$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: YyOARqvnmBBdW/2AreX1FtJcv3xednMBFns5nfS42qA= Subject key identifier: 99:0C:B6:66:64:C3:29:90:85:BC:87:34:6F:6D:92:8A:79:2F:27:E5 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 033C Signing time: Sun 01 Mar 2026 01:56:50 +0000 Manifest this update: Sun 01 Mar 2026 01:56:50 +0000 Manifest next update: Sun 08 Mar 2026 01:56:50 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: EOapsB/mtVHOTxWUnxbqzVI43QtLK8jABoYRjV/7xT0=) 2: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=) 3: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) 4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=) 5: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 6: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 7: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Mar 1 01:56:50 2026 GMT Not After : Mar 8 01:56:50 2026 GMT Subject: CN=69a39ce2-0425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:e6:0b:78:01:f2:29:c0:74:b3:56:01:4f: 4e:c7:00:5f:86:38:3a:03:a7:2e:51:7a:da:c4:df: b7:b7:16:1d:57:12:38:5e:d5:31:31:4e:63:92:5c: 87:25:85:a7:98:b8:23:0d:0c:8b:94:ee:07:d2:b4: 01:52:5e:7e:d5:ed:23:de:bd:76:f7:41:e7:0e:74: 18:dd:5c:8c:c5:ab:85:4a:3d:bd:11:1d:71:57:fb: 3a:d6:84:79:8f:a2:4a:3f:d1:1b:00:84:08:d1:8d: 93:dc:12:89:c6:f4:83:07:20:ba:96:fa:2a:bd:83: 90:12:3d:9e:d4:fb:e6:7d:15:f4:a2:e9:90:0b:3d: 91:cf:82:0f:7b:58:8a:dd:93:bf:2d:25:6e:8e:26: 7e:e0:51:58:dd:d2:b3:aa:5a:66:de:98:65:93:30: fa:80:4d:18:15:48:22:0f:57:17:5c:0a:f4:76:12: 87:a0:08:21:e4:06:6d:51:9f:34:35:5e:65:8b:43: 6f:dd:28:e1:58:0e:1b:9a:72:70:9f:a3:f1:09:9b: 75:ba:ce:ec:ae:8c:a9:ce:39:d9:8d:bc:fc:da:7b: f3:64:d6:59:b0:7e:38:f1:21:35:46:b3:d9:3a:ba: 4e:20:f2:15:fc:19:6d:07:b3:6a:5a:77:c8:fe:f8: 3e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0C:B6:66:64:C3:29:90:85:BC:87:34:6F:6D:92:8A:79:2F:27:E5 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:eb:74:fb:34:d4:13:c3:25:3c:49:d9:64:f2:32:76:89:0a: 46:f2:dc:54:30:a3:f3:08:ec:c8:81:50:a1:39:70:d5:47:86: 1c:00:a1:e4:76:d9:2e:f9:3e:64:35:8b:a0:a8:2d:55:c8:92: 4b:b4:13:88:34:32:0c:de:09:05:7b:66:ab:ce:ef:cc:33:03: 9b:b4:0c:7e:eb:a5:32:17:73:b9:8d:49:80:b6:0a:96:cb:81: 39:b8:65:7f:e7:ca:88:74:49:9c:41:84:25:10:c3:e1:28:75: 09:21:9a:d5:82:89:6f:62:f8:9a:56:c2:e0:36:97:b6:40:9b: b5:7b:62:c8:15:48:8b:a5:24:03:4f:ad:7a:28:69:13:f1:85: 79:3c:bb:b5:35:c2:19:03:1f:56:59:98:e4:44:e6:ff:95:d5: 97:e1:c8:9c:1c:55:f8:b8:90:dc:15:0a:11:8c:ba:7f:cf:61: 50:fc:77:b6:35:15:82:11:fe:e9:15:1f:2e:7e:ad:d7:92:ad: a3:0a:f1:a5:28:7b:ed:07:70:27:07:a4:39:e8:17:c1:07:af: 8a:61:a9:9a:eb:33:d8:97:9e:5c:95:a9:8f:98:f3:7f:6f:94: 76:08:58:60:a8:ec:3e:7f:c7:ad:6a:11:34:9d:57:4b:e4:cd: 6d:62:e2:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwMzAxMDE1NjUwWhcNMjYwMzA4MDE1NjUwWjAYMRYwFAYD VQQDDA02OWEzOWNlMi0wNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlILmC3gB8inAdLNWAU9OxwBfhjg6A6cuUXraxN+3txYdVxI4XtUxMU5jklyH JYWnmLgjDQyLlO4H0rQBUl5+1e0j3r1290HnDnQY3VyMxauFSj29ER1xV/s61oR5 j6JKP9EbAIQI0Y2T3BKJxvSDByC6lvoqvYOQEj2e1PvmfRX0oumQCz2Rz4IPe1iK 3ZO/LSVujiZ+4FFY3dKzqlpm3phlkzD6gE0YFUgiD1cXXAr0dhKHoAgh5AZtUZ80 NV5li0Nv3SjhWA4bmnJwn6PxCZt1us7sroypzjnZjbz82nvzZNZZsH448SE1RrPZ OrpOIPIV/BltB7NqWnfI/vg+nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkMtmZk wymQhbyHNG9tkop5LyflMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvut0+zTUE8MlPEnZZPIydokKRvLcVDCj8wjsyIFQoTlw1UeGHACh5HbZLvk+ ZDWLoKgtVciSS7QTiDQyDN4JBXtmq87vzDMDm7QMfuulMhdzuY1JgLYKlsuBObhl f+fKiHRJnEGEJRDD4Sh1CSGa1YKJb2L4mlbC4DaXtkCbtXtiyBVIi6UkA0+teihp E/GFeTy7tTXCGQMfVlmY5ETm/5XVl+HInBxV+LiQ3BUKEYy6f89hUPx3tjUVghH+ 6RUfLn6t15KtowrxpSh77QdwJwekOegXwQevimGpmusz2JeeXJWpj5jzf2+UdghY YKjsPn/HrWoRNJ1XS+TNbWLitA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:02:33 2026 by rpki-client