$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json) Hash identifier: jDQ8gvg/hHnS77Q3s2o49cmIvZBEs7H04rPIJGxRkJ8= Subject key identifier: 09:50:DC:3F:0A:38:F0:F4:D3:53:B4:40:FE:BC:36:BE:7B:82:8B:02 Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft Manifest number: 35 Signing time: Fri 17 Apr 2026 08:17:59 +0000 Manifest this update: Fri 17 Apr 2026 08:17:58 +0000 Manifest next update: Fri 24 Apr 2026 08:17:58 +0000 Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: EpLNtkF6SBJo90AntoKUjbyKzfnYwrXARf3D7t2tw48=) 2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Validity Not Before: Apr 17 08:17:58 2026 GMT Not After : Apr 24 08:17:58 2026 GMT Subject: CN=69e1ecb7-cda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:aa:60:3e:42:e8:c8:97:00:5a:22:76:80: bb:e1:83:70:87:81:cb:da:53:cb:d6:19:75:42:99: 52:b4:61:23:c9:86:99:62:26:8e:0e:9e:a9:75:df: 64:78:83:00:f3:0c:20:87:1b:79:ab:1c:d9:89:9b: e8:5c:f3:cc:06:3e:eb:98:99:9c:9a:c6:a5:65:40: e9:8e:63:82:08:64:16:44:ca:c3:60:78:9f:35:be: 72:89:15:48:1d:a8:9c:14:50:0e:b1:c7:71:c9:91: f2:3b:b7:fe:c8:32:16:88:90:31:00:0d:1a:a6:31: 38:42:f3:80:21:11:37:1d:8c:27:9e:85:af:a8:a2: a2:d4:3d:8f:4f:d1:cf:6b:ef:8d:a8:85:07:0f:c3: 28:a6:2b:00:ae:54:b0:cc:aa:b3:3c:f4:f1:ea:b2: a1:1b:58:94:f8:55:aa:3c:e7:79:14:fd:bd:81:5e: 58:a1:c9:0e:e1:2d:7c:fc:65:35:73:be:b8:8f:38: 81:2c:91:84:ab:e7:c8:00:11:92:0b:00:4f:49:d3: a7:a2:98:91:a3:e0:97:73:76:1c:65:1f:e6:83:f4: de:89:8b:64:f3:e1:b9:c6:08:fd:8e:77:01:3e:81: 82:cc:23:26:34:74:b9:ca:58:df:41:dc:88:2b:86: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:50:DC:3F:0A:38:F0:F4:D3:53:B4:40:FE:BC:36:BE:7B:82:8B:02 X509v3 Authority Key Identifier: keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:97:c4:e3:c5:2c:7f:b9:95:01:81:97:13:b8:4f:dc:d0:0f: e5:2e:ce:d0:4e:f1:64:a4:1c:32:7a:4b:b4:50:f1:75:72:1d: af:53:31:4f:be:a7:c5:43:ae:7f:4b:22:10:04:a4:9f:a1:4f: d7:ba:1f:76:6d:66:c9:c3:a6:ec:7c:df:69:1c:6b:80:ee:80: f8:06:73:54:8c:a1:66:0a:2a:c3:2d:b9:32:6e:76:53:a0:87: d7:be:a3:cc:bc:ec:4b:99:a2:38:b9:6c:e1:ea:83:7f:5f:8f: 72:2a:eb:9e:16:64:73:75:eb:33:af:d9:46:56:88:8b:45:7b: 2d:82:f7:0d:c2:b7:af:74:67:dc:52:09:04:8a:87:85:42:f7: 4f:7d:9a:44:a6:02:0e:fa:ba:02:d5:10:14:61:0c:81:da:b2: 0a:54:00:06:48:37:25:78:52:53:ca:5c:d7:8a:a3:61:d1:28: 86:69:33:6d:6a:46:e8:53:f6:7b:44:c3:b2:19:99:90:fe:39: 6a:f7:a8:5f:1e:68:49:a4:19:3f:12:9f:b4:3b:d7:51:16:ad: 0d:01:3c:54:ce:9a:d8:68:0b:06:f4:56:63:53:cb:3a:e9:09: 2f:61:6a:cc:46:e9:6e:52:16:5d:c8:f9:40:93:d2:93:88:c7: e7:ca:72:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlGMUMwRDRFN0My MTk2QTMzRTAeFw0yNjA0MTcwODE3NThaFw0yNjA0MjQwODE3NThaMBgxFjAUBgNV BAMTDTY5ZTFlY2I3LWNkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHQqpgPkLoyJcAWiJ2gLvhg3CHgcvaU8vWGXVCmVK0YSPJhpliJo4Onql132R4 gwDzDCCHG3mrHNmJm+hc88wGPuuYmZyaxqVlQOmOY4IIZBZEysNgeJ81vnKJFUgd qJwUUA6xx3HJkfI7t/7IMhaIkDEADRqmMThC84AhETcdjCeeha+ooqLUPY9P0c9r 742ohQcPwyimKwCuVLDMqrM89PHqsqEbWJT4Vao853kU/b2BXlihyQ7hLXz8ZTVz vriPOIEskYSr58gAEZILAE9J06eimJGj4JdzdhxlH+aD9N6Ji2Tz4bnGCP2OdwE+ gYLMIyY0dLnKWN9B3IgrhogBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCVDcPwo4 8PTTU7RA/rw2vnuCiwIwHwYDVR0jBBgwFoAULRhptz6h6I6xK+afHA1OfCGWoz4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzUwMzU3Q0YwRUVE MTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2eEstYWZIQTFPZkNHV296 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFJocHR6Nmg2STZ4Sy1hZkhBMU9mQ0dXb3o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 RkZGLzUwMzU3Q0YwRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2 eEstYWZIQTFPZkNHV296NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC0l8TjxSx/uZUBgZcTuE/c0A/lLs7QTvFkpBwyeku0UPF1ch2vUzFPvqfFQ65/ SyIQBKSfoU/Xuh92bWbJw6bsfN9pHGuA7oD4BnNUjKFmCirDLbkybnZToIfXvqPM vOxLmaI4uWzh6oN/X49yKuueFmRzdeszr9lGVoiLRXstgvcNwrevdGfcUgkEioeF QvdPfZpEpgIO+roC1RAUYQyB2rIKVAAGSDcleFJTylzXiqNh0SiGaTNtakboU/Z7 RMOyGZmQ/jlq96hfHmhJpBk/Ep+0O9dRFq0NATxUzprYaAsG9FZjU8s66QkvYWrM RuluUhZdyPlAk9KTiMfnynKj -----END CERTIFICATE-----Generated at Fri Apr 17 10:21:26 2026 by rpki-client