$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: jeX4MLXxaCdPWItWKSrM6e1amIHnN91vXcmgbRFGHTQ= Subject key identifier: C0:23:5D:C9:6E:56:9E:F0:71:BE:6E:14:71:AE:7C:13:A2:77:BD:DF Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 35D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 355F Signing time: Thu 16 Apr 2026 14:24:42 +0000 Manifest this update: Thu 16 Apr 2026 14:24:41 +0000 Manifest next update: Thu 23 Apr 2026 14:24:41 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: YW5DoQ6ZXpSWPug4LyTXVyv3bfTXDwhxqWjmOl/BuSI=) 2: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=) 3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=) 4: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=) 5: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=) 6: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=) 7: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=) 8: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=) 9: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13783 (0x35d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Apr 16 14:24:41 2026 GMT Not After : Apr 23 14:24:41 2026 GMT Subject: CN=69e0f129-4095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:b4:ad:12:17:d1:39:63:0b:41:56:59:f9: 6d:37:66:85:9c:6a:db:92:94:a6:c8:02:84:db:00: a2:58:f3:ec:75:e4:4c:1f:db:64:c1:2b:5b:21:65: 40:38:94:b2:bb:13:c6:4e:1d:52:3c:ed:7c:fd:b3: 88:3c:ad:9d:fd:8a:7f:85:a6:8e:f9:9e:0e:8f:d3: d3:ac:8b:2b:03:57:22:1a:1f:61:96:01:39:d2:be: 94:3b:53:b4:08:8d:bb:35:74:7c:07:f1:21:40:ca: bd:49:b4:f1:fd:dd:80:50:c7:dd:ba:ae:a8:3e:31: cb:fe:99:df:a3:44:40:e1:90:ca:aa:00:64:12:a3: b9:c3:b3:51:bd:26:71:f6:26:ba:6f:e9:d9:57:a4: 1d:e3:e4:be:92:74:1f:b4:0d:ac:05:8c:93:a2:64: 13:c8:80:5d:76:40:63:b4:68:4d:36:95:35:c6:56: 07:f3:8e:bf:41:da:7f:06:ad:d8:90:ba:d6:fb:1b: 3c:f5:1f:f5:f1:98:55:c9:1a:d2:0f:c1:58:0e:db: e4:22:32:14:d6:cb:71:ba:7f:6e:ad:a2:94:97:39: 50:61:a1:96:cc:84:6e:a1:72:1c:87:de:10:2a:d5: 61:8f:cd:ed:7a:56:7c:2f:5d:b1:78:aa:e4:ec:8a: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:5D:C9:6E:56:9E:F0:71:BE:6E:14:71:AE:7C:13:A2:77:BD:DF X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ad:2e:40:3a:b0:c3:22:c8:f8:01:40:b0:ea:d9:a7:33:53: f4:ed:3b:2e:ca:f6:5a:12:02:2e:ff:c3:40:c3:c1:58:6d:c9: 3f:b5:7c:94:ac:84:dd:25:a4:79:6f:8a:ca:67:b1:79:9b:03: 57:f7:a9:48:2b:61:8f:82:bc:2d:da:94:1b:bc:04:88:3c:fb: e6:45:6d:a8:ea:28:e3:74:a1:5b:b6:12:0f:45:ee:30:ee:e7: 0d:23:de:07:52:ec:68:24:bc:84:d9:61:38:8f:62:59:b6:a2: 59:d3:e7:fb:ed:9e:1f:c0:c2:8f:4e:dd:30:a9:2c:5d:a8:8b: 4e:71:16:7a:86:fd:ff:45:89:da:97:39:35:0d:5d:b8:bf:97: 5f:0c:62:70:d6:6f:ff:93:dd:e2:38:76:de:90:15:de:ee:1e: 1a:06:8c:9d:18:4e:71:5a:5e:c5:37:54:61:d8:08:ee:e6:0c: f6:21:07:4c:b1:6d:e3:25:71:95:a8:67:7a:04:73:d1:72:cf: 21:04:98:18:ff:b0:50:cb:5d:83:f6:e2:26:40:41:e6:3d:bd: d7:33:56:b0:89:a6:e4:0c:0f:cc:8f:fd:d2:22:a7:b5:88:30: fd:d0:4b:6e:60:c4:b0:63:83:cb:67:db:3b:de:68:8e:37:cf: 30:13:6b:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjYwNDE2MTQyNDQxWhcNMjYwNDIzMTQyNDQxWjAYMRYwFAYD VQQDEw02OWUwZjEyOS00MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1M60rRIX0TljC0FWWfltN2aFnGrbkpSmyAKE2wCiWPPsdeRMH9tkwStbIWVA OJSyuxPGTh1SPO18/bOIPK2d/Yp/haaO+Z4Oj9PTrIsrA1ciGh9hlgE50r6UO1O0 CI27NXR8B/EhQMq9SbTx/d2AUMfduq6oPjHL/pnfo0RA4ZDKqgBkEqO5w7NRvSZx 9ia6b+nZV6Qd4+S+knQftA2sBYyTomQTyIBddkBjtGhNNpU1xlYH846/Qdp/Bq3Y kLrW+xs89R/18ZhVyRrSD8FYDtvkIjIU1stxun9uraKUlzlQYaGWzIRuoXIch94Q KtVhj83telZ8L12xeKrk7IofAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAjXclu Vp7wcb5uFHGufBOid73fMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACq0uQDqwwyLI+AFAsOrZpzNT9O07Lsr2WhICLv/DQMPBWG3JP7V8lKyE3SWk eW+KymexeZsDV/epSCthj4K8LdqUG7wEiDz75kVtqOoo43ShW7YSD0XuMO7nDSPe B1LsaCS8hNlhOI9iWbaiWdPn++2eH8DCj07dMKksXaiLTnEWeob9/0WJ2pc5NQ1d uL+XXwxicNZv/5Pd4jh23pAV3u4eGgaMnRhOcVpexTdUYdgI7uYM9iEHTLFt4yVx lahnegRz0XLPIQSYGP+wUMtdg/biJkBB5j291zNWsImm5AwPzI/90iKntYgw/dBL bmDEsGODy2fbO95ojjfPMBNrMg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:56:04 2026 by rpki-client