$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft File: 1lqglKUeKDl1O1khC2zyxUkVwB4.mft (raw, json) Hash identifier: rCwzm1aW4TAlDpMKO60bwWSdq9EDguHUpeiCxyCJD4M= Subject key identifier: F8:3C:60:13:6F:B6:D8:C0:32:F6:A9:59:53:F2:D1:D4:42:62:C7:FB Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E Certificate issuer: /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E Certificate serial: 0A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft Manifest number: 0A78 Signing time: Thu 16 Apr 2026 19:29:35 +0000 Manifest this update: Thu 16 Apr 2026 19:29:35 +0000 Manifest next update: Thu 23 Apr 2026 19:29:35 +0000 Files and hashes: 1: 1lqglKUeKDl1O1khC2zyxUkVwB4.crl (hash: I0RrOOPSLg1Uc4eFrmlVqWYOFipDbd/JliPy07XbSlE=) 2: 220853047F2211EA8E730F35C4F9AE02.roa (hash: dvtbQl9WFxEalnHzoaHQdlGL9o00cBASyRMK3uXNSHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2688 (0xa80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E Validity Not Before: Apr 16 19:29:35 2026 GMT Not After : Apr 23 19:29:35 2026 GMT Subject: CN=69e1389f-2bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:04:fe:99:cf:f9:aa:00:75:93:fd:71:e3: 1c:c9:5a:84:a1:39:fd:d4:6a:22:36:d3:b9:e9:e5: 28:74:6d:fe:18:26:82:d9:f2:3d:07:25:7f:c0:8f: e6:ac:35:a5:2b:ac:88:a7:cf:6b:07:42:bc:c1:de: 70:0c:ec:36:38:33:63:9e:64:2a:b9:4d:d4:d7:c3: d7:a0:93:20:48:da:40:dc:a2:9e:0c:70:76:48:42: e2:5b:cc:73:da:fa:28:9d:c7:16:6d:19:57:bc:af: c3:63:bc:1e:b2:f0:32:62:3a:4a:15:d6:ea:c4:46: 5b:32:b2:fa:3d:24:e9:48:be:69:2a:1d:4d:b6:93: 99:7a:41:5a:0c:16:f9:13:7f:1f:4a:31:09:08:37: 07:bc:f2:59:dc:05:de:4e:91:75:3b:33:fb:05:e0: be:83:46:a4:a4:f0:44:c6:94:33:2b:06:8e:23:ef: 77:92:58:e1:e1:cb:75:9c:c5:be:a4:ee:0c:56:1e: 3e:b2:f8:99:a0:ae:6c:b4:e9:d1:d2:46:7c:03:07: ae:28:b7:65:6e:28:c4:0f:89:9c:8a:c7:86:4e:49: eb:0d:79:00:9b:6f:7a:17:27:ee:18:c4:59:95:19: da:1b:c2:a8:c3:a0:dd:3f:1e:ba:72:57:a3:b9:19: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:60:13:6F:B6:D8:C0:32:F6:A9:59:53:F2:D1:D4:42:62:C7:FB X509v3 Authority Key Identifier: keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c2:65:fe:4d:11:11:9b:4e:68:89:f1:36:f3:69:42:d4:f1: 04:75:d8:40:27:ae:5b:33:f2:0f:dd:91:cb:0c:62:4e:42:0d: 83:e1:cf:ad:50:3f:02:14:e9:fb:ff:02:0a:86:7d:d5:d5:f6: e7:aa:76:63:e2:4d:b1:0b:8b:f8:83:a8:11:a4:71:02:78:05: 01:5a:45:96:a5:77:90:e7:19:0d:2e:1e:b0:b3:b0:10:96:fc: 23:f6:a0:1a:1a:0b:83:6a:e0:14:c4:7e:19:43:ed:bb:e5:0d: 27:5b:67:d0:14:26:6c:6f:4e:2d:20:33:8e:fe:2a:cc:2f:b0: 9f:e5:e6:b4:3a:4b:21:54:3c:1f:43:8c:c4:6f:04:98:f0:48: 60:98:2c:d3:bd:44:ff:1c:f4:d9:9a:29:27:1f:87:45:59:a9: 69:25:dd:29:4a:f9:a9:38:30:26:84:00:d9:24:17:8e:72:a8: 50:ac:c1:01:b7:3a:46:b2:01:08:ab:99:a3:09:2e:5b:01:3b: 0a:9a:2c:b0:7d:f8:1c:6d:93:a4:0c:5f:18:56:ad:f5:de:45: d1:52:03:9f:e7:2b:7a:3e:05:4e:f3:23:0f:3e:ed:fc:4f:83: 11:79:ca:ac:f9:fe:f8:86:44:eb:9f:67:b7:91:f3:1f:e9:c0: 6f:cf:07:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxQUExMTAvBgNVBAUTKEQ2NUFBMDk0QTUxRTI4Mzk3NTNCNTkyMTBCNkNGMkM1 NDkxNUMwMUUwHhcNMjYwNDE2MTkyOTM1WhcNMjYwNDIzMTkyOTM1WjAYMRYwFAYD VQQDEw02OWUxMzg5Zi0yYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx8E/pnP+aoAdZP9ceMcyVqEoTn91GoiNtO56eUodG3+GCaC2fI9ByV/wI/m rDWlK6yIp89rB0K8wd5wDOw2ODNjnmQquU3U18PXoJMgSNpA3KKeDHB2SELiW8xz 2voonccWbRlXvK/DY7wesvAyYjpKFdbqxEZbMrL6PSTpSL5pKh1NtpOZekFaDBb5 E38fSjEJCDcHvPJZ3AXeTpF1OzP7BeC+g0akpPBExpQzKwaOI+93kljh4ct1nMW+ pO4MVh4+sviZoK5stOnR0kZ8AweuKLdlbijED4mciseGTknrDXkAm296FyfuGMRZ lRnaG8Kow6DdPx66clejuRkQIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPg8YBNv ttjAMvapWVPy0dRCYsf7MB8GA1UdIwQYMBaAFNZaoJSlHig5dTtZIQts8sVJFcAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFBQS82QzlEMjYzMDdG MjAxMUVBQjU3RDU3MzJDNEY5QUUwMi8xbHFnbEtVZUtEbDFPMWtoQzJ6eXhVa1Z3 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscWdsS1VlS0RsMU8xa2hDMnp5eFVrVndCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFBQS82QzlEMjYzMDdGMjAxMUVBQjU3RDU3MzJDNEY5QUUwMi8xbHFnbEtVZUtE bDFPMWtoQzJ6eXhVa1Z3QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApcJl/k0REZtOaInxNvNpQtTxBHXYQCeuWzPyD92RywxiTkINg+HPrVA/AhTp +/8CCoZ91dX256p2Y+JNsQuL+IOoEaRxAngFAVpFlqV3kOcZDS4esLOwEJb8I/ag GhoLg2rgFMR+GUPtu+UNJ1tn0BQmbG9OLSAzjv4qzC+wn+XmtDpLIVQ8H0OMxG8E mPBIYJgs071E/xz02ZopJx+HRVmpaSXdKUr5qTgwJoQA2SQXjnKoUKzBAbc6RrIB CKuZowkuWwE7CpossH34HG2TpAxfGFat9d5F0VIDn+crej4FTvMjDz7t/E+DEXnK rPn++IZE659nt5HzH+nAb88HVg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:51 2026 by rpki-client