$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: v6BI0NBRQspx7/Ve4P+8gOU+2rUmBaDyybTy7PQt1qw= Subject key identifier: B9:DA:6A:21:AD:02:FE:CF:A3:B1:B3:74:B3:40:DE:C0:49:CD:F3:12 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 0450 Signing time: Mon 02 Mar 2026 01:48:14 +0000 Manifest this update: Mon 02 Mar 2026 01:48:12 +0000 Manifest next update: Mon 09 Mar 2026 01:48:12 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: jNA8fqtvt3uZ2sJOvpDghMe8wYHoHlFNre1xnOeb6+o=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Mar 2 01:48:12 2026 GMT Not After : Mar 9 01:48:12 2026 GMT Subject: CN=69a4ec5d-9701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:96:75:62:7c:d0:4a:bf:5f:7b:da:5a:79:42: b8:5b:7c:c9:08:b7:fe:c2:c8:78:f9:6a:f3:8f:bd: 82:ec:71:1d:3c:8d:26:75:e9:04:26:9f:7e:d9:fd: 62:31:0d:44:50:b9:63:b0:db:c2:65:35:58:79:5c: 8c:f1:34:ad:39:28:e4:20:a2:14:43:30:b3:04:e2: ae:5c:85:1f:0f:c7:9b:13:02:00:d9:d0:67:80:a6: 42:e6:e9:8a:1f:42:cd:dc:78:59:ce:14:1a:0e:f0: 0b:61:b2:cf:02:8f:eb:f0:58:62:95:c6:70:ba:63: ed:dc:9a:82:4e:aa:89:3d:11:c0:4f:bc:66:49:48: 5d:da:da:82:95:22:c6:4c:ce:80:e0:fd:32:f8:3d: 05:37:30:e9:80:08:07:57:57:0f:35:82:57:56:2c: 39:ef:cd:fd:b3:28:3e:3d:37:15:73:46:1e:27:6a: 82:3c:ea:5a:2a:5b:1b:45:a2:6f:37:c6:a9:9e:d3: 09:36:19:fa:ba:d9:83:57:41:9c:bb:48:df:1a:47: 77:49:7b:99:3a:d0:81:af:7e:c5:46:e4:d9:29:75: b3:2c:a5:84:02:fe:67:36:d7:e6:8c:20:18:62:8d: ae:40:14:14:be:24:3a:fb:8c:8c:32:fe:cd:da:69: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DA:6A:21:AD:02:FE:CF:A3:B1:B3:74:B3:40:DE:C0:49:CD:F3:12 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b7:89:22:41:5e:7f:cb:01:90:86:7d:60:eb:7e:8f:a0:66: b1:b4:56:5f:cf:04:d1:d7:9c:19:8f:e1:16:68:6d:85:47:28: f9:9a:3d:0f:32:0e:d6:91:7e:49:0e:0a:32:a9:17:23:51:fc: 89:48:7b:ca:bc:87:ad:ad:c4:56:15:7e:4f:0c:aa:35:f6:8f: 3e:d9:8f:fc:6a:42:c5:70:b8:2e:48:3f:e1:45:98:6a:94:9a: 96:20:71:07:69:97:1e:ba:42:96:93:f8:2b:2c:15:d6:cb:89: 67:88:de:38:2e:8b:5f:d2:29:de:d5:31:dd:d3:ac:40:43:8a: 10:97:71:92:ef:7f:d8:78:ac:15:92:a3:be:ab:f5:83:18:a7: e0:c2:2b:c3:21:f4:be:1e:19:f2:8b:8d:7d:b1:55:70:a1:c0: 7d:70:e2:3a:a7:72:17:3e:8d:11:dc:be:8f:a0:08:e8:df:17: 65:6a:63:b0:67:be:60:5e:43:49:56:96:4c:23:c8:3f:46:85: 20:0d:63:c8:8d:2a:fb:15:14:51:b4:e6:2c:20:c2:64:4e:ca: d4:5c:dc:d9:d0:fb:d8:14:f6:14:5d:64:f0:7c:66:97:3b:e6: a3:8e:89:c1:54:4e:4b:4b:68:0a:bf:0f:65:75:a9:e9:81:f8: 77:ee:05:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjYwMzAyMDE0ODEyWhcNMjYwMzA5MDE0ODEyWjAYMRYwFAYD VQQDEw02OWE0ZWM1ZC05NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JZ1YnzQSr9fe9paeUK4W3zJCLf+wsh4+Wrzj72C7HEdPI0mdekEJp9+2f1i MQ1EULljsNvCZTVYeVyM8TStOSjkIKIUQzCzBOKuXIUfD8ebEwIA2dBngKZC5umK H0LN3HhZzhQaDvALYbLPAo/r8FhilcZwumPt3JqCTqqJPRHAT7xmSUhd2tqClSLG TM6A4P0y+D0FNzDpgAgHV1cPNYJXViw57839syg+PTcVc0YeJ2qCPOpaKlsbRaJv N8apntMJNhn6utmDV0Gcu0jfGkd3SXuZOtCBr37FRuTZKXWzLKWEAv5nNtfmjCAY Yo2uQBQUviQ6+4yMMv7N2mlS+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnaaiGt Av7Po7GzdLNA3sBJzfMSMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJreJIkFef8sBkIZ9YOt+j6BmsbRWX88E0decGY/hFmhthUco+Zo9DzIO1pF+ SQ4KMqkXI1H8iUh7yryHra3EVhV+TwyqNfaPPtmP/GpCxXC4Lkg/4UWYapSaliBx B2mXHrpClpP4KywV1suJZ4jeOC6LX9Ip3tUx3dOsQEOKEJdxku9/2HisFZKjvqv1 gxin4MIrwyH0vh4Z8ouNfbFVcKHAfXDiOqdyFz6NEdy+j6AI6N8XZWpjsGe+YF5D SVaWTCPIP0aFIA1jyI0q+xUUUbTmLCDCZE7K1Fzc2dD72BT2FF1k8Hxmlzvmo46J wVROS0toCr8PZXWp6YH4d+4FTA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:46 2026 by rpki-client