$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: EKxPkmqCiLWnxAEBMXmZ9zb7DQGZkso4TfI2Aqwf0Og= Subject key identifier: F8:C3:E7:46:F9:BA:A2:5D:F7:09:0B:15:2A:EE:46:07:68:BC:99:E5 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 01EC Signing time: Sun 01 Mar 2026 04:06:31 +0000 Manifest this update: Sun 01 Mar 2026 04:06:30 +0000 Manifest next update: Sun 08 Mar 2026 04:06:30 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: 0pgoL5IT63MXRf7SDUOG+83LQG4mq79qDNXrhUxF070=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: sLQoRFbBh4I+Q9+Kwgifp5lKDCoMhLma6zjy4BIW7WQ=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: EprsArqX10tciUDnJyTtwLBO1znf5648IY94YSIb7dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Mar 1 04:06:30 2026 GMT Not After : Mar 8 04:06:30 2026 GMT Subject: CN=69a3bb46-da4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:b9:7c:3b:d0:2a:31:73:d0:41:1f:f9:e5: d3:85:14:ed:15:7e:f4:ed:2a:40:e3:6d:41:ac:f4: 9c:df:f9:92:e0:8b:29:49:d2:7f:7e:bc:f9:3b:dc: be:d9:51:09:9f:9f:19:ab:83:af:23:c2:fb:3b:66: d6:6d:6e:34:7e:db:88:87:16:77:30:1b:92:3a:94: 0b:24:e7:99:2d:50:29:4f:e7:9a:1b:50:5f:d6:ff: 87:f5:bc:4e:2c:5a:30:31:28:9c:8d:54:6a:7e:c3: 69:b4:50:8d:ed:12:62:be:7b:89:9a:07:d8:cf:41: 69:13:af:35:fe:b7:a8:eb:2f:68:bd:aa:2b:df:23: d4:86:d4:52:08:2b:eb:3b:54:8d:53:09:fe:49:21: 88:9d:13:bf:1d:0b:9a:22:2e:80:01:e6:3d:63:56: f5:f9:ad:f0:52:60:3f:76:bb:cb:ae:8e:a6:a4:d5: 46:03:44:ea:c5:2a:09:27:45:dd:76:1b:5d:1e:06: 6d:b6:e4:07:42:d9:c3:e2:98:f3:48:a9:da:8b:b8: 37:39:74:1e:03:a8:6b:0d:98:01:f0:f1:c1:ea:7a: 10:85:d4:2f:3c:28:dd:66:59:60:35:fe:cd:88:87: d1:62:a3:8b:04:12:1c:50:06:d2:df:97:9c:4d:53: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C3:E7:46:F9:BA:A2:5D:F7:09:0B:15:2A:EE:46:07:68:BC:99:E5 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c9:75:44:ac:fe:98:d9:6b:5c:69:f1:35:15:5f:a4:9a:cf: 6d:fc:9b:79:89:7c:37:98:f2:95:e1:90:2a:f1:a4:8b:4d:db: 92:f8:9b:c2:b9:9d:50:9a:3d:ab:6a:89:d8:33:5b:97:0e:48: 63:c8:2f:d1:a8:f1:5f:10:6e:3c:ac:e4:80:14:5b:d6:9a:a4: f1:b2:59:d2:28:0b:74:39:4e:ae:bf:16:b8:c7:32:b3:c8:ae: 3b:b9:07:73:34:1e:bb:57:66:ca:ae:26:c2:e4:87:20:96:ba: 7f:24:49:ca:b5:d2:6e:0b:7e:ec:fd:bf:e6:9f:e7:0d:70:52: bc:14:5b:49:bf:79:76:38:5b:9f:c7:12:9b:32:00:9e:b1:ef: b9:e0:71:46:98:3a:7a:6d:b4:ee:d4:2f:9f:f8:8e:94:29:df: 1b:e5:29:22:01:c2:49:f2:39:e6:d4:cc:a8:43:45:b1:3b:ab: 37:82:29:e6:e7:6a:20:6b:29:12:94:ac:af:c9:ee:b0:84:66: 59:64:8b:cd:92:e1:cc:cd:d7:17:7f:89:3c:92:df:4a:8b:9d: af:13:e2:01:47:8e:d5:62:d8:aa:a6:7f:1e:ff:4b:1c:7a:58: 2d:c0:10:4e:89:33:f4:48:c1:d5:a3:7d:5e:11:96:5b:8d:2e: 0e:c0:e5:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjYwMzAxMDQwNjMwWhcNMjYwMzA4MDQwNjMwWjAYMRYwFAYD VQQDDA02OWEzYmI0Ni1kYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFS5fDvQKjFz0EEf+eXThRTtFX707SpA421BrPSc3/mS4IspSdJ/frz5O9y+ 2VEJn58Zq4OvI8L7O2bWbW40ftuIhxZ3MBuSOpQLJOeZLVApT+eaG1Bf1v+H9bxO LFowMSicjVRqfsNptFCN7RJivnuJmgfYz0FpE681/reo6y9ovaor3yPUhtRSCCvr O1SNUwn+SSGInRO/HQuaIi6AAeY9Y1b1+a3wUmA/drvLro6mpNVGA0TqxSoJJ0Xd dhtdHgZttuQHQtnD4pjzSKnai7g3OXQeA6hrDZgB8PHB6noQhdQvPCjdZllgNf7N iIfRYqOLBBIcUAbS35ecTVM1PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjD50b5 uqJd9wkLFSruRgdovJnlMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcl1RKz+mNlrXGnxNRVfpJrPbfybeYl8N5jyleGQKvGki03bkvibwrmdUJo9 q2qJ2DNblw5IY8gv0ajxXxBuPKzkgBRb1pqk8bJZ0igLdDlOrr8WuMcys8iuO7kH czQeu1dmyq4mwuSHIJa6fyRJyrXSbgt+7P2/5p/nDXBSvBRbSb95djhbn8cSmzIA nrHvueBxRpg6em207tQvn/iOlCnfG+UpIgHCSfI55tTMqENFsTurN4Ip5udqIGsp EpSsr8nusIRmWWSLzZLhzM3XF3+JPJLfSoudrxPiAUeO1WLYqqZ/Hv9LHHpYLcAQ Tokz9EjB1aN9XhGWW40uDsDljw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:20 2026 by rpki-client