$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: Ne4OYzPZAEQJqxDgWzDSKjpHllVocWZ1uK+/nnyj+1s= Subject key identifier: 12:C5:CB:42:85:17:98:04:44:70:8C:AB:8C:98:FC:B4:DD:11:CB:58 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 55 Signing time: Wed 15 Apr 2026 07:50:07 +0000 Manifest this update: Wed 15 Apr 2026 07:50:06 +0000 Manifest next update: Wed 22 Apr 2026 07:50:06 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: reB4gZ9dq9gNmo5MMnyRN+vza9RuuVO46kBjUUDO01A=) 2: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) 3: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) 4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Apr 15 07:50:06 2026 GMT Not After : Apr 22 07:50:06 2026 GMT Subject: CN=69df432f-dbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:58:53:48:37:bf:13:a5:65:69:c3:7d:bf: ae:a7:d4:7c:65:7a:5f:62:eb:6e:7b:e4:00:e2:ff: dc:77:91:de:d8:a7:a4:de:a5:57:10:a0:9d:fe:41: 69:c0:7a:9b:f7:dd:79:a7:98:3a:8b:cd:e6:ca:84: 10:7e:44:a7:3a:c8:f4:60:52:51:fe:53:b5:82:54: bc:71:05:b3:17:3e:d3:6b:cd:65:12:50:e7:1f:58: f0:56:71:b6:4e:06:a9:7d:24:e5:8e:33:f5:b9:12: 21:60:9e:99:20:d0:1b:fb:07:e5:0b:8c:f0:ce:ab: ef:a7:b8:c8:ad:90:06:f1:c8:8d:2a:cf:e0:6d:38: f6:c9:a0:4d:4c:0d:e5:b4:6c:2a:cb:7b:d5:5d:9f: c4:a0:2e:36:33:56:6b:57:5a:40:6b:92:80:18:00: 54:97:f9:37:76:c3:6f:66:f6:24:14:1f:cd:ec:3c: 2d:61:a4:d6:64:a3:5c:63:84:38:1a:81:85:4c:4e: 3b:64:36:a2:0b:6f:83:96:6a:0a:8a:e0:20:38:4c: 56:b9:4f:a3:66:39:4a:1b:0d:75:dd:cf:63:76:dd: 84:b6:5f:4f:4c:e9:2d:ca:02:10:62:8d:55:c9:fa: 7f:28:36:51:1d:a3:fb:a0:6c:c5:60:a4:20:f2:3e: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:CB:42:85:17:98:04:44:70:8C:AB:8C:98:FC:B4:DD:11:CB:58 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2f:ff:d6:15:a9:f3:94:d0:13:00:aa:c6:05:11:16:f7:22: 2e:32:72:fd:d3:e0:a4:ee:f2:c0:c8:0a:27:5d:b7:e9:8f:8f: 54:2f:a2:d3:d7:bc:d7:0a:d5:05:6f:d6:c8:f4:15:6e:46:d3: da:9d:43:36:d9:ab:8b:aa:cd:8e:87:cd:09:4e:f2:4c:38:77: 92:a7:d1:4e:3a:31:d6:a6:98:62:8e:a6:ec:e4:67:a8:d1:a6: c3:ad:25:5e:d9:71:a0:28:6a:e4:bd:d0:78:d4:02:f0:c6:4d: d0:ef:8a:4b:c5:50:2f:d8:a3:fa:74:19:00:19:f2:f3:63:e7: 9b:ec:ee:f2:f1:d9:2d:15:c5:1e:09:ee:24:6c:e2:fe:16:bb: 33:32:c4:55:d6:99:05:88:67:d7:3b:83:56:bc:1b:f4:9f:e4: aa:da:37:fa:e9:9c:ce:e5:50:eb:d4:4f:2b:2d:6b:94:55:11: 5f:4f:27:40:f0:53:14:79:ae:c4:e9:89:68:4a:1f:3a:c4:6c: 0d:70:59:c0:5a:1b:1f:2b:2d:2a:40:db:95:2b:86:0c:43:df: 87:29:6e:7f:e8:62:9a:63:d3:90:f7:51:e7:a3:fa:cc:af:f0: a0:59:1e:fc:df:34:89:03:de:88:a5:db:bc:c1:8d:8b:66:ed: ce:8c:b0:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNjA0MTUwNzUwMDZaFw0yNjA0MjIwNzUwMDZaMBgxFjAUBgNV BAMTDTY5ZGY0MzJmLWRiZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCU8VhTSDe/E6VlacN9v66n1Hxlel9i62575ADi/9x3kd7Yp6TepVcQoJ3+QWnA epv33XmnmDqLzebKhBB+RKc6yPRgUlH+U7WCVLxxBbMXPtNrzWUSUOcfWPBWcbZO Bql9JOWOM/W5EiFgnpkg0Bv7B+ULjPDOq++nuMitkAbxyI0qz+BtOPbJoE1MDeW0 bCrLe9Vdn8SgLjYzVmtXWkBrkoAYAFSX+Td2w29m9iQUH83sPC1hpNZko1xjhDga gYVMTjtkNqILb4OWagqK4CA4TFa5T6NmOUobDXXdz2N23YS2X09M6S3KAhBijVXJ +n8oNlEdo/ugbMVgpCDyPuQxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEsXLQoUX mAREcIyrjJj8tN0Ry1gwHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPL//WFanzlNATAKrGBREW9yIuMnL90+Ck7vLAyAonXbfpj49UL6LT17zXCtUF b9bI9BVuRtPanUM22auLqs2Oh80JTvJMOHeSp9FOOjHWpphijqbs5Geo0abDrSVe 2XGgKGrkvdB41ALwxk3Q74pLxVAv2KP6dBkAGfLzY+eb7O7y8dktFcUeCe4kbOL+ FrszMsRV1pkFiGfXO4NWvBv0n+Sq2jf66ZzO5VDr1E8rLWuUVRFfTydA8FMUea7E 6YloSh86xGwNcFnAWhsfKy0qQNuVK4YMQ9+HKW5/6GKaY9OQ91Hno/rMr/CgWR78 3zSJA96Ipdu8wY2LZu3OjLDQ -----END CERTIFICATE-----Generated at Fri Apr 17 08:19:15 2026 by rpki-client