$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft File: lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json) Hash identifier: JVlfMOig4L3QZccAqbvux37FYL1lt4hy/vNKLGnBeMk= Subject key identifier: 0E:6E:EA:50:6C:27:5B:71:CA:3B:A7:FF:C6:67:E2:D8:CB:0C:BB:57 Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft Manifest number: 0C Signing time: Wed 15 Apr 2026 08:44:19 +0000 Manifest this update: Wed 15 Apr 2026 08:44:18 +0000 Manifest next update: Wed 22 Apr 2026 08:44:18 +0000 Files and hashes: 1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: dlI4c8rI/B9Em7fYwVPukTzj9E5EhW8fqJBEVzU8qXM=) 2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Validity Not Before: Apr 15 08:44:18 2026 GMT Not After : Apr 22 08:44:18 2026 GMT Subject: CN=69df4fe2-afda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:ea:1e:b8:a1:44:a9:b9:42:88:5b:34:a3: 95:6b:95:3b:3a:76:4e:0b:ac:bb:c8:8c:9d:80:d5: f5:28:87:4c:16:d6:4b:fc:df:ab:a5:c4:da:a2:a3: 1e:88:32:74:76:cc:bd:83:8c:f0:3a:97:45:f8:e3: 72:70:77:ef:8a:01:62:0b:35:c5:8c:d7:66:53:d6: 1a:a5:14:ff:3f:ef:fa:96:1c:aa:67:8d:ba:3c:2b: ba:e4:87:b0:37:e7:98:6c:49:99:5f:df:66:6b:ea: a5:84:d2:60:92:84:86:5a:a5:9f:dc:a5:59:a9:17: 37:35:6a:0a:e5:e1:e1:1f:d1:be:9a:02:c8:41:30: 83:99:71:be:2d:e2:72:65:2d:3f:13:9a:a2:aa:3a: 2e:9c:eb:9f:3e:d5:a2:ce:32:93:60:6a:b1:5a:5f: 47:53:3d:20:cf:39:9d:df:1b:22:36:bd:d1:35:90: 26:94:9b:01:02:e1:e2:7c:d8:0a:75:84:81:5f:47: 3e:d1:cc:30:a1:42:05:85:da:27:80:84:63:07:2f: e7:da:f6:03:13:c4:c9:42:d6:e1:54:ea:00:3d:67: e5:a8:95:41:a5:63:f0:4f:38:38:01:81:72:19:f4: e5:c4:2d:e9:6f:c9:93:fd:df:c0:58:5c:ef:13:2d: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6E:EA:50:6C:27:5B:71:CA:3B:A7:FF:C6:67:E2:D8:CB:0C:BB:57 X509v3 Authority Key Identifier: keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:db:61:1e:98:1d:92:fd:63:08:f3:9c:b4:fe:f9:46:02: 39:be:ce:c8:7a:4e:c5:26:e8:fb:9a:f4:7d:c6:e6:29:e2:e0: ea:e8:a0:2f:50:39:fc:cb:3e:36:57:c3:a6:8a:c5:46:de:b9: 28:14:d3:ed:ed:c2:3f:03:ee:a1:f9:64:da:73:2b:9c:db:73: 86:3c:28:b0:cb:95:fa:a0:c7:0d:47:3a:0d:b0:70:26:31:8f: 3b:22:3f:94:da:5c:7e:ce:6f:14:3a:24:a4:97:84:ee:fb:40: 74:f2:ee:f2:c1:b2:76:25:55:ac:de:21:5d:09:69:93:6d:f7: 79:4c:79:d9:c5:fe:7d:54:66:66:10:db:20:93:e8:b9:fa:35: 8d:4a:4d:5e:1c:a3:8a:82:54:a7:3f:6e:5a:ff:7e:06:bf:d1: a0:ac:fd:92:e4:41:9e:54:ee:e9:ca:1a:f9:21:84:a4:c8:0a: 4f:c3:03:33:56:8f:e2:e8:9c:b2:13:5c:97:4c:f3:9c:75:b4: f3:33:fe:fc:1c:43:5a:21:c8:db:c3:4a:fb:ea:48:71:70:7d: 2e:50:d9:e6:c2:a3:5f:ad:f9:d7:3d:a8:1f:6f:7a:8a:1b:4f: e3:93:90:ee:a8:95:80:24:e6:8b:29:65:ab:bd:d0:62:c9:6d: bd:c8:b0:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz OUU5QUQwRjAeFw0yNjA0MTUwODQ0MThaFw0yNjA0MjIwODQ0MThaMBgxFjAUBgNV BAMTDTY5ZGY0ZmUyLWFmZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd8uoeuKFEqblCiFs0o5VrlTs6dk4LrLvIjJ2A1fUoh0wW1kv836ulxNqiox6I MnR2zL2DjPA6l0X443Jwd++KAWILNcWM12ZT1hqlFP8/7/qWHKpnjbo8K7rkh7A3 55hsSZlf32Zr6qWE0mCShIZapZ/cpVmpFzc1agrl4eEf0b6aAshBMIOZcb4t4nJl LT8TmqKqOi6c658+1aLOMpNgarFaX0dTPSDPOZ3fGyI2vdE1kCaUmwEC4eJ82Ap1 hIFfRz7RzDChQgWF2ieAhGMHL+fa9gMTxMlC1uFU6gA9Z+WolUGlY/BPODgBgXIZ 9OXELelvyZP938BYXO8TLXYpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDm7qUGwn W3HKO6f/xmfi2MsMu1cwHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NUMzLzJCQjJCQjI2MkNEQTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1f bzgxNW83Q1ZVR0RucHJROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPBNthHpgdkv1jCPOctP75RgI5vs7Iek7FJuj7mvR9xuYp4uDq6KAvUDn8yz42 V8OmisVG3rkoFNPt7cI/A+6h+WTacyuc23OGPCiwy5X6oMcNRzoNsHAmMY87Ij+U 2lx+zm8UOiSkl4Tu+0B08u7ywbJ2JVWs3iFdCWmTbfd5THnZxf59VGZmENsgk+i5 +jWNSk1eHKOKglSnP25a/34Gv9GgrP2S5EGeVO7pyhr5IYSkyApPwwMzVo/i6Jyy E1yXTPOcdbTzM/78HENaIcjbw0r76khxcH0uUNnmwqNfrfnXPagfb3qKG0/jk5Du qJWAJOaLKWWrvdBiyW29yLAm -----END CERTIFICATE-----Generated at Fri Apr 17 05:57:42 2026 by rpki-client