$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: z1dTM9PWYsA16MBtzVYHQag6DhoizlQOHIls6Sw0Kk4= Subject key identifier: FC:1C:C0:C2:75:E7:84:CF:30:96:DF:AD:24:75:4A:E3:F2:B0:A4:98 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0154 Signing time: Sun 01 Mar 2026 06:05:36 +0000 Manifest this update: Sun 01 Mar 2026 06:05:35 +0000 Manifest next update: Sun 08 Mar 2026 06:05:35 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: xmpFIhIJRptwOdtld16XZuDR0GhdKI8GJT1GFd695MY=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Mar 1 06:05:35 2026 GMT Not After : Mar 8 06:05:35 2026 GMT Subject: CN=69a3d730-c525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:5a:d4:35:81:d5:de:72:60:bf:df:5c:01: c1:91:7e:02:7c:0d:a7:be:c4:9c:b0:7b:66:e7:1b: a6:a6:b2:ec:d8:77:0b:e8:28:68:4a:e8:61:dd:be: d2:b1:57:00:64:a2:a4:4c:0e:e7:c9:b6:2d:9b:6e: 37:70:9f:be:be:52:b0:a9:af:53:73:96:64:9d:16: e2:ad:80:0e:22:c7:2b:80:7c:39:37:33:05:04:fa: 7b:32:43:91:a0:5d:01:ef:ce:7a:9b:91:9b:5c:b9: a5:6d:58:79:83:83:e9:05:0a:54:ab:a8:59:77:27: 7e:3b:08:bf:d2:1e:6e:5f:2a:77:b3:14:38:b5:17: e3:84:6a:21:db:ee:60:0c:17:18:ef:13:0f:15:e1: a9:dc:c8:b8:00:e6:4d:d8:e0:e9:3d:56:1e:af:fd: d7:fa:bf:f6:cd:d8:88:15:d9:f5:a4:ae:b1:27:89: 39:b9:15:38:ac:78:5a:8f:37:6a:38:8e:42:18:ba: 50:e1:7d:9d:dd:48:da:da:da:31:fd:71:0a:70:f3: b3:3b:bd:32:09:23:bc:e6:2e:a7:36:7c:f0:1e:eb: 7a:f7:39:0a:3b:48:00:80:a8:01:94:31:8a:c9:06: c6:cd:ef:f9:d9:14:5c:6d:90:41:5f:2a:00:a9:9a: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1C:C0:C2:75:E7:84:CF:30:96:DF:AD:24:75:4A:E3:F2:B0:A4:98 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0f:37:83:e9:16:82:a5:3b:1b:93:bf:04:69:19:f8:dc:8d: 53:98:80:fb:58:52:0a:b2:ef:e9:68:df:87:80:60:9c:58:12: f7:56:e3:d9:8b:f5:c6:e2:8b:de:73:28:ae:fa:3e:a0:11:5b: f6:8c:cc:62:95:18:ee:a1:d7:22:7b:6d:8e:10:4d:f0:bc:92: c2:fc:78:ae:ac:a7:02:85:a8:65:3a:39:4e:17:8c:b7:ed:87: 55:cf:fb:c5:0f:27:a9:20:fa:a4:73:0c:5c:25:20:91:a7:d7: 29:20:11:31:7f:0f:ec:89:c3:af:98:35:36:d4:c4:64:07:6d: 24:5d:82:e5:32:f3:5d:fa:c3:e0:fe:d9:4c:f5:ec:6c:14:42: 3e:f9:8c:e4:18:0c:66:91:33:75:40:75:50:da:1c:dd:6e:f1: 12:10:dc:27:c9:44:c6:90:66:f4:85:a6:3f:bc:9c:1d:7a:ca: 19:51:6a:03:87:7c:e2:39:f3:ed:7b:1a:ba:04:f4:f3:84:ac: 9a:11:2d:b4:b9:6c:c5:09:e8:48:53:5a:cc:93:e3:77:6d:3a: 2a:90:3f:ba:ec:f8:7b:2a:34:fc:99:00:87:62:5b:33:ad:9a: 3f:58:79:3d:df:43:c7:dd:dc:7a:e0:31:f1:f5:d7:82:f4:89: 00:55:88:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjYwMzAxMDYwNTM1WhcNMjYwMzA4MDYwNTM1WjAYMRYwFAYD VQQDEw02OWEzZDczMC1jNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tVa1DWB1d5yYL/fXAHBkX4CfA2nvsScsHtm5xumprLs2HcL6ChoSuhh3b7S sVcAZKKkTA7nybYtm243cJ++vlKwqa9Tc5ZknRbirYAOIscrgHw5NzMFBPp7MkOR oF0B7856m5GbXLmlbVh5g4PpBQpUq6hZdyd+Owi/0h5uXyp3sxQ4tRfjhGoh2+5g DBcY7xMPFeGp3Mi4AOZN2ODpPVYer/3X+r/2zdiIFdn1pK6xJ4k5uRU4rHhajzdq OI5CGLpQ4X2d3Uja2tox/XEKcPOzO70yCSO85i6nNnzwHut69zkKO0gAgKgBlDGK yQbGze/52RRcbZBBXyoAqZprhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwcwMJ1 54TPMJbfrSR1SuPysKSYMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbw83g+kWgqU7G5O/BGkZ+NyNU5iA+1hSCrLv6Wjfh4BgnFgS91bj2Yv1xuKL 3nMorvo+oBFb9ozMYpUY7qHXInttjhBN8LySwvx4rqynAoWoZTo5TheMt+2HVc/7 xQ8nqSD6pHMMXCUgkafXKSARMX8P7InDr5g1NtTEZAdtJF2C5TLzXfrD4P7ZTPXs bBRCPvmM5BgMZpEzdUB1UNoc3W7xEhDcJ8lExpBm9IWmP7ycHXrKGVFqA4d84jnz 7XsaugT084SsmhEttLlsxQnoSFNazJPjd206KpA/uuz4eyo0/JkAh2JbM62aP1h5 Pd9Dx93ceuAx8fXXgvSJAFWIRA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:31:30 2026 by rpki-client