$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: ZdVCdrlpGmh5k1vT4CfAaJGbITSB9khuf2Z865vGAKU= Subject key identifier: 79:53:0E:3F:A2:1E:FA:3F:ED:34:B0:E4:2E:A5:48:05:63:B8:2C:28 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 02B2 Signing time: Sun 01 Mar 2026 02:18:33 +0000 Manifest this update: Sun 01 Mar 2026 02:18:33 +0000 Manifest next update: Sun 08 Mar 2026 02:18:33 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: RXMDMianH2R829PgnOLf6R78+IQlagmQRmJD6QEKgMw=) 2: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4=) 3: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: sR0eTjFYTlKs7mzVHMIl7telIMsp7nYju6MlYaiMBkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Mar 1 02:18:33 2026 GMT Not After : Mar 8 02:18:33 2026 GMT Subject: CN=69a3a1f9-fa0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:4c:35:37:2a:21:88:91:b1:c2:ff:56:8a: 97:0c:e5:45:45:e1:8e:d1:79:f4:d8:e7:ca:81:0b: 88:8d:41:ab:d6:65:c1:6f:39:63:9b:84:a4:b5:33: fb:60:05:b9:81:86:51:c5:5f:d0:6c:65:5e:1a:3c: a5:ff:1f:f3:71:01:ab:0c:6c:5e:c2:41:80:c5:01: 35:fe:3b:9a:9b:94:f9:a1:26:1b:cd:aa:cb:ab:d9: 3a:51:d5:09:55:d6:b4:10:4c:68:64:d9:e6:dd:8b: 92:39:d9:25:c5:6e:ae:33:96:a1:dc:7e:4d:80:79: 9e:ce:a2:12:92:86:a2:c5:b6:7c:69:61:12:ae:6f: b2:54:75:f1:09:66:b6:bf:9f:82:64:a2:8a:73:89: fb:dd:02:c1:f3:f8:3a:ac:c0:13:bc:3d:15:e9:f0: 4a:71:2e:f2:86:ab:65:31:04:7d:02:7b:ff:bb:16: 27:67:fe:29:27:e1:24:51:6e:f6:a1:d6:88:f3:49: fc:62:ed:87:7e:28:0a:a2:a1:b6:95:f6:ab:e2:5a: dc:6d:79:bc:c5:96:e9:60:fa:cb:05:74:77:f6:26: 26:14:8a:d7:dd:fe:3e:61:ab:07:fb:9f:a3:ae:66: 18:8c:da:08:d6:3b:f3:5a:90:d1:78:23:69:64:6a: 70:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:53:0E:3F:A2:1E:FA:3F:ED:34:B0:E4:2E:A5:48:05:63:B8:2C:28 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:94:44:60:e2:4d:94:d6:a4:e7:17:5d:66:1d:d8:de:56:1a: 40:e0:ec:e7:b6:af:29:bc:9d:fb:53:b0:a3:1f:8e:30:17:da: 0e:76:cf:04:97:22:99:e6:ac:09:ea:e4:b1:76:c0:76:39:f9: 32:f3:2d:ac:9e:ac:3c:f4:c4:d9:fe:8c:2a:d0:e3:4c:9f:7f: 57:b0:b0:f5:f8:ff:66:21:94:83:57:c4:6d:45:02:08:df:87: ab:28:05:43:56:1f:2a:3f:cb:78:9b:6b:8b:c4:69:da:12:a7: bd:30:c8:44:a3:68:7f:40:a3:60:eb:1d:26:e3:08:cb:b4:ef: ed:5d:06:7d:c7:45:1e:43:24:ce:04:e3:11:4e:f3:14:7a:1f: df:f6:38:d5:0f:dc:34:6e:f8:bb:2e:76:d1:be:fc:5b:29:1b: 0e:40:39:e2:1d:dd:b3:5a:db:30:a1:4f:b6:ea:aa:b7:97:ed: f6:e5:82:4f:ea:ae:ff:6a:6c:5c:7e:c0:4f:26:96:8c:b3:57: 03:a8:10:51:ed:be:72:5c:0a:49:5f:06:39:76:de:01:9d:94: c9:90:ee:d1:43:fb:9c:2d:0f:dd:b3:11:df:a2:bf:d3:e5:59: d9:de:9c:bd:e3:6b:80:0c:92:a2:67:d6:3e:de:58:2c:48:79: eb:22:c3:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjYwMzAxMDIxODMzWhcNMjYwMzA4MDIxODMzWjAYMRYwFAYD VQQDDA02OWEzYTFmOS1mYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGtMNTcqIYiRscL/VoqXDOVFReGO0Xn02OfKgQuIjUGr1mXBbzljm4SktTP7 YAW5gYZRxV/QbGVeGjyl/x/zcQGrDGxewkGAxQE1/juam5T5oSYbzarLq9k6UdUJ Vda0EExoZNnm3YuSOdklxW6uM5ah3H5NgHmezqISkoaixbZ8aWESrm+yVHXxCWa2 v5+CZKKKc4n73QLB8/g6rMATvD0V6fBKcS7yhqtlMQR9Anv/uxYnZ/4pJ+EkUW72 odaI80n8Yu2HfigKoqG2lfar4lrcbXm8xZbpYPrLBXR39iYmFIrX3f4+YasH+5+j rmYYjNoI1jvzWpDReCNpZGpwVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlTDj+i Hvo/7TSw5C6lSAVjuCwoMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl5REYOJNlNak5xddZh3Y3lYaQODs57avKbyd+1Owox+OMBfaDnbPBJcimeas CerksXbAdjn5MvMtrJ6sPPTE2f6MKtDjTJ9/V7Cw9fj/ZiGUg1fEbUUCCN+HqygF Q1YfKj/LeJtri8Rp2hKnvTDIRKNof0CjYOsdJuMIy7Tv7V0GfcdFHkMkzgTjEU7z FHof3/Y41Q/cNG74uy520b78WykbDkA54h3ds1rbMKFPtuqqt5ft9uWCT+qu/2ps XH7ATyaWjLNXA6gQUe2+clwKSV8GOXbeAZ2UyZDu0UP7nC0P3bMR36K/0+VZ2d6c veNrgAySomfWPt5YLEh56yLDtg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:59 2026 by rpki-client