$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json) Hash identifier: 4fHz2hGO1vb/bveA2PinjYHmOqW+McEjMrxSeCdBWiM= Subject key identifier: 3C:5E:0F:E5:40:1F:EA:EF:A3:E2:C0:A7:48:37:D1:5C:CE:D4:3F:32 Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft Manifest number: 34 Signing time: Sun 01 Mar 2026 10:01:29 +0000 Manifest this update: Sun 01 Mar 2026 10:01:28 +0000 Manifest next update: Sun 08 Mar 2026 10:01:28 +0000 Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: Z3tlzAQD6DhC4oi8pru41MLhk8ch391nI0Wu3AneHZ0=) 2: 1F740B32EEC611F0B6553517716F56BC.roa (hash: GkuChrKCeIjrx/7RKi1sDVvBepAqIC5AXcgUnelT0n4=) 3: 1E74642AEEC611F0B6553517716F56BC.roa (hash: SOSLWLvLrsjjJ6AEtm/F/8vErniCw4XxHqkv+EwD6A4=) 4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: 3GuxeAjrlB+hxfwnx2ev/UrANIlreKIaPOJsJtCLgaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A Validity Not Before: Mar 1 10:01:28 2026 GMT Not After : Mar 8 10:01:28 2026 GMT Subject: CN=69a40e78-0a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:a4:22:88:16:b0:bb:da:1d:fe:98:dc:46: e2:53:6f:52:fb:0a:f7:c9:a9:4a:fb:98:0b:7c:b7: 8f:b9:05:c5:48:d9:1a:c7:7e:bd:37:80:23:c1:8b: 7a:3c:89:23:d6:cc:79:27:cc:1d:04:77:c8:3d:db: 00:be:e0:f6:50:f5:d8:5c:90:68:5f:13:75:bb:cf: 96:4a:07:11:65:7c:82:7a:dc:e3:09:ed:5e:d9:d1: 0c:31:ff:a7:8a:37:c6:77:fc:02:c8:d2:60:11:13: ca:e3:44:c4:a3:23:b6:28:47:0e:c3:fc:7d:c1:61: 4b:60:9d:a5:d3:fd:ee:64:e6:04:48:7c:78:fc:26: 5a:bf:c7:83:dc:81:91:f8:db:8c:17:a0:dc:06:05: 85:77:a3:30:7e:e0:06:0d:45:15:bc:c7:d3:ff:36: 2d:ae:8e:a3:cc:e3:77:ba:e9:0b:7d:f3:4c:4a:93: 76:3d:2d:c2:97:67:01:00:f7:05:8d:31:6f:8c:fc: 83:b1:90:da:83:f5:20:d8:0d:72:d3:08:b3:63:d2: 2f:33:10:25:27:1e:ae:ea:ee:e1:8b:fd:cd:d5:74: ca:7d:bb:65:a4:e9:49:87:60:76:6f:a6:c7:9f:c5: cf:27:66:7b:5c:c3:5d:26:bd:22:91:59:84:04:d6: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:0F:E5:40:1F:EA:EF:A3:E2:C0:A7:48:37:D1:5C:CE:D4:3F:32 X509v3 Authority Key Identifier: keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0e:a3:7e:f8:4e:d6:c6:1e:3b:f3:a3:6e:90:54:eb:01:54: 5b:c9:59:38:61:72:f8:d5:26:3c:11:4a:0c:17:44:6f:66:35: 2a:80:8a:d1:32:0f:e2:a2:49:6e:84:44:53:d4:54:b5:bc:06: 21:1b:c1:bb:de:e1:32:38:11:82:d6:f4:c0:e5:30:13:c1:9c: 42:ba:1d:32:7c:6b:2b:3d:80:88:8c:dd:d6:e4:39:97:ac:96: 32:9c:4d:7c:4e:b8:a3:c7:3b:47:3b:7c:4a:92:d8:7f:9f:d2: 2d:8c:5f:55:16:c3:af:e4:be:29:b1:de:ff:27:c9:37:42:3a: a7:c7:47:a7:34:4c:d8:ca:c8:c1:e3:26:bb:78:a3:55:46:d6: 43:7f:6c:81:8a:3e:09:b0:2c:e1:b9:4d:10:db:c7:07:84:9a: 6e:57:b9:46:ec:7b:ab:7f:06:ea:fc:f0:1f:c5:da:94:6e:c1: 05:de:d6:53:b8:2f:4f:f6:4e:05:33:18:7b:af:b1:a3:22:eb: 4c:b1:53:5d:02:f3:b6:3b:e5:7b:db:58:a1:75:b4:87:4d:fc: c5:b0:8f:9d:fa:27:fb:da:68:fe:f1:d0:0a:e3:c3:22:ff:e9: a4:f3:60:b1:04:40:55:0a:a5:5a:9d:50:3d:bf:7d:d4:5a:10: b7:61:dc:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njk1QTExMC8GA1UEBRMoOTQxMTE2M0E3MzU3RUZEOEExMkQ2OUI2Qzk0NzY1NEY0 NURFNkUyQTAeFw0yNjAzMDExMDAxMjhaFw0yNjAzMDgxMDAxMjhaMBgxFjAUBgNV BAMTDTY5YTQwZTc4LTBhMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7t6QiiBawu9od/pjcRuJTb1L7CvfJqUr7mAt8t4+5BcVI2RrHfr03gCPBi3o8 iSPWzHknzB0Ed8g92wC+4PZQ9dhckGhfE3W7z5ZKBxFlfIJ63OMJ7V7Z0Qwx/6eK N8Z3/ALI0mARE8rjRMSjI7YoRw7D/H3BYUtgnaXT/e5k5gRIfHj8Jlq/x4PcgZH4 24wXoNwGBYV3ozB+4AYNRRW8x9P/Ni2ujqPM43e66Qt980xKk3Y9LcKXZwEA9wWN MW+M/IOxkNqD9SDYDXLTCLNj0i8zECUnHq7q7uGL/c3VdMp9u2Wk6UmHYHZvpsef xc8nZntcw10mvSKRWYQE1nirAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPF4P5UAf 6u+j4sCnSDfRXM7UPzIwHwYDVR0jBBgwFoAUlBEWOnNX79ihLWm2yUdlT0Xebiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzYzNTMwQ0ZFQzhG MTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlpaExXbTJ5VWRsVDBYZWJp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEJFV09uTlg3OWloTFdtMnlVZGxUMFhlYmlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 OTVBLzYzNTMwQ0ZFQzhGMTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlp aExXbTJ5VWRsVDBYZWJpby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALDqN++E7Wxh4786NukFTrAVRbyVk4YXL41SY8EUoMF0RvZjUqgIrRMg/ioklu hERT1FS1vAYhG8G73uEyOBGC1vTA5TATwZxCuh0yfGsrPYCIjN3W5DmXrJYynE18 TrijxztHO3xKkth/n9ItjF9VFsOv5L4psd7/J8k3Qjqnx0enNEzYysjB4ya7eKNV RtZDf2yBij4JsCzhuU0Q28cHhJpuV7lG7Hurfwbq/PAfxdqUbsEF3tZTuC9P9k4F Mxh7r7GjIutMsVNdAvO2O+V721ihdbSHTfzFsI+d+if72mj+8dAK48Mi/+mk82Cx BEBVCqVanVA9v33UWhC3YdxR -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:57 2026 by rpki-client