$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: RNo51KZUOnyj+NlDTtfzxE+1wF6mpuG1lHMZnM6jxhs= Subject key identifier: AB:70:BE:8D:AB:A2:1F:C0:E6:5F:66:3C:B9:7F:9D:44:5C:9A:5A:89 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0BDB Signing time: Thu 16 Apr 2026 18:50:07 +0000 Manifest this update: Thu 16 Apr 2026 18:50:06 +0000 Manifest next update: Thu 23 Apr 2026 18:50:06 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: VaYMTmLLUB0bj8NHVVp7FhZw7sGURa74lvR6ywq3dic=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Apr 16 18:50:06 2026 GMT Not After : Apr 23 18:50:06 2026 GMT Subject: CN=69e12f5f-b753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:e1:61:95:70:cd:22:33:69:ac:36:ac:5f: 41:73:6d:6c:1e:8b:f9:34:9c:b6:f4:43:a3:c9:3c: dc:aa:f0:c5:1e:ef:b9:92:17:cb:d7:23:e5:14:d0: 1e:60:21:db:09:10:bf:ca:15:61:5d:3e:fd:d0:12: be:17:b5:bb:c2:d8:12:f8:76:33:d1:af:6f:ec:17: 83:43:f5:cf:2b:74:c3:b1:6c:7e:98:f0:c1:a5:19: b5:60:c0:48:c2:df:d1:c2:26:8d:e7:51:2c:c6:d0: 8c:d8:ee:80:3a:d8:07:18:04:81:5c:c6:f3:47:4a: 81:87:67:dd:d9:09:11:79:13:6b:cf:52:64:45:83: 4d:71:81:e9:0f:c3:3d:e2:45:42:ee:42:34:20:65: 56:da:67:5e:8a:1f:d2:fa:b6:52:b9:36:55:ed:57: 06:27:70:7c:58:0a:65:1c:b4:1f:d4:cd:83:62:6b: 55:e4:e0:df:bc:bc:35:8a:05:ae:27:ae:c6:74:30: 41:59:6d:2a:19:bc:ad:d5:13:b1:3e:58:8d:ea:f5: d1:3b:d6:1e:84:bd:e8:65:6f:d6:87:75:4f:5b:f8: 2b:60:7b:07:28:1c:f4:50:0a:98:17:c0:d0:2f:21: 92:58:c8:d2:b6:f9:e7:c8:c5:1a:8a:1b:d4:8e:e6: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:70:BE:8D:AB:A2:1F:C0:E6:5F:66:3C:B9:7F:9D:44:5C:9A:5A:89 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:44:0b:0a:1a:d9:6a:02:8e:aa:7e:2e:bf:fd:66:13:ac:ca: 09:14:0a:b1:43:e7:ae:51:ca:65:0c:dc:11:6e:fa:e6:cd:c7: d5:fa:6c:f7:00:d2:df:43:d0:1e:56:70:b3:fa:56:8e:af:e0: 5a:bc:8a:26:ab:a4:2a:42:d2:46:d7:e2:f8:9b:1c:8d:1b:b0: ac:c8:e2:11:de:45:b3:db:2d:59:79:59:07:30:ad:43:24:b7: 04:bc:16:bc:66:18:6b:d2:54:1c:24:12:c3:2f:7b:a5:15:f5: ec:a8:4d:24:3c:43:04:f8:15:5d:3d:92:0d:4f:02:20:a9:67: 9e:0a:6e:55:1f:02:43:ba:f6:62:da:2c:c3:09:11:19:f4:39: 3e:05:ad:d3:7d:20:45:a5:68:a5:2d:5a:b9:3e:c1:1f:5a:61: f4:23:5a:15:a5:f6:24:b1:ae:9d:8a:9e:f5:11:b6:b6:a3:d0: 45:36:8a:94:7e:6c:eb:3e:7e:6a:17:cf:82:2a:83:6e:2c:eb: d7:3b:49:f3:24:2e:9a:2b:c8:74:36:80:2a:93:67:c8:46:15: 7e:a7:31:d3:63:97:02:7a:ee:c2:bf:1f:6b:b9:49:a5:ab:96: df:0d:6c:c6:18:74:a8:1d:e8:16:90:cd:64:b8:25:4c:b3:2b: d2:5d:ca:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwNDE2MTg1MDA2WhcNMjYwNDIzMTg1MDA2WjAYMRYwFAYD VQQDEw02OWUxMmY1Zi1iNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn3hYZVwzSIzaaw2rF9Bc21sHov5NJy29EOjyTzcqvDFHu+5khfL1yPlFNAe YCHbCRC/yhVhXT790BK+F7W7wtgS+HYz0a9v7BeDQ/XPK3TDsWx+mPDBpRm1YMBI wt/RwiaN51EsxtCM2O6AOtgHGASBXMbzR0qBh2fd2QkReRNrz1JkRYNNcYHpD8M9 4kVC7kI0IGVW2mdeih/S+rZSuTZV7VcGJ3B8WAplHLQf1M2DYmtV5ODfvLw1igWu J67GdDBBWW0qGbyt1ROxPliN6vXRO9YehL3oZW/Wh3VPW/grYHsHKBz0UAqYF8DQ LyGSWMjStvnnyMUaihvUjubTzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtwvo2r oh/A5l9mPLl/nURcmlqJMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABkQLChrZagKOqn4uv/1mE6zKCRQKsUPnrlHKZQzcEW765s3H1fps9wDS30PQ HlZws/pWjq/gWryKJqukKkLSRtfi+JscjRuwrMjiEd5Fs9stWXlZBzCtQyS3BLwW vGYYa9JUHCQSwy97pRX17KhNJDxDBPgVXT2SDU8CIKlnngpuVR8CQ7r2YtoswwkR GfQ5PgWt030gRaVopS1auT7BH1ph9CNaFaX2JLGunYqe9RG2tqPQRTaKlH5s6z5+ ahfPgiqDbizr1ztJ8yQumivIdDaAKpNnyEYVfqcx02OXAnruwr8fa7lJpauW3w1s xhh0qB3oFpDNZLglTLMr0l3K/w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:38 2026 by rpki-client