$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: YKX8jGUHnGkB+cDxY4hz10G9TW413BaZhDL69T1B21E= Subject key identifier: C7:82:5D:7B:0D:9F:3E:3E:63:8F:B9:1A:CF:F6:AC:DB:93:39:D5:B7 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 013C Signing time: Fri 17 Apr 2026 05:12:25 +0000 Manifest this update: Fri 17 Apr 2026 05:12:25 +0000 Manifest next update: Fri 24 Apr 2026 05:12:25 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: Tkl8XTcW5YyS6ylhdg5sO1dBbAwkBhC+X8ePiOq7dQc=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: /fpFKtFcwh7KjBndTGfGIO4WW4Bx9KlPmCwqANIq6FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Apr 17 05:12:25 2026 GMT Not After : Apr 24 05:12:25 2026 GMT Subject: CN=69e1c139-961d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:8c:5a:54:66:a1:ff:ca:bf:a6:61:bd:e9: 30:99:d6:7e:ac:69:9b:32:e1:22:2b:9d:97:cb:34: 92:42:52:f6:51:15:eb:6a:cc:47:f6:78:2d:b9:11: 4d:4f:4e:5d:ea:4b:17:98:46:af:82:65:e9:26:65: 01:f0:9a:c0:f2:4d:89:8d:01:24:8e:24:ce:f4:36: 5e:32:74:4d:a7:88:c6:5c:16:ba:19:73:8e:b0:35: 14:0c:ee:d0:3a:e0:d7:92:98:05:4e:09:f2:b0:26: df:8e:c9:91:61:7a:02:10:41:78:03:91:45:0e:ef: 78:98:83:1d:3e:75:6b:74:0e:6e:83:c6:ff:81:8e: 57:ff:4a:84:05:87:c1:12:97:a0:2e:39:a2:9c:c5: 59:b2:0a:76:e2:6a:ab:cb:fe:2e:f0:ba:65:87:eb: 90:b5:2b:69:12:23:ec:cd:77:70:b9:df:6d:dd:a6: c6:20:21:57:27:97:70:14:0d:bd:76:fe:8a:9c:fe: 71:58:bd:96:4e:d4:1d:8d:ff:82:83:30:ce:ec:9c: 83:6b:95:80:b0:b0:97:02:11:c9:c6:a4:f6:79:70: 5a:dd:ed:27:64:16:09:ed:81:35:1f:ea:f2:fb:23: b2:ac:4f:5c:75:b0:99:39:da:90:52:30:8e:20:21: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:82:5D:7B:0D:9F:3E:3E:63:8F:B9:1A:CF:F6:AC:DB:93:39:D5:B7 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:10:7d:4f:8a:a3:d8:57:71:32:3c:7c:aa:72:da:0d:b2: f2:cf:1d:34:d4:85:6f:08:9b:c0:d3:a5:91:24:09:58:27:35: e1:f3:e1:37:4d:61:bc:e9:d8:8c:ce:8c:2d:07:93:bc:ea:f9: 85:b5:8a:3a:cf:e2:57:b1:c5:fe:60:5c:fd:2b:81:81:3c:7e: 12:c8:cb:11:ec:4c:78:89:86:71:2b:7e:35:60:4c:48:78:38: d1:1f:96:31:0f:51:d3:78:76:6a:f1:da:b9:3f:1c:07:a1:12: 9b:38:e3:e4:a3:70:80:02:60:6d:39:7e:68:77:55:76:80:ae: 3e:51:a6:06:01:0e:f4:df:d7:ee:4a:46:d7:e0:ec:12:6d:c7: f3:5a:3b:f1:42:08:4b:5e:34:21:49:51:3d:58:96:bb:11:2b: fc:12:af:ba:ce:66:41:44:04:76:a5:1c:5a:7b:5b:af:99:39: 83:ca:12:7e:13:92:87:3f:0d:c8:e3:e4:f3:8d:70:1d:6f:5d: ae:87:0e:8b:0e:9e:52:44:09:b7:db:b1:59:0a:6a:38:c6:e0: 28:8e:02:23:b5:e4:4b:44:4c:e0:ed:90:14:ba:73:da:8a:c6: 5d:7c:50:e0:c4:7f:2d:80:ad:6a:44:ab:0c:ea:e3:6c:d0:0b: 6c:66:ff:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjYwNDE3MDUxMjI1WhcNMjYwNDI0MDUxMjI1WjAYMRYwFAYD VQQDEw02OWUxYzEzOS05NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAKMWlRmof/Kv6ZhvekwmdZ+rGmbMuEiK52XyzSSQlL2URXrasxH9ngtuRFN T05d6ksXmEavgmXpJmUB8JrA8k2JjQEkjiTO9DZeMnRNp4jGXBa6GXOOsDUUDO7Q OuDXkpgFTgnysCbfjsmRYXoCEEF4A5FFDu94mIMdPnVrdA5ug8b/gY5X/0qEBYfB EpegLjminMVZsgp24mqry/4u8Lplh+uQtStpEiPszXdwud9t3abGICFXJ5dwFA29 dv6KnP5xWL2WTtQdjf+CgzDO7JyDa5WAsLCXAhHJxqT2eXBa3e0nZBYJ7YE1H+ry +yOyrE9cdbCZOdqQUjCOICETbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMeCXXsN nz4+Y4+5Gs/2rNuTOdW3MB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1IQfU+Ko9hXcTI8fKpy2g2y8s8dNNSFbwibwNOlkSQJWCc14fPhN01hvOnY jM6MLQeTvOr5hbWKOs/iV7HF/mBc/SuBgTx+EsjLEexMeImGcSt+NWBMSHg40R+W MQ9R03h2avHauT8cB6ESmzjj5KNwgAJgbTl+aHdVdoCuPlGmBgEO9N/X7kpG1+Ds Em3H81o78UIIS140IUlRPViWuxEr/BKvus5mQUQEdqUcWntbr5k5g8oSfhOShz8N yOPk841wHW9drocOiw6eUkQJt9uxWQpqOMbgKI4CI7XkS0RM4O2QFLpz2orGXXxQ 4MR/LYCtakSrDOrjbNALbGb/9g== -----END CERTIFICATE-----Generated at Fri Apr 17 07:27:36 2026 by rpki-client