$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: bwv9S2ZPIC418DMolTX2vhndE/Xnk95gqZO6s4fS3I8= Subject key identifier: 1F:51:AD:70:93:C9:E4:F8:D3:37:78:2C:E9:03:70:9C:4F:B7:CB:D4 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 0121 Signing time: Sun 01 Mar 2026 06:52:04 +0000 Manifest this update: Sun 01 Mar 2026 06:52:04 +0000 Manifest next update: Sun 08 Mar 2026 06:52:04 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: 0Y1VZxsPv5MWiOn+Nx70vPRC456/2Zi8XlupkzwbSIA=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: 5VNZ8rNXbQQKdKelf/v7rMupqWLx2zXfYFtsUljtzac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Mar 1 06:52:04 2026 GMT Not After : Mar 8 06:52:04 2026 GMT Subject: CN=69a3e214-cf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:2c:a6:39:9a:4a:2c:09:69:86:2b:f1:77: eb:35:92:39:6a:81:89:76:45:01:e0:8b:55:2a:70: 03:60:75:4f:39:c4:05:38:8c:57:26:cf:96:2f:78: 89:8a:07:a7:ed:2e:9e:07:4c:b8:91:eb:1a:ae:16: 0f:8e:29:f8:4c:f9:c6:26:33:62:c4:b9:99:7f:e1: c5:e6:7c:c5:33:60:23:f3:b0:ee:38:95:a4:00:16: c1:13:33:fe:5a:e1:49:21:b5:00:c4:62:e9:d1:f0: 4f:97:7a:df:0a:68:6b:d7:d1:9a:f6:31:96:d2:93: a6:04:9e:45:4c:99:d9:65:95:7b:cc:0a:cb:12:f6: 0f:25:cd:b9:a4:56:56:b7:07:39:ec:65:9d:47:ae: d0:2c:c2:98:f5:6b:31:7e:6d:3b:86:11:00:d4:1e: d1:65:af:a9:63:82:3d:8f:55:51:25:a4:b6:34:dc: b7:d2:18:3b:dd:1e:e0:ff:df:39:e1:4e:3a:f3:1b: 5b:54:2b:cb:0d:ec:83:ef:08:e4:35:1f:51:9e:34: 08:3b:ca:16:06:4f:22:fa:a3:bc:a4:a7:72:15:5c: be:5f:36:d8:36:d0:7e:2b:49:a9:ef:61:87:da:de: 69:97:e3:6f:a1:3b:7f:fb:18:8b:c4:69:07:26:db: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:51:AD:70:93:C9:E4:F8:D3:37:78:2C:E9:03:70:9C:4F:B7:CB:D4 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:26:b5:f1:6e:64:98:4a:42:a5:6c:fd:46:4d:9e:81:29:52: 37:73:09:af:da:f5:8f:67:a5:fa:d3:d9:78:ee:c7:79:cd:35: 2a:1d:03:c7:78:b9:7f:bf:95:dd:29:57:ef:28:2b:06:18:73: df:90:da:f3:76:7f:77:e9:7b:52:ca:30:b1:d4:e3:79:04:0f: 91:81:15:90:e2:6d:43:6b:2b:5d:14:44:d5:22:c0:de:9d:7a: 9b:be:9f:73:78:ba:4d:7e:2c:9e:f1:bf:8b:79:a5:f3:df:4a: e8:fb:1d:bf:a5:66:31:e1:6b:51:2d:8b:dd:7b:69:b0:41:41: ff:63:67:ea:6e:0f:e9:f9:f4:72:e4:c6:99:76:f6:9a:bd:08: cf:50:f8:62:a0:5c:8f:be:c2:29:2a:39:21:81:26:12:23:ce: 8d:8f:3f:d7:70:de:4e:1a:a0:c5:9b:0b:c5:ff:54:bd:54:db: e7:e0:94:f2:2a:e5:6c:c2:1e:ca:09:61:4a:70:59:ec:64:77: 48:f2:b7:11:c1:f4:c1:71:61:2e:0b:f9:f2:f1:34:47:8f:c3: 54:47:a2:fb:81:92:0a:eb:0a:2c:82:d5:75:6a:e4:76:b9:c7: 91:82:27:ef:89:68:d1:82:e7:a1:a9:ef:9f:75:70:b2:2a:ea: ec:0a:4c:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjYwMzAxMDY1MjA0WhcNMjYwMzA4MDY1MjA0WjAYMRYwFAYD VQQDEw02OWEzZTIxNC1jZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjfwspjmaSiwJaYYr8XfrNZI5aoGJdkUB4ItVKnADYHVPOcQFOIxXJs+WL3iJ igen7S6eB0y4kesarhYPjin4TPnGJjNixLmZf+HF5nzFM2Aj87DuOJWkABbBEzP+ WuFJIbUAxGLp0fBPl3rfCmhr19Ga9jGW0pOmBJ5FTJnZZZV7zArLEvYPJc25pFZW twc57GWdR67QLMKY9Wsxfm07hhEA1B7RZa+pY4I9j1VRJaS2NNy30hg73R7g/985 4U468xtbVCvLDeyD7wjkNR9RnjQIO8oWBk8i+qO8pKdyFVy+XzbYNtB+K0mp72GH 2t5pl+NvoTt/+xiLxGkHJtvkUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9RrXCT yeT40zd4LOkDcJxPt8vUMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACSa18W5kmEpCpWz9Rk2egSlSN3MJr9r1j2el+tPZeO7Hec01Kh0Dx3i5f7+V 3SlX7ygrBhhz35Da83Z/d+l7UsowsdTjeQQPkYEVkOJtQ2srXRRE1SLA3p16m76f c3i6TX4snvG/i3ml899K6Psdv6VmMeFrUS2L3XtpsEFB/2Nn6m4P6fn0cuTGmXb2 mr0Iz1D4YqBcj77CKSo5IYEmEiPOjY8/13DeThqgxZsLxf9UvVTb5+CU8irlbMIe yglhSnBZ7GR3SPK3EcH0wXFhLgv58vE0R4/DVEei+4GSCusKLILVdWrkdrnHkYIn 74lo0YLnoanvn3Vwsirq7ApMlA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:46 2026 by rpki-client