$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: woQCpFmlaOr8OSv2fjo5Jbl49xvMfqnNLJM+UpXOmc8= Subject key identifier: B6:98:61:BC:2A:3E:53:15:92:8B:31:D7:86:A4:6D:F1:E0:6B:88:5A Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0CC1 Signing time: Mon 02 Mar 2026 03:03:16 +0000 Manifest this update: Mon 02 Mar 2026 03:03:14 +0000 Manifest next update: Mon 09 Mar 2026 03:03:14 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: O/IopH/s1YE+KJA6CPYuW4+6P4YpTuN7+Okdc06uY34=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Mar 2 03:03:14 2026 GMT Not After : Mar 9 03:03:14 2026 GMT Subject: CN=69a4fdf3-a8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:33:c5:81:cb:53:f3:b0:5a:17:3e:4a:ed: f6:e3:7d:15:46:90:f6:f7:26:06:b2:1d:17:25:be: 1f:32:47:3e:a0:cb:15:37:15:70:b3:22:f2:31:c2: 71:ed:ed:34:76:3e:de:1d:3c:a3:53:72:ff:f1:fa: d5:2a:f6:7d:c1:f3:3c:af:79:ac:67:d1:d6:9e:73: 80:4e:f2:61:7f:72:7d:a8:c6:a1:d4:af:c5:83:73: 44:40:96:3a:2b:a8:0a:06:a8:e4:aa:73:0f:d8:2b: 17:d8:9c:8b:03:e0:4b:02:d6:39:30:c6:e2:b4:cb: 7b:81:c9:45:6b:ff:c5:be:dc:1b:81:6a:1e:cf:c0: 06:62:30:7a:86:74:d3:c4:35:a2:a6:37:0f:89:7c: 5d:7e:60:60:5d:6d:8b:67:98:38:4c:48:04:94:e1: 24:4c:0d:14:f9:9e:64:28:8e:b5:c8:ad:2e:c9:2a: 73:55:a8:6e:d6:af:8d:ba:0b:94:23:bd:9c:da:a9: 75:e0:e3:a3:dc:0d:de:a1:2f:1d:04:9f:0a:ab:ac: 6e:da:e9:fe:45:f5:3d:5d:a8:23:1f:8f:62:61:c8: 3d:00:af:e1:c1:f1:71:82:32:12:2b:04:96:20:60: 15:a3:3d:c1:5d:61:33:f6:8d:18:84:8a:93:6b:64: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:98:61:BC:2A:3E:53:15:92:8B:31:D7:86:A4:6D:F1:E0:6B:88:5A X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c5:60:74:a5:db:ff:7c:19:0d:08:fb:2d:68:71:80:4b:1f: f0:11:14:f7:3a:82:03:d5:27:3f:9a:3c:1f:16:52:7e:e7:71: 19:7d:67:b2:6a:33:e1:27:fd:88:c3:e9:32:dd:94:9c:e2:ba: 47:33:ec:11:ba:44:1f:12:aa:49:0b:57:18:c3:65:c0:59:6a: 4a:69:63:fe:ab:66:a0:21:36:e5:d4:e1:6c:79:90:a8:3a:70: 6e:af:25:41:32:dc:40:49:52:d7:0c:75:dc:c5:d6:58:86:a4: 1c:6a:e2:54:4d:5b:42:0f:ea:23:a3:8a:69:e2:43:ba:bb:22: 50:94:f0:52:c2:98:3c:20:65:90:4c:18:dd:b9:35:7f:9a:9d: dd:08:e0:11:6b:a7:56:1b:97:03:83:19:7c:ed:67:4d:11:5e: 4a:48:aa:9f:f5:1e:c5:bf:73:2e:db:f4:21:ea:97:f7:0f:52: 41:e4:65:09:59:a9:ef:42:23:18:e8:da:1a:c9:0c:22:05:0a: 9f:81:33:ef:a5:b9:a9:1e:31:3c:8c:21:de:80:93:19:8d:e1: 85:f6:b4:17:f3:97:3d:67:73:ad:1b:9d:05:c7:d6:18:fa:97: 33:d1:a2:93:cd:ab:8e:b8:21:e9:bd:04:fd:76:d9:22:b2:06: 0b:d0:6b:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjYwMzAyMDMwMzE0WhcNMjYwMzA5MDMwMzE0WjAYMRYwFAYD VQQDEw02OWE0ZmRmMy1hOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpAzxYHLU/OwWhc+Su32430VRpD29yYGsh0XJb4fMkc+oMsVNxVwsyLyMcJx 7e00dj7eHTyjU3L/8frVKvZ9wfM8r3msZ9HWnnOATvJhf3J9qMah1K/Fg3NEQJY6 K6gKBqjkqnMP2CsX2JyLA+BLAtY5MMbitMt7gclFa//FvtwbgWoez8AGYjB6hnTT xDWipjcPiXxdfmBgXW2LZ5g4TEgElOEkTA0U+Z5kKI61yK0uySpzVahu1q+NuguU I72c2ql14OOj3A3eoS8dBJ8Kq6xu2un+RfU9XagjH49iYcg9AK/hwfFxgjISKwSW IGAVoz3BXWEz9o0YhIqTa2R9OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaYYbwq PlMVkosx14akbfHga4haMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALsVgdKXb/3wZDQj7LWhxgEsf8BEU9zqCA9UnP5o8HxZSfudxGX1nsmoz4Sf9 iMPpMt2UnOK6RzPsEbpEHxKqSQtXGMNlwFlqSmlj/qtmoCE25dThbHmQqDpwbq8l QTLcQElS1wx13MXWWIakHGriVE1bQg/qI6OKaeJDursiUJTwUsKYPCBlkEwY3bk1 f5qd3QjgEWunVhuXA4MZfO1nTRFeSkiqn/Uexb9zLtv0IeqX9w9SQeRlCVmp70Ij GOjaGskMIgUKn4Ez76W5qR4xPIwh3oCTGY3hhfa0F/OXPWdzrRudBcfWGPqXM9Gi k82rjrgh6b0E/XbZIrIGC9BrlA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:13 2026 by rpki-client