$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json) Hash identifier: DhdKoOBhrNId53/bm/CB0tjLC92SwQO5PaIZ+OX+2y8= Subject key identifier: 88:8A:73:A3:29:95:84:49:78:06:1D:EF:BA:A2:B7:E6:B6:23:1F:89 Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 Certificate issuer: /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft Manifest number: 34 Signing time: Sun 19 Apr 2026 08:13:39 +0000 Manifest this update: Sun 19 Apr 2026 08:13:39 +0000 Manifest next update: Sun 26 Apr 2026 08:13:39 +0000 Files and hashes: 1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: 3hvH2ARvgpA7SxXuUoMP0YEIzw7RZPJTQWjfP1MTonQ=) 2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: dMndGGXMF1UUV3V1XnDiN6BWOBr7tp/sHPGvsw6xkRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Validity Not Before: Apr 19 08:13:39 2026 GMT Not After : Apr 26 08:13:39 2026 GMT Subject: CN=69e48eb3-e8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9a:89:86:8b:2b:e3:eb:3d:e4:ac:76:65:d4: a4:1d:c5:4b:20:65:b0:3d:fe:6a:84:db:26:df:75: cf:89:8d:64:80:e1:be:d3:c1:96:11:b1:db:df:7c: a6:66:c3:71:f0:db:40:e1:c4:3f:58:79:fa:87:e3: c7:38:96:7c:a2:d9:66:2d:e3:92:52:ee:9b:1e:2f: d7:f2:fd:6d:ae:b8:2d:61:55:f9:1d:76:8e:7c:15: 2c:91:2e:1e:24:0a:84:95:52:df:bc:76:47:8f:64: f2:41:df:ce:d0:2c:b6:d0:3c:d6:e2:7c:fb:72:ae: 90:b0:26:4e:ed:7b:a1:67:1d:d4:90:02:67:e6:7e: 75:3b:f8:97:b2:35:c4:82:ee:cd:31:8a:cf:f1:ba: be:4c:01:24:78:ec:64:64:8d:be:5b:f8:2d:cb:e8: 7c:14:e8:78:d8:ce:93:cc:ad:63:20:89:45:b3:e0: d6:11:00:20:6f:11:0c:81:22:9f:7e:41:6a:5a:ff: 9e:9f:be:02:cd:2b:af:d3:9d:02:23:39:9d:e3:6f: 12:19:9a:d3:d4:a1:86:1e:8c:47:c2:26:d1:6a:93: 19:98:9b:f6:40:28:12:bc:45:1e:7c:c0:4a:bb:6c: 4e:23:94:60:89:bc:a5:8c:49:5e:41:b9:aa:20:a1: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:73:A3:29:95:84:49:78:06:1D:EF:BA:A2:B7:E6:B6:23:1F:89 X509v3 Authority Key Identifier: keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f1:01:b8:f9:e8:5c:8e:35:97:1c:d9:5f:49:d5:a1:83:71: 1e:05:16:31:1c:45:5a:ad:65:0f:59:c7:f5:1f:3e:64:d1:df: a2:28:d4:ee:ca:40:19:ab:71:bb:24:fc:ef:c2:c6:4e:3d:ae: 8e:67:72:35:e5:35:38:2b:ac:a4:31:67:8b:9e:80:ea:35:b0: ea:42:71:cb:ff:d8:39:a9:1f:69:18:46:24:64:20:c4:7d:5b: 00:56:1d:f5:92:a9:62:0e:b2:02:d3:ea:d8:5b:f3:b2:75:17: fb:d1:c4:93:f6:1b:2b:71:c5:96:62:a2:d3:d4:56:f2:d4:85: ff:ec:52:f8:16:e8:e4:64:ee:06:fb:f5:fe:4e:fa:42:65:0f: 9a:3c:6a:33:b4:84:62:44:cb:27:d7:46:4c:32:96:d7:a2:10: f5:34:b6:96:38:e2:eb:21:e9:4b:3c:5b:ab:40:e8:01:a5:4b: 07:aa:f5:2f:8e:ef:05:9f:74:1e:71:63:1b:00:1a:a8:47:e5: 6b:4c:62:e2:7c:6f:b9:39:59:e4:31:b8:7e:3b:e1:ff:46:f3: a9:a8:10:b2:41:6d:75:8e:e5:24:eb:c7:cf:0c:1b:4f:a5:01: b1:6a:e4:96:d5:f3:bd:66:f9:71:a6:f0:9e:4f:cc:bf:6c:19: c1:9b:5c:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUE4QTExMC8GA1UEBRMoOTRDNjQzRTE2RDA0QTc3MzhCQzcyQjVCMTA3RTA1QjE2 MTYxNDAxMzAeFw0yNjA0MTkwODEzMzlaFw0yNjA0MjYwODEzMzlaMBgxFjAUBgNV BAMTDTY5ZTQ4ZWIzLWU4ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKmomGiyvj6z3krHZl1KQdxUsgZbA9/mqE2ybfdc+JjWSA4b7TwZYRsdvffKZm w3Hw20DhxD9YefqH48c4lnyi2WYt45JS7pseL9fy/W2uuC1hVfkddo58FSyRLh4k CoSVUt+8dkePZPJB387QLLbQPNbifPtyrpCwJk7te6FnHdSQAmfmfnU7+JeyNcSC 7s0xis/xur5MASR47GRkjb5b+C3L6HwU6HjYzpPMrWMgiUWz4NYRACBvEQyBIp9+ QWpa/56fvgLNK6/TnQIjOZ3jbxIZmtPUoYYejEfCJtFqkxmYm/ZAKBK8RR58wEq7 bE4jlGCJvKWMSV5BuaogoY1zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiIpzoymV hEl4Bh3vuqK35rYjH4kwHwYDVR0jBBgwFoAUlMZD4W0Ep3OLxytbEH4FsWFhQBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBQThBLzk2QzJGQjA4RjJE MTExRjA5ODlBRDhDRTNDNkY1NkJDL2xNWkQ0VzBFcDNPTHh5dGJFSDRGc1dGaFFC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbE1aRDRXMEVwM09MeHl0YkVINEZzV0ZoUUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB QThBLzk2QzJGQjA4RjJEMTExRjA5ODlBRDhDRTNDNkY1NkJDL2xNWkQ0VzBFcDNP THh5dGJFSDRGc1dGaFFCTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCO8QG4+ehcjjWXHNlfSdWhg3EeBRYxHEVarWUPWcf1Hz5k0d+iKNTuykAZq3G7 JPzvwsZOPa6OZ3I15TU4K6ykMWeLnoDqNbDqQnHL/9g5qR9pGEYkZCDEfVsAVh31 kqliDrIC0+rYW/OydRf70cST9hsrccWWYqLT1Fby1IX/7FL4FujkZO4G+/X+TvpC ZQ+aPGoztIRiRMsn10ZMMpbXohD1NLaWOOLrIelLPFurQOgBpUsHqvUvju8Fn3Qe cWMbABqoR+VrTGLifG+5OVnkMbh+O+H/RvOpqBCyQW11juUk68fPDBtPpQGxauSW 1fO9ZvlxpvCeT8y/bBnBm1xi -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:33 2026 by rpki-client