$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: WfPk8P2HZLCEYMxOHhAdWh59q9DGbf+EJ/2E3UPVlho= Subject key identifier: 60:03:3A:D0:44:8B:46:1B:51:97:F3:81:A0:E5:2A:78:4C:8D:9B:04 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 10:00:15 +0000 Manifest this update: Sun 01 Mar 2026 10:00:15 +0000 Manifest next update: Sun 08 Mar 2026 10:00:15 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: uGiC4dbPAdoKnmGAP6BdKi9iGMN+Tzco8mtEBR7ANSE=) 2: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: g0+1PT5qez9GcqrDkre9mHd9DAQlXO634JLUgpdLP1M=) 3: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: vYJPk7KFkk/rKrzwZcbhgjtR/Pi92VUXuzSvIsAoZhg=) 4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: T8+SUWMp7lLCNyIXktANN5lVZd79pGX/sm4qsAqhCs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Mar 1 10:00:15 2026 GMT Not After : Mar 8 10:00:15 2026 GMT Subject: CN=69a40e2f-738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:3a:46:17:52:72:3a:6d:3c:88:bd:fa:69: a1:6a:d3:d4:a2:ad:a7:b0:d9:6b:7f:ff:57:78:12: 28:d1:ee:1d:bf:c1:2d:2d:8c:92:05:5a:78:d8:76: fd:4e:9b:0f:e6:3e:07:70:1c:a6:50:ae:1c:1a:56: 29:16:95:83:5c:0c:d7:82:4d:f5:5c:f7:9b:6a:dc: 23:28:a6:01:e8:57:08:b5:8e:b5:a5:79:74:8a:bf: 25:c6:8c:7b:8d:24:54:b9:70:37:f6:b5:f8:e8:5e: fd:34:9e:b6:76:3a:3d:b4:77:2b:62:db:c3:ec:5b: d1:f7:24:27:3d:a2:89:82:2e:ab:f4:fb:e6:10:db: ed:3f:5e:7a:16:2b:8d:cd:5e:b9:9f:e9:4b:3b:e6: 96:ad:70:10:ee:f6:43:da:cd:16:8c:f9:88:a5:aa: d0:61:0f:bc:5e:a7:6f:cd:3c:7a:66:15:b7:a1:4f: 0a:19:bd:dd:48:df:74:97:ce:21:38:b9:99:b7:f3: e1:ce:93:bd:71:98:7a:ab:7c:52:b8:d8:2d:88:5f: 01:06:80:4f:60:bb:ec:18:3b:36:97:70:2e:9a:0e: 82:f5:8d:0d:44:09:d2:9d:99:a3:54:78:2e:d2:b7: 07:34:0e:86:40:34:12:b5:1c:46:82:2a:4c:3b:35: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:03:3A:D0:44:8B:46:1B:51:97:F3:81:A0:E5:2A:78:4C:8D:9B:04 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b1:3b:db:ae:07:82:bf:f7:2b:98:fc:ac:ad:b3:fc:74:b1: 16:39:0a:12:56:7f:68:c6:e9:6b:02:7e:19:a9:a9:7a:3d:5b: a6:60:ee:2e:aa:0d:88:98:46:00:e4:d1:27:4e:b3:41:97:64: 70:fc:f1:36:56:c6:a3:2e:8a:1f:44:94:af:6c:74:ae:e9:14: 54:e7:b9:08:eb:cb:ba:6a:69:e6:1b:e8:34:7a:53:9b:ab:47: 06:65:08:9b:28:a1:19:58:b6:ff:bb:59:85:e8:04:69:b0:bc: 7b:e6:4c:19:e5:98:2d:22:97:73:fa:23:ad:bd:5a:62:7f:8c: 7b:c4:f4:b9:e3:41:c9:d7:4d:50:68:a5:c9:01:12:e9:85:0e: 67:0c:15:9f:e6:cc:ec:e7:f3:f3:ad:df:3a:64:dd:38:11:51: 02:41:04:35:9c:d8:cf:a8:6c:cc:78:98:c5:d8:4b:f5:b5:2a: ba:fb:a5:66:5b:9b:37:5a:90:b9:12:13:ff:88:8c:16:4b:94: 7c:30:ce:e5:2e:34:47:22:58:97:6d:42:de:55:b5:f3:d1:82: 89:7d:d3:e5:59:22:4f:22:2b:41:27:b8:8d:79:fd:02:35:fb: 30:3f:3f:fe:b5:76:99:84:ec:fa:e1:a1:51:ac:b6:43:f5:7e: 8e:57:c6:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNjAzMDExMDAwMTVaFw0yNjAzMDgxMDAwMTVaMBgxFjAUBgNV BAMTDTY5YTQwZTJmLTczOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jTpGF1JyOm08iL36aaFq09Siraew2Wt//1d4EijR7h2/wS0tjJIFWnjYdv1O mw/mPgdwHKZQrhwaVikWlYNcDNeCTfVc95tq3CMopgHoVwi1jrWleXSKvyXGjHuN JFS5cDf2tfjoXv00nrZ2Oj20dyti28PsW9H3JCc9oomCLqv0++YQ2+0/XnoWK43N Xrmf6Us75patcBDu9kPazRaM+YilqtBhD7xep2/NPHpmFbehTwoZvd1I33SXziE4 uZm38+HOk71xmHqrfFK42C2IXwEGgE9gu+wYOzaXcC6aDoL1jQ1ECdKdmaNUeC7S twc0DoZANBK1HEaCKkw7NbiTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYAM60ESL RhtRl/OBoOUqeEyNmwQwHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjsTvbrgeCv/crmPysrbP8dLEWOQoSVn9oxulrAn4Zqal6PVumYO4uqg2ImEYA 5NEnTrNBl2Rw/PE2VsajLoofRJSvbHSu6RRU57kI68u6amnmG+g0elObq0cGZQib KKEZWLb/u1mF6ARpsLx75kwZ5ZgtIpdz+iOtvVpif4x7xPS540HJ101QaKXJARLp hQ5nDBWf5szs5/Pzrd86ZN04EVECQQQ1nNjPqGzMeJjF2Ev1tSq6+6VmW5s3WpC5 EhP/iIwWS5R8MM7lLjRHIliXbULeVbXz0YKJfdPlWSJPIitBJ7iNef0CNfswPz/+ tXaZhOz64aFRrLZD9X6OV8bw -----END CERTIFICATE-----Generated at Mon Mar 2 03:25:30 2026 by rpki-client