$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: KgAT1G1RC5JLBjZPyesrAkacDQmlnAIIfVvRX4Cz6dI= Subject key identifier: AD:DA:5F:EB:ED:CB:AA:CC:15:F7:B4:59:AF:C7:34:13:F9:C9:75:15 Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: AE Signing time: Fri 17 Apr 2026 06:52:40 +0000 Manifest this update: Fri 17 Apr 2026 06:52:40 +0000 Manifest next update: Fri 24 Apr 2026 06:52:40 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: aCONsoNmsak7PBdeWpAxjDopHPiiFirv5pkYlPZycps=) 2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xQKQ+0AuXiAWWbs12R2fQm6csAgAyzHZKauTuhqFqCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Apr 17 06:52:40 2026 GMT Not After : Apr 24 06:52:40 2026 GMT Subject: CN=69e1d8b8-80c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:bf:76:da:48:50:01:31:e7:a9:88:5f:58: 43:91:7f:3a:50:6c:dc:1d:67:7f:d7:3e:39:e0:8e: da:a6:46:e8:90:a4:09:28:4b:47:d0:86:73:58:51: 03:0f:89:e6:ce:61:8b:2a:64:d2:02:d5:fd:ef:80: 7c:de:f9:7d:a4:bc:26:28:d3:93:4c:6a:c6:0f:80: cd:9d:95:ce:d6:bb:8b:aa:35:a3:42:ec:17:cf:d6: c2:f8:17:39:b9:9c:50:ac:63:b2:d0:bd:49:6b:96: 16:40:58:1e:df:c2:d3:b7:cc:d9:c9:65:bc:d2:27: d5:fa:00:ed:80:54:39:32:44:ac:f5:a7:b3:51:29: 92:36:93:8c:41:e0:9b:4d:3f:3f:88:09:bb:63:4b: bd:6d:58:c0:de:bd:dc:e6:57:46:10:60:76:56:3b: a6:0c:24:e4:80:c9:f9:44:69:68:e7:fc:b3:19:da: c0:0a:fa:5a:d0:e2:cb:9f:6d:11:c2:fb:b5:f0:d2: 77:95:46:18:aa:6c:12:d9:2c:15:b1:e5:6e:43:b0: cf:b2:e3:aa:d5:ee:64:4e:0b:7c:3d:94:ca:cb:a8: 91:8c:5a:1f:5c:45:7f:e4:91:74:27:78:53:7f:fc: d5:d0:ff:90:00:1b:1d:a8:7e:23:64:b3:95:5c:4b: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:5F:EB:ED:CB:AA:CC:15:F7:B4:59:AF:C7:34:13:F9:C9:75:15 X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:86:e1:61:11:63:c2:08:b3:b1:1e:2a:af:25:b9:ba:96:aa: de:04:2a:5f:4b:2e:a7:7f:00:77:8d:9f:a4:d2:41:53:6d:bc: 31:bf:82:e4:c9:80:dd:63:c4:47:fe:1e:b3:5a:26:33:5b:92: 88:00:d2:f3:38:a7:05:c1:fc:00:77:35:a1:d5:89:c8:63:9c: b0:b5:18:b6:ab:26:de:10:4f:dd:d9:73:22:35:22:de:52:ea: 72:fb:c3:a7:21:1d:6b:19:70:ea:d2:a1:93:cb:48:70:3f:5c: 30:0f:ef:c6:8d:87:52:00:54:3d:0c:35:44:2a:8a:9a:23:9d: 7d:04:dc:98:22:89:0a:74:10:0f:48:8d:da:86:59:8b:93:f6: 3f:c9:ad:54:3c:af:85:1b:cb:a7:86:69:3a:93:d8:df:e3:96: c7:60:a7:33:db:bc:52:3b:99:ba:28:48:09:dc:f7:0f:82:7d: e3:85:65:75:39:9b:b4:86:47:bc:46:88:89:b2:a2:a6:e8:51: 5d:73:87:43:b2:06:60:82:26:fd:cb:12:52:de:50:c8:7b:4b: ca:b0:f2:40:09:b2:88:6f:1e:41:cd:fb:50:c4:4f:67:fa:83: e2:4b:93:48:2a:bf:51:31:56:55:dd:01:39:b4:96:5e:b5:15: 8b:c7:a2:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ1OUYxMTAvBgNVBAUTKDJGNzJEQzExMzkyREFBNTA1QTg1NjJFMjc2Mzg4NjA2 MDNDREJFQkYwHhcNMjYwNDE3MDY1MjQwWhcNMjYwNDI0MDY1MjQwWjAYMRYwFAYD VQQDEw02OWUxZDhiOC04MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvci/dtpIUAEx56mIX1hDkX86UGzcHWd/1z454I7apkbokKQJKEtH0IZzWFED D4nmzmGLKmTSAtX974B83vl9pLwmKNOTTGrGD4DNnZXO1ruLqjWjQuwXz9bC+Bc5 uZxQrGOy0L1Ja5YWQFge38LTt8zZyWW80ifV+gDtgFQ5MkSs9aezUSmSNpOMQeCb TT8/iAm7Y0u9bVjA3r3c5ldGEGB2VjumDCTkgMn5RGlo5/yzGdrACvpa0OLLn20R wvu18NJ3lUYYqmwS2SwVseVuQ7DPsuOq1e5kTgt8PZTKy6iRjFofXEV/5JF0J3hT f/zV0P+QABsdqH4jZLOVXEuEkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3aX+vt y6rMFfe0Wa/HNBP5yXUVMB8GA1UdIwQYMBaAFC9y3BE5LapQWoVi4nY4hgYDzb6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDU5Ri8wMTkwNDNGMDMz RjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFsQmFoV0xpZGppR0JnUE52 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDU5Ri8wMTkwNDNGMDMzRjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFs QmFoV0xpZGppR0JnUE52cjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdYbhYRFjwgizsR4qryW5upaq3gQqX0sup38Ad42fpNJBU228Mb+C5MmA3WPE R/4es1omM1uSiADS8zinBcH8AHc1odWJyGOcsLUYtqsm3hBP3dlzIjUi3lLqcvvD pyEdaxlw6tKhk8tIcD9cMA/vxo2HUgBUPQw1RCqKmiOdfQTcmCKJCnQQD0iN2oZZ i5P2P8mtVDyvhRvLp4ZpOpPY3+OWx2CnM9u8UjuZuihICdz3D4J944VldTmbtIZH vEaIibKipuhRXXOHQ7IGYIIm/csSUt5QyHtLyrDyQAmyiG8eQc37UMRPZ/qD4kuT SCq/UTFWVd0BObSWXrUVi8einQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:18 2026 by rpki-client