$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: BCg3KCV8jkOMwUHhpl9a98ZddLE2hgwvn7L/puXg4qE= Subject key identifier: 81:89:2E:99:91:D7:71:A8:41:65:D1:DC:18:1F:8F:1A:E3:55:AF:7D Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 013F Signing time: Wed 15 Apr 2026 05:02:54 +0000 Manifest this update: Wed 15 Apr 2026 05:02:54 +0000 Manifest next update: Wed 22 Apr 2026 05:02:54 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: GpjYf9O6aHDKoIJ1dvzZJxrXdQF/7hik2P6RPz+0Ero=) 2: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) 3: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) 4: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Apr 15 05:02:54 2026 GMT Not After : Apr 22 05:02:54 2026 GMT Subject: CN=69df1bfe-b55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:1c:27:c9:cd:d7:a6:3e:f0:61:1b:2e:40: ad:48:89:a0:89:3e:48:f7:4c:ff:f6:78:36:6e:d6: 22:7b:b6:cb:e0:40:b5:1e:e5:f7:44:3f:ba:cc:5e: 7f:1e:c8:e4:8d:9f:a3:db:bb:38:82:d9:5f:c4:e2: 32:a6:c4:a6:ed:9f:da:ec:8a:6b:37:27:63:ed:af: bf:12:0b:33:57:96:b5:55:62:61:83:ce:a2:d3:20: d4:93:7b:a7:91:b5:b3:6f:8a:b6:f9:5f:91:ce:0a: b5:e4:43:70:bd:ce:b9:11:d9:4b:1f:6c:03:ff:10: f4:2d:17:1c:4d:82:eb:42:1f:7b:79:92:78:2c:9b: 86:3f:e1:d2:c3:c5:1c:f7:90:f7:66:b2:89:a1:66: 95:52:05:a3:0c:b4:54:fa:85:43:e9:b0:d7:a2:44: 8d:78:ed:ba:e7:ab:19:d4:f0:37:a7:7c:ab:8d:f3: a9:d5:83:3e:0d:36:d1:16:5a:cf:8b:7e:44:56:1f: a6:86:e8:c5:7f:2c:b4:67:22:02:67:11:3b:9d:cf: a4:24:7d:d9:1f:f8:64:f3:be:dc:0d:18:cf:dd:12: ed:93:00:e2:0a:b6:6c:5e:83:45:d6:fd:22:db:14: 64:66:a3:bb:d1:ea:b6:d2:bb:2e:ea:37:2d:51:61: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:2E:99:91:D7:71:A8:41:65:D1:DC:18:1F:8F:1A:E3:55:AF:7D X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d8:77:ce:3c:00:77:99:b5:6a:5e:04:39:3c:a6:8f:36:87: bf:e7:bb:bb:68:64:12:b0:82:46:ba:59:a1:6e:fc:e8:1a:13: 77:b3:be:a1:9f:b6:fc:e1:df:6d:f7:d8:99:19:62:e7:55:8a: 23:1c:53:4d:37:7f:d4:91:00:8c:59:da:76:31:cf:6d:ae:36: d2:1a:d7:02:18:f2:c9:41:e2:2e:e7:b5:cc:bc:60:70:66:85: 47:58:5f:30:22:a1:1a:4c:94:e4:4a:f1:05:7e:bd:58:1e:e4: 95:8a:70:eb:d0:66:eb:6d:c9:0a:48:83:83:6d:c9:d9:ff:46: 9e:53:8d:4e:7f:a1:5b:16:0c:bc:07:43:0c:21:9d:bd:18:41: 7f:df:e0:eb:a2:48:ad:20:b9:5b:c0:0b:6c:34:c3:5e:ce:c0: 13:6e:81:bc:cd:d6:e2:ab:f5:03:65:ea:0d:be:30:09:73:8d: 98:bd:9e:c6:81:bf:4b:9e:9f:51:ac:42:eb:57:b4:67:5e:e4: 2d:4d:88:a4:5e:4a:2e:7c:51:bb:1d:d4:3f:53:31:fc:fc:05: a3:4f:e6:b5:b0:b6:56:d6:d9:95:77:0e:22:ed:5e:30:43:a3: 11:6a:52:22:02:71:59:70:b2:55:32:89:1a:b6:ce:24:4c:b6: f2:56:95:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwNDE1MDUwMjU0WhcNMjYwNDIyMDUwMjU0WjAYMRYwFAYD VQQDEw02OWRmMWJmZS1iNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhocJ8nN16Y+8GEbLkCtSImgiT5I90z/9ng2btYie7bL4EC1HuX3RD+6zF5/ HsjkjZ+j27s4gtlfxOIypsSm7Z/a7IprNydj7a+/EgszV5a1VWJhg86i0yDUk3un kbWzb4q2+V+Rzgq15ENwvc65EdlLH2wD/xD0LRccTYLrQh97eZJ4LJuGP+HSw8Uc 95D3ZrKJoWaVUgWjDLRU+oVD6bDXokSNeO2656sZ1PA3p3yrjfOp1YM+DTbRFlrP i35EVh+mhujFfyy0ZyICZxE7nc+kJH3ZH/hk877cDRjP3RLtkwDiCrZsXoNF1v0i 2xRkZqO70eq20rsu6jctUWF1EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGJLpmR 13GoQWXR3BgfjxrjVa99MB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9h3zjwAd5m1al4EOTymjzaHv+e7u2hkErCCRrpZoW786BoTd7O+oZ+2/OHf bffYmRli51WKIxxTTTd/1JEAjFnadjHPba420hrXAhjyyUHiLue1zLxgcGaFR1hf MCKhGkyU5ErxBX69WB7klYpw69Bm623JCkiDg23J2f9GnlONTn+hWxYMvAdDDCGd vRhBf9/g66JIrSC5W8ALbDTDXs7AE26BvM3W4qv1A2XqDb4wCXONmL2exoG/S56f UaxC61e0Z17kLU2IpF5KLnxRux3UP1Mx/PwFo0/mtbC2VtbZlXcOIu1eMEOjEWpS IgJxWXCyVTKJGrbOJEy28laVPQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:32:19 2026 by rpki-client