$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: nYPPq48dwz+B1xJZEL3P0KxKhiMxFX9el2heOU4t/FY= Subject key identifier: 7A:A9:3F:CE:A8:18:BF:87:16:E8:55:42:00:B1:F6:3D:39:2A:72:F0 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 08B6 Signing time: Thu 16 Apr 2026 20:20:37 +0000 Manifest this update: Thu 16 Apr 2026 20:20:36 +0000 Manifest next update: Thu 23 Apr 2026 20:20:36 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: bnrgLjy6BnJYxNePaJPSxR2WQE4JmU0WWm53NCDFeW0=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: dby0+4Qsp5/x8ZaPPfeNBBuHCuW1xM9rOg7ow1mi7Ss=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: a8A+sLpfbwO2ibV68drjvFW0LBjdEV4/UHX7R/nBWwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Apr 16 20:20:36 2026 GMT Not After : Apr 23 20:20:36 2026 GMT Subject: CN=69e14495-ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:3a:c2:0a:10:d4:2b:c1:8b:63:97:c4:9a: a1:80:17:9d:bc:94:4a:59:a6:db:00:2c:a6:93:8e: 25:d2:78:45:78:11:6f:44:e6:cb:ce:e3:e9:39:45: cf:92:cb:cf:c1:94:14:13:03:05:58:55:59:81:28: 09:ea:d9:8c:9f:b7:26:db:76:12:fc:83:01:7f:82: 01:a5:06:c3:68:32:c5:65:0f:48:b3:22:eb:44:c1: 7c:8f:92:e0:94:ea:14:98:09:2d:88:b6:0e:46:2b: 32:b8:01:fb:67:8c:e3:d4:e2:b8:4a:54:19:e4:2c: 3b:f1:be:4a:13:57:50:56:af:3c:83:59:79:69:bd: 97:1c:cc:54:93:cc:9e:82:88:05:e6:57:49:c0:b5: 79:df:f6:f3:8d:d1:05:68:21:28:11:7c:72:d2:ed: 1e:8b:0b:2f:aa:4a:0b:90:11:78:c9:f2:1c:70:f9: da:c1:cd:c0:cc:34:2f:a7:1d:31:b9:28:ac:c9:f8: f9:1e:30:46:a9:15:2b:71:38:f9:e0:d4:64:0e:20: a5:4a:5c:a9:f2:6f:96:1a:2c:4e:bd:7b:b6:b0:fe: 28:33:b9:15:2f:cd:ee:9c:56:a2:44:dc:7c:bd:87: 44:f9:a7:1b:ff:2d:06:37:f3:6a:de:4e:58:ba:cb: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A9:3F:CE:A8:18:BF:87:16:E8:55:42:00:B1:F6:3D:39:2A:72:F0 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d1:75:0b:a1:56:ad:03:f1:cb:1e:12:e6:1f:29:79:72:de: 99:55:68:42:a5:15:8a:68:56:57:0a:17:6f:c2:e2:31:46:e1: 37:6f:03:e4:b8:da:ef:04:61:ab:01:b5:4d:5f:4e:c3:d5:42: 57:f5:87:93:bf:ee:ae:8b:d8:e4:39:0d:1f:7e:ac:f4:50:69: 8d:b2:e4:97:60:75:32:f5:d2:33:f0:93:49:cd:31:6b:20:5e: 28:00:a1:2b:95:77:59:dd:ec:a6:10:84:91:c4:b2:d3:af:0a: f3:81:2d:6b:3f:f3:ef:8b:83:2c:20:df:5d:0f:f4:d4:64:75: 30:93:0d:0c:5b:ff:c2:02:f5:c3:27:53:7f:7d:51:3b:6e:de: 56:38:2c:1c:4a:e2:31:41:49:bf:23:fc:d1:aa:f0:9c:9a:70: 7a:89:be:5a:ea:45:4f:cc:ad:96:9f:a6:15:d4:70:08:34:50: b6:56:ac:db:6f:da:e1:32:6a:e8:1d:fb:47:a4:1b:a8:30:b9: 84:ee:6d:e0:8a:af:32:1c:93:a8:c0:d9:84:b5:b3:45:af:cb: a9:c2:73:e5:4c:b3:8c:69:5e:aa:fe:1a:70:f5:21:c7:f8:1d: 54:93:23:76:96:ba:d6:be:63:88:e5:c2:6d:3b:57:9b:17:ec: 7c:e1:d8:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjYwNDE2MjAyMDM2WhcNMjYwNDIzMjAyMDM2WjAYMRYwFAYD VQQDEw02OWUxNDQ5NS1lYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJg6wgoQ1CvBi2OXxJqhgBedvJRKWabbACymk44l0nhFeBFvRObLzuPpOUXP ksvPwZQUEwMFWFVZgSgJ6tmMn7cm23YS/IMBf4IBpQbDaDLFZQ9IsyLrRMF8j5Lg lOoUmAktiLYORisyuAH7Z4zj1OK4SlQZ5Cw78b5KE1dQVq88g1l5ab2XHMxUk8ye gogF5ldJwLV53/bzjdEFaCEoEXxy0u0eiwsvqkoLkBF4yfIccPnawc3AzDQvpx0x uSisyfj5HjBGqRUrcTj54NRkDiClSlyp8m+WGixOvXu2sP4oM7kVL83unFaiRNx8 vYdE+acb/y0GN/Nq3k5YussElwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqpP86o GL+HFuhVQgCx9j05KnLwMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr9F1C6FWrQPxyx4S5h8peXLemVVoQqUVimhWVwoXb8LiMUbhN28D5Lja7wRh qwG1TV9Ow9VCV/WHk7/urovY5DkNH36s9FBpjbLkl2B1MvXSM/CTSc0xayBeKACh K5V3Wd3sphCEkcSy068K84Etaz/z74uDLCDfXQ/01GR1MJMNDFv/wgL1wydTf31R O27eVjgsHEriMUFJvyP80arwnJpweom+WupFT8ytlp+mFdRwCDRQtlas22/a4TJq 6B37R6QbqDC5hO5t4IqvMhyTqMDZhLWzRa/LqcJz5UyzjGleqv4acPUhx/gdVJMj dpa61r5jiOXCbTtXmxfsfOHYXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:46:18 2026 by rpki-client