$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft File: LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json) Hash identifier: 2g5gacKt7l/aSVjZhdH/0DZcSZ1O84W/rhjanIPzSo0= Subject key identifier: 06:26:5B:6E:66:85:BD:41:64:6A:B1:3B:B2:1D:2F:AB:3A:4A:F4:46 Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 Certificate issuer: /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft Manifest number: 33 Signing time: Sun 01 Mar 2026 10:03:51 +0000 Manifest this update: Sun 01 Mar 2026 10:03:50 +0000 Manifest next update: Sun 08 Mar 2026 10:03:50 +0000 Files and hashes: 1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: jOwHSttaxv76s9goPS/oRq87fgbibwoJN8xtvLEzFwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Validity Not Before: Mar 1 10:03:50 2026 GMT Not After : Mar 8 10:03:50 2026 GMT Subject: CN=69a40f07-720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:05:e0:aa:e9:91:6a:60:79:47:83:3c:e4: c7:aa:a9:d9:4d:30:78:f4:57:4c:42:39:a5:04:b2: 4c:2a:4a:e2:82:ba:45:cb:21:85:10:ea:8f:96:f6: 7e:76:fe:0f:44:ad:2a:60:08:a0:9a:01:61:78:17: f9:54:15:55:99:36:7c:e9:95:9d:c2:dd:a8:0e:52: ae:45:b8:71:33:b6:16:49:20:54:77:a7:6c:6e:5d: 5f:f8:e6:ff:93:71:c6:5f:79:9d:f6:de:9b:95:84: 31:7c:68:b2:49:4f:ed:bc:ae:a8:a0:a5:9c:bb:6f: d5:f4:3b:90:9b:90:b0:5d:6c:59:37:b4:4f:eb:94: 48:7c:61:f0:27:4a:eb:69:76:c3:0c:e1:8b:6a:29: fd:af:b8:4e:a2:66:04:7f:39:07:4f:43:f2:c5:81: 9e:9b:7a:b5:16:68:02:24:9f:bd:dc:02:af:85:9b: ee:e0:a4:c1:e1:96:a3:d0:21:68:a0:de:75:8d:a4: 8f:a1:01:09:1c:20:8c:cd:fd:a4:0f:5d:8c:5a:32: 1d:52:0e:06:b8:bb:f4:23:5b:66:d5:21:bd:63:19: cc:65:46:77:a5:c6:25:5c:60:5c:2f:68:69:7b:ae: b5:7f:2d:87:45:37:c0:2e:08:87:6f:79:1f:cf:19: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:26:5B:6E:66:85:BD:41:64:6A:B1:3B:B2:1D:2F:AB:3A:4A:F4:46 X509v3 Authority Key Identifier: keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:15:46:c2:d6:a7:fe:3e:a3:91:47:77:5a:6d:b4:b6:91: 87:79:f4:a5:8d:50:40:1b:e0:26:85:45:c6:88:aa:d1:bc:a7: 71:19:0a:20:a9:52:65:6f:88:67:74:24:09:e0:d7:6a:18:ad: 78:2b:9b:ae:b6:21:92:48:6d:7a:b6:21:0c:4a:84:22:7d:c0: c7:47:cc:88:ef:67:9c:c7:42:ab:fe:47:e4:f8:d4:8d:91:10: e0:f8:e6:13:86:54:f8:65:72:7d:1c:6d:02:04:3b:41:74:9b: 4e:f4:72:b0:dd:df:ba:ac:9c:77:31:54:83:ff:7d:8a:bb:07: 70:8b:53:80:af:7b:58:c4:83:76:16:71:69:3b:29:c5:d4:e0: fc:4f:40:7c:4b:3e:13:18:56:a2:25:d0:9a:fd:75:3b:eb:dc: 87:d6:73:37:8a:d4:08:4f:d3:05:c4:40:4b:58:6c:ec:9c:d7: 57:d6:e6:7d:05:d6:60:31:be:40:ca:a9:90:6e:e3:ee:4b:25: b0:af:b8:2b:7d:ab:30:6d:f7:5e:c0:4a:a3:77:d5:ae:ab:eb: c0:2f:e5:ca:0c:38:d4:5f:3b:6c:74:34:ec:0c:35:cb:4d:ee: 74:7e:80:70:51:b6:8a:cd:9a:86:17:f0:9e:1e:41:25:62:d5: 15:d4:66:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEFDRDExMC8GA1UEBRMoMkM5QUE1Rjk4MkM4QjQ0RkEyNkRGMDhDRUEyNDMxRDc5 QUFDMzc1NTAeFw0yNjAzMDExMDAzNTBaFw0yNjAzMDgxMDAzNTBaMBgxFjAUBgNV BAMTDTY5YTQwZjA3LTcyMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGnAXgqumRamB5R4M85MeqqdlNMHj0V0xCOaUEskwqSuKCukXLIYUQ6o+W9n52 /g9ErSpgCKCaAWF4F/lUFVWZNnzplZ3C3agOUq5FuHEzthZJIFR3p2xuXV/45v+T ccZfeZ323puVhDF8aLJJT+28rqigpZy7b9X0O5CbkLBdbFk3tE/rlEh8YfAnSutp dsMM4YtqKf2vuE6iZgR/OQdPQ/LFgZ6berUWaAIkn73cAq+Fm+7gpMHhlqPQIWig 3nWNpI+hAQkcIIzN/aQPXYxaMh1SDga4u/QjW2bVIb1jGcxlRnelxiVcYFwvaGl7 rrV/LYdFN8AuCIdveR/PGf0FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBiZbbmaF vUFkarE7sh0vqzpK9EYwHwYDVR0jBBgwFoAULJql+YLItE+ibfCM6iQx15qsN1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QUNEL0JDREJENEU0Q0I5 QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUtaWJmQ002aVF4MTVxc04x VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEpxbC1ZTEl0RS1pYmZDTTZpUXgxNXFzTjFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QUNEL0JDREJENEU0Q0I5QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUt aWJmQ002aVF4MTVxc04xVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBo8xVGwtan/j6jkUd3Wm20tpGHefSljVBAG+AmhUXGiKrRvKdxGQogqVJlb4hn dCQJ4NdqGK14K5uutiGSSG16tiEMSoQifcDHR8yI72ecx0Kr/kfk+NSNkRDg+OYT hlT4ZXJ9HG0CBDtBdJtO9HKw3d+6rJx3MVSD/32Kuwdwi1OAr3tYxIN2FnFpOynF 1OD8T0B8Sz4TGFaiJdCa/XU769yH1nM3itQIT9MFxEBLWGzsnNdX1uZ9BdZgMb5A yqmQbuPuSyWwr7grfaswbfdewEqjd9Wuq+vAL+XKDDjUXztsdDTsDDXLTe50foBw UbaKzZqGF/CeHkElYtUV1GZm -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:53 2026 by rpki-client