$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: AIurjCBao7AJoTzYvgXs5mOwLPWSYUHg8DCDAaP7z8w= Subject key identifier: 3E:F3:45:54:36:8D:99:95:0C:BB:16:B8:5E:D6:53:03:77:28:D8:6F Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 05D1 Signing time: Sun 01 Mar 2026 23:04:34 +0000 Manifest this update: Sun 01 Mar 2026 23:04:33 +0000 Manifest next update: Sun 08 Mar 2026 23:04:33 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: WAgr1c/7ktKmKrvik4uH7HT2teI4cZM3s8QhABsZPLY=) 2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: Ae3vnYMRPKUdXa+CO5NCrtQU86FdJMZKr59EI0hk4E8=) 3: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ=) 4: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: X85hHwwMk7D4YA68Yefpn/DdDekokXijChU0NLic1JM=) 5: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Mar 1 23:04:33 2026 GMT Not After : Mar 8 23:04:33 2026 GMT Subject: CN=69a4c602-c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:c3:e8:90:d5:17:5d:51:11:d3:a1:5a:49: d2:dc:b4:d2:e3:95:62:57:54:10:6b:82:b8:1b:3a: 06:aa:2c:cf:d7:2f:61:e8:07:d7:80:cb:e2:bb:91: 8b:f0:bd:52:a8:af:f4:43:b5:f7:06:88:85:e0:f5: 72:8f:d0:11:89:02:e3:0c:75:d9:ae:1c:a7:0b:c9: ac:c5:41:1b:19:ca:d7:d6:dc:77:51:aa:08:f9:a1: a4:4d:e8:33:89:90:30:30:a1:40:c1:67:7f:f5:34: e5:6b:2d:b6:0a:4a:12:0d:9b:1b:d2:85:f8:57:43: 0c:d6:d0:16:1b:c3:e9:3e:e2:b2:ea:82:2d:39:8f: bb:b7:46:bd:cd:57:1e:0d:ec:10:90:55:7b:91:59: cf:be:4f:72:a8:8d:2a:4b:89:4a:cd:a5:aa:71:83: db:c9:9d:4c:11:e7:1e:fc:e3:c6:fa:05:05:56:14: 71:0d:39:03:69:40:64:46:74:7a:a8:48:82:3c:45: 71:9d:b5:8c:7f:d3:db:31:d9:84:a9:93:13:42:2f: 43:39:9d:07:02:dc:ec:7d:43:a0:db:79:86:c2:e4: a3:d8:ba:a1:7f:06:16:dc:f6:b3:42:ba:52:1f:02: fd:4d:3a:cb:6b:f0:87:31:43:c2:31:c6:e4:27:50: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:45:54:36:8D:99:95:0C:BB:16:B8:5E:D6:53:03:77:28:D8:6F X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:4c:d8:67:e7:95:2e:6b:af:fb:b1:2d:fb:2b:f4:b4:5e:d7: 38:79:eb:7f:9f:22:e9:e6:dd:e2:f2:dd:67:5a:28:2f:18:dc: ad:81:21:ad:0e:5b:42:8e:21:b9:0d:26:82:d6:d3:dc:16:75: 3b:a8:78:e9:cf:3e:60:7e:66:06:02:66:8a:7d:c4:2e:cb:fe: e5:f0:e2:02:9a:0c:af:5d:c2:e7:30:a5:40:c5:db:22:09:80: 32:2e:ce:3d:be:86:38:4a:ed:03:2d:8f:ab:a6:8a:21:de:26: 54:d2:49:94:20:57:1d:5b:d6:40:c0:d0:6a:41:c3:e2:1e:19: a3:a8:59:e3:bf:36:4f:eb:9a:8a:e0:09:e4:e4:3f:6a:63:97: b0:4e:92:09:c6:b6:82:f6:3e:34:0c:e3:f1:91:70:98:b8:0a: d5:16:5b:8c:eb:a1:af:01:e5:a9:0c:1c:3e:17:00:ba:5a:9d: eb:76:99:ea:94:71:ca:2c:6d:e9:22:fc:9c:22:4f:ed:4d:98: c0:ee:f0:8b:75:51:5c:a5:92:a3:ee:2c:48:40:d7:79:aa:8d: dc:29:30:93:a8:25:0f:f2:97:96:c1:af:7a:d8:f0:0c:d4:8b: 00:d5:8c:9c:7b:6c:4b:54:64:b6:f5:c4:cb:45:dc:1e:0c:d7: 34:a5:58:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjYwMzAxMjMwNDMzWhcNMjYwMzA4MjMwNDMzWjAYMRYwFAYD VQQDEw02OWE0YzYwMi1jODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PvD6JDVF11REdOhWknS3LTS45ViV1QQa4K4GzoGqizP1y9h6AfXgMviu5GL 8L1SqK/0Q7X3BoiF4PVyj9ARiQLjDHXZrhynC8msxUEbGcrX1tx3UaoI+aGkTegz iZAwMKFAwWd/9TTlay22CkoSDZsb0oX4V0MM1tAWG8PpPuKy6oItOY+7t0a9zVce DewQkFV7kVnPvk9yqI0qS4lKzaWqcYPbyZ1MEece/OPG+gUFVhRxDTkDaUBkRnR6 qEiCPEVxnbWMf9PbMdmEqZMTQi9DOZ0HAtzsfUOg23mGwuSj2LqhfwYW3PazQrpS HwL9TTrLa/CHMUPCMcbkJ1CwxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7zRVQ2 jZmVDLsWuF7WUwN3KNhvMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ0zYZ+eVLmuv+7Et+yv0tF7XOHnrf58i6ebd4vLdZ1ooLxjcrYEhrQ5bQo4h uQ0mgtbT3BZ1O6h46c8+YH5mBgJmin3ELsv+5fDiApoMr13C5zClQMXbIgmAMi7O Pb6GOErtAy2Pq6aKId4mVNJJlCBXHVvWQMDQakHD4h4Zo6hZ4782T+uaiuAJ5OQ/ amOXsE6SCca2gvY+NAzj8ZFwmLgK1RZbjOuhrwHlqQwcPhcAulqd63aZ6pRxyixt 6SL8nCJP7U2YwO7wi3VRXKWSo+4sSEDXeaqN3Ckwk6glD/KXlsGvetjwDNSLANWM nHtsS1RktvXEy0XcHgzXNKVYfQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:09 2026 by rpki-client