$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: Ts+O31As/5njc3jEu1QJO+4UYKoxBV5UcneAD/Q8LhM= Subject key identifier: A8:84:11:06:55:84:0E:C8:50:9D:39:8F:D2:C9:5B:B4:72:F1:1A:93 Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: 0138 Signing time: Fri 17 Apr 2026 06:11:09 +0000 Manifest this update: Fri 17 Apr 2026 06:11:08 +0000 Manifest next update: Fri 24 Apr 2026 06:11:08 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: n0ckCDK6pyNLn5f78WhFwNgKSZPk4txFKGaBIr3/btQ=) 2: 4E9801F4122311F1A005593E1F3D8C67.roa (hash: 9NUw/Vlq1cG4rvMjm7Tf+mY/SPVFiZPsiEtV3MAG4ts=) 3: F526E31C122011F1ACA5537B1D3D8C67.roa (hash: enStohQFnFb+r0zk+PqrIbAeF36NZLUhIXYRdDD2ymg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Apr 17 06:11:08 2026 GMT Not After : Apr 24 06:11:08 2026 GMT Subject: CN=69e1cefd-ce25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:ce:4d:77:2d:ff:77:e9:97:50:6a:c0:a4: ac:97:65:dd:32:e9:7a:7a:48:e3:b3:13:6e:31:ba: 88:c5:0b:22:25:bc:10:c3:4f:42:28:a5:26:97:64: a4:dd:0e:20:e7:ac:eb:06:f0:94:89:dd:fa:7f:de: 7b:96:98:fe:91:8b:22:de:2d:9d:3c:f6:2a:19:b5: 76:2a:21:9c:61:fd:2d:74:5f:e0:4c:47:e2:33:25: 03:33:f8:54:f6:73:51:78:74:16:ab:97:30:c0:ab: 0f:b5:56:fd:49:e0:8b:76:17:85:1c:d7:cb:f5:00: 20:b0:50:21:c0:5d:ec:74:aa:62:86:78:ff:13:ee: 10:bd:8c:4e:b7:71:c9:06:81:59:75:3d:62:b4:a5: 9b:ad:dd:8a:a4:67:82:f5:a9:6c:d1:5c:b5:5f:67: 25:5d:53:a9:ec:ee:c1:c0:d2:8e:3c:d4:bd:8e:00: 2b:99:11:70:0e:e1:e3:ab:d0:ad:bd:0f:4b:6c:d4: 13:e2:30:c7:8b:a0:61:06:bc:89:8b:2d:20:a5:d1: d1:4d:c7:69:1e:38:86:67:86:eb:59:6f:6a:f6:fb: ed:9c:26:3a:34:65:85:3f:09:9a:ce:b2:ea:c4:d9: 19:fc:a6:0d:cd:6d:29:4d:9a:23:bf:94:ab:28:a7: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:84:11:06:55:84:0E:C8:50:9D:39:8F:D2:C9:5B:B4:72:F1:1A:93 X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:96:0d:c5:b1:88:c0:a2:c6:3b:a5:f3:b2:52:e9:83:74:8e: 6b:e8:6d:0b:aa:e9:40:74:f1:8e:67:98:53:8d:20:7e:80:86: fe:61:30:db:ae:4b:fb:86:77:e2:60:5d:e3:e9:2f:17:09:a2: 24:aa:fd:3e:f8:1e:13:16:28:91:e3:5c:60:4a:31:4a:53:fb: 74:19:db:23:cb:88:e9:62:29:70:cd:58:ce:b6:7a:25:dd:2c: f7:3a:db:0a:27:67:07:60:fd:7c:f8:45:ad:af:70:4f:7d:a2: 79:fb:26:86:d5:8e:78:d3:b0:f3:71:3c:fc:d0:f4:fe:9f:66: 32:76:55:8f:e9:ca:ae:4f:70:34:dc:d8:a1:9b:0d:c2:04:96: c4:a2:9c:ec:b8:6c:3f:34:81:00:a2:1a:10:9c:f7:95:6e:3c: bd:04:27:2e:94:79:41:b2:0f:be:47:1e:d2:dd:0b:b0:54:67: 2f:0f:33:54:c3:83:49:2d:c5:79:7c:67:ab:c4:9d:a8:78:1e: 95:17:cf:7e:a7:97:b2:7a:74:f5:96:a4:3e:83:93:bf:57:2e: c8:d9:4f:d0:2e:be:e3:91:a0:f9:63:29:3d:a9:16:53:40:b3: 1a:e9:2a:49:dc:86:5e:54:8c:6a:6a:f8:97:f3:34:9b:a6:75: 0b:4f:e4:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw NzcwRTI5MEQwHhcNMjYwNDE3MDYxMTA4WhcNMjYwNDI0MDYxMTA4WjAYMRYwFAYD VQQDEw02OWUxY2VmZC1jZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Z7OTXct/3fpl1BqwKSsl2XdMul6ekjjsxNuMbqIxQsiJbwQw09CKKUml2Sk 3Q4g56zrBvCUid36f957lpj+kYsi3i2dPPYqGbV2KiGcYf0tdF/gTEfiMyUDM/hU 9nNReHQWq5cwwKsPtVb9SeCLdheFHNfL9QAgsFAhwF3sdKpihnj/E+4QvYxOt3HJ BoFZdT1itKWbrd2KpGeC9als0Vy1X2clXVOp7O7BwNKOPNS9jgArmRFwDuHjq9Ct vQ9LbNQT4jDHi6BhBryJiy0gpdHRTcdpHjiGZ4brWW9q9vvtnCY6NGWFPwmazrLq xNkZ/KYNzW0pTZojv5SrKKcLOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiEEQZV hA7IUJ05j9LJW7Ry8RqTMB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX bmhQaHo5RmhzZllIY09LUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfpYNxbGIwKLGO6XzslLpg3SOa+htC6rpQHTxjmeYU40gfoCG/mEw265L+4Z3 4mBd4+kvFwmiJKr9PvgeExYokeNcYEoxSlP7dBnbI8uI6WIpcM1YzrZ6Jd0s9zrb CidnB2D9fPhFra9wT32iefsmhtWOeNOw83E8/ND0/p9mMnZVj+nKrk9wNNzYoZsN wgSWxKKc7LhsPzSBAKIaEJz3lW48vQQnLpR5QbIPvkce0t0LsFRnLw8zVMODSS3F eXxnq8SdqHgelRfPfqeXsnp09ZakPoOTv1cuyNlP0C6+45Gg+WMpPakWU0CzGukq SdyGXlSMamr4l/M0m6Z1C0/kjg== -----END CERTIFICATE-----Generated at Sat Apr 18 02:31:30 2026 by rpki-client