$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: XKxIHPRJwpQvw78pt1PXDFu1M3WSA/qMSTvHKLnlQZA= Subject key identifier: 79:9A:15:2D:F8:EF:F3:ED:F8:BD:D6:9E:98:73:81:3E:B7:95:28:7F Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 0213 Signing time: Fri 17 Apr 2026 02:42:53 +0000 Manifest this update: Fri 17 Apr 2026 02:42:53 +0000 Manifest next update: Fri 24 Apr 2026 02:42:53 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: hSG8rf6owXrKcE2SiByR9D08DGIraPBmshyc7aDPH/k=) 2: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=) 3: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=) 4: 6445C13C2D1511F18C0F846BB3833773.roa (hash: 9QqpnJcWgyDf2mtA4MnObByXA5vEs6rKETFijGykNxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Apr 17 02:42:53 2026 GMT Not After : Apr 24 02:42:53 2026 GMT Subject: CN=69e19e2d-93ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:7f:b6:44:4d:25:12:60:34:e0:8f:41:e7: 48:0d:f7:7f:5e:66:c8:bb:2d:04:69:8d:06:1c:20: 8b:e4:23:b0:72:fd:f5:92:48:d3:63:11:85:e7:98: 82:71:c4:39:12:54:26:1d:62:d7:32:92:d0:1e:79: 88:9f:a9:8a:c0:c4:6c:85:1d:8d:fc:5a:cd:41:fc: a8:bd:be:c6:5d:ad:3b:aa:c4:37:e5:5b:d6:41:41: bf:0f:8c:d0:f6:d8:e4:35:c0:33:f7:bc:2c:95:af: b9:ab:fe:50:b8:4c:50:d3:2d:72:c9:08:c4:f3:05: 51:fa:98:f7:d6:e5:7b:66:04:31:40:99:47:fd:97: 1c:23:e3:4a:ac:9c:31:ea:ac:5c:df:50:32:9b:1f: 0c:c1:86:de:70:51:00:1c:c4:78:15:7d:f5:89:04: 9e:87:37:31:5a:2c:f2:99:57:38:9a:34:8d:6c:e1: e0:a1:1e:62:8a:de:43:e7:52:b3:92:19:ec:8c:75: 69:d7:a0:53:5d:29:0c:29:4b:9a:38:ae:aa:48:42: 6e:0a:75:18:51:d1:17:10:53:9e:1a:cd:33:91:d4: ee:5d:41:b2:13:c2:32:88:33:aa:76:5d:5e:c1:f6: ea:b0:4b:99:47:4e:59:ad:6e:df:b6:9e:35:84:15: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:15:2D:F8:EF:F3:ED:F8:BD:D6:9E:98:73:81:3E:B7:95:28:7F X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fe:6a:da:ab:0d:53:2a:4d:c7:af:19:de:ab:9f:48:a6:a0: c5:b8:6e:fa:0e:9d:16:a0:07:a4:bf:0d:28:0c:c3:f5:3e:68: 59:e6:ef:b4:b3:08:37:43:43:dd:cf:b2:cc:6d:6d:a1:00:d6: f1:63:0b:2e:51:e5:a5:40:47:ea:62:b9:ff:a6:dd:a8:51:b0: ff:ff:0e:6e:f9:ee:e1:51:f4:7b:61:40:f7:ba:36:ec:94:19: 1e:ad:a2:8b:4c:70:1b:77:81:1d:79:d2:e8:34:16:74:a8:69: 70:69:10:87:e7:ca:61:49:38:7b:0e:de:fe:fc:1c:5d:10:ac: 04:3f:13:a6:58:5a:c6:60:13:d0:3f:95:96:8c:8f:8b:e3:df: 7d:e9:1a:f0:00:f3:0a:02:96:e9:57:5f:0c:c2:8f:b5:05:17: 4e:09:ce:d0:07:1b:72:71:95:a3:a3:2a:2f:3d:5d:05:02:11: 64:7b:d3:39:a6:7c:c3:40:ae:34:1d:4d:60:a5:bd:9b:92:43: a3:fc:37:80:06:68:4a:86:3e:df:c8:b3:c7:7b:e7:63:9e:f1: 29:9d:a9:69:a9:ab:25:5b:bb:33:e6:5d:66:47:32:fe:da:e1: 93:b8:ae:c1:39:c2:01:6a:75:2f:a3:59:cf:57:17:36:31:77: 6c:59:5d:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjYwNDE3MDI0MjUzWhcNMjYwNDI0MDI0MjUzWjAYMRYwFAYD VQQDEw02OWUxOWUyZC05M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpZ/tkRNJRJgNOCPQedIDfd/XmbIuy0EaY0GHCCL5COwcv31kkjTYxGF55iC ccQ5ElQmHWLXMpLQHnmIn6mKwMRshR2N/FrNQfyovb7GXa07qsQ35VvWQUG/D4zQ 9tjkNcAz97wsla+5q/5QuExQ0y1yyQjE8wVR+pj31uV7ZgQxQJlH/ZccI+NKrJwx 6qxc31Aymx8MwYbecFEAHMR4FX31iQSehzcxWizymVc4mjSNbOHgoR5iit5D51Kz khnsjHVp16BTXSkMKUuaOK6qSEJuCnUYUdEXEFOeGs0zkdTuXUGyE8IyiDOqdl1e wfbqsEuZR05ZrW7ftp41hBWRnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmaFS34 7/Pt+L3WnphzgT63lSh/MB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhf5q2qsNUypNx68Z3qufSKagxbhu+g6dFqAHpL8NKAzD9T5oWebvtLMIN0ND 3c+yzG1toQDW8WMLLlHlpUBH6mK5/6bdqFGw//8Obvnu4VH0e2FA97o27JQZHq2i i0xwG3eBHXnS6DQWdKhpcGkQh+fKYUk4ew7e/vwcXRCsBD8TplhaxmAT0D+VloyP i+Pffeka8ADzCgKW6VdfDMKPtQUXTgnO0AcbcnGVo6MqLz1dBQIRZHvTOaZ8w0Cu NB1NYKW9m5JDo/w3gAZoSoY+38izx3vnY57xKZ2paamrJVu7M+ZdZkcy/trhk7iu wTnCAWp1L6NZz1cXNjF3bFldJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:54:58 2026 by rpki-client