$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json) Hash identifier: tqgt1DJMukGG7K7rE7IqGQc16WM1zrFHomJgjqVIPtU= Subject key identifier: 09:63:93:B0:4F:7A:12:B4:08:8C:DC:59:95:F2:23:B4:11:B9:A7:BA Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft Manifest number: 24 Signing time: Fri 17 Apr 2026 08:35:14 +0000 Manifest this update: Fri 17 Apr 2026 08:35:13 +0000 Manifest next update: Fri 24 Apr 2026 08:35:13 +0000 Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: qIF7HhV2VxR2urNd8YpqNSt+TymipbYRMcyLjCZg87s=) 2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=) 3: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Validity Not Before: Apr 17 08:35:13 2026 GMT Not After : Apr 24 08:35:13 2026 GMT Subject: CN=69e1f0c2-2e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:ea:76:04:f7:57:9d:09:31:6c:f4:14:f6: 04:d5:6a:cd:00:30:c1:54:87:60:8b:fe:c6:4c:cc: 7b:4a:92:29:15:30:98:8e:c1:c8:42:55:78:48:85: 77:0f:23:28:ad:3b:5f:d3:0a:c8:ab:75:f2:74:d4: 87:2f:1b:0a:9f:da:12:4c:29:9a:cd:75:4e:23:3d: e5:97:a9:9a:1a:6b:e6:f8:1f:37:35:c3:f4:61:d6: 57:84:e7:5d:f8:0b:27:49:58:53:5d:66:6c:55:a9: e7:49:58:20:64:7c:13:0a:6e:c2:41:5a:54:89:c6: cf:2d:8c:7c:da:c5:52:1c:ea:96:b1:77:cc:72:80: db:1b:31:7c:f2:a3:3f:36:a2:48:b3:85:62:27:dc: 8b:92:36:5b:c6:88:04:23:63:bf:cd:97:1e:d8:8b: 55:ac:f1:e4:74:8e:53:c6:23:99:88:f8:ab:9d:56: a7:58:71:99:d6:3a:da:5f:12:10:36:cb:12:82:89: 95:0e:ad:9f:60:b6:8c:b7:00:3a:1c:a7:02:a5:6a: 57:c4:bd:18:92:a0:be:11:f1:98:b6:cd:55:e3:93: d2:4e:24:64:73:4d:2f:23:f6:8d:78:1f:bd:11:95: 1e:ab:68:ea:e6:6e:8e:30:ee:43:00:88:92:77:1e: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:63:93:B0:4F:7A:12:B4:08:8C:DC:59:95:F2:23:B4:11:B9:A7:BA X509v3 Authority Key Identifier: keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c2:ac:9e:3c:74:5e:58:3f:7b:ce:73:6f:5c:ba:d0:3d:14: d7:4c:2b:ca:39:73:22:91:91:db:fd:ed:8a:d4:02:0d:17:04: 10:a6:f9:0a:7f:da:93:bf:47:1b:de:ed:ac:f1:ed:c4:1e:23: 98:40:c0:ea:c1:cc:f4:05:16:81:e1:1a:3f:88:17:a2:f5:a2: 80:fd:37:a4:d3:30:07:89:f6:02:98:86:80:25:8e:ab:3e:0e: 85:0d:7b:c7:1a:df:83:9a:3b:b4:70:86:2f:de:25:ad:68:1d: 90:cd:ba:2f:6e:4a:55:f9:02:0f:c5:b6:7b:e7:21:5e:2d:a8: 33:5e:6b:56:5c:78:63:56:a4:e3:f1:b7:a4:4b:41:49:b6:5c: 75:41:7c:0c:33:6a:f2:fc:22:74:b0:47:33:aa:ce:01:7c:0e: bd:e2:67:01:e8:6d:62:bb:90:64:d8:f3:49:d7:99:f6:c6:86: 74:e5:f8:82:26:94:2f:9c:09:47:b6:00:02:94:c4:64:4e:a6: 96:32:0d:f4:be:63:54:60:ec:da:2b:50:25:12:f4:b1:23:82: 60:7e:70:5c:c5:9a:5d:47:7b:44:59:14:ec:fb:41:34:a4:47: 94:91:dd:4a:1a:f4:96:a3:23:e9:67:9e:1d:3a:54:ba:b5:3f: 70:e2:37:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzM0NzExMC8GA1UEBRMoRDMxMkVFNTBFNjUxRkFGMDM5NjhFREY0RUEwMDExNDlF NTk1RkMwRTAeFw0yNjA0MTcwODM1MTNaFw0yNjA0MjQwODM1MTNaMBgxFjAUBgNV BAMTDTY5ZTFmMGMyLTJlOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLCup2BPdXnQkxbPQU9gTVas0AMMFUh2CL/sZMzHtKkikVMJiOwchCVXhIhXcP IyitO1/TCsirdfJ01IcvGwqf2hJMKZrNdU4jPeWXqZoaa+b4Hzc1w/Rh1leE5134 CydJWFNdZmxVqedJWCBkfBMKbsJBWlSJxs8tjHzaxVIc6paxd8xygNsbMXzyoz82 okizhWIn3IuSNlvGiAQjY7/Nlx7Yi1Ws8eR0jlPGI5mI+KudVqdYcZnWOtpfEhA2 yxKCiZUOrZ9gtoy3ADocpwKlalfEvRiSoL4R8Zi2zVXjk9JOJGRzTS8j9o14H70R lR6raOrmbo4w7kMAiJJ3HvQpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCWOTsE96 ErQIjNxZlfIjtBG5p7owHwYDVR0jBBgwFoAU0xLuUOZR+vA5aO306gARSeWV/A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzQ3LzRBOTM3MkY2MEUz RjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZBNWFPMzA2Z0FSU2VXVl9B NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMHhMdVVPWlItdkE1YU8zMDZnQVJTZVdWX0E0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzQ3LzRBOTM3MkY2MEUzRjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZB NWFPMzA2Z0FSU2VXVl9BNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKwqyePHReWD97znNvXLrQPRTXTCvKOXMikZHb/e2K1AINFwQQpvkKf9qTv0cb 3u2s8e3EHiOYQMDqwcz0BRaB4Ro/iBei9aKA/Tek0zAHifYCmIaAJY6rPg6FDXvH Gt+Dmju0cIYv3iWtaB2QzbovbkpV+QIPxbZ75yFeLagzXmtWXHhjVqTj8bekS0FJ tlx1QXwMM2ry/CJ0sEczqs4BfA694mcB6G1iu5Bk2PNJ15n2xoZ05fiCJpQvnAlH tgAClMRkTqaWMg30vmNUYOzaK1AlEvSxI4JgfnBcxZpdR3tEWRTs+0E0pEeUkd1K GvSWoyPpZ54dOlS6tT9w4jcq -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:58 2026 by rpki-client