$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json) Hash identifier: CAm2eGsYxfIPFWgJpOK9f3UJJ3/Y1uc/jaSVralPrVk= Subject key identifier: D8:8D:E3:81:45:10:52:E4:5A:32:F1:57:73:0E:4B:BF:24:B6:67:74 Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft Manifest number: 42 Signing time: Fri 17 Apr 2026 08:07:03 +0000 Manifest this update: Fri 17 Apr 2026 08:07:03 +0000 Manifest next update: Fri 24 Apr 2026 08:07:03 +0000 Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: fH0u4yz3clz/H7X3pIJfAoj3IcCEOZs7mxADB07oQE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Validity Not Before: Apr 17 08:07:03 2026 GMT Not After : Apr 24 08:07:03 2026 GMT Subject: CN=69e1ea27-cc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:0e:eb:3b:6c:73:e5:16:86:e7:0f:58:e9: ec:6e:f0:d2:c4:29:ed:64:fe:cc:61:e4:7b:58:fe: fb:89:37:a4:2b:cb:5b:fe:b2:bf:7a:a2:24:61:64: 76:6c:57:16:7b:e3:5d:ad:35:46:79:d6:ec:57:83: 2e:35:4e:e3:a6:02:6b:60:58:32:b7:a4:44:38:47: 60:e3:55:1f:df:25:b9:71:df:80:eb:5d:4e:1f:5f: 13:f6:86:7a:5a:3f:26:81:aa:ac:20:05:db:56:b7: d0:de:92:3a:4a:ae:a1:af:6c:47:e4:57:f9:f9:db: cc:73:ae:dc:3a:2c:0d:4b:01:a0:95:d4:f7:bc:2c: ed:e2:e5:c1:a6:bc:36:8a:68:95:6e:f9:9b:a8:4c: 7b:7d:7f:64:aa:4b:68:40:5d:5a:72:09:ee:cb:ce: ec:26:97:d4:76:ce:d3:d2:1e:78:be:0e:af:81:2b: 2e:16:fc:c7:52:50:cd:47:5f:9a:23:bd:6d:75:07: 3e:c6:ff:d8:29:ce:15:0d:97:16:22:e7:90:bd:b0: 46:f2:62:a9:28:5f:df:0f:a5:31:12:db:be:c5:c3: 28:90:21:0e:bc:98:89:c7:f4:54:60:f5:78:80:4c: 47:53:7f:9f:e4:ba:dc:ed:de:e3:10:93:07:16:72: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:E3:81:45:10:52:E4:5A:32:F1:57:73:0E:4B:BF:24:B6:67:74 X509v3 Authority Key Identifier: keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:aa:99:3d:ea:ec:f0:54:70:07:7a:84:1b:9c:40:ea:56:fb: 6e:77:7b:5f:ad:9d:15:59:69:a3:74:98:1b:16:e1:fb:77:de: 5c:b5:d2:ce:69:51:38:86:36:e1:7d:40:80:30:26:2d:95:7e: 4c:f2:ec:49:42:21:7f:2b:1b:bd:04:e2:0c:08:5c:1c:2d:7a: e4:f3:04:2a:78:4f:89:ec:85:97:a5:34:aa:1a:1e:7e:19:f7: c1:c2:f2:ca:0d:c6:c4:a6:9d:64:94:4c:f7:cd:f6:b9:92:a2: 80:52:ac:00:b6:c1:90:82:49:58:7e:30:70:16:69:18:92:d8: 3d:03:64:48:dc:09:80:cd:89:6a:05:13:84:eb:93:e2:1a:f2: cb:fb:50:aa:0a:43:b0:2d:a0:c6:1d:37:32:97:62:f3:ad:cd: 7d:38:36:23:de:3f:c5:2f:9b:53:3c:95:63:41:ce:17:df:fb: 09:38:ef:dd:04:b0:35:96:2e:8f:ae:9c:bb:4e:70:53:83:35: 82:94:ca:d6:55:54:29:93:a3:28:a7:f0:b2:15:7a:7a:54:d3: 7b:95:33:22:53:20:9c:2f:1d:ca:cc:5b:e7:52:ed:a9:8a:11: 6b:2c:df:17:7f:f4:96:49:10:0c:3d:e3:7c:61:26:f0:a4:5d: cd:90:c7:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoOTc0NjREM0EzMjJGMDA2N0Y4QUNFM0I3NzVBOTNBRkVC OUZDODlFQzAeFw0yNjA0MTcwODA3MDNaFw0yNjA0MjQwODA3MDNaMBgxFjAUBgNV BAMTDTY5ZTFlYTI3LWNjMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+yQ7rO2xz5RaG5w9Y6exu8NLEKe1k/sxh5HtY/vuJN6Qry1v+sr96oiRhZHZs VxZ7412tNUZ51uxXgy41TuOmAmtgWDK3pEQ4R2DjVR/fJblx34DrXU4fXxP2hnpa PyaBqqwgBdtWt9DekjpKrqGvbEfkV/n528xzrtw6LA1LAaCV1Pe8LO3i5cGmvDaK aJVu+ZuoTHt9f2SqS2hAXVpyCe7Lzuwml9R2ztPSHni+Dq+BKy4W/MdSUM1HX5oj vW11Bz7G/9gpzhUNlxYi55C9sEbyYqkoX98PpTES277FwyiQIQ68mInH9FRg9XiA TEdTf5/kutzt3uMQkwcWcgn/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2I3jgUUQ UuRaMvFXcw5LvyS2Z3QwHwYDVR0jBBgwFoAUl0ZNOjIvAGf4rOO3dak6/rn8ieww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0Y0NDhDOTc0RDY4 OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdmNHJPTzNkYWs2X3JuOGll dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDBaTk9qSXZBR2Y0ck9PM2RhazZfcm44aWV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdm NHJPTzNkYWs2X3JuOGlldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjqpk96uzwVHAHeoQbnEDqVvtud3tfrZ0VWWmjdJgbFuH7d95ctdLOaVE4hjbh fUCAMCYtlX5M8uxJQiF/Kxu9BOIMCFwcLXrk8wQqeE+J7IWXpTSqGh5+GffBwvLK DcbEpp1klEz3zfa5kqKAUqwAtsGQgklYfjBwFmkYktg9A2RI3AmAzYlqBROE65Pi GvLL+1CqCkOwLaDGHTcyl2Lzrc19ODYj3j/FL5tTPJVjQc4X3/sJOO/dBLA1li6P rpy7TnBTgzWClMrWVVQpk6Mop/CyFXp6VNN7lTMiUyCcLx3KzFvnUu2pihFrLN8X f/SWSRAMPeN8YSbwpF3NkMfx -----END CERTIFICATE-----Generated at Fri Apr 17 11:56:55 2026 by rpki-client