$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: qQOJw3a7iUvXpBIydkHAn40bXF83dEExt4fBD+Fr4K4= Subject key identifier: D1:E9:14:D6:89:79:D6:40:49:81:79:2E:B4:65:D4:87:71:5A:D7:91 Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 0350 Signing time: Sun 01 Mar 2026 01:48:06 +0000 Manifest this update: Sun 01 Mar 2026 01:48:05 +0000 Manifest next update: Sun 08 Mar 2026 01:48:05 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 8eQGADuROKkHlfF/P1lO95zLVrpxjyaZkOx2H9qm+fs=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Mar 1 01:48:05 2026 GMT Not After : Mar 8 01:48:05 2026 GMT Subject: CN=69a39ad6-61f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:ab:8e:97:1e:7e:51:28:2d:9a:c6:de:db: e8:0a:4f:e0:5c:ca:7c:cc:6a:35:c4:d5:7a:8d:a1: f9:77:ae:52:e0:45:75:92:d1:e4:39:37:ac:0b:85: 1d:31:78:fe:4c:54:01:59:ff:7d:a6:43:69:6f:6d: db:54:28:c8:6c:99:4a:37:3b:2f:08:ce:03:26:1b: 9f:60:6c:fc:22:04:2b:18:2c:a1:5c:25:91:74:16: ba:a1:1b:a4:3a:88:80:3d:4f:2b:fa:ab:ae:1b:bc: 46:f6:26:80:08:f0:92:a7:9c:86:ce:74:46:53:0e: 98:f9:41:8c:8c:e7:3b:70:f4:b6:71:66:19:eb:63: cc:d1:a9:7f:de:dc:0b:bd:d7:d8:9f:58:46:18:10: aa:f3:c9:39:f5:c4:92:ac:aa:8e:e9:b0:5f:b2:c7: 36:e9:dd:cd:0d:8c:8f:33:eb:62:73:cc:4c:a2:1f: ba:e3:ef:ad:82:d6:f3:fa:16:46:b0:ab:dc:df:d6: 75:cc:b6:8f:7d:ad:fc:ce:ee:6a:7b:02:8b:f2:b9: b7:ec:9d:81:79:c6:e0:d9:e7:1d:12:6c:d4:58:62: ff:d1:77:32:71:05:a1:c6:24:20:9c:e7:d7:7e:16: 3b:fe:ed:6d:01:8e:9b:f7:60:92:7a:3c:b5:7c:ea: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:14:D6:89:79:D6:40:49:81:79:2E:B4:65:D4:87:71:5A:D7:91 X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:54:1f:ae:da:90:5d:88:6d:6a:3e:42:87:73:15:ac:91: 6a:ec:8b:0d:b8:00:d0:57:10:a7:f2:a7:8b:72:78:69:e1:f1: 0e:36:f4:69:4e:2c:79:a9:ba:03:b3:33:9f:d6:a4:c0:1f:73: 42:c3:62:e5:22:5e:d4:a1:88:25:0b:9b:78:af:02:48:fc:bb: 3b:d9:38:9a:d9:03:4e:24:a5:66:6b:bf:e2:a3:e5:fe:11:7c: 8b:6a:8e:7a:d4:76:20:4c:38:46:8b:3f:6c:07:d9:33:84:79: 1e:44:23:1d:23:56:c0:e2:15:be:9c:63:11:5e:1b:55:02:b1: cf:b6:65:c4:35:dd:07:30:4f:79:f0:ab:f5:9f:5e:e6:9e:25: 85:32:3b:3c:ac:da:67:5e:55:f5:92:ad:53:4f:0a:d9:c3:bc: ef:a9:0f:74:f9:9b:84:f3:35:6f:62:e4:82:17:bb:a8:bc:fa: 7d:a8:68:5d:a8:da:da:01:be:f2:c9:df:2d:8a:54:87:8f:84: 3b:b8:69:ac:33:c5:38:a0:73:20:f7:96:7b:10:d2:67:af:fd: 1a:9f:68:17:9a:fd:98:f5:50:a5:a4:94:ea:0b:a7:9d:9c:af: b8:cb:76:12:77:9a:26:f8:95:ab:30:c4:4f:ff:3a:e3:3c:0f: 16:35:aa:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjYwMzAxMDE0ODA1WhcNMjYwMzA4MDE0ODA1WjAYMRYwFAYD VQQDDA02OWEzOWFkNi02MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1+rjpceflEoLZrG3tvoCk/gXMp8zGo1xNV6jaH5d65S4EV1ktHkOTesC4Ud MXj+TFQBWf99pkNpb23bVCjIbJlKNzsvCM4DJhufYGz8IgQrGCyhXCWRdBa6oRuk OoiAPU8r+quuG7xG9iaACPCSp5yGznRGUw6Y+UGMjOc7cPS2cWYZ62PM0al/3twL vdfYn1hGGBCq88k59cSSrKqO6bBfssc26d3NDYyPM+tic8xMoh+64++tgtbz+hZG sKvc39Z1zLaPfa38zu5qewKL8rm37J2Becbg2ecdEmzUWGL/0XcycQWhxiQgnOfX fhY7/u1tAY6b92CSejy1fOq6vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHpFNaJ edZASYF5LrRl1IdxWteRMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhLBUH67akF2IbWo+QodzFayRauyLDbgA0FcQp/Kni3J4aeHxDjb0aU4seam6 A7Mzn9akwB9zQsNi5SJe1KGIJQubeK8CSPy7O9k4mtkDTiSlZmu/4qPl/hF8i2qO etR2IEw4Ros/bAfZM4R5HkQjHSNWwOIVvpxjEV4bVQKxz7ZlxDXdBzBPefCr9Z9e 5p4lhTI7PKzaZ15V9ZKtU08K2cO876kPdPmbhPM1b2Lkghe7qLz6fahoXaja2gG+ 8snfLYpUh4+EO7hprDPFOKBzIPeWexDSZ6/9Gp9oF5r9mPVQpaSU6gunnZyvuMt2 EneaJviVqzDET/864zwPFjWq3Q== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:47 2026 by rpki-client