$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: oIkms7NDa49IviJPi1ig94NYAbFDoP4Q/BOSiEAkJuw= Subject key identifier: A6:57:16:6C:EB:BA:4D:A7:EA:16:A8:CE:24:29:E4:12:7F:6B:E3:1B Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 0238 Signing time: Sun 01 Mar 2026 23:52:45 +0000 Manifest this update: Sun 01 Mar 2026 23:52:43 +0000 Manifest next update: Sun 08 Mar 2026 23:52:43 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 31JE2DLEc2IhrwIFgnXVMuI9nIZEN5DYTZ1zNT+X9d0=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Mar 1 23:52:43 2026 GMT Not After : Mar 8 23:52:43 2026 GMT Subject: CN=69a4d14c-65f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:3c:66:98:ce:6e:dc:4d:95:93:06:e9:26: 9b:4c:77:3c:ab:9c:8b:bd:67:56:0d:42:ca:4d:b8: e6:88:1c:45:99:17:c7:d5:6b:e4:8b:e3:17:6b:3f: fc:0a:5a:08:d6:9e:03:03:76:d6:fb:28:e7:db:99: b0:a3:62:9f:4f:3a:2e:f0:de:8b:7f:f5:6a:d7:f6: a0:56:6a:1f:95:c2:5a:14:f6:ad:ae:6a:82:8b:66: cd:cb:cb:01:86:d5:f7:49:4b:8c:29:20:e2:a8:9f: 25:72:d7:0a:07:ff:67:80:6f:0f:db:34:40:11:83: 7c:2d:7d:4d:4b:fc:05:57:69:a9:49:33:89:9d:93: 04:cf:d4:84:d9:40:32:28:fc:c9:d7:f1:a3:fc:30: f0:91:53:8b:3d:b9:35:73:9a:2e:41:03:62:b0:c3: d9:48:62:a3:98:63:88:c7:0e:ab:8c:42:10:53:67: c7:d3:6e:8d:21:6f:ff:eb:c4:1c:65:26:2f:85:d4: 5a:73:5b:fd:55:bb:89:ce:23:0b:f8:2c:33:e7:64: b1:27:f3:d9:ea:ef:cb:3e:ad:ff:41:e3:dc:95:e9: f6:69:4c:a7:3a:59:ce:b7:a6:af:8c:25:ea:43:42: 4b:c9:d5:c1:bc:cf:a4:14:58:bb:5c:47:ab:bd:7d: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:16:6C:EB:BA:4D:A7:EA:16:A8:CE:24:29:E4:12:7F:6B:E3:1B X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5d:3b:52:2a:b0:e3:23:97:70:03:49:76:52:d2:f3:83:82: 51:e6:d6:8b:93:7e:f8:75:03:38:7a:9e:44:e2:15:2c:66:d7: 79:e5:3e:02:25:f2:fe:b5:6d:4f:f8:65:5c:49:20:60:e0:00: 00:ab:57:8a:89:c2:55:65:6f:b0:ff:2b:6a:ae:fe:b7:59:d1: 41:aa:69:04:06:51:aa:ff:ad:6f:7e:de:b0:52:75:b9:89:16: 2e:52:3e:6c:cf:bb:37:21:69:5f:1e:01:ea:8a:bb:d6:5b:25: 0b:ed:75:0f:c0:a0:e4:32:bc:d5:28:9b:73:9b:cc:92:4d:fe: 5a:7a:26:46:5a:a8:53:4e:05:46:11:a4:96:89:0b:84:9a:2c: 3e:92:1f:ab:2c:36:5a:3e:64:1a:c6:b0:b6:d2:a4:47:ab:ae: 6b:fc:cc:b2:ba:1e:93:aa:01:23:1e:15:23:95:c1:a3:44:dd: 3b:9b:3d:33:c1:aa:24:67:bd:22:a4:7c:e6:83:83:d4:45:fc: 0d:7b:3a:52:0c:70:65:e1:16:e6:a0:68:d7:68:e2:d3:a1:46: 8a:98:15:39:73:fc:02:52:15:5d:aa:80:a5:3b:dd:ca:ed:28: 5e:83:ab:40:76:7d:ff:af:eb:18:3a:c1:f0:dd:d5:9f:77:aa: df:ca:a7:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjYwMzAxMjM1MjQzWhcNMjYwMzA4MjM1MjQzWjAYMRYwFAYD VQQDEw02OWE0ZDE0Yy02NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5M8ZpjObtxNlZMG6SabTHc8q5yLvWdWDULKTbjmiBxFmRfH1Wvki+MXaz/8 CloI1p4DA3bW+yjn25mwo2KfTzou8N6Lf/Vq1/agVmoflcJaFPatrmqCi2bNy8sB htX3SUuMKSDiqJ8lctcKB/9ngG8P2zRAEYN8LX1NS/wFV2mpSTOJnZMEz9SE2UAy KPzJ1/Gj/DDwkVOLPbk1c5ouQQNisMPZSGKjmGOIxw6rjEIQU2fH026NIW//68Qc ZSYvhdRac1v9VbuJziML+Cwz52SxJ/PZ6u/LPq3/QePclen2aUynOlnOt6avjCXq Q0JLydXBvM+kFFi7XEervX29+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZXFmzr uk2n6haoziQp5BJ/a+MbMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj107Uiqw4yOXcANJdlLS84OCUebWi5N++HUDOHqeROIVLGbXeeU+AiXy/rVt T/hlXEkgYOAAAKtXionCVWVvsP8raq7+t1nRQappBAZRqv+tb37esFJ1uYkWLlI+ bM+7NyFpXx4B6oq71lslC+11D8Cg5DK81Sibc5vMkk3+WnomRlqoU04FRhGklokL hJosPpIfqyw2Wj5kGsawttKkR6uua/zMsroek6oBIx4VI5XBo0TdO5s9M8GqJGe9 IqR85oOD1EX8DXs6UgxwZeEW5qBo12ji06FGipgVOXP8AlIVXaqApTvdyu0oXoOr QHZ9/6/rGDrB8N3Vn3eq38qncg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:50 2026 by rpki-client