$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: HnF02WmSZ6fR3jF5f1lzXCnN1KG/W0lNSkWo8JYQk6w= Subject key identifier: 12:B4:2B:0C:F5:00:44:32:54:97:BE:80:F0:53:4E:AE:3B:E0:E2:9C Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 010B Signing time: Wed 15 Apr 2026 05:40:57 +0000 Manifest this update: Wed 15 Apr 2026 05:40:56 +0000 Manifest next update: Wed 22 Apr 2026 05:40:56 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: lcGPg8lgNQ4Yv580BQsVuFIBPWlPhI+QlAr5Nl0gzBE=) 2: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) 3: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Apr 15 05:40:56 2026 GMT Not After : Apr 22 05:40:56 2026 GMT Subject: CN=69df24e9-0c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:33:10:10:13:9f:3c:ab:66:ce:91:8d:bd: 2a:86:0b:6c:8d:88:11:7e:34:b5:2a:66:2f:6f:d7: 31:ae:ee:5c:48:4a:2b:3a:77:fb:6a:d8:ec:00:e1: ee:91:df:d1:a3:2d:74:a1:9b:49:a2:63:b2:05:4f: d0:c7:9f:96:2c:a1:32:f1:62:b1:1d:4a:c3:18:7d: 5a:e5:37:b8:6c:7d:e6:d2:70:bd:9f:d6:e2:ce:30: dd:27:ac:7d:ac:e4:0b:c8:58:35:4c:95:8c:1a:2f: 2c:e8:75:31:0a:97:a1:11:b4:7f:d8:76:92:5c:e1: f6:f3:91:5a:fc:5c:76:aa:7a:44:e3:c4:93:e2:b9: da:18:0d:93:44:91:61:f4:42:11:ec:42:ae:7a:9a: 83:86:5f:0e:3c:4b:e7:29:1c:9f:e3:ef:af:14:d6: bf:44:7f:82:36:1e:81:3e:c1:37:ee:cb:fe:44:13: e5:ab:bc:e6:17:63:e7:4f:87:a8:5b:f8:a1:7a:fc: 2e:d6:6a:e1:7c:5d:7d:8d:ca:a2:a3:25:d3:53:c2: 5d:02:f2:ca:ce:56:5f:8f:dd:10:43:aa:15:25:73: 99:e9:92:71:4f:57:b0:27:24:b4:2c:0f:84:e9:70: a2:2a:dc:1e:75:0d:a6:23:9f:ca:b7:3c:29:be:07: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:2B:0C:F5:00:44:32:54:97:BE:80:F0:53:4E:AE:3B:E0:E2:9C X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:1f:2e:19:c2:00:a1:46:71:f5:37:92:9a:cb:a1:8c:74: 13:64:06:82:39:e0:3a:b6:a0:b7:e8:de:45:ec:6d:7e:73:eb: df:8e:f0:e6:da:09:e9:e0:78:eb:b7:29:97:a2:98:1a:58:65: 8a:c2:04:e9:96:48:f4:f6:46:54:bd:36:bb:46:9b:4c:89:90: 57:08:55:58:01:bb:87:7f:bd:05:4d:92:31:ea:e3:38:f7:aa: d7:b7:93:20:d4:20:dc:64:7c:fd:48:0c:f8:63:31:25:bb:dd: 1f:cc:dd:76:f2:46:f0:b1:07:fe:9b:d7:c2:77:60:a4:31:6d: a7:d5:a3:d2:3d:41:27:a6:c6:f7:85:e3:2c:c7:f8:c9:33:be: b7:00:3c:2b:cc:65:cc:89:eb:3b:22:db:ff:d4:26:9e:e0:21: f4:ee:b6:d5:a8:84:ce:8f:e9:4b:2f:f1:66:a3:b2:d3:99:d4: 8d:12:e3:98:8c:13:57:29:64:db:29:17:54:65:29:36:95:ec: c6:b3:75:2d:3b:08:1b:6f:6b:f4:95:48:65:df:60:3f:b9:c3: 7d:17:02:8b:84:df:60:16:c4:84:45:30:6f:c2:62:eb:03:ae: 15:eb:70:0e:88:c5:74:49:69:8f:de:78:7c:de:fd:ba:e6:2e: a8:07:4e:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYwNDE1MDU0MDU2WhcNMjYwNDIyMDU0MDU2WjAYMRYwFAYD VQQDEw02OWRmMjRlOS0wYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXQzEBATnzyrZs6Rjb0qhgtsjYgRfjS1KmYvb9cxru5cSEorOnf7atjsAOHu kd/Roy10oZtJomOyBU/Qx5+WLKEy8WKxHUrDGH1a5Te4bH3m0nC9n9bizjDdJ6x9 rOQLyFg1TJWMGi8s6HUxCpehEbR/2HaSXOH285Fa/Fx2qnpE48ST4rnaGA2TRJFh 9EIR7EKuepqDhl8OPEvnKRyf4++vFNa/RH+CNh6BPsE37sv+RBPlq7zmF2PnT4eo W/ihevwu1mrhfF19jcqioyXTU8JdAvLKzlZfj90QQ6oVJXOZ6ZJxT1ewJyS0LA+E 6XCiKtwedQ2mI5/KtzwpvgdrXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBK0Kwz1 AEQyVJe+gPBTTq474OKcMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl4EfLhnCAKFGcfU3kprLoYx0E2QGgjngOragt+jeRextfnPr347w5toJ6eB4 67cpl6KYGlhlisIE6ZZI9PZGVL02u0abTImQVwhVWAG7h3+9BU2SMerjOPeq17eT INQg3GR8/UgM+GMxJbvdH8zddvJG8LEH/pvXwndgpDFtp9Wj0j1BJ6bG94XjLMf4 yTO+twA8K8xlzInrOyLb/9QmnuAh9O621aiEzo/pSy/xZqOy05nUjRLjmIwTVylk 2ykXVGUpNpXsxrN1LTsIG29r9JVIZd9gP7nDfRcCi4TfYBbEhEUwb8Ji6wOuFetw DojFdElpj954fN79uuYuqAdOSg== -----END CERTIFICATE-----Generated at Fri Apr 17 04:21:10 2026 by rpki-client