$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: CPME64Rxp51lKsbRUWxXKGnICHVTn0qbGyhwTxkNv+A= Subject key identifier: 57:9F:99:B4:A7:49:BE:0D:11:C6:18:05:85:CC:9C:D8:1D:41:F5:23 Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: CC Signing time: Sun 01 Mar 2026 07:58:21 +0000 Manifest this update: Sun 01 Mar 2026 07:58:20 +0000 Manifest next update: Sun 08 Mar 2026 07:58:20 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: EzbQXKZ1PDvTaFKBX4R/3vgHEiJXs64/UeovDscuIBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: Mar 1 07:58:20 2026 GMT Not After : Mar 8 07:58:20 2026 GMT Subject: CN=69a3f19c-aedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:e7:34:0e:87:51:74:0b:83:b5:dc:6b:1f: ae:e5:7b:f4:eb:4d:a9:5f:62:c4:bd:a3:5d:c1:1d: 7c:9f:58:dc:6e:a1:3b:eb:bf:27:b3:25:0c:67:a1: 50:24:64:58:c7:8e:bb:f0:1d:3b:e1:91:73:e6:f5: e3:e3:20:6c:c0:f9:a6:02:d6:fb:04:f1:2f:c9:d9: 25:f9:c9:0a:a3:d5:bd:05:36:fb:6b:43:01:a7:f6: 82:ca:1b:4c:a1:e1:43:9d:3a:0d:78:cd:e1:3b:11: 8c:a0:d5:99:41:4d:99:3b:c8:a2:f6:0b:ac:0a:85: dd:83:39:6b:bc:0a:4e:be:59:19:9e:49:d4:15:ac: 48:80:a7:45:68:4f:b8:be:15:22:f9:4c:e1:08:69: 55:70:de:b5:f0:9c:3b:21:81:35:46:bb:13:dc:57: 62:8d:e2:1d:bb:45:3b:ad:9f:0d:7a:47:9a:9e:7d: e4:09:9c:8b:9a:c4:bc:0e:9f:97:5e:67:56:1d:da: be:b7:95:aa:e1:b0:94:18:4f:77:1b:70:c1:67:c3: 57:10:70:30:90:25:52:59:bf:4f:8e:11:44:f0:1f: ad:ce:6a:90:d4:a4:11:c3:f6:70:ce:d1:b6:98:2f: 06:e0:c1:8b:bc:6e:ad:fd:45:6d:94:65:f6:8c:35: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:99:B4:A7:49:BE:0D:11:C6:18:05:85:CC:9C:D8:1D:41:F5:23 X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a3:d5:ae:c0:1c:f2:9a:20:93:69:67:9e:64:4b:3b:5d:78: 7c:84:04:73:58:5e:a1:c3:15:da:01:34:00:06:2f:80:de:5e: 74:b5:9f:cf:3b:31:6a:2e:92:8a:1b:5c:7a:ec:62:52:c9:99: 8a:27:b6:a1:78:03:5a:93:55:1d:2d:d1:e9:96:f6:36:0a:d6: b6:cd:93:04:ed:94:48:95:fb:0e:35:e8:7a:8f:a4:a7:18:c5: 76:fd:da:bf:ed:0b:f8:21:2d:08:77:d7:83:91:98:37:b4:4a: 52:c7:31:92:cc:7d:31:4c:0c:85:a7:79:65:24:2a:62:25:25: d0:70:a7:0e:68:ea:28:3c:3b:bc:3f:44:02:f0:b4:3b:d8:9f: b8:71:49:15:7e:b2:88:4b:7a:16:57:44:3b:f1:aa:59:49:d3: df:2e:8f:47:20:73:5b:39:40:aa:4b:53:14:60:74:fe:f1:0a: 9e:1a:d6:02:fe:20:aa:92:e4:eb:8f:26:a9:d3:ef:a8:07:20: 33:e6:43:a8:b9:76:9f:f8:0d:b3:6d:00:12:fb:43:ef:35:4f: 3a:59:4f:dc:25:7b:f5:9f:91:e9:ac:28:2e:84:75:70:85:36: ef:67:cb:41:93:ea:d0:e7:02:27:c3:92:30:b9:2b:cd:cb:49: 57:c2:82:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC QUVGNzc3OTUwHhcNMjYwMzAxMDc1ODIwWhcNMjYwMzA4MDc1ODIwWjAYMRYwFAYD VQQDEw02OWEzZjE5Yy1hZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WvnNA6HUXQLg7Xcax+u5Xv0602pX2LEvaNdwR18n1jcbqE7678nsyUMZ6FQ JGRYx4678B074ZFz5vXj4yBswPmmAtb7BPEvydkl+ckKo9W9BTb7a0MBp/aCyhtM oeFDnToNeM3hOxGMoNWZQU2ZO8ii9gusCoXdgzlrvApOvlkZnknUFaxIgKdFaE+4 vhUi+UzhCGlVcN618Jw7IYE1RrsT3FdijeIdu0U7rZ8Nekeann3kCZyLmsS8Dp+X XmdWHdq+t5Wq4bCUGE93G3DBZ8NXEHAwkCVSWb9PjhFE8B+tzmqQ1KQRw/ZwztG2 mC8G4MGLvG6t/UVtlGX2jDX7owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFefmbSn Sb4NEcYYBYXMnNgdQfUjMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkKPVrsAc8pogk2lnnmRLO114fIQEc1heocMV2gE0AAYvgN5edLWfzzsxai6S ihtceuxiUsmZiie2oXgDWpNVHS3R6Zb2NgrWts2TBO2USJX7DjXoeo+kpxjFdv3a v+0L+CEtCHfXg5GYN7RKUscxksx9MUwMhad5ZSQqYiUl0HCnDmjqKDw7vD9EAvC0 O9ifuHFJFX6yiEt6FldEO/GqWUnT3y6PRyBzWzlAqktTFGB0/vEKnhrWAv4gqpLk 648mqdPvqAcgM+ZDqLl2n/gNs20AEvtD7zVPOllP3CV79Z+R6awoLoR1cIU272fL QZPq0OcCJ8OSMLkrzctJV8KC0w== -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:23 2026 by rpki-client