH3sBJvKT7hPmTQiGfgoLc4=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xOf3XH1rq9iRonlFI2ztK10R9vzTctiHTjijcLXsCA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Apr 17 04:29:26 2026 GMT Not After : Apr 24 04:29:26 2026 GMT Subject: CN=69e1b727-ffc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:db:ac:68:1a:ec:fa:b5:d1:81:6c:9d:a6: 7a:89:8b:62:e4:77:a1:f7:0c:7f:25:97:4c:ab:39: 7e:28:ef:53:a1:d1:21:69:73:a2:4a:dd:41:f4:22: 5b:c4:15:07:3a:e6:46:4a:d2:ee:33:f7:a1:fc:87: a9:a4:ed:93:dc:1a:72:09:c7:1e:a2:cd:a9:d2:44: 13:98:c6:47:56:e4:7f:f5:5a:d0:6f:9c:12:bb:25: 2f:56:ad:82:52:8d:62:50:4f:e3:24:77:66:6c:6b: 7a:32:f7:26:96:72:88:50:00:23:9d:82:f6:26:4d: 9f:64:c3:e0:93:58:0f:61:a0:96:aa:8f:a4:98:29: ad:3c:9f:c7:b9:77:f9:74:75:a4:a1:31:a4:8b:da: bb:a9:5a:9a:9d:4b:53:26:2e:17:de:5d:e9:f6:40: f1:88:55:ad:17:c5:fe:0d:d7:a9:7b:10:35:84:12: 48:02:37:b9:ec:8c:11:9f:e9:b9:fc:14:cf:1a:3a: 49:29:f1:cc:b9:df:c0:48:a7:8a:b7:5e:a3:71:93: b7:bb:65:9c:b4:6d:0a:a3:55:d4:6b:79:3d:52:90: b5:a7:84:9e:88:44:a3:c2:44:59:16:51:83:8e:bc: db:d4:48:bf:09:d8:02:e9:18:8d:90:e0:61:c3:7d: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:80:7D:63:97:30:5E:D3:74:B1:58:98:C9:84:08:8D:F3:23:A6:AB X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:47:ac:a6:ff:67:2c:87:27:c0:37:2f:25:7f:ed:14:d9:f7: 81:0d:fa:75:c7:c0:95:24:95:2a:af:ac:1b:af:64:e4:96:c4: b0:24:82:13:f5:10:72:d0:70:c6:a4:2a:f9:4e:df:96:91:43: 7a:5b:af:e7:e6:9e:02:cf:6c:d9:5b:1e:e1:7e:a8:7d:cb:1a: 48:34:b8:6a:29:89:73:2e:66:0d:36:1e:5f:78:9d:65:ff:73: cf:71:b3:fe:e6:47:80:b0:36:71:06:62:ab:38:85:e4:10:a4: 3e:f3:d2:a3:6f:19:aa:70:06:64:c5:3f:c6:46:0f:57:93:5e: e6:b1:f0:c0:8b:bb:85:36:b0:69:65:f0:b8:cb:44:34:29:d4: 17:da:eb:04:6a:7f:0e:06:40:68:3a:ba:cd:89:14:d3:84:93: e7:35:d7:e5:95:72:26:f6:03:ff:a2:04:2f:b4:91:26:bc:ef: 75:12:6b:ec:de:83:34:fd:62:45:3c:60:bf:81:15:63:16:ce: 27:82:70:7f:7b:db:95:45:78:07:bc:ee:bf:ed:b7:c4:f3:e7: d9:4d:68:bf:a5:ca:64:50:73:89:19:1a:12:bd:fe:10:ab:ae: 3a:66:5e:da:55:5c:43:57:99:94:3d:65:ca:1d:ca:15:11:ca: 94:ce:e9:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjYwNDE3MDQyOTI2WhcNMjYwNDI0MDQyOTI2WjAYMRYwFAYD VQQDEw02OWUxYjcyNy1mZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkCnbrGga7Pq10YFsnaZ6iYti5Heh9wx/JZdMqzl+KO9TodEhaXOiSt1B9CJb xBUHOuZGStLuM/eh/IeppO2T3BpyCcceos2p0kQTmMZHVuR/9VrQb5wSuyUvVq2C Uo1iUE/jJHdmbGt6MvcmlnKIUAAjnYL2Jk2fZMPgk1gPYaCWqo+kmCmtPJ/HuXf5 dHWkoTGki9q7qVqanUtTJi4X3l3p9kDxiFWtF8X+DdepexA1hBJIAje57IwRn+m5 /BTPGjpJKfHMud/ASKeKt16jcZO3u2WctG0Ko1XUa3k9UpC1p4SeiESjwkRZFlGD jrzb1Ei/CdgC6RiNkOBhw32EnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeAfWOX MF7TdLFYmMmECI3zI6arMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvkespv9nLIcnwDcvJX/tFNn3gQ36dcfAlSSVKq+sG69k5JbEsCSCE/UQctBw xqQq+U7flpFDeluv5+aeAs9s2Vse4X6ofcsaSDS4aimJcy5mDTYeX3idZf9zz3Gz /uZHgLA2cQZiqziF5BCkPvPSo28ZqnAGZMU/xkYPV5Ne5rHwwIu7hTawaWXwuMtE NCnUF9rrBGp/DgZAaDq6zYkU04ST5zXX5ZVyJvYD/6IEL7SRJrzvdRJr7N6DNP1i RTxgv4EVYxbOJ4Jwf3vblUV4B7zuv+23xPPn2U1ov6XKZFBziRkaEr3+EKuuOmZe 2lVcQ1eZlD1lyh3KFRHKlM7pVw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:14:53 2026 by rpki-client