$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: NDQjM2FsMArpDhewZiJW9w3lhjGPMupdnNVaD41xijs= Subject key identifier: 80:F0:D4:E5:05:A9:50:6C:AE:2A:A4:95:21:D9:BA:8A:DB:CD:78:6B Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 0358 Signing time: Fri 17 Apr 2026 00:55:38 +0000 Manifest this update: Fri 17 Apr 2026 00:55:37 +0000 Manifest next update: Fri 24 Apr 2026 00:55:37 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: Uc4on5LXRH806MiVflxamG3/mSsECSHQu+k1vu0y9ws=) 2: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=) 3: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=) 4: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=) 5: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=) 6: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=) 7: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 17 00:55:37 2026 GMT Not After : Apr 24 00:55:37 2026 GMT Subject: CN=69e1850a-95b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:ec:a9:85:90:24:dc:87:5e:a4:56:bd:3b: 0b:30:2a:56:0c:5e:3e:16:02:71:d3:2c:30:03:57: 49:3e:2d:6e:c2:6d:4a:29:d8:c2:5c:69:b6:71:3e: 5d:66:2e:4e:38:70:20:8f:36:f7:14:e9:81:82:c2: 0e:ba:6e:ad:38:ef:8c:8e:51:2d:d3:65:cf:ee:70: 5f:c6:8e:1c:a1:89:66:3e:ea:f7:7a:16:65:65:a5: bf:37:db:74:80:3e:b7:88:3c:67:f9:6d:c3:26:43: 66:b8:14:96:10:6e:fc:86:de:ff:f5:ee:72:48:37: a2:d2:d9:2a:04:28:40:a4:e8:93:a5:27:2b:89:4d: 72:7d:56:90:67:72:ae:37:0c:0b:5a:fd:e3:3f:50: 01:db:93:30:15:ce:e0:f9:e1:15:cd:b6:dc:86:fa: 81:af:5d:2a:a0:0b:82:f8:9d:30:c7:e7:64:63:b4: 82:5d:02:db:8e:c8:cf:cb:79:4c:bb:f3:5f:f6:33: 72:00:e6:9d:2b:b1:ac:55:fb:fd:05:86:7c:69:cd: a3:4a:0e:75:ea:e5:91:de:90:6d:a4:e4:2f:02:35: d6:77:1e:e4:8b:91:62:48:98:f1:0f:06:21:d1:ae: 8f:26:2a:d1:5f:67:51:45:b5:63:4a:41:43:89:f0: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F0:D4:E5:05:A9:50:6C:AE:2A:A4:95:21:D9:BA:8A:DB:CD:78:6B X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bc:7c:ce:c3:18:21:2e:8b:22:ef:4e:c5:50:58:48:80:2b: 52:b2:b7:da:14:9e:2f:8c:34:28:45:48:f4:a8:81:7f:3e:ca: cd:46:cc:a7:a4:28:72:89:62:cf:66:8d:a3:d2:81:65:86:4c: f8:b9:f3:83:06:b4:63:78:4b:14:b4:26:98:34:4b:73:94:a8: 59:a6:0c:3a:93:4b:e6:0c:c7:db:0d:40:70:e1:bc:c5:4a:d1: 19:10:84:2b:53:c0:7b:68:0c:87:8f:c1:66:ec:66:4f:f3:f3: 5f:2a:41:4d:c4:f8:93:0c:e2:ef:0e:90:69:27:01:71:0d:cc: 6f:53:57:fe:aa:23:8c:b8:e8:fc:c8:48:95:19:db:f0:77:87: f6:cc:c7:51:89:c0:59:26:21:b2:20:56:51:9f:e4:0d:a1:a1: 28:b2:a0:3c:18:f6:bd:a5:78:93:f0:6d:12:75:17:09:87:54: c5:c1:5e:9f:a4:27:07:d9:21:78:fa:29:c9:30:41:68:3b:84: 10:79:1b:82:64:40:8c:11:b7:05:f3:0f:0e:93:0e:42:01:4e: fc:f2:0f:34:45:21:82:71:9f:b7:73:d1:d2:48:e2:dc:98:d6: bf:03:2b:b1:19:af:7a:75:64:b6:a5:a4:ac:f7:a8:cb:f2:ad: 7d:53:96:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwNDE3MDA1NTM3WhcNMjYwNDI0MDA1NTM3WjAYMRYwFAYD VQQDEw02OWUxODUwYS05NWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQjsqYWQJNyHXqRWvTsLMCpWDF4+FgJx0ywwA1dJPi1uwm1KKdjCXGm2cT5d Zi5OOHAgjzb3FOmBgsIOum6tOO+MjlEt02XP7nBfxo4coYlmPur3ehZlZaW/N9t0 gD63iDxn+W3DJkNmuBSWEG78ht7/9e5ySDei0tkqBChApOiTpScriU1yfVaQZ3Ku NwwLWv3jP1AB25MwFc7g+eEVzbbchvqBr10qoAuC+J0wx+dkY7SCXQLbjsjPy3lM u/Nf9jNyAOadK7GsVfv9BYZ8ac2jSg516uWR3pBtpOQvAjXWdx7ki5FiSJjxDwYh 0a6PJirRX2dRRbVjSkFDifAuhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDw1OUF qVBsriqklSHZuorbzXhrMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7x8zsMYIS6LIu9OxVBYSIArUrK32hSeL4w0KEVI9KiBfz7KzUbMp6Qocoli z2aNo9KBZYZM+Lnzgwa0Y3hLFLQmmDRLc5SoWaYMOpNL5gzH2w1AcOG8xUrRGRCE K1PAe2gMh4/BZuxmT/PzXypBTcT4kwzi7w6QaScBcQ3Mb1NX/qojjLjo/MhIlRnb 8HeH9szHUYnAWSYhsiBWUZ/kDaGhKLKgPBj2vaV4k/BtEnUXCYdUxcFen6QnB9kh ePopyTBBaDuEEHkbgmRAjBG3BfMPDpMOQgFO/PIPNEUhgnGft3PR0kji3JjWvwMr sRmvenVktqWkrPeoy/KtfVOWgg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:30 2026 by rpki-client