$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft File: LD0jWhshn0FmEJALADuKv9wXAqI.mft (raw, json) Hash identifier: 6vbpOsfs2HxbNAEW6yfALGwGzEuCKAW48QR9fUb9qfw= Subject key identifier: 86:85:C4:50:47:45:6D:05:67:A4:FE:D3:33:B2:2A:8D:BC:6B:13:18 Authority key identifier: 2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 Certificate issuer: /CN=A91CEA40/serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft Manifest number: 06AD Signing time: Thu 16 Apr 2026 22:22:07 +0000 Manifest this update: Thu 16 Apr 2026 22:22:06 +0000 Manifest next update: Thu 23 Apr 2026 22:22:06 +0000 Files and hashes: 1: LD0jWhshn0FmEJALADuKv9wXAqI.crl (hash: hu6WzlkDhosHGuJ+PhNcDwnGba5hQR7Pz1jQd2pqZlQ=) 2: 96F093D4BEA011EB8CAD965FC4F9AE02.roa (hash: iGuCHDAUL0PXZn0ORHKJTEzzVOLk9UA+q1lRAx9/x7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Validity Not Before: Apr 16 22:22:06 2026 GMT Not After : Apr 23 22:22:06 2026 GMT Subject: CN=69e1610f-75bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:28:98:77:a2:6e:90:11:df:27:66:ad:a6: ff:52:81:b0:f0:50:0b:8e:74:cc:e5:3f:a6:2b:1a: 41:27:ce:20:99:8e:49:fd:40:67:ce:61:30:a4:fe: ea:01:a6:cd:a2:99:61:bb:ab:5e:6f:8b:f7:9f:99: 7d:ed:74:fa:31:90:64:8e:59:ea:f6:11:3b:5a:e0: ec:d6:fd:4f:cb:0b:2e:41:f2:30:b8:66:79:78:65: a3:44:89:a4:87:b0:e0:42:bb:59:ca:01:6c:28:b2: fe:99:8d:cf:b9:d4:58:e6:04:67:ea:9d:f3:3d:88: a5:cd:36:84:6e:1b:8c:de:a3:02:4e:ec:da:f7:1d: d4:8b:12:94:f9:cb:55:35:bf:09:db:c7:38:34:2e: 7b:cd:7f:d2:9e:5e:d5:4c:e3:96:bb:73:7a:32:64: 14:48:0c:04:58:2d:04:84:db:9c:c0:63:b9:0c:4c: cd:32:e1:59:82:98:45:60:73:63:c4:e9:4d:da:3b: c1:e3:a2:7b:1a:6d:a2:63:9b:e3:01:45:b6:5b:d1: 9a:47:20:4e:4c:8b:d8:d1:7b:d9:53:23:00:34:d2: 5d:b9:96:f5:88:f1:09:7b:a2:47:a0:59:92:7b:2e: bf:3b:e9:5f:d7:44:ae:8b:34:7f:ef:5b:88:b2:54: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:85:C4:50:47:45:6D:05:67:A4:FE:D3:33:B2:2A:8D:BC:6B:13:18 X509v3 Authority Key Identifier: keyid:2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:38:6f:ec:58:f0:60:0b:9b:ec:ba:93:d6:85:30:82:0e:08: b6:7a:67:15:4d:84:58:e4:81:e4:7d:ab:3f:f9:3d:a0:3a:02: 55:6f:af:77:93:ff:36:d3:bf:56:c3:4a:df:16:cb:8f:e5:7e: e7:ae:02:db:63:1f:64:65:7f:e8:b7:7f:dd:6f:ee:43:bb:d0: f5:d2:5a:06:f5:69:73:63:67:fb:3d:cc:f0:23:da:75:7b:35: 27:18:9f:5a:35:19:f8:d1:7d:a2:de:c2:fd:9c:a0:f2:44:2e: 08:38:81:6f:c5:da:58:c9:59:7b:4e:64:14:53:12:55:84:0c: 74:4a:7f:cf:25:c6:41:f0:77:a6:fd:b9:92:50:cc:d4:b3:32: 7d:ce:b2:47:67:82:45:6e:ac:f7:7f:a8:21:6e:7b:dd:31:0e: 0f:46:36:c3:3b:5d:04:35:f0:9e:e1:d6:1f:aa:41:c9:63:d5: 61:d3:12:fe:65:cb:78:bd:66:17:c6:3f:38:07:3c:c3:5f:3f: b9:1d:ee:db:66:f5:c8:85:bc:d4:a4:71:3e:a9:6e:39:f3:67: 94:42:d9:60:a1:3d:a8:6a:f2:1a:dd:03:1b:0a:fb:a1:45:18: 8f:46:26:04:60:56:ef:5d:fa:58:6f:e7:94:a0:6b:e8:b0:86: 06:5b:0f:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBNDAxMTAvBgNVBAUTKDJDM0QyMzVBMUIyMTlGNDE2NjEwOTAwQjAwM0I4QUJG REMxNzAyQTIwHhcNMjYwNDE2MjIyMjA2WhcNMjYwNDIzMjIyMjA2WjAYMRYwFAYD VQQDEw02OWUxNjEwZi03NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2MomHeibpAR3ydmrab/UoGw8FALjnTM5T+mKxpBJ84gmY5J/UBnzmEwpP7q AabNoplhu6teb4v3n5l97XT6MZBkjlnq9hE7WuDs1v1PywsuQfIwuGZ5eGWjRImk h7DgQrtZygFsKLL+mY3PudRY5gRn6p3zPYilzTaEbhuM3qMCTuza9x3UixKU+ctV Nb8J28c4NC57zX/Snl7VTOOWu3N6MmQUSAwEWC0EhNucwGO5DEzNMuFZgphFYHNj xOlN2jvB46J7Gm2iY5vjAUW2W9GaRyBOTIvY0XvZUyMANNJduZb1iPEJe6JHoFmS ey6/O+lf10SuizR/71uIslQXAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaFxFBH RW0FZ6T+0zOyKo28axMYMB8GA1UdIwQYMBaAFCw9I1obIZ9BZhCQCwA7ir/cFwKi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUE0MC84RTk2NEJDRUFG NzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4wRm1FSkFMQUR1S3Y5d1hB cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEMGpXaHNobjBGbUVKQUxBRHVLdjl3WEFxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUE0MC84RTk2NEJDRUFGNzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4w Rm1FSkFMQUR1S3Y5d1hBcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADjhv7FjwYAub7LqT1oUwgg4ItnpnFU2EWOSB5H2rP/k9oDoCVW+vd5P/NtO/ VsNK3xbLj+V+564C22MfZGV/6Ld/3W/uQ7vQ9dJaBvVpc2Nn+z3M8CPadXs1Jxif WjUZ+NF9ot7C/Zyg8kQuCDiBb8XaWMlZe05kFFMSVYQMdEp/zyXGQfB3pv25klDM 1LMyfc6yR2eCRW6s93+oIW573TEOD0Y2wztdBDXwnuHWH6pByWPVYdMS/mXLeL1m F8Y/OAc8w18/uR3u22b1yIW81KRxPqluOfNnlELZYKE9qGryGt0DGwr7oUUYj0Ym BGBW7136WG/nlKBr6LCGBlsPoA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:26 2026 by rpki-client