$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: rUXblwIGblel/4PhH8jn2y64QRn3pEvRylX701q6yWg= Subject key identifier: B3:EA:14:FC:61:AC:68:B4:01:D8:19:1E:E4:43:A0:92:29:AF:3B:9A Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 359D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 355C Signing time: Mon 02 Mar 2026 01:34:03 +0000 Manifest this update: Mon 02 Mar 2026 01:34:02 +0000 Manifest next update: Mon 09 Mar 2026 01:34:02 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: 0H1gWLtehPWxKBc/wk8lGgJ+xScurMQRcwUsw+l30uA=) 2: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=) 3: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Mar 2 01:34:02 2026 GMT Not After : Mar 9 01:34:02 2026 GMT Subject: CN=69a4e90b-1420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:e9:b4:48:9b:85:30:c6:19:8d:d0:b9:ba: a2:e6:97:1c:c3:e5:0e:31:a0:ff:91:f3:b6:23:b5: 8a:ae:a0:77:88:2b:f9:ae:12:89:66:c3:9b:48:64: fc:cc:b1:bc:83:82:3b:1f:1f:61:f3:41:50:6b:3e: 56:73:dd:29:26:33:8f:62:8a:ce:ed:40:15:de:01: c3:28:ee:ab:de:c9:d7:f8:c3:8c:f2:6e:93:d5:66: f0:44:d3:46:3e:99:3c:29:18:87:ee:5c:4e:85:fb: 3a:eb:ad:93:1a:c3:07:ce:fe:7c:86:55:e6:0f:83: b5:42:50:44:44:7f:bf:5d:0a:cf:40:e6:69:b5:ce: a1:3a:5e:33:20:c9:29:16:36:2b:37:96:76:d8:f6: 9d:84:72:5f:b9:9f:19:e6:b0:9e:d0:f6:09:20:44: 03:36:1f:41:ba:5d:d9:a5:66:9d:06:ba:7c:7e:11: 87:8c:ff:2c:64:88:8b:f0:f7:59:11:67:93:f9:a7: d3:d2:ef:d1:91:d8:b4:3c:42:3d:0a:cb:76:27:36: f5:dd:d9:13:c8:fc:09:f0:dd:af:c2:af:7b:30:f8: b5:c5:0d:9f:9c:42:f5:9f:dc:33:ce:54:a2:cd:75: a3:28:3b:ba:fb:0e:12:ce:e4:ec:d5:7b:bb:71:67: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:14:FC:61:AC:68:B4:01:D8:19:1E:E4:43:A0:92:29:AF:3B:9A X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:00:03:32:b0:f2:ed:ea:62:85:e9:07:2d:da:d0:ec:df:d6: 36:05:89:5d:8b:a4:70:5a:71:6c:37:eb:1f:3d:2c:4a:ab:31: 57:37:28:c1:b1:6b:79:8f:4d:b1:9a:56:e2:95:ed:ac:df:75: af:91:69:dd:bc:d6:00:72:de:aa:a2:c4:13:60:c5:ea:09:b1: 2e:61:80:8f:c3:b4:ef:8b:51:10:a8:fa:f1:2d:98:1d:87:ed: d4:8a:4f:31:a5:09:06:2a:5e:bb:db:03:71:81:e1:b9:3c:74: 19:62:48:6c:db:8b:94:c0:94:f2:5b:e0:a2:3d:cf:4e:2e:3c: b8:e5:6a:7f:22:11:6a:c0:4f:4d:1a:19:b5:99:0e:a5:1b:84: 22:bd:90:50:9e:b2:dd:fa:b4:a1:7f:c8:0d:e1:b0:60:80:d4: 63:ea:53:6a:52:d8:e3:1e:f5:b9:48:6f:66:a9:b5:bd:49:4f: c4:e2:16:ae:96:9c:ec:72:78:b3:c8:8e:69:43:8f:ca:d9:62: 5b:9d:c9:02:5d:39:09:13:82:35:1a:d3:b0:a6:6a:7f:7d:eb: 3f:2f:0b:77:5c:a2:a5:f5:53:74:71:bc:5e:52:20:1c:90:72: a1:f6:d4:50:61:ed:88:72:1b:96:7d:43:85:d7:3a:d0:19:d4: 46:c0:e3:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjYwMzAyMDEzNDAyWhcNMjYwMzA5MDEzNDAyWjAYMRYwFAYD VQQDEw02OWE0ZTkwYi0xNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolbptEibhTDGGY3Qubqi5pccw+UOMaD/kfO2I7WKrqB3iCv5rhKJZsObSGT8 zLG8g4I7Hx9h80FQaz5Wc90pJjOPYorO7UAV3gHDKO6r3snX+MOM8m6T1WbwRNNG Ppk8KRiH7lxOhfs6662TGsMHzv58hlXmD4O1QlBERH+/XQrPQOZptc6hOl4zIMkp FjYrN5Z22PadhHJfuZ8Z5rCe0PYJIEQDNh9Bul3ZpWadBrp8fhGHjP8sZIiL8PdZ EWeT+afT0u/Rkdi0PEI9Cst2Jzb13dkTyPwJ8N2vwq97MPi1xQ2fnEL1n9wzzlSi zXWjKDu6+w4SzuTs1Xu7cWf5gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPqFPxh rGi0AdgZHuRDoJIprzuaMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASgADMrDy7epihekHLdrQ7N/WNgWJXYukcFpxbDfrHz0sSqsxVzcowbFreY9N sZpW4pXtrN91r5Fp3bzWAHLeqqLEE2DF6gmxLmGAj8O074tREKj68S2YHYft1IpP MaUJBipeu9sDcYHhuTx0GWJIbNuLlMCU8lvgoj3PTi48uOVqfyIRasBPTRoZtZkO pRuEIr2QUJ6y3fq0oX/IDeGwYIDUY+pTalLY4x71uUhvZqm1vUlPxOIWrpac7HJ4 s8iOaUOPytliW53JAl05CROCNRrTsKZqf33rPy8Ld1yipfVTdHG8XlIgHJByofbU UGHtiHIbln1Dhdc60BnURsDjlg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:09 2026 by rpki-client