$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft File: lslPY1zHgehZd0oRr3Nii2CmVs8.mft (raw, json) Hash identifier: LdCgLZWMpOx8Sxdi6AdhlBQO1z+HxdRpI+11Z1s7Im4= Subject key identifier: 39:30:16:C2:EC:5C:D5:D6:2F:4F:B2:36:5D:E3:74:9B:92:AE:46:59 Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF Certificate issuer: /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft Manifest number: 12 Signing time: Sun 01 Mar 2026 10:36:27 +0000 Manifest this update: Sun 01 Mar 2026 10:36:26 +0000 Manifest next update: Sun 08 Mar 2026 10:36:26 +0000 Files and hashes: 1: lslPY1zHgehZd0oRr3Nii2CmVs8.crl (hash: k2qebxr1eRKOaAPaXsoIuoCNm5Jj9CFAT6pazhgeON8=) 2: 38D7A57E02B311F1B5A042A33E3D8C67.roa (hash: i+cONdh4kL/zy5o+bEmmDqg3gYQAN5WXBgxD3TrRI7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF Validity Not Before: Mar 1 10:36:26 2026 GMT Not After : Mar 8 10:36:26 2026 GMT Subject: CN=69a416ab-b5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:33:b0:e1:ea:43:37:e0:fd:b0:50:f8:ec: 48:01:f8:da:77:fe:2e:8f:0f:f5:25:06:8a:8e:71: 33:ad:82:90:60:e5:ea:19:f9:5d:d4:0b:ba:02:8a: 74:aa:14:9d:f8:5a:ad:4e:dc:7d:bb:18:2f:9f:85: 19:19:31:0a:0d:2d:9a:d0:b0:f6:0f:47:7d:19:37: 45:11:34:7b:02:60:68:da:41:71:6f:b5:1a:da:88: 73:b5:d9:ae:3f:ae:a9:56:be:e7:5b:49:d9:a6:d8: 71:08:19:eb:8b:6e:c4:55:8b:fd:b1:03:bd:a0:a3: e1:05:4e:17:08:ae:81:1d:2f:ac:e0:36:02:f9:86: 42:29:aa:c0:41:24:a0:a2:4d:b7:eb:14:b8:2a:db: 52:a6:23:9a:24:5f:78:76:b0:ae:55:d7:6f:a0:de: 05:04:40:ba:b0:9d:6f:07:59:ab:b9:6b:1b:dd:d9: dc:6c:26:61:13:8a:30:38:e8:51:36:ef:12:40:14: 23:4b:4d:f8:dc:a7:1d:30:df:b9:f6:d4:7f:34:fb: c3:97:07:bd:44:5e:a0:16:a4:3b:10:d6:14:19:7d: 13:a8:19:0e:d7:2b:80:0d:3d:c3:38:6a:59:f5:39: 60:03:76:04:20:51:b9:97:06:e2:46:5f:29:6a:39: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:16:C2:EC:5C:D5:D6:2F:4F:B2:36:5D:E3:74:9B:92:AE:46:59 X509v3 Authority Key Identifier: keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:33:07:b1:42:4d:ce:43:89:0f:29:79:74:92:76:59:1f:80: 97:8d:9f:b3:b0:67:bd:ea:c8:62:d0:e9:73:ee:c9:59:6b:6d: d5:7a:14:18:31:99:af:e3:21:05:30:ca:3c:4d:cc:95:18:87: 7f:e1:85:c5:b4:20:b3:02:c5:3a:e7:65:b6:92:d4:bf:3e:d6: 2a:6f:db:1b:8f:6d:f0:2c:80:d7:9d:65:bb:18:a3:2d:4b:d9: 88:b4:59:41:52:69:f9:41:da:d6:bc:af:b6:98:35:ab:dc:39: fe:08:3b:6e:ac:9f:3f:0c:21:1f:39:f4:89:c1:ad:40:5f:25: 21:df:ee:80:28:9d:23:fe:09:14:39:56:c4:1b:a0:42:d4:3e: 3c:73:8f:1e:50:82:16:2b:3d:5b:0a:e7:14:f7:74:81:9f:ec: 55:84:97:65:11:61:69:1e:05:b9:e2:99:34:ca:31:b5:a9:19: ff:be:dc:fc:f3:c0:45:56:8f:40:81:c6:89:aa:82:7d:87:2e: e0:ce:d0:a2:51:fe:b4:65:08:fd:39:f1:29:57:8f:4a:cd:84: 7d:12:b2:73:fc:ae:ec:40:da:0c:02:e7:0b:00:c6:3c:7b:5c: ef:e6:fd:23:13:58:90:5f:c3:44:4b:a4:0c:ad:bf:e6:64:57: 59:1d:17:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTgwMzExMC8GA1UEBRMoOTZDOTRGNjM1Q0M3ODFFODU5Nzc0QTExQUY3MzYyOEI2 MEE2NTZDRjAeFw0yNjAzMDExMDM2MjZaFw0yNjAzMDgxMDM2MjZaMBgxFjAUBgNV BAMTDTY5YTQxNmFiLWI1ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXkjOw4epDN+D9sFD47EgB+Np3/i6PD/UlBoqOcTOtgpBg5eoZ+V3UC7oCinSq FJ34Wq1O3H27GC+fhRkZMQoNLZrQsPYPR30ZN0URNHsCYGjaQXFvtRraiHO12a4/ rqlWvudbSdmm2HEIGeuLbsRVi/2xA72go+EFThcIroEdL6zgNgL5hkIpqsBBJKCi TbfrFLgq21KmI5okX3h2sK5V12+g3gUEQLqwnW8HWau5axvd2dxsJmETijA46FE2 7xJAFCNLTfjcpx0w37n21H80+8OXB71EXqAWpDsQ1hQZfROoGQ7XK4ANPcM4aln1 OWADdgQgUbmXBuJGXylqOYPDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOTAWwuxc 1dYvT7I2XeN0m5KuRlkwHwYDVR0jBBgwFoAUlslPY1zHgehZd0oRr3Nii2CmVs8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxODAzL0UzODYzQkRBMDJC MjExRjFCRUZBQzdBMTNFM0Q4QzY3L2xzbFBZMXpIZ2VoWmQwb1JyM05paTJDbVZz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbHNsUFkxekhnZWhaZDBvUnIzTmlpMkNtVnM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx ODAzL0UzODYzQkRBMDJCMjExRjFCRUZBQzdBMTNFM0Q4QzY3L2xzbFBZMXpIZ2Vo WmQwb1JyM05paTJDbVZzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnMwexQk3OQ4kPKXl0knZZH4CXjZ+zsGe96shi0Olz7slZa23VehQYMZmv4yEF MMo8TcyVGId/4YXFtCCzAsU652W2ktS/PtYqb9sbj23wLIDXnWW7GKMtS9mItFlB Umn5QdrWvK+2mDWr3Dn+CDturJ8/DCEfOfSJwa1AXyUh3+6AKJ0j/gkUOVbEG6BC 1D48c48eUIIWKz1bCucU93SBn+xVhJdlEWFpHgW54pk0yjG1qRn/vtz888BFVo9A gcaJqoJ9hy7gztCiUf60ZQj9OfEpV49KzYR9ErJz/K7sQNoMAucLAMY8e1zv5v0j E1iQX8NES6QMrb/mZFdZHRdP -----END CERTIFICATE-----Generated at Sun Mar 1 20:08:35 2026 by rpki-client