$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft File: LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json) Hash identifier: l0mlvR/1bKjWxrK/+LR6alJH0qGqrmx5v9OhBRbC+FU= Subject key identifier: 65:FA:9E:C2:7F:A6:D4:B7:2D:10:16:7E:FA:60:C7:71:F0:65:34:73 Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 Certificate issuer: /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft Manifest number: 4B Signing time: Fri 17 Apr 2026 08:01:01 +0000 Manifest this update: Fri 17 Apr 2026 08:01:00 +0000 Manifest next update: Fri 24 Apr 2026 08:01:00 +0000 Files and hashes: 1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: qrB55vkB17IK5WdYhUwA24QWsbb8IPh3Bva9ybY8VJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Validity Not Before: Apr 17 08:01:00 2026 GMT Not After : Apr 24 08:01:00 2026 GMT Subject: CN=69e1e8bd-6cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:89:66:8a:b5:38:e4:91:e6:d7:e1:7f:4c: a2:41:2b:de:d9:15:48:f0:5c:f6:24:b8:53:fa:cc: 2e:c3:97:b1:5f:ee:97:26:4d:98:0f:7e:49:82:c5: cb:f8:83:61:4d:20:ad:bf:4a:9e:ab:e1:fb:d6:62: 37:97:a5:7e:5d:23:fe:64:e4:da:e6:69:00:f8:51: d0:68:30:fa:b1:b9:6f:5f:67:fc:86:16:16:54:24: 5a:a1:7d:dd:0e:3f:1f:df:f7:80:89:c9:b5:f9:21: dc:c4:d1:98:79:d6:64:10:3e:d5:f6:a7:6b:ad:d5: 9f:b8:ee:92:19:ce:54:a1:b4:a6:c9:b6:10:75:e3: 39:12:39:9d:1d:6f:0b:48:48:3c:b1:5c:7b:fc:4d: b3:42:50:fd:cc:fe:cc:88:1f:6f:38:75:90:35:6f: 82:7d:80:94:b1:77:14:79:5e:1c:cd:ee:f8:92:2a: 61:4b:3e:d2:35:f7:bb:bf:2c:f4:de:00:38:cd:59: cb:79:a5:c2:df:c6:bd:25:62:9a:b1:6a:59:aa:32: df:08:61:ae:42:f7:65:58:31:8b:34:bb:25:d5:b3: 6d:4b:e0:17:b3:9e:a1:c4:e4:ca:d9:66:91:0c:ea: 0f:1e:08:a9:22:b8:14:68:f0:90:bc:e1:56:b4:7b: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FA:9E:C2:7F:A6:D4:B7:2D:10:16:7E:FA:60:C7:71:F0:65:34:73 X509v3 Authority Key Identifier: keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6c:c8:a8:6f:76:04:8d:33:31:dd:4f:79:66:26:0f:d6:c5: c0:f8:5d:d1:24:20:b3:a8:01:a3:52:3f:59:96:5b:1e:83:d6: 7f:60:15:89:75:9b:c5:01:c4:b8:72:6e:ae:0a:2d:c7:00:0f: 20:f8:c9:85:e8:86:01:06:0f:7a:02:0e:2f:da:21:98:bb:e4: b9:c0:96:71:b5:60:88:05:7b:73:ef:f8:36:ff:78:05:9d:96: da:eb:3a:87:07:79:09:af:6f:43:ca:7b:36:2c:2b:c4:34:30: df:89:13:8c:e5:d8:c3:48:f2:39:f2:f7:a5:cb:db:d4:86:92: be:b7:a9:d2:b0:02:b4:ac:97:4e:26:46:d0:c6:00:af:f1:99: 4e:58:04:85:d9:ac:3c:7f:36:e2:0d:58:35:fe:85:f3:6f:0d: d7:2c:f2:20:da:07:1e:cb:0a:87:18:63:d1:fb:61:f8:03:4c: 50:59:46:3a:e4:31:96:08:06:5f:f2:6e:68:20:d9:c2:7d:80: c7:e1:cf:d9:9f:a4:87:ff:b4:80:82:f0:85:e9:02:01:cc:ee: cf:fa:40:29:23:e8:9c:61:a3:4f:e6:7d:99:58:2e:25:ac:46: 22:83:0a:16:d9:36:71:1a:a3:9d:ce:61:86:d0:14:9e:f3:38: d5:cc:77:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEFDRDExMC8GA1UEBRMoMkM5QUE1Rjk4MkM4QjQ0RkEyNkRGMDhDRUEyNDMxRDc5 QUFDMzc1NTAeFw0yNjA0MTcwODAxMDBaFw0yNjA0MjQwODAxMDBaMBgxFjAUBgNV BAMTDTY5ZTFlOGJkLTZjZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDThYlmirU45JHm1+F/TKJBK97ZFUjwXPYkuFP6zC7Dl7Ff7pcmTZgPfkmCxcv4 g2FNIK2/Sp6r4fvWYjeXpX5dI/5k5NrmaQD4UdBoMPqxuW9fZ/yGFhZUJFqhfd0O Px/f94CJybX5IdzE0Zh51mQQPtX2p2ut1Z+47pIZzlShtKbJthB14zkSOZ0dbwtI SDyxXHv8TbNCUP3M/syIH284dZA1b4J9gJSxdxR5XhzN7viSKmFLPtI197u/LPTe ADjNWct5pcLfxr0lYpqxalmqMt8IYa5C92VYMYs0uyXVs21L4BeznqHE5MrZZpEM 6g8eCKkiuBRo8JC84Va0ewB9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZfqewn+m 1LctEBZ++mDHcfBlNHMwHwYDVR0jBBgwFoAULJql+YLItE+ibfCM6iQx15qsN1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QUNEL0JDREJENEU0Q0I5 QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUtaWJmQ002aVF4MTVxc04x VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEpxbC1ZTEl0RS1pYmZDTTZpUXgxNXFzTjFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QUNEL0JDREJENEU0Q0I5QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUt aWJmQ002aVF4MTVxc04xVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5bMiob3YEjTMx3U95ZiYP1sXA+F3RJCCzqAGjUj9Zllseg9Z/YBWJdZvFAcS4 cm6uCi3HAA8g+MmF6IYBBg96Ag4v2iGYu+S5wJZxtWCIBXtz7/g2/3gFnZba6zqH B3kJr29Dyns2LCvENDDfiROM5djDSPI58vely9vUhpK+t6nSsAK0rJdOJkbQxgCv 8ZlOWASF2aw8fzbiDVg1/oXzbw3XLPIg2gceywqHGGPR+2H4A0xQWUY65DGWCAZf 8m5oINnCfYDH4c/Zn6SH/7SAgvCF6QIBzO7P+kApI+icYaNP5n2ZWC4lrEYigwoW 2TZxGqOdzmGG0BSe8zjVzHc4 -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:41 2026 by rpki-client