$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: cg3Bap0xfW3cvCypbFPFCelWGA6ihFRydENdFk7P0is= Subject key identifier: 8C:F3:B9:A8:62:A6:DC:E0:2D:AF:77:A9:1C:67:76:F3:99:14:C6:6E Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0206 Signing time: Fri 17 Apr 2026 02:49:40 +0000 Manifest this update: Fri 17 Apr 2026 02:49:39 +0000 Manifest next update: Fri 24 Apr 2026 02:49:39 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: aHfFuMg6Ssf3ZvHvt8tFljyjXQJF7gEvblLY04tHj8g=) 2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=) 3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Apr 17 02:49:39 2026 GMT Not After : Apr 24 02:49:39 2026 GMT Subject: CN=69e19fc4-0b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:f8:c0:e7:8e:2a:ca:46:2b:89:70:b6:e8: 46:a9:e5:df:21:97:2b:a6:44:92:44:63:2c:e5:51: a5:d7:98:71:3b:3f:4c:c5:62:bb:09:8f:53:57:96: c1:e9:f0:2f:36:58:df:91:22:d6:79:40:d3:27:8a: 6f:dc:48:9d:7d:e5:b9:1a:94:90:af:9e:22:27:1b: a9:45:5d:9a:27:76:97:eb:01:c5:a8:b3:98:e4:89: 49:94:52:b4:3a:14:69:0a:74:33:31:c4:e2:8b:85: e7:80:17:98:55:aa:64:f9:a2:7e:3a:16:69:fa:6e: 83:fc:70:e9:9b:ee:8c:33:16:89:e1:19:80:7d:bc: 84:33:d6:bf:2c:90:95:76:15:6c:91:58:55:92:5c: b1:f1:e4:48:ed:ab:fb:94:ca:4d:12:3c:3e:55:a4: eb:c2:d7:db:0e:aa:c1:d7:bf:83:f9:fe:f3:ac:04: e8:0d:c1:95:cd:6a:1d:c8:be:82:e6:c5:e2:4b:d0: f1:dc:38:a2:98:05:b5:7a:43:1c:e0:8a:0a:2f:a5: 4e:a9:32:88:25:f3:30:bd:68:e3:d9:d0:6f:8d:46: e4:3a:3c:dc:d2:eb:cc:32:2e:f8:17:d1:2a:31:06: 24:ae:62:9e:2a:09:bf:47:f7:06:8a:75:cd:cb:ab: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:B9:A8:62:A6:DC:E0:2D:AF:77:A9:1C:67:76:F3:99:14:C6:6E X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6b:44:0f:4a:8f:61:3a:e1:c9:7d:ae:07:e7:9a:d1:09:7a: d8:02:c6:a3:5c:00:68:a6:15:ec:89:02:2c:1d:d1:84:f7:66: 25:86:21:e2:b4:79:3d:42:20:02:f7:ae:70:4d:5d:c8:32:50: c9:00:63:df:72:c5:d9:81:a1:50:d3:1e:a9:18:bd:e7:9a:f9: 1f:93:40:d9:d5:3f:88:98:e5:4c:94:50:49:e8:f2:41:f4:02: bd:87:83:ac:b6:d5:99:19:09:ea:59:9a:55:d9:cd:e4:ae:19: 9a:96:24:22:26:e2:4e:0c:be:a0:5f:a3:e6:09:58:40:3d:33: 07:0c:70:f5:a1:de:3c:91:2a:d6:45:3d:78:31:fd:6f:e6:68: 24:d4:bf:d1:d6:6a:71:39:fa:c8:95:82:2a:fd:2c:77:5f:69: 47:98:08:b4:49:01:da:a8:5e:63:6f:49:00:8a:e4:f3:70:84: 1a:98:08:6f:46:89:06:8c:2a:7c:c9:ca:2e:46:87:a6:9e:d8: b4:67:f0:e4:8e:34:14:cc:62:e8:3a:3d:29:00:01:60:a1:d4: d6:cd:3b:e7:38:20:78:e0:d6:45:35:bd:31:08:e4:9e:b9:1e: 68:1e:a3:c6:5b:3d:31:40:f0:f8:d7:8a:24:78:ca:a1:ce:a1: 2d:90:60:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjYwNDE3MDI0OTM5WhcNMjYwNDI0MDI0OTM5WjAYMRYwFAYD VQQDEw02OWUxOWZjNC0wYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCL4wOeOKspGK4lwtuhGqeXfIZcrpkSSRGMs5VGl15hxOz9MxWK7CY9TV5bB 6fAvNljfkSLWeUDTJ4pv3EidfeW5GpSQr54iJxupRV2aJ3aX6wHFqLOY5IlJlFK0 OhRpCnQzMcTii4XngBeYVapk+aJ+OhZp+m6D/HDpm+6MMxaJ4RmAfbyEM9a/LJCV dhVskVhVklyx8eRI7av7lMpNEjw+VaTrwtfbDqrB17+D+f7zrAToDcGVzWodyL6C 5sXiS9Dx3DiimAW1ekMc4IoKL6VOqTKIJfMwvWjj2dBvjUbkOjzc0uvMMi74F9Eq MQYkrmKeKgm/R/cGinXNy6tW0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzzuahi ptzgLa93qRxndvOZFMZuMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWmtED0qPYTrhyX2uB+ea0Ql62ALGo1wAaKYV7IkCLB3RhPdmJYYh4rR5PUIg AveucE1dyDJQyQBj33LF2YGhUNMeqRi955r5H5NA2dU/iJjlTJRQSejyQfQCvYeD rLbVmRkJ6lmaVdnN5K4ZmpYkIibiTgy+oF+j5glYQD0zBwxw9aHePJEq1kU9eDH9 b+ZoJNS/0dZqcTn6yJWCKv0sd19pR5gItEkB2qheY29JAIrk83CEGpgIb0aJBowq fMnKLkaHpp7YtGfw5I40FMxi6Do9KQABYKHU1s075zggeODWRTW9MQjknrkeaB6j xls9MUDw+NeKJHjKoc6hLZBgLg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:46:50 2026 by rpki-client