$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json) Hash identifier: m+gTXmHPQu6CVhAJo2hG3oYK9RTqg0O6/zqrRd8GBnU= Subject key identifier: BD:94:67:89:C1:AD:9D:C2:B6:08:EE:16:57:1D:58:9A:BB:2A:53:C0 Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft Manifest number: 28 Signing time: Fri 17 Apr 2026 08:30:43 +0000 Manifest this update: Fri 17 Apr 2026 08:30:42 +0000 Manifest next update: Fri 24 Apr 2026 08:30:42 +0000 Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: +LRzwJ1+YH58jFF99JkGQ8S/ZaxFJp7ijW0cKlkY/tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Validity Not Before: Apr 17 08:30:42 2026 GMT Not After : Apr 24 08:30:42 2026 GMT Subject: CN=69e1efb2-446e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:46:e8:82:b8:87:a0:9f:aa:54:92:92:98: bc:01:44:62:c0:0c:02:c3:06:cb:01:58:14:8b:11: d0:07:9e:7a:e4:e6:09:d8:6a:21:2d:f9:cb:87:73: a8:1a:ff:6e:6d:f3:41:4f:13:6f:0d:01:e6:54:8d: d2:c8:af:ba:29:5b:3a:7e:b6:10:bf:82:7e:f6:40: e6:2a:2f:49:2d:d3:01:84:24:b8:20:9b:d1:e0:ab: 24:b8:15:c8:54:2e:0a:13:ad:45:1e:98:db:4f:a6: 25:3e:d5:d7:dc:03:d9:a7:60:3d:69:9d:97:cb:34: 66:2a:dd:3a:ea:5c:de:6a:d4:d7:c3:2f:a3:f4:22: 84:d7:46:81:c4:0e:77:38:a0:f2:91:e0:24:34:ae: fa:04:86:a1:fe:f9:b3:55:48:82:c8:cc:4f:62:09: 85:20:c8:58:35:d7:0d:a9:4b:94:bc:41:33:c2:6b: 07:cd:65:fb:93:45:e9:e6:b6:7e:8a:7f:bd:0a:10: f1:25:17:94:39:ec:95:15:44:ff:a6:c1:a1:b2:f8: 05:30:f9:43:20:81:47:46:a0:b3:ac:fb:be:b2:76: 9b:51:02:33:2b:25:bd:b5:c1:9b:05:ae:d9:80:02: d7:c5:1b:36:9c:ce:c1:98:87:1b:ca:44:ad:66:5c: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:94:67:89:C1:AD:9D:C2:B6:08:EE:16:57:1D:58:9A:BB:2A:53:C0 X509v3 Authority Key Identifier: keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e4:c3:a4:92:f1:e0:7f:85:99:3e:f5:fd:94:d8:81:62:99: cb:95:88:38:5f:9f:39:02:9e:71:c6:c0:62:82:82:bd:94:7e: f9:d2:05:f6:84:ed:64:bf:11:3b:8f:f7:38:28:8c:5f:7e:ad: 36:3e:b3:c8:0c:fd:d1:e0:03:cc:40:45:70:07:e6:f1:1d:2e: 93:1a:64:53:91:9c:c6:8d:89:9c:82:bc:f7:e3:6a:5e:d4:1d: e7:03:4d:e2:e3:e7:50:c5:aa:04:c6:c3:73:fb:1f:fc:93:59: 2f:9f:e6:c3:a4:92:36:86:40:82:f3:0b:63:a7:50:af:a0:af: 63:ff:76:02:e2:be:80:13:c7:c9:bc:8e:13:96:72:26:0e:1d: b5:30:47:fb:5c:39:1f:77:fc:8e:5a:0b:50:35:3a:83:f6:7b: f7:16:83:65:a9:f9:26:0c:89:90:ee:8a:1c:51:1f:1c:88:e3: 78:07:60:8c:7b:5d:71:11:af:5e:68:21:4d:55:ae:b7:15:cf: 16:8c:c7:d6:40:61:78:56:18:9b:b4:05:4c:88:38:98:6c:29: c1:f4:5a:7b:8c:30:32:32:6a:ba:40:c7:df:a5:38:54:aa:ad: 8e:60:2f:ff:07:e3:8a:c4:51:d7:35:26:da:c8:37:d6:66:d8: 59:38:38:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDQ5QTExMC8GA1UEBRMoMkU1NjdDQjRENjY1NkJFRTBDRjlEQzI4QUYwREU3MjE1 QjdGNjdFODAeFw0yNjA0MTcwODMwNDJaFw0yNjA0MjQwODMwNDJaMBgxFjAUBgNV BAMTDTY5ZTFlZmIyLTQ0NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEk0bogriHoJ+qVJKSmLwBRGLADALDBssBWBSLEdAHnnrk5gnYaiEt+cuHc6ga /25t80FPE28NAeZUjdLIr7opWzp+thC/gn72QOYqL0kt0wGEJLggm9HgqyS4FchU LgoTrUUemNtPpiU+1dfcA9mnYD1pnZfLNGYq3TrqXN5q1NfDL6P0IoTXRoHEDnc4 oPKR4CQ0rvoEhqH++bNVSILIzE9iCYUgyFg11w2pS5S8QTPCawfNZfuTRenmtn6K f70KEPElF5Q57JUVRP+mwaGy+AUw+UMggUdGoLOs+76ydptRAjMrJb21wZsFrtmA AtfFGzaczsGYhxvKRK1mXBeNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvZRnicGt ncK2CO4WVx1YmrsqU8AwHwYDVR0jBBgwFoAULlZ8tNZla+4M+dworw3nIVt/Z+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzFBNzU4QzFBMDJD QTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00TS1kd29ydzNuSVZ0X1ot Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTGxaOHROWmxhLTRNLWR3b3J3M25JVnRfWi1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NDlBLzFBNzU4QzFBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00 TS1kd29ydzNuSVZ0X1otZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+5MOkkvHgf4WZPvX9lNiBYpnLlYg4X585Ap5xxsBigoK9lH750gX2hO1kvxE7 j/c4KIxffq02PrPIDP3R4APMQEVwB+bxHS6TGmRTkZzGjYmcgrz342pe1B3nA03i 4+dQxaoExsNz+x/8k1kvn+bDpJI2hkCC8wtjp1CvoK9j/3YC4r6AE8fJvI4TlnIm Dh21MEf7XDkfd/yOWgtQNTqD9nv3FoNlqfkmDImQ7oocUR8ciON4B2CMe11xEa9e aCFNVa63Fc8WjMfWQGF4VhibtAVMiDiYbCnB9Fp7jDAyMmq6QMffpThUqq2OYC// B+OKxFHXNSbayDfWZthZODht -----END CERTIFICATE-----Generated at Sat Apr 18 00:26:55 2026 by rpki-client