$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: 32Amzcd4VmS9sz3WwA8PdPnsViAEo4p8YaE4JH+ePvQ= Subject key identifier: A5:8A:5A:47:07:1F:EF:C1:F3:26:4F:A3:32:85:12:55:AE:CC:58:45 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 089E Signing time: Mon 02 Mar 2026 02:56:52 +0000 Manifest this update: Mon 02 Mar 2026 02:56:51 +0000 Manifest next update: Mon 09 Mar 2026 02:56:51 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: JYdcZR1DumCUrFvV7B0TeHULQUzSNifjX8+I27Qz01A=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: dby0+4Qsp5/x8ZaPPfeNBBuHCuW1xM9rOg7ow1mi7Ss=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: a8A+sLpfbwO2ibV68drjvFW0LBjdEV4/UHX7R/nBWwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Mar 2 02:56:51 2026 GMT Not After : Mar 9 02:56:51 2026 GMT Subject: CN=69a4fc74-e23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:b1:ef:76:3f:d6:d0:42:77:c2:53:46:5e: 51:47:a2:95:a0:7f:67:ec:c7:df:03:bb:c9:cb:f7: 64:de:eb:86:cd:d5:8a:35:3e:40:b9:72:b4:bb:5d: 53:77:9b:02:79:c9:f2:a6:03:d9:fa:cc:cf:6e:8d: b5:6d:5d:af:82:08:2a:76:1e:71:f1:eb:f6:a8:ca: 23:86:35:40:2f:f7:74:e2:ea:43:3a:3f:a4:0d:b6: 28:c2:e7:6e:cd:0c:84:b7:56:45:8e:26:85:1a:b7: c1:ae:09:74:a1:7b:ee:5c:01:bf:3f:88:6a:92:c8: 99:73:d3:83:e6:43:09:cd:60:5b:09:b9:34:88:35: d4:89:df:01:de:aa:d4:40:1d:32:08:e9:b8:55:84: 3f:f4:64:d7:3c:8a:25:95:e1:be:90:f7:c5:c7:ad: 99:dd:52:11:ff:0d:bf:dd:ed:4e:39:f7:86:f3:b6: ec:61:3d:2c:58:11:a4:a3:ea:bd:25:b6:21:1c:fd: d3:4c:8b:90:dd:7d:a1:23:ce:1c:56:c3:e4:d0:cb: 5d:8c:14:d9:d3:ed:02:55:f2:96:46:66:09:08:4e: 53:b9:3d:22:10:06:63:2e:18:e6:41:49:97:47:94: e1:26:5b:92:58:1b:b3:31:23:24:e8:e4:fb:cc:27: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:5A:47:07:1F:EF:C1:F3:26:4F:A3:32:85:12:55:AE:CC:58:45 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:9f:e4:d4:9c:c9:cf:f6:1b:05:31:f3:68:ad:cb:09:14:b7: c1:4e:1f:95:76:aa:32:e8:f8:2e:50:33:e4:28:57:c8:09:34: aa:3a:35:34:e2:53:75:80:49:bb:65:03:5d:66:62:96:d8:57: c0:db:b3:04:a5:eb:9a:79:69:44:da:e0:36:a9:fd:14:4f:b0: 67:b5:79:d8:1f:03:ca:2f:65:f1:e3:9a:2d:4b:67:cf:b3:c5: ea:97:3d:f2:5f:5e:dc:cf:68:f0:b9:a4:47:91:5b:ab:30:fe: a1:07:4e:c9:93:fd:d6:80:6d:0f:2e:41:99:12:60:b1:b8:6c: 52:9d:c5:81:0a:55:99:80:1b:e8:27:4a:88:9f:44:b0:2f:d0: f1:cb:7b:18:85:cc:6a:fb:06:ac:e6:43:9e:c8:ea:b7:82:76: 91:e8:ec:14:e9:31:9c:64:fc:94:2d:af:53:1b:3b:73:22:1d: 79:1d:5b:0b:a4:f2:c9:ee:6b:72:53:a4:9f:0a:49:55:aa:84: 18:41:1b:31:56:00:f5:9f:41:fe:15:74:48:82:fc:ee:5c:f0: 0a:1d:7b:94:28:47:d8:0d:c7:22:19:c8:a0:17:75:b7:57:de: ff:f0:3d:32:1b:7f:b1:dc:12:98:a4:25:06:81:a7:47:7f:aa: 5c:49:6e:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjYwMzAyMDI1NjUxWhcNMjYwMzA5MDI1NjUxWjAYMRYwFAYD VQQDEw02OWE0ZmM3NC1lMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u6x73Y/1tBCd8JTRl5RR6KVoH9n7MffA7vJy/dk3uuGzdWKNT5AuXK0u11T d5sCecnypgPZ+szPbo21bV2vgggqdh5x8ev2qMojhjVAL/d04upDOj+kDbYowudu zQyEt1ZFjiaFGrfBrgl0oXvuXAG/P4hqksiZc9OD5kMJzWBbCbk0iDXUid8B3qrU QB0yCOm4VYQ/9GTXPIolleG+kPfFx62Z3VIR/w2/3e1OOfeG87bsYT0sWBGko+q9 JbYhHP3TTIuQ3X2hI84cVsPk0MtdjBTZ0+0CVfKWRmYJCE5TuT0iEAZjLhjmQUmX R5ThJluSWBuzMSMk6OT7zCcutQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWKWkcH H+/B8yZPozKFElWuzFhFMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk5/k1JzJz/YbBTHzaK3LCRS3wU4flXaqMuj4LlAz5ChXyAk0qjo1NOJTdYBJ u2UDXWZilthXwNuzBKXrmnlpRNrgNqn9FE+wZ7V52B8Dyi9l8eOaLUtnz7PF6pc9 8l9e3M9o8LmkR5FbqzD+oQdOyZP91oBtDy5BmRJgsbhsUp3FgQpVmYAb6CdKiJ9E sC/Q8ct7GIXMavsGrOZDnsjqt4J2kejsFOkxnGT8lC2vUxs7cyIdeR1bC6Tyye5r clOknwpJVaqEGEEbMVYA9Z9B/hV0SIL87lzwCh17lChH2A3HIhnIoBd1t1fe//A9 Mht/sdwSmKQlBoGnR3+qXElu4A== -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:46 2026 by rpki-client