$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: ci4ztjhzFpad6OuYVTYTsvp6DFetHmYx3bZH6SGm7Jc= Subject key identifier: E3:52:5C:F2:64:B9:2C:2F:C8:65:B1:E5:01:70:2B:6F:93:44:3E:7B Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 034B Signing time: Sun 19 Apr 2026 00:52:44 +0000 Manifest this update: Sun 19 Apr 2026 00:52:43 +0000 Manifest next update: Sun 26 Apr 2026 00:52:43 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: LLgxksskBEWpZJXGS0BxcsvuPUMBcrKN2AxvvZCtJzQ=) 2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: EaaSXzGz05+ts4EkpTMhP55oUChU6Bk9DAG9srhRaSc=) 3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: 8dpXRXimhjXqFq8UENKdvQMz2YmohstnkMIHLOtJCy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: Apr 19 00:52:43 2026 GMT Not After : Apr 26 00:52:43 2026 GMT Subject: CN=69e4275c-ef09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:b3:3e:f8:f1:51:e7:d1:82:48:f9:9a:60: 9d:94:f6:de:e5:6a:4d:b9:47:cf:c7:5b:35:62:c1: db:5f:80:da:4b:8c:91:46:23:c2:8c:b6:91:7c:08: 2c:aa:b0:84:c8:0e:00:b2:15:8f:b5:51:5e:a9:91: 4d:17:bc:2b:dd:c1:f2:cf:0c:d4:d2:89:67:94:7e: 0a:45:39:b5:20:09:39:61:4b:8b:69:be:0b:8c:29: ca:b0:4d:54:5f:7c:a8:d4:5c:30:91:20:e9:e8:f5: 1c:34:a4:05:be:7e:7a:cb:7c:d9:b3:48:f9:cc:63: 12:18:47:75:b3:63:7e:90:f0:70:ed:69:4e:91:b7: 94:4e:01:ac:51:8e:09:89:be:aa:11:42:1a:86:d5: cf:be:25:6a:83:4a:72:14:38:f9:3c:ae:01:79:e7: d5:34:c8:c1:10:26:e3:4e:56:bf:0c:d0:01:35:65: ad:44:a5:dc:da:b0:e9:fd:f7:43:d6:17:ea:95:c0: 2d:14:4d:80:3b:2d:3b:45:9a:01:f6:43:1b:08:df: 1b:79:df:57:67:dc:62:5b:30:3e:0c:4c:54:49:e9: af:c1:e1:35:50:1a:91:e1:12:18:84:c8:b3:6c:31: ab:8a:19:79:e8:fd:4d:78:52:ef:c6:40:49:f7:d6: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:5C:F2:64:B9:2C:2F:C8:65:B1:E5:01:70:2B:6F:93:44:3E:7B X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:66:41:86:6c:b4:f3:0d:94:19:54:34:cc:1c:68:00:3b:c1: d1:d1:a0:22:90:eb:0f:42:3d:9c:b4:c7:a7:6d:1b:db:71:52: a0:13:8f:02:02:92:12:ee:c0:5e:61:3d:a9:3c:b0:c2:19:77: ca:b5:60:bb:7b:d6:df:59:6b:14:47:10:08:96:46:54:7c:60: b7:95:2a:b0:97:8e:a4:eb:d9:bb:b9:10:ac:53:61:89:ce:9c: be:bc:9f:36:60:de:13:86:e4:a3:86:7d:e4:f8:37:a1:a7:c7: 17:d0:c0:ef:16:a6:f9:b6:11:1f:86:c6:38:9e:c0:22:ce:e8: 23:77:dc:3d:e5:c3:e0:eb:e0:95:0e:76:dc:51:d2:90:35:d7: d8:8f:f4:5a:76:80:bb:0a:b0:fc:1e:22:55:e3:18:7a:6e:8e: a2:75:0b:b0:be:5f:d8:69:04:14:13:b7:56:81:2e:9f:9a:d2: 03:1a:1a:42:8d:0e:cb:c1:54:a3:ca:6a:93:35:de:11:3a:9b: d8:02:fd:76:e8:44:0c:b5:7c:63:9b:21:fe:0b:05:71:a2:e5: a3:ed:9b:20:fa:e7:7d:be:cb:f1:12:01:8d:cd:fb:4e:c1:60: 6c:6e:50:e1:10:07:9f:8d:b8:b9:d4:28:97:87:72:18:cc:27: 86:12:92:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjYwNDE5MDA1MjQzWhcNMjYwNDI2MDA1MjQzWjAYMRYwFAYD VQQDEw02OWU0Mjc1Yy1lZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYuzPvjxUefRgkj5mmCdlPbe5WpNuUfPx1s1YsHbX4DaS4yRRiPCjLaRfAgs qrCEyA4AshWPtVFeqZFNF7wr3cHyzwzU0olnlH4KRTm1IAk5YUuLab4LjCnKsE1U X3yo1FwwkSDp6PUcNKQFvn56y3zZs0j5zGMSGEd1s2N+kPBw7WlOkbeUTgGsUY4J ib6qEUIahtXPviVqg0pyFDj5PK4BeefVNMjBECbjTla/DNABNWWtRKXc2rDp/fdD 1hfqlcAtFE2AOy07RZoB9kMbCN8bed9XZ9xiWzA+DExUSemvweE1UBqR4RIYhMiz bDGrihl56P1NeFLvxkBJ99anawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONSXPJk uSwvyGWx5QFwK2+TRD57MB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmGZBhmy08w2UGVQ0zBxoADvB0dGgIpDrD0I9nLTHp20b23FSoBOPAgKSEu7A XmE9qTywwhl3yrVgu3vW31lrFEcQCJZGVHxgt5UqsJeOpOvZu7kQrFNhic6cvryf NmDeE4bko4Z95Pg3oafHF9DA7xam+bYRH4bGOJ7AIs7oI3fcPeXD4OvglQ523FHS kDXX2I/0WnaAuwqw/B4iVeMYem6OonULsL5f2GkEFBO3VoEun5rSAxoaQo0Oy8FU o8pqkzXeETqb2AL9duhEDLV8Y5sh/gsFcaLlo+2bIPrnfb7L8RIBjc37TsFgbG5Q 4RAHn424udQol4dyGMwnhhKSsA== -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:17 2026 by rpki-client