$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: oitqgkTGCb4b7UE588NFFND2ZarDl/sv/bEdi0fP9CI= Subject key identifier: 7A:31:07:06:C5:3F:BB:DE:E5:40:ED:B3:E7:C1:93:F9:31:1D:5F:A2 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0CD9 Signing time: Thu 16 Apr 2026 18:17:20 +0000 Manifest this update: Thu 16 Apr 2026 18:17:19 +0000 Manifest next update: Thu 23 Apr 2026 18:17:19 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: Qf1mvNEYP+KgqLbuIMk3KOSlvBc8j/BhLfNcY0JFL9A=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Apr 16 18:17:19 2026 GMT Not After : Apr 23 18:17:19 2026 GMT Subject: CN=69e127af-8a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:25:cc:1b:35:38:e6:c2:d3:28:90:e9:8a:76: 6e:27:3b:0b:77:42:59:fd:2e:de:1f:eb:86:72:35: 22:9d:ca:00:19:3d:55:a1:37:b0:30:5e:54:51:fd: 57:ab:19:7d:8d:19:52:6f:cf:a1:cc:5c:08:d1:8d: 2e:ba:a5:66:59:66:17:b7:9f:27:b4:55:ca:16:c9: 2b:3f:a4:79:dc:80:62:dd:58:97:a4:08:25:bd:37: 81:ee:ec:be:35:21:4f:97:80:29:25:80:15:e5:46: 38:b8:95:83:04:8b:0f:49:4b:56:5f:42:d0:a5:36: ac:d0:e8:d5:27:30:da:32:f2:cd:58:f4:fe:e0:0c: 94:f4:dc:cc:bb:10:00:5c:1f:b3:ac:2c:72:4e:a7: 19:b6:bf:86:9e:ff:6c:d0:02:04:fb:47:a9:f7:45: b2:60:32:82:58:e3:d4:95:1e:1e:1c:06:78:f8:1d: 0b:a2:f5:f9:d8:11:de:b7:0e:5b:2a:87:10:75:76: e0:ae:f9:35:10:27:28:20:c7:bb:a9:06:4e:0f:84: 57:61:ee:69:05:d6:98:cb:15:24:53:be:a5:89:ec: c5:d1:fd:7c:0a:73:c6:d4:44:f9:83:5b:af:e2:cc: 62:fc:65:61:ed:ad:ab:51:a3:6e:82:8f:79:0e:6c: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:31:07:06:C5:3F:BB:DE:E5:40:ED:B3:E7:C1:93:F9:31:1D:5F:A2 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:6a:0e:72:6b:4d:f9:cd:db:dc:98:54:39:52:8a:7a:9f:a9: a7:2e:f8:8b:db:5b:8e:db:e3:05:3d:2a:67:cd:19:61:a8:5e: 5e:d0:d6:ed:a0:90:98:77:4b:29:6e:c7:19:31:87:95:87:89: 23:51:60:f2:9d:77:d2:4c:73:57:60:ab:47:17:9c:fe:ad:48: 69:97:9d:fb:60:31:14:ee:24:ee:30:f8:23:68:9e:58:06:e7: db:fc:80:5b:f1:40:7e:1f:76:51:35:93:01:fc:4d:25:ca:7d: 4a:01:f1:2d:97:ea:b9:09:8d:72:ce:cb:94:c5:2d:8d:28:18: 02:d8:29:e4:6c:1c:d0:2b:1a:6d:03:15:56:e1:77:c6:f6:1a: 26:56:27:11:75:6f:a9:32:77:97:15:24:7d:09:43:91:8f:59: 60:ed:f6:62:b0:aa:07:62:ef:6f:e3:9e:5f:04:9d:76:f4:67: 44:ac:35:0e:3b:67:3c:eb:0b:ee:43:94:81:a1:cd:54:af:21: 6f:72:1f:d3:5c:43:35:17:63:0b:db:ed:95:f8:9e:45:02:65: 95:f2:e4:d5:45:00:d1:ba:37:e2:3a:6f:52:9f:cb:67:e2:b3: 6a:d9:bf:d8:2f:2d:4f:a1:fc:1b:4a:01:d1:0e:b5:a2:17:11: 6c:4f:3e:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjYwNDE2MTgxNzE5WhcNMjYwNDIzMTgxNzE5WjAYMRYwFAYD VQQDEw02OWUxMjdhZi04YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/yXMGzU45sLTKJDpinZuJzsLd0JZ/S7eH+uGcjUincoAGT1VoTewMF5UUf1X qxl9jRlSb8+hzFwI0Y0uuqVmWWYXt58ntFXKFskrP6R53IBi3ViXpAglvTeB7uy+ NSFPl4ApJYAV5UY4uJWDBIsPSUtWX0LQpTas0OjVJzDaMvLNWPT+4AyU9NzMuxAA XB+zrCxyTqcZtr+Gnv9s0AIE+0ep90WyYDKCWOPUlR4eHAZ4+B0LovX52BHetw5b KocQdXbgrvk1ECcoIMe7qQZOD4RXYe5pBdaYyxUkU76liezF0f18CnPG1ET5g1uv 4sxi/GVh7a2rUaNugo95DmzxbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoxBwbF P7ve5UDts+fBk/kxHV+iMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUWoOcmtN+c3b3JhUOVKKep+ppy74i9tbjtvjBT0qZ80ZYaheXtDW7aCQmHdL KW7HGTGHlYeJI1Fg8p130kxzV2CrRxec/q1IaZed+2AxFO4k7jD4I2ieWAbn2/yA W/FAfh92UTWTAfxNJcp9SgHxLZfquQmNcs7LlMUtjSgYAtgp5Gwc0CsabQMVVuF3 xvYaJlYnEXVvqTJ3lxUkfQlDkY9ZYO32YrCqB2Lvb+OeXwSddvRnRKw1DjtnPOsL 7kOUgaHNVK8hb3If01xDNRdjC9vtlfieRQJllfLk1UUA0bo34jpvUp/LZ+Kzatm/ 2C8tT6H8G0oB0Q61ohcRbE8+Vg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:17:54 2026 by rpki-client