$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: FvTvIFYVWdY8Kr0r2vze+05bAnQIa07PZje44VWcbzs= Subject key identifier: 00:E9:FC:F9:59:7D:A0:2C:18:CE:BF:CB:E9:86:4A:7C:18:8C:D5:E7 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0BD9 Signing time: Thu 16 Apr 2026 18:53:00 +0000 Manifest this update: Thu 16 Apr 2026 18:52:59 +0000 Manifest next update: Thu 23 Apr 2026 18:52:59 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: Zl5+C6q+L/O/neYNtVzczrd1TKj6SvaMIa5LZYzObU4=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: KSLYVs16SK4lbuhA+tQMeKNyI28wiMaASlGHFe6M7ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Apr 16 18:52:59 2026 GMT Not After : Apr 23 18:52:59 2026 GMT Subject: CN=69e1300c-5559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:76:77:51:fe:9e:88:79:c6:93:d6:c2:03: 5d:8b:df:a6:22:b0:b5:00:ce:89:61:3e:ad:0c:3c: 59:4e:92:f2:6e:63:30:c3:f0:5e:ec:26:08:71:0c: d1:fa:71:0d:33:b7:7c:37:26:cf:ce:69:61:54:64: c8:7a:20:c7:96:13:d8:a6:31:bd:c5:71:1a:91:fd: 9c:b5:0f:be:8d:3e:7a:d2:60:e2:c8:b3:73:fd:9c: 67:09:40:6c:c9:f3:98:9c:e0:09:ed:8a:16:47:af: 07:e5:05:5f:43:6e:36:6c:93:dc:f2:d5:b6:92:03: 6c:9d:96:fa:30:6a:2a:67:ff:87:7f:d0:36:1e:39: 5c:96:79:ba:d5:aa:da:7b:05:f5:50:03:09:30:f0: 15:6e:b2:21:65:4f:6f:e8:7c:15:3b:4c:a4:f7:9d: dd:e0:c9:46:0f:dc:fc:51:99:55:e8:a5:2e:11:d1: 21:2a:3d:13:1b:fa:60:1a:9d:a5:b7:97:09:68:ec: 7d:52:66:db:bb:53:e0:35:3e:a7:57:2b:02:5a:12: 06:e3:0e:d6:33:11:63:73:fd:a0:bc:ba:db:29:f3: b1:e0:09:7d:d9:c3:76:8f:d4:c5:8c:26:40:01:b3: 4d:d9:06:1b:37:39:3d:f2:14:b1:d9:91:04:ca:a3: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E9:FC:F9:59:7D:A0:2C:18:CE:BF:CB:E9:86:4A:7C:18:8C:D5:E7 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3f:69:a8:96:10:6a:d4:82:ef:bf:3f:6a:d5:db:da:7c:a7: 14:ff:23:8f:96:53:e0:f9:d9:f3:e0:d9:40:8a:9c:f9:d2:cc: 41:86:df:0a:d3:2e:c9:36:d2:16:a3:0e:e6:f5:9d:55:5c:2c: 5e:42:51:5a:51:39:90:5f:72:78:7d:87:32:43:69:c2:a1:64: cd:b1:4f:df:fc:eb:ff:07:fc:ac:30:d9:88:4a:da:6e:95:37: df:60:35:49:db:7d:fd:ec:37:bf:d0:cf:a6:08:e3:41:e1:1a: 26:08:c6:f7:eb:0b:c2:92:f2:07:9c:bd:5d:3d:65:0b:9e:af: e0:49:a3:7b:b3:0c:f9:a3:50:8f:6a:d8:78:10:aa:47:a4:5c: 3a:91:e4:e9:b0:d0:6a:d4:54:b4:17:18:2e:d1:fe:e4:8d:75: 1a:32:d6:46:b8:49:79:15:94:a9:40:83:58:01:66:16:8f:fe: 18:a9:46:bc:dc:d6:66:97:b4:2e:10:9e:8c:0f:d3:76:14:98: 60:06:a8:e2:04:61:53:34:50:8c:2f:84:aa:c1:28:c7:04:15: aa:f6:60:f1:92:f0:49:a0:e3:63:b3:13:a6:1e:f6:df:1b:7d: e4:d3:99:94:84:02:99:6c:d8:92:dd:d1:63:1f:a3:25:6d:0b: 47:74:61:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjYwNDE2MTg1MjU5WhcNMjYwNDIzMTg1MjU5WjAYMRYwFAYD VQQDEw02OWUxMzAwYy01NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRN2d1H+noh5xpPWwgNdi9+mIrC1AM6JYT6tDDxZTpLybmMww/Be7CYIcQzR +nENM7d8NybPzmlhVGTIeiDHlhPYpjG9xXEakf2ctQ++jT560mDiyLNz/ZxnCUBs yfOYnOAJ7YoWR68H5QVfQ242bJPc8tW2kgNsnZb6MGoqZ/+Hf9A2Hjlclnm61ara ewX1UAMJMPAVbrIhZU9v6HwVO0yk953d4MlGD9z8UZlV6KUuEdEhKj0TG/pgGp2l t5cJaOx9Umbbu1PgNT6nVysCWhIG4w7WMxFjc/2gvLrbKfOx4Al92cN2j9TFjCZA AbNN2QYbNzk98hSx2ZEEyqM+PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADp/PlZ faAsGM6/y+mGSnwYjNXnMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGj9pqJYQatSC778/atXb2nynFP8jj5ZT4PnZ8+DZQIqc+dLMQYbfCtMuyTbS FqMO5vWdVVwsXkJRWlE5kF9yeH2HMkNpwqFkzbFP3/zr/wf8rDDZiErabpU332A1 Sdt9/ew3v9DPpgjjQeEaJgjG9+sLwpLyB5y9XT1lC56v4Emje7MM+aNQj2rYeBCq R6RcOpHk6bDQatRUtBcYLtH+5I11GjLWRrhJeRWUqUCDWAFmFo/+GKlGvNzWZpe0 LhCejA/TdhSYYAao4gRhUzRQjC+EqsEoxwQVqvZg8ZLwSaDjY7MTph723xt95NOZ lIQCmWzYkt3RYx+jJW0LR3RhqQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:06:09 2026 by rpki-client