$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json) Hash identifier: Vx6Nlwy4uYXYcbGmF4yGcDcGSz2lKrNOc9CvjKWtQDk= Subject key identifier: 0A:23:D7:BD:AF:54:E2:43:4A:2B:9B:24:C3:5D:0D:12:A3:67:8E:BD Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86 Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft Manifest number: 019D Signing time: Sun 19 Apr 2026 04:10:41 +0000 Manifest this update: Sun 19 Apr 2026 04:10:40 +0000 Manifest next update: Sun 26 Apr 2026 04:10:40 +0000 Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: NHzFkWnXqSHh10uCAYI9Wp6JD7UywfwUyWXMHSdfg2I=) 2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: EVXt3bTmFBpg7tvfSnoRf14VmLrxNNDyv7kNCjZE6JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86 Validity Not Before: Apr 19 04:10:40 2026 GMT Not After : Apr 26 04:10:40 2026 GMT Subject: CN=69e455c0-d97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:49:1d:9a:6c:f7:5b:d5:e7:89:a7:f3:fd: 9e:e4:0f:6c:8c:d6:e5:f8:b4:2f:da:f2:74:45:82: 35:a7:67:39:4e:2d:00:60:1a:56:ba:90:54:ef:7f: b3:ba:06:89:6f:94:2f:87:f2:12:e3:93:10:1a:a0: bc:8f:6e:dd:e8:2b:41:11:92:78:58:d3:ac:0b:74: 10:44:20:c2:6d:bf:2c:b0:0c:7b:d5:ef:10:be:ea: 97:b2:ed:ee:ff:0e:4c:c7:1d:f7:10:04:9d:99:fb: 05:be:e0:31:c0:d1:21:e7:52:47:b3:5e:dc:79:e1: ca:72:ef:d2:f4:32:ed:51:c0:dd:f1:bc:05:0e:55: 5c:d9:d7:6e:7e:e8:ca:19:e1:1f:c3:45:35:d7:2c: 52:32:8e:b5:a8:59:53:12:55:70:80:03:00:20:e6: 3f:88:50:85:d3:7a:1f:fa:82:b8:42:78:3b:eb:3e: a1:18:c1:52:87:13:aa:00:cf:84:46:54:5a:4a:e4: a2:3e:47:19:36:99:0f:75:56:91:8d:33:be:ea:31: 20:89:1d:b0:af:e7:7c:2d:94:1d:79:07:64:d0:04: 9d:8c:4e:b3:8f:80:20:db:8c:ba:12:43:52:4a:8a: 5a:64:1b:50:e6:d1:a6:ec:03:3a:0d:89:73:eb:b1: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:23:D7:BD:AF:54:E2:43:4A:2B:9B:24:C3:5D:0D:12:A3:67:8E:BD X509v3 Authority Key Identifier: keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9b:66:c5:88:4e:99:3d:e6:c0:b4:9a:4b:50:37:b6:da:07: 50:01:84:94:d9:1a:90:0b:05:e9:8f:76:2e:de:a9:71:81:a3: 38:fd:e8:18:f2:79:3f:ef:a3:d1:b8:13:fd:33:ce:c0:68:c9: d0:5f:02:3b:2a:98:96:2c:24:24:11:f6:0e:5f:4a:82:30:7d: 99:e9:5e:75:f4:d0:30:ba:3e:a6:5e:cb:56:98:fe:b6:56:b8: 85:04:80:45:4d:82:61:39:da:c8:78:bf:56:74:b6:d9:0e:7c: 32:f3:50:e4:e5:9b:ba:9f:95:f3:65:a9:40:db:e3:0b:9e:af: 9f:e5:b6:86:53:5b:b8:bc:9e:72:29:d0:42:bf:2e:92:f1:1c: c7:4d:fa:f2:1d:6e:7c:ef:83:f2:9d:86:40:d3:f2:17:d0:dc: dc:2c:93:ee:73:e2:4f:9b:b5:32:36:2a:19:88:35:00:89:f1: 85:4e:fc:4e:da:99:f8:9e:0b:e2:ec:80:31:d9:a0:53:0f:97: a8:f9:8d:5e:80:da:b0:bc:8c:d8:dc:38:78:14:77:23:c9:c6: 2c:1d:4e:29:03:42:31:fa:81:59:4b:5d:fd:2b:c5:b0:cc:ed: 9e:25:50:1e:19:5d:c3:0d:a6:c7:fe:86:eb:d0:ee:24:cd:10: 95:ce:dd:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDJERjlBMUUzNzVBMTdCOEVBNTYwMjdCNDVBOEJENjZG OTY3NDdEODYwHhcNMjYwNDE5MDQxMDQwWhcNMjYwNDI2MDQxMDQwWjAYMRYwFAYD VQQDEw02OWU0NTVjMC1kOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAdJHZps91vV54mn8/2e5A9sjNbl+LQv2vJ0RYI1p2c5Ti0AYBpWupBU73+z ugaJb5Qvh/IS45MQGqC8j27d6CtBEZJ4WNOsC3QQRCDCbb8ssAx71e8QvuqXsu3u /w5Mxx33EASdmfsFvuAxwNEh51JHs17ceeHKcu/S9DLtUcDd8bwFDlVc2ddufujK GeEfw0U11yxSMo61qFlTElVwgAMAIOY/iFCF03of+oK4Qng76z6hGMFShxOqAM+E RlRaSuSiPkcZNpkPdVaRjTO+6jEgiR2wr+d8LZQdeQdk0ASdjE6zj4Ag24y6EkNS SopaZBtQ5tGm7AM6DYlz67EU5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoj172v VOJDSiubJMNdDRKjZ469MB8GA1UdIwQYMBaAFC35oeN1oXuOpWAntFqL1m+WdH2G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8xODFCODIyMEU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0NmxZQ2UwV292V2I1WjBm WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xmbWg0M1doZTQ2bFlDZTBXb3ZXYjVaMGZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8xODFCODIyMEU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0 NmxZQ2UwV292V2I1WjBmWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJtmxYhOmT3mwLSaS1A3ttoHUAGElNkakAsF6Y92Lt6pcYGjOP3oGPJ5P++j 0bgT/TPOwGjJ0F8COyqYliwkJBH2Dl9KgjB9meledfTQMLo+pl7LVpj+tla4hQSA RU2CYTnayHi/VnS22Q58MvNQ5OWbup+V82WpQNvjC56vn+W2hlNbuLyecinQQr8u kvEcx0368h1ufO+D8p2GQNPyF9Dc3CyT7nPiT5u1MjYqGYg1AInxhU78TtqZ+J4L 4uyAMdmgUw+XqPmNXoDasLyM2Nw4eBR3I8nGLB1OKQNCMfqBWUtd/SvFsMztniVQ Hhldww2mx/6G69DuJM0Qlc7duQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:56:08 2026 by rpki-client