$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json) Hash identifier: FObZRT/iBQ1Vd/2DEitAX3bRMxEATUR44Ms0QGamHr8= Subject key identifier: 74:A8:A7:7F:9A:57:B0:9E:1B:67:A9:FC:77:9F:6F:03:CB:87:B4:8A Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft Manifest number: 0686 Signing time: Thu 16 Apr 2026 22:24:22 +0000 Manifest this update: Thu 16 Apr 2026 22:24:22 +0000 Manifest next update: Thu 23 Apr 2026 22:24:22 +0000 Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: oGEvC40i7+K8L8sjMyCNbHabmthC9i4lQunMPi4EvD0=) 2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Validity Not Before: Apr 16 22:24:22 2026 GMT Not After : Apr 23 22:24:22 2026 GMT Subject: CN=69e16196-9b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:9e:f7:c6:87:d5:68:33:6b:84:b9:9e:41: 6e:96:bd:e8:bb:b5:71:68:2b:51:7a:de:8c:10:b5: 42:e9:f6:c0:71:48:22:0c:22:68:8f:ce:d2:22:0a: 84:e3:3b:b0:bc:29:0e:c6:6a:e1:8c:92:85:ae:8c: d7:9d:29:32:ba:5e:67:39:d7:3a:ce:a0:f4:df:28: e5:e6:da:e3:0a:d2:f1:24:67:75:ee:d3:32:f0:64: 5f:b0:26:30:a4:c0:93:cd:14:9a:ce:f7:d4:b8:06: bc:2e:ac:18:0e:1e:e5:1b:cf:6a:76:77:0a:79:46: 33:2e:bb:df:89:bc:0d:fd:2e:36:f2:20:65:cb:32: 4f:19:dd:13:75:fc:56:7e:ff:c5:35:02:6d:b5:a1: da:13:d5:be:b9:47:2c:db:2b:56:19:a7:57:d6:eb: a0:c9:bb:3f:d9:3a:70:e2:46:79:8a:6f:4a:61:e4: 7f:26:a1:20:68:de:88:b5:95:ed:c5:f4:07:18:81: e3:e8:a7:3a:66:fc:08:1a:9d:a0:23:0b:6a:05:33: e6:23:4f:9d:d4:5a:72:97:93:5e:93:ef:74:98:13: 46:e8:e6:19:50:49:95:97:35:e1:29:4c:2b:62:b0: 64:bb:20:73:3d:91:41:f8:f2:44:62:c0:3a:d1:ac: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:A7:7F:9A:57:B0:9E:1B:67:A9:FC:77:9F:6F:03:CB:87:B4:8A X509v3 Authority Key Identifier: keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1b:94:ad:0d:75:53:bc:c0:ec:85:35:2d:3b:07:c2:ba:73: 08:b8:64:45:f4:1e:cc:c7:90:c7:d1:7a:42:03:15:30:1e:84: 8d:59:88:a2:0a:0c:d0:dc:b7:2f:dc:af:82:10:90:cf:85:b2: 8d:41:66:8d:82:51:a0:98:da:e2:65:d9:5b:f1:b9:50:79:b9: 09:97:db:a9:f1:0e:d2:23:63:00:71:d6:57:45:2d:1b:cd:10: b8:8f:20:6c:45:8e:a4:7d:89:b2:71:f0:8f:22:3d:ad:07:44: 88:1d:bd:55:cf:ac:d0:6b:12:ed:79:35:87:59:2d:fc:7f:ab: 90:7b:04:4e:ce:25:80:2d:7a:8a:20:b7:b9:d0:85:b2:08:17: 91:c5:9b:9d:0c:d1:6d:9d:0b:65:ab:64:32:3c:a2:83:6c:b6: 9f:ae:53:62:e9:14:13:78:79:18:d0:b7:9f:c2:17:06:1a:79: e2:a8:26:51:63:ab:63:ba:63:38:f7:a5:f5:52:36:22:d0:2a: 70:6e:92:37:63:56:8e:ae:88:56:8f:e5:d1:4f:f9:98:34:4a: a1:ce:b0:52:7f:48:e7:64:b7:14:d1:0f:d0:a1:b6:f9:b5:40: 3d:6e:6c:fa:ef:f9:ea:cf:80:80:3a:0d:8b:77:a7:33:c1:62: 00:fb:22:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3RTRERTBBODNF RkFBREQ0NzIwHhcNMjYwNDE2MjIyNDIyWhcNMjYwNDIzMjIyNDIyWjAYMRYwFAYD VQQDEw02OWUxNjE5Ni05YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI+e98aH1Wgza4S5nkFulr3ou7VxaCtRet6MELVC6fbAcUgiDCJoj87SIgqE 4zuwvCkOxmrhjJKFrozXnSkyul5nOdc6zqD03yjl5trjCtLxJGd17tMy8GRfsCYw pMCTzRSazvfUuAa8LqwYDh7lG89qdncKeUYzLrvfibwN/S428iBlyzJPGd0TdfxW fv/FNQJttaHaE9W+uUcs2ytWGadX1uugybs/2Tpw4kZ5im9KYeR/JqEgaN6ItZXt xfQHGIHj6Kc6ZvwIGp2gIwtqBTPmI0+d1Fpyl5Nek+90mBNG6OYZUEmVlzXhKUwr YrBkuyBzPZFB+PJEYsA60axM1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSop3+a V7CeG2ep/HefbwPLh7SKMB8GA1UdIwQYMBaAFJUGi7MKvH4Af9g4fk3gqD76rdRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOURGOC80QjNCODgxRUI2 RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZnQl8yRGgtVGVDb1B2cXQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRYUxzd3E4ZmdCXzJEaC1UZUNvUHZxdDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OURGOC80QjNCODgxRUI2RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZn Ql8yRGgtVGVDb1B2cXQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhuUrQ11U7zA7IU1LTsHwrpzCLhkRfQezMeQx9F6QgMVMB6EjVmIogoM0Ny3 L9yvghCQz4WyjUFmjYJRoJja4mXZW/G5UHm5CZfbqfEO0iNjAHHWV0UtG80QuI8g bEWOpH2JsnHwjyI9rQdEiB29Vc+s0GsS7Xk1h1kt/H+rkHsETs4lgC16iiC3udCF sggXkcWbnQzRbZ0LZatkMjyig2y2n65TYukUE3h5GNC3n8IXBhp54qgmUWOrY7pj OPel9VI2ItAqcG6SN2NWjq6IVo/l0U/5mDRKoc6wUn9I52S3FNEP0KG2+bVAPW5s +u/56s+AgDoNi3enM8FiAPsiwQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:15:22 2026 by rpki-client