$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: CQczwtSA5uif1XuTYqlFyX+4eQBgUIusqjV2tK2caXI= Subject key identifier: 0D:B8:D9:13:17:B4:EF:D9:07:58:09:60:D0:E7:D9:17:7A:1A:D6:1F Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 02C2 Signing time: Mon 02 Mar 2026 02:31:23 +0000 Manifest this update: Mon 02 Mar 2026 02:31:19 +0000 Manifest next update: Mon 09 Mar 2026 02:31:19 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: C4UYsfOzhdaVUCtaSNAGpWCRBaVxt9st8ksatLeKg2c=) 2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=) 3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Mar 2 02:31:19 2026 GMT Not After : Mar 9 02:31:19 2026 GMT Subject: CN=69a4f67a-313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:6e:cd:22:eb:d8:f2:f4:97:7d:e3:7a:2a: c3:d5:09:a9:07:8b:2c:4b:0b:72:84:6a:f8:b8:1f: 71:78:8c:49:bb:c4:c3:8b:9d:04:cf:5c:1e:af:10: 11:87:72:a4:19:23:0e:88:e5:0a:70:0c:d4:6c:dc: f0:cc:29:f4:7d:af:fe:fb:ab:7c:06:69:dc:0e:6a: 73:67:10:c9:65:f7:51:2f:23:2d:77:e9:f1:52:88: a9:57:81:b9:80:f2:06:23:f2:bc:21:6d:85:f2:ce: 40:d8:56:ef:2c:c0:d9:a7:ed:e0:13:0e:ad:41:9b: 04:bb:10:2a:64:b2:23:83:51:d9:92:d5:f4:64:b6: ba:d2:7f:35:0c:b8:48:02:c0:68:20:b5:8e:83:76: 40:9a:8f:d2:30:8f:77:83:6c:c7:d6:80:0d:70:53: 7e:45:ac:ea:16:55:48:8c:29:58:78:73:10:af:ec: 3f:8f:7a:e1:1f:f3:22:46:9c:47:5e:96:70:5a:db: 89:34:93:e4:47:13:d0:26:7d:dc:ee:b8:e6:09:2b: 9a:a4:c1:6d:0e:c1:6f:b3:eb:20:91:7c:96:24:31: a3:1d:de:9a:fc:9b:b3:dc:84:42:92:13:c4:b7:37: 04:88:d9:df:62:17:23:d0:88:89:03:7b:07:4d:83: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:D9:13:17:B4:EF:D9:07:58:09:60:D0:E7:D9:17:7A:1A:D6:1F X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a9:e9:70:40:32:54:25:07:2b:11:f7:26:a7:7f:90:e7:70: f6:14:33:47:e8:13:47:e1:d9:cf:e6:8c:95:cb:d3:b7:40:27: e1:df:24:74:ea:b4:fe:5e:eb:a5:cd:00:ec:40:69:24:96:87: 34:91:5d:f6:4e:e9:f1:df:4a:7f:e5:f9:c6:d9:a6:cd:74:d5: a1:fa:be:5f:7e:99:4c:67:3c:16:2c:9a:a1:47:82:e0:db:69: 6f:9c:b3:fd:c4:f6:c2:9e:cd:b1:72:b6:93:98:2f:8e:01:68: 9d:76:5f:e9:9e:94:f8:b9:51:88:8a:f9:25:da:c5:0c:01:a7: 95:46:56:24:0f:c0:c8:ab:32:26:00:b1:fe:e8:d7:fb:ce:bd: 33:7e:45:38:14:5d:e8:6b:6e:5f:dd:a6:64:50:44:3b:f1:b5: 36:66:ff:25:80:61:75:ee:cd:cb:12:c4:c9:7b:02:26:34:92: 22:e0:83:33:72:cb:0a:7a:a5:f9:aa:4a:9c:ba:21:27:9d:21: 7d:68:fa:a3:af:2d:2c:9f:46:a6:ab:01:b5:1c:85:80:44:5b: e9:6c:13:9f:a8:13:fe:13:a3:af:1e:3f:49:4c:69:64:93:17: 3c:ac:b6:c4:a0:51:e1:3b:96:54:a8:1e:af:0e:db:3c:b1:56: f1:2a:2e:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjYwMzAyMDIzMTE5WhcNMjYwMzA5MDIzMTE5WjAYMRYwFAYD VQQDEw02OWE0ZjY3YS0zMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IhuzSLr2PL0l33jeirD1QmpB4ssSwtyhGr4uB9xeIxJu8TDi50Ez1werxAR h3KkGSMOiOUKcAzUbNzwzCn0fa/++6t8BmncDmpzZxDJZfdRLyMtd+nxUoipV4G5 gPIGI/K8IW2F8s5A2FbvLMDZp+3gEw6tQZsEuxAqZLIjg1HZktX0ZLa60n81DLhI AsBoILWOg3ZAmo/SMI93g2zH1oANcFN+RazqFlVIjClYeHMQr+w/j3rhH/MiRpxH XpZwWtuJNJPkRxPQJn3c7rjmCSuapMFtDsFvs+sgkXyWJDGjHd6a/Juz3IRCkhPE tzcEiNnfYhcj0IiJA3sHTYMEBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA242RMX tO/ZB1gJYNDn2Rd6GtYfMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASqnpcEAyVCUHKxH3Jqd/kOdw9hQzR+gTR+HZz+aMlcvTt0An4d8kdOq0/l7r pc0A7EBpJJaHNJFd9k7p8d9Kf+X5xtmmzXTVofq+X36ZTGc8FiyaoUeC4Ntpb5yz /cT2wp7NsXK2k5gvjgFonXZf6Z6U+LlRiIr5JdrFDAGnlUZWJA/AyKsyJgCx/ujX +869M35FOBRd6GtuX92mZFBEO/G1Nmb/JYBhde7NyxLEyXsCJjSSIuCDM3LLCnql +apKnLohJ50hfWj6o68tLJ9GpqsBtRyFgERb6WwTn6gT/hOjrx4/SUxpZJMXPKy2 xKBR4TuWVKgerw7bPLFW8Sou5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:02 2026 by rpki-client