$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json) Hash identifier: ZM5faISxFjfrPg95Oe+b3QflszugXEerBbSsBV+kxZ8= Subject key identifier: A7:87:7F:D5:83:D6:B7:90:3B:04:B7:E7:2C:F6:6B:6D:C1:31:82:88 Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft Manifest number: 20 Signing time: Sun 01 Mar 2026 10:21:55 +0000 Manifest this update: Sun 01 Mar 2026 10:21:55 +0000 Manifest next update: Sun 08 Mar 2026 10:21:55 +0000 Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: 2FpyXS3ALv8V5DKUniKXS1gHDyFwp076pxoPTQuDEoQ=) 2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Validity Not Before: Mar 1 10:21:55 2026 GMT Not After : Mar 8 10:21:55 2026 GMT Subject: CN=69a41343-b35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:68:75:07:fc:49:a7:2a:fd:61:4a:71:90: a5:d0:7d:39:11:d0:ae:b6:b9:0f:f3:ca:c5:ff:fd: 7e:ab:7d:b7:50:49:b4:a7:d7:5d:dc:de:58:9a:d9: 17:d4:a8:92:62:16:74:59:64:f7:8e:8f:6b:a4:4f: 6c:cc:a7:d8:bb:ac:48:df:57:39:25:c1:5b:54:c3: 64:bb:c8:65:aa:6f:28:6e:13:c9:71:09:33:fa:50: 62:16:37:45:3a:88:58:22:d7:99:16:b1:5c:73:3f: e8:50:47:5b:c1:3a:20:f8:d5:d2:47:e3:f5:1b:8d: 69:25:ff:2f:bc:d3:b9:54:60:fb:40:9c:e6:f9:69: 7f:6c:d2:4c:6d:83:a3:93:6f:70:e2:ba:0b:81:11: ae:f3:19:2b:e7:a3:d6:f0:df:7a:f2:82:19:5e:04: c3:46:44:e6:b8:5d:2d:00:e0:38:97:67:85:87:09: 0d:a5:00:4f:74:57:1c:7a:92:6a:53:71:66:17:9d: d2:d9:41:a7:21:80:3b:4c:d4:71:f6:7f:c3:76:cc: 69:15:22:d0:d9:dc:b9:72:92:88:59:d9:42:84:de: dd:d2:88:5d:15:5b:b3:f3:df:3f:2d:b7:ae:70:d5: 92:c9:3c:53:93:27:32:4c:38:15:03:26:58:1b:09: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:7F:D5:83:D6:B7:90:3B:04:B7:E7:2C:F6:6B:6D:C1:31:82:88 X509v3 Authority Key Identifier: keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c0:40:1c:b0:ad:cb:8c:cd:80:35:7a:d3:1e:d1:9a:51:e9: eb:2d:d9:be:94:83:15:25:c0:ef:e3:75:3f:3b:b6:09:e1:73: f5:c2:59:6e:8d:81:50:84:8a:11:81:b7:26:ed:97:6b:86:99: 5f:5d:5b:45:fb:3b:49:1a:a7:09:4d:dc:e0:98:2e:22:8e:04: ca:82:32:be:d3:f4:60:78:a3:da:0c:d2:69:b4:76:28:56:4d: 61:81:b1:98:90:04:d2:62:03:85:9c:f9:98:da:22:59:c5:4e: 98:4c:47:21:21:ac:c7:e0:11:9d:43:35:be:e2:1d:58:f0:6a: 14:19:e3:88:6f:8c:84:a1:d6:1d:8c:43:ea:28:1b:63:d5:3c: 93:9d:f0:c4:85:ea:e1:04:5c:f2:1b:75:a5:52:f2:c4:03:b1: ea:ce:9c:f3:cb:ec:23:f8:ce:25:bc:56:6d:8a:2f:9e:9c:bf: 46:73:62:eb:06:9e:4c:e0:43:58:8e:d9:8b:75:54:3e:3b:79: df:36:15:52:13:a4:9d:23:9b:a8:cc:63:2d:f9:2b:5d:43:ab: 71:4d:2e:f6:65:1a:85:43:a1:ca:15:26:e4:9f:b1:e9:21:e0: ff:7d:6e:3b:9e:ec:85:38:86:d2:60:b2:1d:4d:12:b2:34:14: dc:dd:94:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjQ2MDExMC8GA1UEBRMoOTQwRDI3QUUxNDRBQURDQTlFMzQ1MkNCMzhDMzIzNkFD QkY3MDI1QjAeFw0yNjAzMDExMDIxNTVaFw0yNjAzMDgxMDIxNTVaMBgxFjAUBgNV BAMTDTY5YTQxMzQzLWIzNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMX2h1B/xJpyr9YUpxkKXQfTkR0K62uQ/zysX//X6rfbdQSbSn113c3lia2RfU qJJiFnRZZPeOj2ukT2zMp9i7rEjfVzklwVtUw2S7yGWqbyhuE8lxCTP6UGIWN0U6 iFgi15kWsVxzP+hQR1vBOiD41dJH4/UbjWkl/y+807lUYPtAnOb5aX9s0kxtg6OT b3DiuguBEa7zGSvno9bw33ryghleBMNGROa4XS0A4DiXZ4WHCQ2lAE90Vxx6kmpT cWYXndLZQachgDtM1HH2f8N2zGkVItDZ3LlykohZ2UKE3t3SiF0VW7Pz3z8tt65w 1ZLJPFOTJzJMOBUDJlgbCZ1JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp4d/1YPW t5A7BLfnLPZrbcExgogwHwYDVR0jBBgwFoAUlA0nrhRKrcqeNFLLOMMjasv3Alsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCNDYwLzAyQUU0NjcyRUQy QTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fs cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEEwbnJoUktyY3FlTkZMTE9NTWphc3YzQWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC NDYwLzAyQUU0NjcyRUQyQTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNx ZU5GTExPTU1qYXN2M0Fscy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqwEAcsK3LjM2ANXrTHtGaUenrLdm+lIMVJcDv43U/O7YJ4XP1wllujYFQhIoR gbcm7ZdrhplfXVtF+ztJGqcJTdzgmC4ijgTKgjK+0/RgeKPaDNJptHYoVk1hgbGY kATSYgOFnPmY2iJZxU6YTEchIazH4BGdQzW+4h1Y8GoUGeOIb4yEodYdjEPqKBtj 1TyTnfDEherhBFzyG3WlUvLEA7Hqzpzzy+wj+M4lvFZtii+enL9Gc2LrBp5M4ENY jtmLdVQ+O3nfNhVSE6SdI5uozGMt+StdQ6txTS72ZRqFQ6HKFSbkn7HpIeD/fW47 nuyFOIbSYLIdTRKyNBTc3ZSu -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:29 2026 by rpki-client