$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: 2aTuJYbH5klqRHcfvGhLbhyZiTdtnVKlOovDIBBy6TM= Subject key identifier: 8B:5E:5E:F2:27:F9:7F:AE:89:BE:93:24:45:D5:54:B7:D3:4B:CB:27 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0CD2 Signing time: Sun 01 Mar 2026 23:36:45 +0000 Manifest this update: Sun 01 Mar 2026 23:36:44 +0000 Manifest next update: Sun 08 Mar 2026 23:36:44 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: gP0A02wZsvmYVRN9RR9IKuC4yZyFl82rqAfRkfG2VxI=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Mar 1 23:36:44 2026 GMT Not After : Mar 8 23:36:44 2026 GMT Subject: CN=69a4cd8d-e7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:72:30:60:28:e7:cc:dd:33:5b:ac:3f:ba: 79:0e:b9:b9:52:ab:0f:bc:14:ba:f5:a6:78:12:49: f3:a5:c0:10:41:22:06:2a:c1:10:3e:ec:ef:a3:6d: f7:b3:7e:ca:0f:37:db:f6:39:04:f1:d4:7e:8b:fb: de:49:59:f3:01:59:27:c2:c1:73:b0:44:e2:84:28: 34:63:16:c0:5b:bb:f6:1a:ca:23:b2:ac:08:6e:7d: aa:6f:cc:ea:01:52:d9:80:3e:3b:6d:78:49:72:c9: f7:fa:f5:f2:59:ff:a0:4d:8a:f7:2c:37:b0:df:2f: a0:8f:33:ec:a8:73:99:2b:ca:d1:70:27:6f:3d:83: 47:33:c4:83:20:59:f7:31:01:ca:b3:92:a2:7b:c3: 14:c9:aa:f3:79:18:a3:b6:03:46:fd:b9:a8:4e:5f: a6:9c:04:b3:44:7e:de:3c:5e:58:f2:7f:81:34:ea: 5c:da:d9:05:e8:7f:6a:27:1f:62:17:24:87:37:7f: 6e:21:e5:16:bd:51:7e:cf:48:b7:33:0b:71:c4:b1: 32:45:18:ed:80:d4:1c:9c:21:9e:88:67:a9:89:2a: 46:97:02:30:6c:66:ee:4e:09:60:b2:8a:1c:7a:af: ac:f2:b9:8b:08:ad:18:15:7f:61:e0:08:c2:89:cf: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5E:5E:F2:27:F9:7F:AE:89:BE:93:24:45:D5:54:B7:D3:4B:CB:27 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:00:18:f7:6f:5d:be:b8:fe:25:fa:00:df:4c:43:e8:f8:9d: 1a:59:2a:90:fb:c5:ed:6d:53:48:e4:b2:fb:18:01:c2:9e:f6: b8:d0:2d:66:bb:ae:59:61:4d:0a:e3:0c:7b:32:53:b8:19:01: 6c:9f:09:e5:cc:ab:af:5b:93:e8:5f:96:98:40:da:85:b5:dd: 80:1b:2e:e7:e3:fb:b3:68:a8:77:cf:76:53:4e:88:cf:6c:e5: 1f:60:2e:45:cd:b8:bd:94:65:e0:1d:6c:67:db:ab:e7:aa:c1: 42:f6:3d:8d:5e:b5:d7:8b:52:83:93:aa:42:a1:f1:eb:f7:f2: 8d:48:5a:f1:ac:a9:47:15:16:94:44:e7:a3:da:05:c7:bd:b3: c3:6b:26:99:99:b2:5f:50:05:0a:11:d0:fc:29:b2:9f:a7:6b: 55:c8:91:6e:91:70:a3:4b:2a:85:17:4f:9a:18:4a:cf:2f:dc: 76:f0:e3:c7:25:3a:70:f7:7b:9e:a9:d7:29:f1:c9:24:f8:2c: 18:47:28:38:7c:9e:44:08:71:68:75:0d:31:d2:ae:bb:57:43: da:ae:be:44:64:27:f7:b6:5c:d4:fc:34:09:f7:90:97:d2:2e: 63:a3:01:7c:c6:55:3f:a2:5a:33:fd:f1:7b:05:bb:62:95:1c: 60:e3:6d:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjYwMzAxMjMzNjQ0WhcNMjYwMzA4MjMzNjQ0WjAYMRYwFAYD VQQDEw02OWE0Y2Q4ZC1lN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOFyMGAo58zdM1usP7p5Drm5UqsPvBS69aZ4EknzpcAQQSIGKsEQPuzvo233 s37KDzfb9jkE8dR+i/veSVnzAVknwsFzsETihCg0YxbAW7v2GsojsqwIbn2qb8zq AVLZgD47bXhJcsn3+vXyWf+gTYr3LDew3y+gjzPsqHOZK8rRcCdvPYNHM8SDIFn3 MQHKs5Kie8MUyarzeRijtgNG/bmoTl+mnASzRH7ePF5Y8n+BNOpc2tkF6H9qJx9i FySHN39uIeUWvVF+z0i3MwtxxLEyRRjtgNQcnCGeiGepiSpGlwIwbGbuTglgsooc eq+s8rmLCK0YFX9h4AjCic8jwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIteXvIn +X+uib6TJEXVVLfTS8snMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAswAY929dvrj+JfoA30xD6PidGlkqkPvF7W1TSOSy+xgBwp72uNAtZruuWWFN CuMMezJTuBkBbJ8J5cyrr1uT6F+WmEDahbXdgBsu5+P7s2iod892U06Iz2zlH2Au Rc24vZRl4B1sZ9ur56rBQvY9jV6114tSg5OqQqHx6/fyjUha8aypRxUWlETno9oF x72zw2smmZmyX1AFChHQ/Cmyn6drVciRbpFwo0sqhRdPmhhKzy/cdvDjxyU6cPd7 nqnXKfHJJPgsGEcoOHyeRAhxaHUNMdKuu1dD2q6+RGQn97Zc1Pw0CfeQl9IuY6MB fMZVP6JaM/3xewW7YpUcYONtzQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:10 2026 by rpki-client