$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: Y9gh/EtpK8+4WFYBcaqMMIR1jOt17new/YB03Afoa1c= Subject key identifier: 34:11:AB:6F:6D:E7:1E:C0:75:FA:51:B9:34:50:D1:26:3D:FD:19:E3 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 0126 Signing time: Sun 01 Mar 2026 06:47:37 +0000 Manifest this update: Sun 01 Mar 2026 06:47:36 +0000 Manifest next update: Sun 08 Mar 2026 06:47:36 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: X8YG2qOxPMvYIW7qXhBaCYxLUueP5t7ZR3FYLiv8IlU=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: ka/hb/wEqxzG+7uBZxa/tAl50+HbZgfedrhKNFCSJiY=) 3: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: xPdwABGTjJ2GEqaqXmGquO4VtiMPpmIGc2xrOME/BtE=) 4: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 79VsC0tk/1wLHjzWqa6w+oI01WTgsbwStpO14mHmHe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Mar 1 06:47:36 2026 GMT Not After : Mar 8 06:47:36 2026 GMT Subject: CN=69a3e109-cffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:68:84:90:a0:a5:3e:67:c3:e2:9d:e4:51: c1:a6:1d:e0:93:90:8b:bf:e1:17:a2:fe:88:bc:1c: 1a:72:57:e7:e9:fd:b6:f8:fc:e2:b5:9c:f6:88:a9: 09:02:de:79:d9:4a:7f:36:6d:bb:32:e6:3a:da:84: 3e:af:84:b3:f0:59:41:58:8a:1d:3e:56:da:7c:9d: 06:1e:12:e1:5b:a8:b7:a8:a5:8e:aa:71:ef:66:02: ba:a3:07:ea:fa:63:6a:81:7c:40:4a:be:0a:7a:c1: ec:8e:08:92:19:3b:03:3a:c1:87:d5:80:d6:ad:13: 81:e0:a7:26:69:8e:77:b3:7c:6a:42:a1:1b:5f:aa: 90:9f:d9:e6:10:42:f7:e7:8e:7d:e7:2e:1b:fb:75: 53:99:7a:5b:89:cb:5a:15:aa:98:1d:27:a1:4a:60: e4:15:45:3a:7c:1d:f8:a3:b9:5c:db:d0:f7:6f:10: 81:a0:70:48:0a:83:e9:fe:ea:ab:54:dd:6c:3c:b1: 24:f8:97:8e:e4:6f:94:ae:b0:47:3e:3e:6d:7a:04: 54:d2:e5:60:60:cc:60:75:3f:07:64:83:1d:3f:5e: 57:1c:de:18:00:06:68:31:f6:a5:44:69:19:4f:3d: 45:7e:09:07:19:86:b2:a4:ab:9b:85:f9:7e:fc:dd: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:11:AB:6F:6D:E7:1E:C0:75:FA:51:B9:34:50:D1:26:3D:FD:19:E3 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:6f:e2:16:89:d4:6f:1a:e9:d1:1d:c7:0c:00:32:97:16:c7: 67:eb:19:17:45:9f:5f:10:8d:4c:d9:16:e5:68:4c:6a:94:f5: e1:3a:6f:cb:3c:9e:2a:24:97:74:76:8d:8e:15:b5:ff:74:05: 54:58:f6:3e:88:03:df:5b:55:c2:1a:a4:94:df:e2:91:c6:ec: c4:98:95:6c:ed:b9:55:3a:54:28:a9:33:4b:1b:de:f1:3f:e3: ca:f4:b7:f6:75:b7:f4:b3:6c:36:01:08:82:ad:d9:8e:f8:3f: 8f:94:1f:c9:2d:24:e3:f3:70:58:c9:09:b4:f5:f9:a8:66:af: e1:67:41:2f:41:60:ef:24:b7:18:ce:3c:64:99:0f:fb:4d:98: 3a:c8:cb:9b:a6:f9:d4:12:73:c5:6a:76:ed:91:3b:37:aa:e2: e6:4b:94:51:66:d6:ec:fe:b6:a1:88:cd:7a:13:0b:e2:05:bf: fa:2f:83:0d:c3:db:08:ef:d1:70:73:b6:e5:2b:34:1b:33:7a: f1:ec:3d:e9:fe:38:a5:97:10:f3:b4:39:81:d4:75:50:ad:e5: b8:c6:87:28:b5:6c:bb:9e:1d:8b:b2:dc:31:7f:90:3a:07:c3: ea:3f:c6:44:7e:a7:f9:e2:5c:4c:93:b8:83:76:0a:bf:f2:32: 55:41:6a:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwMzAxMDY0NzM2WhcNMjYwMzA4MDY0NzM2WjAYMRYwFAYD VQQDEw02OWEzZTEwOS1jZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqElohJCgpT5nw+Kd5FHBph3gk5CLv+EXov6IvBwaclfn6f22+PzitZz2iKkJ At552Up/Nm27MuY62oQ+r4Sz8FlBWIodPlbafJ0GHhLhW6i3qKWOqnHvZgK6owfq +mNqgXxASr4KesHsjgiSGTsDOsGH1YDWrROB4KcmaY53s3xqQqEbX6qQn9nmEEL3 54595y4b+3VTmXpbictaFaqYHSehSmDkFUU6fB34o7lc29D3bxCBoHBICoPp/uqr VN1sPLEk+JeO5G+UrrBHPj5tegRU0uVgYMxgdT8HZIMdP15XHN4YAAZoMfalRGkZ Tz1FfgkHGYaypKubhfl+/N2GYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQRq29t 5x7AdfpRuTRQ0SY9/RnjMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwW/iFonUbxrp0R3HDAAylxbHZ+sZF0WfXxCNTNkW5WhMapT14TpvyzyeKiSX dHaNjhW1/3QFVFj2PogD31tVwhqklN/ikcbsxJiVbO25VTpUKKkzSxve8T/jyvS3 9nW39LNsNgEIgq3Zjvg/j5QfyS0k4/NwWMkJtPX5qGav4WdBL0Fg7yS3GM48ZJkP +02YOsjLm6b51BJzxWp27ZE7N6ri5kuUUWbW7P62oYjNehML4gW/+i+DDcPbCO/R cHO25Ss0GzN68ew96f44pZcQ87Q5gdR1UK3luMaHKLVsu54di7LcMX+QOgfD6j/G RH6n+eJcTJO4g3YKv/IyVUFqbw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:31 2026 by rpki-client