$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: I8x7EG/KnzMqmfF4K18iqR+EKn4kBaQMvUUvcqpaB1k= Subject key identifier: 7C:BD:B5:B9:AE:48:8E:AB:FA:14:C2:0B:24:70:A1:DF:8B:24:AC:A8 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 020D Signing time: Sun 01 Mar 2026 03:44:05 +0000 Manifest this update: Sun 01 Mar 2026 03:44:05 +0000 Manifest next update: Sun 08 Mar 2026 03:44:05 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: AgFL+uWxdrofXnphMjtA6LcWc8loacejKh2lg72akwQ=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Mar 1 03:44:05 2026 GMT Not After : Mar 8 03:44:05 2026 GMT Subject: CN=69a3b605-1113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c3:5d:0c:f4:84:dd:28:9b:d9:04:5a:34:07: 78:aa:61:46:06:6a:8d:c0:15:73:bf:dd:39:b9:13: 51:de:f9:26:1f:bf:43:c2:ca:77:19:fb:f9:a2:d6: e5:0e:d5:ea:ef:b3:eb:a7:00:87:69:35:07:cd:09: b0:7d:8c:e3:23:fd:17:2f:0b:ab:c0:80:d3:6b:59: be:9c:5b:9d:d0:e8:4d:5e:0e:4e:b5:03:9d:bb:3b: 9c:a8:30:42:1c:38:31:b2:a8:08:e0:26:c1:09:58: 75:e0:cb:29:49:e0:78:87:48:6a:f9:95:94:1f:48: a4:29:39:c1:f6:07:f0:b8:69:2a:04:61:4e:7b:70: cb:33:77:40:9b:63:d8:2e:c9:9e:97:aa:3d:56:be: f5:e2:20:b2:4d:bf:e9:60:fa:60:78:52:61:12:3c: 0a:53:3b:d5:5b:28:58:a7:2e:a4:dc:82:d3:86:66: 8b:a5:bd:a8:ef:68:2f:0c:6f:fd:db:da:00:d0:07: 3f:6a:97:57:69:83:63:1a:dc:cb:f3:a2:16:23:25: bd:8f:72:aa:6f:68:08:9e:34:a1:ce:35:31:97:6b: 6a:c4:cc:e6:72:df:87:c1:fb:3b:da:19:12:f3:c1: 89:22:e8:77:6c:f8:ce:f2:2e:1c:a3:5e:16:0c:49: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BD:B5:B9:AE:48:8E:AB:FA:14:C2:0B:24:70:A1:DF:8B:24:AC:A8 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:07:fe:62:a0:7c:3d:9f:4d:dc:61:7f:86:ca:ba:72:34:91: 4f:50:82:09:70:29:7a:80:18:fd:a5:13:a7:63:94:0c:c1:04: 76:23:d1:f0:d9:22:c4:93:e6:35:58:f9:3f:5a:29:9b:51:85: ac:48:b5:bf:33:3e:d4:92:d8:72:c4:cf:7a:6c:12:9d:6a:b6: 62:8e:1e:c8:e0:29:a8:06:fe:02:95:a9:31:ae:ea:d3:2a:92: 1d:14:9c:dc:cd:23:d3:5e:8a:9d:ec:0c:d1:c2:07:3d:d6:b2: 39:ad:c5:9a:90:49:18:97:e8:28:98:d4:9b:8b:ed:cb:33:e0: 2a:48:30:d5:73:9a:99:02:df:74:f5:c9:ce:ba:48:b0:68:07: 7e:31:6f:1c:16:e3:fd:89:4b:e6:2f:8a:88:00:6f:93:4b:11: 0c:4d:47:2e:b1:78:6f:b0:0a:85:d5:35:e0:10:f8:ca:25:1d: 0b:ba:1e:db:7c:5b:cd:c2:2d:86:62:c0:38:62:82:78:7b:d8: e8:13:9a:7b:d3:f3:e1:ac:9e:c9:f3:69:f3:46:d6:31:60:0a: 63:b4:64:00:20:2e:fa:04:72:d7:18:68:b0:63:13:2b:00:3d: 70:d6:83:7f:c8:6c:90:81:9c:b9:0c:5e:5a:9c:73:54:d1:41: e4:09:31:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjYwMzAxMDM0NDA1WhcNMjYwMzA4MDM0NDA1WjAYMRYwFAYD VQQDDA02OWEzYjYwNS0xMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAicNdDPSE3Sib2QRaNAd4qmFGBmqNwBVzv905uRNR3vkmH79Dwsp3Gfv5otbl DtXq77PrpwCHaTUHzQmwfYzjI/0XLwurwIDTa1m+nFud0OhNXg5OtQOduzucqDBC HDgxsqgI4CbBCVh14MspSeB4h0hq+ZWUH0ikKTnB9gfwuGkqBGFOe3DLM3dAm2PY Lsmel6o9Vr714iCyTb/pYPpgeFJhEjwKUzvVWyhYpy6k3ILThmaLpb2o72gvDG/9 29oA0Ac/apdXaYNjGtzL86IWIyW9j3Kqb2gInjShzjUxl2tqxMzmct+Hwfs72hkS 88GJIuh3bPjO8i4co14WDEmQvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHy9tbmu SI6r+hTCCyRwod+LJKyoMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAawf+YqB8PZ9N3GF/hsq6cjSRT1CCCXApeoAY/aUTp2OUDMEEdiPR8NkixJPm NVj5P1opm1GFrEi1vzM+1JLYcsTPemwSnWq2Yo4eyOApqAb+ApWpMa7q0yqSHRSc 3M0j016KnewM0cIHPdayOa3FmpBJGJfoKJjUm4vtyzPgKkgw1XOamQLfdPXJzrpI sGgHfjFvHBbj/YlL5i+KiABvk0sRDE1HLrF4b7AKhdU14BD4yiUdC7oe23xbzcIt hmLAOGKCeHvY6BOae9Pz4ayeyfNp80bWMWAKY7RkACAu+gRy1xhosGMTKwA9cNaD f8hskIGcuQxeWpxzVNFB5Akx1g== -----END CERTIFICATE-----Generated at Sun Mar 1 20:30:16 2026 by rpki-client