$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: DTqGfNfJWmt7gH/M1GhIMFtfzaHOOseRNJqqxqFaN2w= Subject key identifier: 1B:75:1B:3C:D0:A2:42:B1:CA:BE:44:0B:90:B1:3D:AF:84:F6:CF:04 Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: E6 Signing time: Fri 17 Apr 2026 06:12:00 +0000 Manifest this update: Fri 17 Apr 2026 06:12:00 +0000 Manifest next update: Fri 24 Apr 2026 06:12:00 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: UX3naYdv9RDbMM6ip1kCQ05h0nrN36OuTkvj6sKAIQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: Apr 17 06:12:00 2026 GMT Not After : Apr 24 06:12:00 2026 GMT Subject: CN=69e1cf30-490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:f0:61:1a:65:7e:df:45:b6:31:cd:00:00: 09:dc:91:60:8d:3d:d4:b4:26:75:3e:3f:5f:e4:d2: 2d:b1:d3:85:61:40:3a:c7:01:45:3f:da:6f:43:9e: 73:81:7c:72:a6:72:db:5c:26:d6:da:47:67:dd:f1: 56:31:f0:a9:8c:d4:d8:78:93:bd:ef:47:e6:03:e3: ac:f6:4d:c6:e7:7f:d4:5a:31:47:15:37:ad:9d:e6: e3:18:fc:27:b2:34:8d:e4:e4:d4:b0:46:c5:17:1e: e0:f5:77:f0:19:b4:c0:56:7b:73:e7:d7:79:44:00: 9d:b4:0b:40:52:a6:74:e4:a2:e5:d1:77:fe:6f:35: 70:b1:91:a8:5e:50:6a:5e:8f:82:64:9d:52:8a:4a: 3f:e5:01:5a:bb:13:de:63:08:16:75:89:6e:f7:f3: 72:7e:ae:fa:1d:8a:9f:16:06:d6:bd:4a:28:28:dc: 2f:32:2c:1f:dd:65:1f:9a:75:23:cd:d9:37:a7:f9: ed:42:7f:13:d6:67:5c:fb:bf:c7:39:36:fa:e8:a4: cf:10:c7:76:cc:36:30:8f:3f:59:7c:11:9c:a6:d7: 20:20:2e:a0:f6:63:c1:f2:22:02:53:ce:68:d7:a3: e6:fb:e3:23:4b:1a:67:b8:2c:a7:38:f1:f0:43:45: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:75:1B:3C:D0:A2:42:B1:CA:BE:44:0B:90:B1:3D:AF:84:F6:CF:04 X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:87:99:20:5b:e4:34:13:fa:89:a4:44:ed:df:0b:39:78:92: b7:3c:8a:81:9e:e6:d2:5e:4d:df:08:9d:21:cf:91:1e:ef:78: 76:c4:24:0b:07:97:89:71:87:8b:04:f5:18:1f:e0:9a:cd:95: 07:e4:7a:25:a8:eb:a1:e0:79:65:54:d5:4c:67:a8:2d:d1:0b: be:0a:2f:92:51:cd:66:51:90:54:56:3c:40:12:6f:d9:c9:7c: f1:2c:18:05:fe:3c:7d:ca:81:77:25:56:05:f0:9b:4b:51:a8: 30:a8:52:64:85:38:46:3d:3a:91:7d:51:83:a7:1f:fa:78:2d: e3:9d:a1:01:94:51:e7:78:80:95:8a:ed:fa:3f:21:7f:28:a6: aa:ee:03:e4:d4:cf:83:17:db:b3:e7:9f:46:a5:e5:d8:9e:d4: f9:e9:98:fb:48:f3:79:19:4e:66:8d:fe:22:74:dc:99:cb:48: 72:f5:2d:89:2b:b0:17:4a:ba:d7:e9:6b:fa:b4:11:a7:e0:2e: e9:a1:b0:92:44:bd:d3:9f:50:3e:a5:4b:61:13:14:b2:3d:ea: 8e:ed:39:68:48:1a:07:bb:aa:b8:6c:1b:7f:21:1d:e8:43:62: 99:f4:a4:87:dd:9d:ce:f4:99:5e:ae:01:d0:26:26:59:a2:8a: 70:70:03:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC QUVGNzc3OTUwHhcNMjYwNDE3MDYxMjAwWhcNMjYwNDI0MDYxMjAwWjAYMRYwFAYD VQQDEw02OWUxY2YzMC00OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCrwYRplft9FtjHNAAAJ3JFgjT3UtCZ1Pj9f5NItsdOFYUA6xwFFP9pvQ55z gXxypnLbXCbW2kdn3fFWMfCpjNTYeJO970fmA+Os9k3G53/UWjFHFTetnebjGPwn sjSN5OTUsEbFFx7g9XfwGbTAVntz59d5RACdtAtAUqZ05KLl0Xf+bzVwsZGoXlBq Xo+CZJ1Siko/5QFauxPeYwgWdYlu9/Nyfq76HYqfFgbWvUooKNwvMiwf3WUfmnUj zdk3p/ntQn8T1mdc+7/HOTb66KTPEMd2zDYwjz9ZfBGcptcgIC6g9mPB8iICU85o 16Pm++MjSxpnuCynOPHwQ0Vq8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBt1GzzQ okKxyr5EC5CxPa+E9s8EMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOYeZIFvkNBP6iaRE7d8LOXiStzyKgZ7m0l5N3widIc+RHu94dsQkCweXiXGH iwT1GB/gms2VB+R6JajroeB5ZVTVTGeoLdELvgovklHNZlGQVFY8QBJv2cl88SwY Bf48fcqBdyVWBfCbS1GoMKhSZIU4Rj06kX1Rg6cf+ngt452hAZRR53iAlYrt+j8h fyimqu4D5NTPgxfbs+efRqXl2J7U+emY+0jzeRlOZo3+InTcmctIcvUtiSuwF0q6 1+lr+rQRp+Au6aGwkkS9059QPqVLYRMUsj3qju05aEgaB7uquGwbfyEd6ENimfSk h92dzvSZXq4B0CYmWaKKcHADPQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:56:54 2026 by rpki-client