$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: +oYAj7JNss7BDYFuFh8YKQbyncZGngRJ5yEcHwPSGUM= Subject key identifier: F6:E4:7F:EE:EB:26:71:A6:59:60:1E:BA:E3:11:19:C7:33:EA:6A:C6 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 01A2 Signing time: Sun 01 Mar 2026 04:57:16 +0000 Manifest this update: Sun 01 Mar 2026 04:57:16 +0000 Manifest next update: Sun 08 Mar 2026 04:57:16 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: cRWpHRo5dRqv0yA/NYKlW7746RUlnZruU/4N1zKf694=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 6tIF2i7E6pEkUpHmxtY4OrrXsVv0qE0EUaxM0hPMQog=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: jzviIcT36AX7+vIYnTcKiwwmHcmgLFxJ/UujmC0oCBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Mar 1 04:57:16 2026 GMT Not After : Mar 8 04:57:16 2026 GMT Subject: CN=69a3c72c-5ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:87:fd:26:86:45:59:04:39:cb:df:3b:de: cb:39:8f:7a:e4:33:95:a4:e6:c7:ba:83:86:d1:29: 83:00:68:a7:7d:bd:5d:68:02:1a:63:a0:f0:40:18: 00:97:7d:38:6f:5c:35:ca:05:b1:91:be:62:3b:0f: 8c:dd:02:f4:fa:37:2a:e7:1c:ed:6f:6d:1a:dd:9c: 0c:2f:a5:d7:ae:d8:7b:1d:98:b7:48:0b:3d:b0:7d: 8b:cb:49:39:10:af:c6:3a:78:ea:23:d2:ea:9a:b1: b5:52:8d:4a:b8:d4:40:d6:40:03:fb:a7:61:5d:c7: 77:27:bc:31:52:3b:e8:3f:25:7e:f8:23:47:76:1d: 0b:48:eb:11:85:3c:dd:61:b8:b8:3e:3a:7e:ca:b0: ae:90:d0:99:fc:9e:b4:77:ff:f4:98:7d:99:6c:f8: 15:66:ac:24:35:4c:f4:db:7a:78:1d:d4:9a:e4:e0: b5:ec:2e:99:29:ad:93:c1:f8:19:6d:e7:e9:85:b6: 77:35:20:70:a9:3b:14:18:bb:47:be:0e:eb:9f:83: dc:f1:03:59:a3:a9:4d:63:ad:e7:94:66:cb:73:20: a3:ef:c0:c1:de:31:fb:72:d0:4a:51:2b:57:89:f1: 0f:27:58:03:90:7e:9e:b2:ab:a4:de:37:f7:dc:f3: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E4:7F:EE:EB:26:71:A6:59:60:1E:BA:E3:11:19:C7:33:EA:6A:C6 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c7:56:31:8c:5b:e3:1b:7a:05:fb:a8:a8:d9:20:46:60:b4: e5:a0:25:82:20:68:9f:bb:09:fe:6a:22:47:c9:98:6d:f0:57: 67:f2:a0:40:5d:d4:9a:47:9b:c1:90:f6:27:dc:77:90:a5:78: 7f:35:89:77:df:f1:44:a3:30:fc:bd:f3:f6:e6:18:61:9c:10: ae:c1:43:68:ea:5b:d8:fd:18:e4:2d:d1:e6:7d:22:99:32:3e: f7:a0:70:35:33:db:fe:f5:7a:22:fb:f1:42:f8:18:fb:94:dc: 00:e1:d6:46:19:50:be:d5:17:88:7e:73:33:6b:39:d9:95:81: e1:86:f7:85:15:dc:ed:8c:03:db:88:2b:e5:44:67:49:a0:64: c0:a1:ca:27:a7:55:26:b0:19:d5:39:50:4c:75:7d:f6:35:c0: 9e:e7:59:0e:e1:a5:70:7e:f1:5a:f8:c1:6a:81:63:3f:d4:41: a4:61:99:3c:32:7d:2e:98:9f:d0:80:fe:31:cc:54:be:a7:7a: 04:87:6d:3c:16:5b:31:bd:80:c9:1f:20:84:2d:91:5d:4c:42: bf:7f:cc:9a:e5:8e:1f:e0:4a:5b:b1:a6:7c:60:06:57:82:72: b4:a0:c8:d0:e3:52:14:be:d6:49:ca:53:01:8d:7b:5b:a8:fe: 02:84:aa:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYwMzAxMDQ1NzE2WhcNMjYwMzA4MDQ1NzE2WjAYMRYwFAYD VQQDDA02OWEzYzcyYy01ZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7mH/SaGRVkEOcvfO97LOY965DOVpObHuoOG0SmDAGinfb1daAIaY6DwQBgA l304b1w1ygWxkb5iOw+M3QL0+jcq5xztb20a3ZwML6XXrth7HZi3SAs9sH2Ly0k5 EK/GOnjqI9LqmrG1Uo1KuNRA1kAD+6dhXcd3J7wxUjvoPyV++CNHdh0LSOsRhTzd Ybi4Pjp+yrCukNCZ/J60d//0mH2ZbPgVZqwkNUz023p4HdSa5OC17C6ZKa2TwfgZ befphbZ3NSBwqTsUGLtHvg7rn4Pc8QNZo6lNY63nlGbLcyCj78DB3jH7ctBKUStX ifEPJ1gDkH6esquk3jf33POpWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbkf+7r JnGmWWAeuuMRGccz6mrGMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8dWMYxb4xt6BfuoqNkgRmC05aAlgiBon7sJ/moiR8mYbfBXZ/KgQF3Umkeb wZD2J9x3kKV4fzWJd9/xRKMw/L3z9uYYYZwQrsFDaOpb2P0Y5C3R5n0imTI+96Bw NTPb/vV6IvvxQvgY+5TcAOHWRhlQvtUXiH5zM2s52ZWB4Yb3hRXc7YwD24gr5URn SaBkwKHKJ6dVJrAZ1TlQTHV99jXAnudZDuGlcH7xWvjBaoFjP9RBpGGZPDJ9Lpif 0ID+McxUvqd6BIdtPBZbMb2AyR8ghC2RXUxCv3/MmuWOH+BKW7GmfGAGV4JytKDI 0ONSFL7WScpTAY17W6j+AoSq0Q== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:10 2026 by rpki-client