$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: LjQyjWCeK11ofMgKu4DlF39ogdjVVg7j0UTI9GNbFR4= Subject key identifier: 30:18:47:5F:E0:67:E3:74:49:A2:B0:25:F4:C3:D3:05:F8:67:22:A8 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 019B Signing time: Sun 01 Mar 2026 05:05:28 +0000 Manifest this update: Sun 01 Mar 2026 05:05:27 +0000 Manifest next update: Sun 08 Mar 2026 05:05:27 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: wCM2oehpLcaQW/S0gU+2ZKjVLO8MWEpY3rodlOcGSk0=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 7696MMuvciabX1nFuz0iuQ3b+zF4t5sdAPgAUCluYpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Mar 1 05:05:27 2026 GMT Not After : Mar 8 05:05:27 2026 GMT Subject: CN=69a3c918-b62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:76:ab:f1:fb:61:f0:56:7d:90:dc:7a:4e: 52:af:08:5a:8e:7d:0f:a0:d4:83:6a:e7:a8:5a:4b: 2c:f3:b8:c3:55:4c:31:ba:26:be:03:42:b2:8d:60: 16:fd:aa:2e:54:83:d8:70:d9:2f:a7:d2:d8:b1:67: d0:db:ec:f6:bf:dd:1b:6a:71:30:e9:f1:56:49:1b: 45:83:06:00:64:a1:f8:37:44:b0:63:d0:b9:29:a3: 25:29:35:49:e9:f0:3c:40:ce:01:1a:ad:19:b5:71: 5e:91:97:9e:51:ea:42:57:c2:92:c5:c0:a2:c0:a8: ce:60:42:ec:f1:de:41:b9:0b:16:aa:f3:20:29:71: 17:e3:38:8b:43:5f:21:14:fd:5b:1d:e3:93:01:11: 04:d4:3f:eb:f3:c9:82:e6:64:81:04:d0:45:c4:c4: b4:55:bb:a8:3e:4c:98:b6:76:5f:a1:03:03:70:1f: 68:4b:9d:3e:cf:0a:64:4e:62:08:b4:b6:3e:6b:45: 9b:c7:98:01:72:64:31:df:3f:78:5e:40:8a:4c:31: 12:5c:34:20:2e:92:c3:85:a0:f1:52:ef:c2:e9:79: 0e:bb:3f:65:7b:f0:bd:d8:62:67:a7:6b:01:43:24: 22:12:f0:e2:99:82:45:43:33:15:ec:52:a0:36:de: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:18:47:5F:E0:67:E3:74:49:A2:B0:25:F4:C3:D3:05:F8:67:22:A8 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0d:02:68:b5:80:11:2d:65:20:56:49:89:cd:3d:9b:d7:b1: 55:22:36:c9:90:02:7e:a2:ce:50:ae:6e:01:0f:cc:68:f3:36: b7:2c:d9:57:f1:f6:71:0b:c5:2c:c1:7b:ce:de:cb:fc:24:c5: ef:a9:b2:23:08:b7:86:ca:98:3d:ef:70:39:d1:21:ed:4d:74: 01:1e:33:36:a8:17:91:b6:ce:4a:b2:39:5c:2e:2e:8d:b2:38: 28:f0:95:20:79:39:48:c1:78:dd:04:b4:81:44:bd:3d:c6:64: 87:61:d3:0f:c5:ba:87:cc:c2:cb:af:48:0f:4c:4b:02:5b:c7: 78:d3:9b:d0:9b:08:6d:9d:ac:40:7c:56:0f:d3:74:07:8e:4c: 12:bd:10:a7:d5:ee:05:65:8d:70:02:5a:bf:fd:9e:b6:6b:a1: 61:23:01:66:dc:c4:dc:8f:91:b1:08:1b:b1:34:70:1b:1a:25: ea:cf:fb:f6:9d:39:21:dc:2c:9b:e1:09:f4:d0:09:14:d1:58: 70:20:0e:d6:fb:90:5b:80:11:f2:8f:3b:b4:1c:7a:16:ae:6d: bc:88:d3:da:0f:e0:06:48:a2:46:1f:d3:d4:04:6c:52:e4:93: 04:37:ab:ca:0c:88:61:2d:85:f8:ba:a6:72:7c:66:fd:1d:9b: fc:cc:25:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjYwMzAxMDUwNTI3WhcNMjYwMzA4MDUwNTI3WjAYMRYwFAYD VQQDDA02OWEzYzkxOC1iNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zp2q/H7YfBWfZDcek5Srwhajn0PoNSDaueoWkss87jDVUwxuia+A0KyjWAW /aouVIPYcNkvp9LYsWfQ2+z2v90banEw6fFWSRtFgwYAZKH4N0SwY9C5KaMlKTVJ 6fA8QM4BGq0ZtXFekZeeUepCV8KSxcCiwKjOYELs8d5BuQsWqvMgKXEX4ziLQ18h FP1bHeOTAREE1D/r88mC5mSBBNBFxMS0VbuoPkyYtnZfoQMDcB9oS50+zwpkTmII tLY+a0Wbx5gBcmQx3z94XkCKTDESXDQgLpLDhaDxUu/C6XkOuz9le/C92GJnp2sB QyQiEvDimYJFQzMV7FKgNt4N1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAYR1/g Z+N0SaKwJfTD0wX4ZyKoMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZw0CaLWAES1lIFZJic09m9exVSI2yZACfqLOUK5uAQ/MaPM2tyzZV/H2cQvF LMF7zt7L/CTF76myIwi3hsqYPe9wOdEh7U10AR4zNqgXkbbOSrI5XC4ujbI4KPCV IHk5SMF43QS0gUS9PcZkh2HTD8W6h8zCy69ID0xLAlvHeNOb0JsIbZ2sQHxWD9N0 B45MEr0Qp9XuBWWNcAJav/2etmuhYSMBZtzE3I+RsQgbsTRwGxol6s/79p05Idws m+EJ9NAJFNFYcCAO1vuQW4AR8o87tBx6Fq5tvIjT2g/gBkiiRh/T1ARsUuSTBDer ygyIYS2F+Lqmcnxm/R2b/Mwl0A== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:45 2026 by rpki-client