$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: xxTV2jUAtxH3/Sv6DhrSmJZRScXHY9G3N6FUawXeRNM= Subject key identifier: 89:3A:29:A1:5B:36:BB:33:7A:04:BD:76:B8:E9:F5:16:E1:4A:46:EA Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 089E Signing time: Thu 16 Apr 2026 20:27:24 +0000 Manifest this update: Thu 16 Apr 2026 20:27:23 +0000 Manifest next update: Thu 23 Apr 2026 20:27:23 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: XqQ43kJACgEWsztt9RnF5eQ1T5MXSmaYLjseufl9zyc=) 2: FB53E88A2D9F11F19981FFD49F833773.roa (hash: Vb5kye3Zp6BaCgKROMOkNqG+CyfGhNDOhiNWrHaqH5Q=) 3: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: My4vP+7ejMRWzliSWfidB1ey8yz0H3py9TXfGkF1uec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Apr 16 20:27:23 2026 GMT Not After : Apr 23 20:27:23 2026 GMT Subject: CN=69e1462c-170a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:84:e3:91:0d:2a:cd:83:a6:98:bc:b9:e3: 8b:0e:1e:be:bb:13:71:e8:06:d4:23:55:db:12:49: 08:55:f3:f1:4c:ba:fa:fd:c7:19:da:a3:f4:22:3d: e5:32:d0:1b:8a:89:36:bc:64:17:04:71:35:20:4d: 88:4a:c4:dc:e1:94:01:16:0e:ab:87:7e:cb:db:44: e2:da:1f:bd:9e:0a:6a:cf:f3:0c:24:c6:0f:f4:a3: 90:73:3f:47:27:89:18:2e:dc:6a:aa:87:59:38:9b: 6b:b7:1e:9a:e3:c2:8e:aa:29:8d:88:58:3e:f7:9e: 4f:2e:cd:c8:4f:88:89:f8:20:61:74:d2:ad:0d:c6: 1f:94:d1:6e:c9:0b:33:b9:26:18:4d:cc:bc:f9:05: 20:e5:78:09:d1:d8:43:aa:94:0c:fe:f9:5f:7e:db: 67:be:af:2e:c3:2a:65:68:e0:5b:5b:9b:70:26:aa: 14:49:f3:78:f8:6e:a8:80:40:e4:f3:f9:de:04:0f: 7f:98:e7:90:5b:59:1d:d2:89:c7:89:a7:f4:c7:d3: 74:4d:0e:87:f7:d2:22:8f:2f:f5:1e:be:be:c0:ad: 29:de:0a:c1:40:4d:a0:b3:b2:f2:44:e0:5e:44:81: 5b:1c:b0:26:df:a7:cf:45:01:af:1a:99:6e:64:9d: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:29:A1:5B:36:BB:33:7A:04:BD:76:B8:E9:F5:16:E1:4A:46:EA X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:48:15:02:e0:96:7e:bb:f5:70:35:04:ba:ff:b0:94:03:53: db:51:f0:3e:f9:e0:68:20:02:67:e7:33:91:bc:6a:ee:86:d3: 0f:53:16:c8:86:1e:c1:f9:1e:ae:86:9f:97:62:f5:82:ad:ce: 87:04:37:58:35:e1:49:7f:3b:00:f7:66:e1:8e:bd:b2:74:6f: 94:06:6e:c4:b3:68:a1:9d:65:24:de:30:b9:1c:33:38:75:db: d1:00:4d:fc:db:04:cc:b4:93:66:45:eb:bc:a1:d7:40:dd:56: 86:d7:45:97:b7:a8:0c:0a:6b:6f:6b:72:3f:a5:af:80:aa:11: c8:ea:57:41:5a:ba:02:df:5b:f9:ae:df:81:68:17:12:e4:f0: 3c:8d:54:d2:84:3a:ee:64:c8:05:73:49:0b:a5:f1:e2:e2:af: ff:8d:a2:3c:31:23:79:58:5c:b6:af:fc:47:3b:3f:87:34:8e: 91:04:a8:a1:00:76:60:58:32:63:43:8f:12:fc:6c:5e:44:57: 25:45:ac:49:09:22:f4:9a:5d:32:33:6e:9b:3f:92:ba:67:ea: 59:0c:c4:8a:fb:cb:29:02:e9:7a:d6:0e:f8:7c:45:eb:9d:1f: d1:50:57:02:ee:94:64:ec:9d:e9:06:ce:78:be:2b:97:f2:f5: af:2b:dd:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwNDE2MjAyNzIzWhcNMjYwNDIzMjAyNzIzWjAYMRYwFAYD VQQDEw02OWUxNDYyYy0xNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySGE45ENKs2Dppi8ueOLDh6+uxNx6AbUI1XbEkkIVfPxTLr6/ccZ2qP0Ij3l MtAbiok2vGQXBHE1IE2ISsTc4ZQBFg6rh37L20Ti2h+9ngpqz/MMJMYP9KOQcz9H J4kYLtxqqodZOJtrtx6a48KOqimNiFg+955PLs3IT4iJ+CBhdNKtDcYflNFuyQsz uSYYTcy8+QUg5XgJ0dhDqpQM/vlffttnvq8uwyplaOBbW5twJqoUSfN4+G6ogEDk 8/neBA9/mOeQW1kd0onHiaf0x9N0TQ6H99Iijy/1Hr6+wK0p3grBQE2gs7LyROBe RIFbHLAm36fPRQGvGpluZJ0m9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIk6KaFb NrszegS9drjp9RbhSkbqMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtEgVAuCWfrv1cDUEuv+wlANT21HwPvngaCACZ+czkbxq7obTD1MWyIYewfke roafl2L1gq3OhwQ3WDXhSX87APdm4Y69snRvlAZuxLNooZ1lJN4wuRwzOHXb0QBN /NsEzLSTZkXrvKHXQN1WhtdFl7eoDAprb2tyP6WvgKoRyOpXQVq6At9b+a7fgWgX EuTwPI1U0oQ67mTIBXNJC6Xx4uKv/42iPDEjeVhctq/8Rzs/hzSOkQSooQB2YFgy Y0OPEvxsXkRXJUWsSQki9JpdMjNumz+SumfqWQzEivvLKQLpetYO+HxF650f0VBX Au6UZOyd6QbOeL4rl/L1ryvdwA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:12:11 2026 by rpki-client