$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: ny7MnDDiTdE84Nq2iHVNb73q5U36N2yosl2y0ppYMN0= Subject key identifier: 08:F0:E0:AE:06:53:9B:1C:50:CE:D4:F6:D8:FC:4B:88:2B:D3:B8:B6 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 8D Signing time: Wed 15 Apr 2026 07:10:21 +0000 Manifest this update: Wed 15 Apr 2026 07:10:20 +0000 Manifest next update: Wed 22 Apr 2026 07:10:20 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: s0fjI8H2orUWqUs0uoZD/sHo4ytHcfKq1vYzRdLiC4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Apr 15 07:10:20 2026 GMT Not After : Apr 22 07:10:20 2026 GMT Subject: CN=69df39dd-c3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:52:ec:d4:06:9e:4a:5b:94:05:ae:6c:6b: 57:1e:55:9f:c1:f2:02:34:35:e9:2b:01:5e:db:18: 26:08:c4:64:13:04:c0:ec:fe:76:68:b4:8d:e8:8f: 5a:4e:19:82:c3:e1:df:0f:55:10:f1:50:99:a4:b9: 3c:bb:6d:28:ee:8c:db:e2:ea:fe:29:c9:ed:b7:6b: df:c6:e5:5a:fb:c3:72:f0:aa:62:dc:b2:02:77:47: f6:83:0d:dd:01:e7:c9:73:63:3b:a1:65:7d:62:c6: 7c:c6:4f:36:78:12:0c:a9:47:27:b8:b8:9a:a0:0d: 6d:63:cd:e5:f4:a9:3d:64:73:78:29:4a:54:5a:32: 10:3b:f4:3b:c3:04:ca:f5:1f:36:ad:4c:b5:46:e8: cf:88:5f:86:4d:b0:dd:d3:a5:57:df:f7:53:4d:03: f0:74:2a:1b:aa:7e:74:fb:95:4b:16:0d:5f:91:3b: 65:ba:3d:04:d3:ab:e9:cc:89:29:d1:49:08:8c:46: f2:6b:d5:86:ee:ca:a6:89:d8:66:23:6a:b0:ef:60: 0f:c3:f2:25:a0:f7:de:53:88:47:64:f3:17:b0:0b: 25:4b:fc:fa:b9:e3:f5:1c:c1:50:f4:e7:1b:78:44: 07:bd:e7:05:55:09:1b:1d:45:92:5f:44:95:ab:c0: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F0:E0:AE:06:53:9B:1C:50:CE:D4:F6:D8:FC:4B:88:2B:D3:B8:B6 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:04:9b:2c:79:16:29:10:1c:6b:ed:dc:7a:77:4a:77:93:8d: be:b4:e9:af:a0:79:ab:c9:4f:61:1e:c4:9f:50:28:b2:7c:b6: 86:15:29:c2:59:ca:91:a1:87:d5:1c:f9:7b:48:f2:57:f8:9a: 75:55:7e:87:c1:14:5c:fc:e8:01:20:ef:cb:59:bf:8e:2a:00: 5c:d4:49:4b:53:d2:21:c9:f6:bc:9c:8a:7b:ee:56:e3:48:8b: 68:95:6f:38:76:45:a7:4e:8f:1f:0c:a0:52:21:22:d9:b1:f3: 10:b8:e5:22:93:dc:15:24:07:aa:06:91:63:a2:7c:66:27:44: 09:87:7c:be:0b:d8:28:71:f9:7f:de:40:7b:9c:bd:d3:f1:7c: 09:6e:9f:d9:00:ca:25:ce:86:f0:ef:c7:37:64:be:2f:c9:31: d4:aa:50:6d:12:78:49:e7:e6:6b:e7:9e:c0:20:3f:98:ca:48: ed:e8:4d:f4:c7:61:b8:b2:66:d3:d1:a8:05:fc:e5:bf:fb:03: 15:d0:33:96:60:e8:ea:0b:3a:5f:3f:a9:d1:12:c0:f3:2a:11: 21:d1:7f:2d:42:c0:64:99:f1:2f:77:f6:1c:40:2f:cc:34:bf: 2d:04:ba:ba:40:1c:25:32:f4:8f:51:3c:6a:25:9e:3a:57:4d: 0e:0b:23:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMDExMTAvBgNVBAUTKDk0MzM0OUZEQjZEQzBBRjE1Q0Q1NzREQTQyRjhFQzdC NDlEQzBEQjcwHhcNMjYwNDE1MDcxMDIwWhcNMjYwNDIyMDcxMDIwWjAYMRYwFAYD VQQDEw02OWRmMzlkZC1jM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDZS7NQGnkpblAWubGtXHlWfwfICNDXpKwFe2xgmCMRkEwTA7P52aLSN6I9a ThmCw+HfD1UQ8VCZpLk8u20o7ozb4ur+Kcntt2vfxuVa+8Ny8Kpi3LICd0f2gw3d AefJc2M7oWV9YsZ8xk82eBIMqUcnuLiaoA1tY83l9Kk9ZHN4KUpUWjIQO/Q7wwTK 9R82rUy1RujPiF+GTbDd06VX3/dTTQPwdCobqn50+5VLFg1fkTtluj0E06vpzIkp 0UkIjEbya9WG7sqmidhmI2qw72APw/IloPfeU4hHZPMXsAslS/z6ueP1HMFQ9Ocb eEQHvecFVQkbHUWSX0SVq8C5MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjw4K4G U5scUM7U9tj8S4gr07i2MB8GA1UdIwQYMBaAFJQzSf223ArxXNV02kL47HtJ3A23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS9GNkE2NDVENjY3 QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2RmMxWFRhUXZqc2UwbmNE YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0RiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIwMS9GNkE2NDVENjY3QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2 RmMxWFRhUXZqc2UwbmNEYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsgSbLHkWKRAca+3cendKd5ONvrTpr6B5q8lPYR7En1Aosny2hhUpwlnKkaGH 1Rz5e0jyV/iadVV+h8EUXPzoASDvy1m/jioAXNRJS1PSIcn2vJyKe+5W40iLaJVv OHZFp06PHwygUiEi2bHzELjlIpPcFSQHqgaRY6J8ZidECYd8vgvYKHH5f95Ae5y9 0/F8CW6f2QDKJc6G8O/HN2S+L8kx1KpQbRJ4Sefma+eewCA/mMpI7ehN9MdhuLJm 09GoBfzlv/sDFdAzlmDo6gs6Xz+p0RLA8yoRIdF/LULAZJnxL3f2HEAvzDS/LQS6 ukAcJTL0j1E8aiWeOldNDgsj8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 04:10:39 2026 by rpki-client