$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: m9b1UCm5jCQvta+l8hi9riwQitPPmLL4o5684TJ/B1k= Subject key identifier: 47:B9:1D:88:95:F0:77:0A:55:98:8F:F7:A7:1D:E1:BC:1A:D0:3F:92 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0A28 Signing time: Sat 28 Feb 2026 20:00:51 +0000 Manifest this update: Sat 28 Feb 2026 20:00:51 +0000 Manifest next update: Sat 07 Mar 2026 20:00:51 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: 7egEV9NbJ2lwTfkv9zzhDF+IQo6260xYErDGp9E3sd0=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: BtxRntrFd2gslQewNiqZhW9mWCF+vgLPC26me/9r2bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Feb 28 20:00:51 2026 GMT Not After : Mar 7 20:00:51 2026 GMT Subject: CN=69a34973-bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:5d:b9:aa:78:55:bd:fc:44:9f:8d:e0:cc: 60:fc:05:8b:a5:96:85:a6:5a:40:ee:b1:e4:eb:02: 34:78:12:2b:49:ff:54:d5:69:cb:a4:6a:78:04:06: ca:fe:fc:1c:42:19:c9:ba:20:e5:49:68:2d:f1:a4: d6:68:8b:37:f9:29:3c:eb:fa:b3:de:ee:5e:35:c5: 70:98:82:01:a7:27:99:ce:25:52:cb:da:7b:d7:86: af:95:f2:c9:8a:6f:34:d5:31:c6:65:20:c4:35:e5: 8c:ae:49:24:0a:4f:49:22:10:05:40:15:e0:6c:f5: 30:de:ca:22:d5:3d:05:79:fe:2c:98:26:1e:da:02: 54:ba:04:f1:61:9c:98:16:7a:af:38:8f:c9:b3:f4: 60:7c:99:32:4c:7c:fc:80:32:68:7e:ab:84:34:20: f3:7a:d8:91:16:1b:24:f9:41:82:a6:94:65:d8:e4: 61:af:14:36:82:f9:6a:d9:63:7c:12:ec:12:06:dc: 92:62:3f:31:08:30:56:55:9b:62:85:73:fd:ce:36: 20:65:37:61:cb:55:67:5b:73:73:91:6a:3e:da:ce: ed:62:6a:5c:cf:67:c2:ee:7a:8e:0d:b0:73:27:1f: 37:f6:73:8b:f1:a3:08:e2:73:9c:97:70:c6:7a:a8: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:1D:88:95:F0:77:0A:55:98:8F:F7:A7:1D:E1:BC:1A:D0:3F:92 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c3:46:7a:e3:6f:d8:22:cf:b1:76:6b:21:68:69:c6:a9:2b: c3:ce:87:5b:98:28:79:09:be:de:24:7d:03:98:43:34:6c:23: af:80:ab:bd:f9:ae:26:a5:8a:88:c2:97:5e:01:0a:17:33:50: 15:15:5c:80:38:74:ad:78:ec:57:98:cb:80:44:d8:b9:57:ca: 23:d3:d0:cd:d3:d9:52:ea:c8:74:c6:1b:c9:93:0d:be:f6:a8: 9c:48:0a:13:58:71:b8:c4:8a:c6:b6:98:49:cd:ed:90:ba:3f: af:b3:c6:a4:dc:7c:79:4f:98:d5:42:66:e5:5d:b8:42:12:2f: f5:b3:87:62:2a:5d:2f:95:1a:52:0e:a8:f5:aa:d5:49:45:d9: 3e:6d:e4:a1:c2:2e:72:cc:7f:6b:55:63:15:66:0e:7b:2f:fd: c8:f8:fc:5e:43:ef:79:c4:18:84:f1:4b:78:90:18:62:cd:45: 69:80:45:fe:50:d0:a5:f2:c1:7a:f2:32:55:b5:2f:1d:c3:c5: c6:97:70:99:84:a1:36:6a:50:ee:ef:f8:0f:ab:dc:c6:ab:26: 1a:54:70:30:9f:2a:34:ae:55:dd:a2:3e:bf:d4:bb:5b:3b:d4: 53:39:01:50:0f:9b:b8:66:24:d7:67:39:ba:08:3e:16:f5:38: 7f:f3:36:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjYwMjI4MjAwMDUxWhcNMjYwMzA3MjAwMDUxWjAYMRYwFAYD VQQDDA02OWEzNDk3My1iYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojNduap4Vb38RJ+N4Mxg/AWLpZaFplpA7rHk6wI0eBIrSf9U1WnLpGp4BAbK /vwcQhnJuiDlSWgt8aTWaIs3+Sk86/qz3u5eNcVwmIIBpyeZziVSy9p714avlfLJ im801THGZSDENeWMrkkkCk9JIhAFQBXgbPUw3soi1T0Fef4smCYe2gJUugTxYZyY FnqvOI/Js/RgfJkyTHz8gDJofquENCDzetiRFhsk+UGCppRl2ORhrxQ2gvlq2WN8 EuwSBtySYj8xCDBWVZtihXP9zjYgZTdhy1VnW3NzkWo+2s7tYmpcz2fC7nqODbBz Jx839nOL8aMI4nOcl3DGeqgOyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEe5HYiV 8HcKVZiP96cd4bwa0D+SMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgsNGeuNv2CLPsXZrIWhpxqkrw86HW5goeQm+3iR9A5hDNGwjr4CrvfmuJqWK iMKXXgEKFzNQFRVcgDh0rXjsV5jLgETYuVfKI9PQzdPZUurIdMYbyZMNvvaonEgK E1hxuMSKxraYSc3tkLo/r7PGpNx8eU+Y1UJm5V24QhIv9bOHYipdL5UaUg6o9arV SUXZPm3kocIucsx/a1VjFWYOey/9yPj8XkPvecQYhPFLeJAYYs1FaYBF/lDQpfLB evIyVbUvHcPFxpdwmYShNmpQ7u/4D6vcxqsmGlRwMJ8qNK5V3aI+v9S7WzvUUzkB UA+buGYk12c5ugg+FvU4f/M25w== -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:56 2026 by rpki-client