$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft File: lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json) Hash identifier: H/4UX5QchizGOwG6Jui/ItbIFd6JOGg+IMEy6fMfV20= Subject key identifier: 08:80:80:D3:A7:79:A7:91:97:CE:53:FF:18:07:86:F0:1C:DD:A1:F0 Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft Manifest number: 0178 Signing time: Sun 01 Mar 2026 05:47:56 +0000 Manifest this update: Sun 01 Mar 2026 05:47:55 +0000 Manifest next update: Sun 08 Mar 2026 05:47:55 +0000 Files and hashes: 1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: Sq190wSpW8ac0dNzOxIOUKy0I3OOfjrvwP1ZTRcvBPg=) 2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: v/Xxd5gw24bVPmwugefsnZRtykzRBUwrtrP5k40Invw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Mar 1 05:47:55 2026 GMT Not After : Mar 8 05:47:55 2026 GMT Subject: CN=69a3d30b-291a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:75:ac:12:05:f9:9c:ce:ea:96:33:93:b4: 45:09:ee:1e:a0:c0:ce:a1:bf:7e:2c:f0:32:bc:c4: bc:5c:48:65:5a:ee:fd:d0:cb:4a:89:a7:46:7b:1c: f4:e2:94:ec:c1:c8:66:33:1e:bd:f7:28:b6:63:c2: 0b:30:b5:c7:a4:ca:87:2b:c8:7b:b0:c7:48:fb:a7: c0:7a:2a:8a:ce:f1:aa:51:02:cc:3a:33:ad:54:bf: d2:1a:46:61:b3:0b:e8:e3:f6:b6:62:f1:f5:74:1f: 24:32:51:ad:42:f2:f1:79:2d:1d:af:fa:9e:87:cc: 62:5a:53:94:af:37:a8:cc:ca:f7:5d:f2:4e:c3:61: df:82:32:54:d8:f1:bf:8f:dc:2f:ae:fa:8f:9a:11: ad:79:14:a2:53:b7:fb:e7:61:00:8c:3c:46:7f:de: f5:4e:f2:89:0a:e5:c0:5b:ea:6c:69:a1:f4:bd:6f: a6:96:9a:c9:15:34:03:6b:2e:01:a5:43:5a:17:86: 09:99:8b:e2:30:33:ee:a1:66:9d:7a:1a:7d:ce:89: af:e2:bf:57:58:a3:34:92:06:64:60:34:02:5f:e8: ed:e6:59:6e:f4:95:da:10:8a:11:6e:5b:54:54:a2: 6c:b8:ef:6f:dd:ed:20:b1:30:fc:a7:be:7c:a9:c6: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:80:80:D3:A7:79:A7:91:97:CE:53:FF:18:07:86:F0:1C:DD:A1:F0 X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1e:0d:eb:4b:34:a0:ae:0c:26:0f:42:f7:f3:30:b2:12:c0: dd:51:cb:02:77:92:cb:ed:29:9d:8a:4e:6e:e6:54:9f:e6:1a: 04:cd:f3:86:5f:5e:77:de:c3:72:51:34:60:5b:90:c0:78:1c: 54:d5:a9:97:01:30:b1:b7:1e:7f:47:99:f8:72:7b:b6:43:63: 9b:4e:56:1f:d1:c0:57:1b:44:48:68:46:69:75:d5:81:75:f6: 52:21:92:33:3f:ff:fc:7c:aa:1b:09:5a:c1:84:f6:b1:3d:bb: 4c:87:0b:d1:84:57:d3:74:0e:aa:f4:72:45:11:d9:c1:12:c6: db:99:70:74:75:39:cb:b6:e3:ce:53:89:8b:0d:13:9f:7a:f1: ad:d4:ea:2f:af:95:5a:09:18:27:bd:08:3a:9a:88:69:66:a5: 57:2b:72:84:21:56:05:e5:e3:c0:54:2a:55:4d:f0:9b:87:c5: b1:53:1c:e2:1c:77:31:9b:8f:d6:c0:b2:35:18:05:51:12:c5: 82:ff:8f:54:a3:2e:93:f5:fe:09:b6:46:1d:0e:cc:04:9b:83: cc:f7:0b:76:cf:2f:bc:97:73:94:83:a6:00:c0:01:33:9c:ac: 2c:09:10:68:72:06:99:ed:44:c8:41:c4:a2:99:ef:ea:91:8a: f5:d2:80:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjYwMzAxMDU0NzU1WhcNMjYwMzA4MDU0NzU1WjAYMRYwFAYD VQQDEw02OWEzZDMwYi0yOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOJ1rBIF+ZzO6pYzk7RFCe4eoMDOob9+LPAyvMS8XEhlWu790MtKiadGexz0 4pTswchmMx699yi2Y8ILMLXHpMqHK8h7sMdI+6fAeiqKzvGqUQLMOjOtVL/SGkZh swvo4/a2YvH1dB8kMlGtQvLxeS0dr/qeh8xiWlOUrzeozMr3XfJOw2HfgjJU2PG/ j9wvrvqPmhGteRSiU7f752EAjDxGf971TvKJCuXAW+psaaH0vW+mlprJFTQDay4B pUNaF4YJmYviMDPuoWadehp9zomv4r9XWKM0kgZkYDQCX+jt5llu9JXaEIoRbltU VKJsuO9v3e0gsTD8p758qcaZfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiAgNOn eaeRl85T/xgHhvAc3aHwMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFR RGRXakJoQXd5SnBJbG9BNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWx4N60s0oK4MJg9C9/MwshLA3VHLAneSy+0pnYpObuZUn+YaBM3zhl9ed97D clE0YFuQwHgcVNWplwEwsbcef0eZ+HJ7tkNjm05WH9HAVxtESGhGaXXVgXX2UiGS Mz///HyqGwlawYT2sT27TIcL0YRX03QOqvRyRRHZwRLG25lwdHU5y7bjzlOJiw0T n3rxrdTqL6+VWgkYJ70IOpqIaWalVytyhCFWBeXjwFQqVU3wm4fFsVMc4hx3MZuP 1sCyNRgFURLFgv+PVKMuk/X+CbZGHQ7MBJuDzPcLds8vvJdzlIOmAMABM5ysLAkQ aHIGme1EyEHEopnv6pGK9dKAfQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:10:16 2026 by rpki-client