$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: z8gw/j6gJOVQVn/4QFX0rOG9lJcfQO0mAqQc+s7TUWE= Subject key identifier: 87:7C:B4:E4:58:BD:36:B8:B1:92:97:63:9B:D6:DE:3F:7C:39:75:0F Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 0743 Signing time: Mon 02 Mar 2026 01:58:19 +0000 Manifest this update: Mon 02 Mar 2026 01:58:18 +0000 Manifest next update: Mon 09 Mar 2026 01:58:18 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: HzpieThCe1qOUBsrPafH+I4SSbD5XQFxOkctwQ1BCYQ=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Mar 2 01:58:18 2026 GMT Not After : Mar 9 01:58:18 2026 GMT Subject: CN=69a4eebb-d1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:18:52:f5:7d:bb:28:12:3f:31:ad:a5:b0: fc:6c:a2:fe:55:d4:36:b7:55:6a:67:8a:8c:da:ef: 80:44:74:35:7a:59:18:43:95:1a:36:12:32:bc:46: f5:4c:49:70:f9:da:51:92:9f:ac:d3:b9:03:c1:bb: 66:19:ba:cc:49:ca:4d:6f:54:3f:e4:26:13:b9:f5: 0e:b2:37:09:0c:9e:23:2a:26:3b:48:fb:b0:d0:ff: eb:2c:5c:6b:73:58:11:8f:f4:50:c3:16:c1:63:33: 10:9f:6c:60:37:99:8b:6c:59:33:ea:53:5b:ef:31: fd:20:d6:e5:af:35:b5:9c:07:90:57:13:3b:8d:ce: bc:b7:3e:bb:f5:d9:5c:7a:1e:b7:3e:1b:fd:3d:35: 74:03:2b:ab:2d:ed:1c:de:67:71:00:1a:c5:8f:7d: 94:bc:69:86:37:03:ee:77:dc:98:df:f0:a3:16:2e: df:05:86:de:1f:27:86:c0:82:66:6b:42:7a:2f:da: 7e:11:9d:0c:de:ce:00:93:22:44:6f:95:40:1a:5f: aa:b8:c3:87:eb:78:d7:f5:2a:e5:1c:e9:f9:53:64: 8c:21:9a:e3:e1:33:08:98:98:de:2a:2f:b4:c5:70: d2:11:87:70:19:69:cd:1a:1a:49:6a:55:68:82:02: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:B4:E4:58:BD:36:B8:B1:92:97:63:9B:D6:DE:3F:7C:39:75:0F X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a7:67:50:43:4c:45:13:8d:13:be:c6:d9:77:ee:b0:df:18: 73:9e:bc:24:e8:15:a5:19:98:01:f9:8c:14:0e:91:39:95:dd: f0:bf:93:4f:89:7f:f3:4a:59:7b:14:e1:f9:0a:37:91:1a:e6: f0:c8:bc:f9:fa:b3:db:f4:7e:e4:c1:a3:e6:21:aa:99:4f:57: 49:3e:95:1b:8d:63:60:ed:11:32:0c:b3:ad:7f:1b:61:a7:4c: b2:ca:e1:1d:0f:9b:92:83:ff:bd:ad:e9:de:4b:e1:76:21:00: 3f:df:63:87:48:24:30:15:39:6b:79:c2:bb:55:fe:2f:9a:68: c9:60:dd:11:a8:c7:ae:3f:1b:47:d8:b1:88:10:4c:94:97:83: f5:69:c2:d7:8d:72:86:a0:e0:8e:3f:b0:ce:6d:ca:dc:ad:6a: 32:b3:1b:cd:c0:30:6a:b1:ad:e5:6f:6d:30:4d:16:78:69:14: b4:52:65:69:e4:f9:95:9e:8c:47:3b:18:c2:d0:0d:94:28:65: 5b:4b:67:4a:5c:c3:1d:39:e0:7e:bb:25:72:df:ce:46:c9:a1: c4:49:35:9b:da:ea:d2:62:61:20:5a:e1:b0:b4:29:d9:5f:6f: 16:94:e9:94:e2:a8:6c:93:ea:74:fb:15:0e:9a:7b:d7:e8:0a: e7:f2:2f:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjYwMzAyMDE1ODE4WhcNMjYwMzA5MDE1ODE4WjAYMRYwFAYD VQQDEw02OWE0ZWViYi1kMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy4YUvV9uygSPzGtpbD8bKL+VdQ2t1VqZ4qM2u+ARHQ1elkYQ5UaNhIyvEb1 TElw+dpRkp+s07kDwbtmGbrMScpNb1Q/5CYTufUOsjcJDJ4jKiY7SPuw0P/rLFxr c1gRj/RQwxbBYzMQn2xgN5mLbFkz6lNb7zH9INblrzW1nAeQVxM7jc68tz679dlc eh63Phv9PTV0AyurLe0c3mdxABrFj32UvGmGNwPud9yY3/CjFi7fBYbeHyeGwIJm a0J6L9p+EZ0M3s4AkyJEb5VAGl+quMOH63jX9SrlHOn5U2SMIZrj4TMImJjeKi+0 xXDSEYdwGWnNGhpJalVoggK/UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFId8tORY vTa4sZKXY5vW3j98OXUPMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACadnUENMRRONE77G2XfusN8Yc568JOgVpRmYAfmMFA6ROZXd8L+TT4l/80pZ exTh+Qo3kRrm8Mi8+fqz2/R+5MGj5iGqmU9XST6VG41jYO0RMgyzrX8bYadMssrh HQ+bkoP/va3p3kvhdiEAP99jh0gkMBU5a3nCu1X+L5poyWDdEajHrj8bR9ixiBBM lJeD9WnC141yhqDgjj+wzm3K3K1qMrMbzcAwarGt5W9tME0WeGkUtFJlaeT5lZ6M RzsYwtANlChlW0tnSlzDHTngfrslct/ORsmhxEk1m9rq0mJhIFrhsLQp2V9vFpTp lOKobJPqdPsVDpp71+gK5/IvcA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:00 2026 by rpki-client