$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json) Hash identifier: Y89TecN6oDg4cr/pUqfk7V/8JUMGMD37iwFB4KMN704= Subject key identifier: AE:18:A1:C9:51:BA:0B:B8:30:30:CB:B6:FD:90:06:14:F9:8E:26:8C Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft Manifest number: 0172 Signing time: Sun 01 Mar 2026 05:41:04 +0000 Manifest this update: Sun 01 Mar 2026 05:41:04 +0000 Manifest next update: Sun 08 Mar 2026 05:41:04 +0000 Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: jM8tARXXd1mWZTT5TgIvYYXVk4BctQRswfW7DvJZOCA=) 2: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (hash: tK5HTPbAj/ZNMX+j7tcaCGQxo/xqwq0UKtlHWscWUVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: Mar 1 05:41:04 2026 GMT Not After : Mar 8 05:41:04 2026 GMT Subject: CN=69a3d170-64e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:c6:1c:4f:66:ab:64:04:45:01:46:92:e4: ad:a9:87:f0:08:18:0b:88:a3:41:f3:34:38:64:6e: ff:86:84:90:e0:ca:7f:a4:0c:5e:e1:eb:22:7d:a5: ca:ea:81:2f:e9:01:eb:23:4e:08:d4:4d:39:f0:b2: 82:ae:cd:31:e2:e9:57:3b:71:34:b8:86:e7:bd:6b: 75:96:55:0d:9d:70:a6:55:48:2a:b2:a4:02:de:fd: 4b:1e:e6:39:4f:4c:dc:3e:c2:0b:08:a5:b8:bf:06: 25:67:e0:28:6e:f8:54:46:d5:e7:6f:2e:8a:af:e4: cc:fc:4a:f1:74:ee:e8:11:2a:34:1e:44:a4:40:5c: e1:78:97:08:00:c4:35:d0:b2:7d:ad:cb:d7:7f:4d: a1:5c:ed:b3:8a:d8:0c:ef:3f:fb:22:12:0b:40:96: dc:e6:4f:a0:3b:56:d8:21:1f:24:8a:34:5b:b0:96: f1:3f:68:13:f6:8e:af:4e:dc:bc:74:db:9c:ce:1d: 50:42:3d:3e:fa:53:0e:f4:7e:ae:48:68:16:cd:ca: 30:6e:d9:20:3c:f3:03:64:a1:da:a4:4b:6b:34:c6: c6:b0:0b:f1:f8:3b:5d:77:d8:7c:05:f5:21:f5:a5: c5:2b:b2:5a:cb:13:5a:3d:4b:e7:f3:0b:29:ee:df: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:A1:C9:51:BA:0B:B8:30:30:CB:B6:FD:90:06:14:F9:8E:26:8C X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d4:9e:10:3b:f3:4e:c4:fa:6a:50:45:22:9a:76:3f:98:4c: de:92:62:61:47:b3:6a:96:91:44:d2:d2:27:da:1d:e9:54:34: 9c:cf:4a:99:be:89:ad:b6:7f:98:67:90:5d:a2:7f:a5:60:fd: 0b:e1:d5:98:db:a7:07:07:f1:75:ce:9c:b7:0d:19:d3:f0:c5: ec:0d:51:c8:0c:6b:e1:9d:55:3d:2b:0d:39:ff:67:0b:f2:da: b5:4e:43:11:a8:bb:a0:b9:31:12:2a:33:d8:04:f7:22:cf:ac: 19:a4:cc:14:a0:69:09:99:ee:0c:10:b2:ef:e2:78:85:f7:55: cd:6d:cd:a1:ba:25:e4:f8:d9:e3:17:de:73:4b:30:06:ac:d7: 28:a4:33:1f:54:b9:ed:80:a2:7a:d3:91:7a:18:0c:2b:91:46: c1:fc:48:a2:f1:43:3a:20:44:d2:8f:f4:ee:a7:23:85:7e:7a: d6:76:6d:38:4e:7c:c3:8f:15:7c:e4:05:73:b2:21:22:8d:9c: 8b:98:cd:b6:cd:1b:7b:16:dc:47:99:d2:a4:12:6f:8f:17:d8: a8:9b:24:74:36:14:99:75:fd:f1:a3:1a:e1:28:84:c0:40:63: 73:7e:4b:31:a6:37:af:ee:30:22:87:36:fc:7f:ab:1b:04:0c: 11:59:90:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE QTNCMjAwQjUwHhcNMjYwMzAxMDU0MTA0WhcNMjYwMzA4MDU0MTA0WjAYMRYwFAYD VQQDEw02OWEzZDE3MC02NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLXGHE9mq2QERQFGkuStqYfwCBgLiKNB8zQ4ZG7/hoSQ4Mp/pAxe4esifaXK 6oEv6QHrI04I1E058LKCrs0x4ulXO3E0uIbnvWt1llUNnXCmVUgqsqQC3v1LHuY5 T0zcPsILCKW4vwYlZ+AobvhURtXnby6Kr+TM/ErxdO7oESo0HkSkQFzheJcIAMQ1 0LJ9rcvXf02hXO2zitgM7z/7IhILQJbc5k+gO1bYIR8kijRbsJbxP2gT9o6vTty8 dNuczh1QQj0++lMO9H6uSGgWzcowbtkgPPMDZKHapEtrNMbGsAvx+Dtdd9h8BfUh 9aXFK7JayxNaPUvn8wsp7t9k+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4YoclR ugu4MDDLtv2QBhT5jiaMMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAitSeEDvzTsT6alBFIpp2P5hM3pJiYUezapaRRNLSJ9od6VQ0nM9Kmb6JrbZ/ mGeQXaJ/pWD9C+HVmNunBwfxdc6ctw0Z0/DF7A1RyAxr4Z1VPSsNOf9nC/LatU5D Eai7oLkxEioz2AT3Is+sGaTMFKBpCZnuDBCy7+J4hfdVzW3Nobol5PjZ4xfec0sw BqzXKKQzH1S57YCietORehgMK5FGwfxIovFDOiBE0o/07qcjhX561nZtOE58w48V fOQFc7IhIo2ci5jNts0bexbcR5nSpBJvjxfYqJskdDYUmXX98aMa4SiEwEBjc35L MaY3r+4wIoc2/H+rGwQMEVmQoA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:18 2026 by rpki-client