$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: koIJmgVWyJlnCzpQk6rSRZvvOajP10+s7quzO9fmQHY= Subject key identifier: A5:80:9B:E5:39:5A:71:EE:1E:C6:63:5C:51:AE:F4:68:13:C0:EF:3C Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: D6 Signing time: Wed 25 Mar 2026 06:13:07 +0000 Manifest this update: Wed 25 Mar 2026 06:13:06 +0000 Manifest next update: Wed 01 Apr 2026 06:13:06 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: YRxL+XbNDB9y2mdzBPPtBeLz3+Y/iBGgYbHjF06tYKs=) 2: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=) 3: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: KaHspWR0HemZK0q9LOChU8le2zgj9l3UI0kexYlJ+/g=) 4: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=) 5: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=) 6: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Mar 25 06:13:06 2026 GMT Not After : Apr 1 06:13:06 2026 GMT Subject: CN=69c37cf3-65e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:4c:c1:e0:f0:65:7b:c9:64:47:59:50:3b: 4a:02:75:1e:1d:32:4c:0a:3d:d1:e3:85:60:d1:58: cf:7e:4d:e2:a6:86:b3:c8:c3:bf:7e:62:da:39:18: 18:ee:b4:19:0c:98:83:45:5f:e6:5f:3a:d5:73:ff: 98:22:72:de:ce:3f:05:0d:22:c6:64:7d:db:3c:db: 44:76:5b:24:d4:77:e7:2f:f9:36:f5:eb:f0:56:21: 94:30:70:97:a1:ab:c5:f8:dd:b1:6e:7d:a0:97:1c: c0:5b:3d:70:8a:d9:fc:df:d7:29:a5:10:26:79:e8: 00:51:49:3c:5c:7c:85:fc:bc:d6:1f:f7:3e:ed:9b: e5:68:93:ab:ca:a7:b8:39:6c:18:68:13:87:b6:b1: ce:14:00:06:03:09:3c:d2:de:f9:c5:2c:92:9d:2e: 4c:49:9a:d1:29:d1:c4:1a:58:22:d8:c2:91:fe:52: 85:dc:0c:9d:10:ce:15:eb:02:ea:6c:18:1d:7b:ab: 49:f3:e2:10:59:90:ee:02:d9:8f:92:6b:a5:62:3d: 3e:01:b8:b0:60:1b:bd:e7:10:fd:7f:14:00:13:ba: bd:6b:88:c1:2d:4e:8c:98:24:71:ea:e9:be:2f:4c: b6:fc:3d:00:65:2d:ee:a6:8d:4a:e8:e1:39:01:6c: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:9B:E5:39:5A:71:EE:1E:C6:63:5C:51:AE:F4:68:13:C0:EF:3C X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:26:c7:56:84:44:61:7c:1a:9a:80:7b:29:bc:06:ee:f8:18: 32:a0:60:76:9b:55:ca:21:80:9d:d2:18:c9:a8:1e:44:17:f4: 8b:b6:ff:2b:da:18:82:41:1b:8d:7f:e3:6a:e5:a4:0b:13:da: 53:84:1e:ee:4c:0f:5c:7e:96:04:e1:4d:08:c4:c4:0c:8c:8a: 35:c3:54:60:1e:1d:e0:ab:bf:36:e9:f6:55:3e:6f:9c:1c:89: 11:13:f2:87:ec:51:d3:c0:4e:2f:43:54:fc:a0:25:95:07:86: 8c:1f:b9:c0:d9:0a:f8:0a:9e:c6:4f:e5:7d:5f:7b:fd:6c:29: 13:d2:d0:de:6f:7e:b7:6d:c4:d3:39:f5:19:e3:2d:bf:b0:e6: 22:df:b6:97:3f:6b:3a:37:2d:d3:10:e9:88:eb:87:15:7a:81: fa:d1:73:ca:5c:51:c4:3d:7f:f5:19:ba:1f:74:8a:5a:5f:24: 6e:f3:14:9c:a9:fe:76:fc:ea:eb:d7:ea:f4:99:e4:af:8b:ce: 41:9b:87:cc:59:53:4a:ff:32:d2:f9:fa:92:71:85:c6:98:35: 4e:67:21:84:ad:91:b8:b6:49:25:c7:7a:6b:8d:97:c9:ca:f4: 7d:40:a7:47:c0:af:b7:1a:84:95:5a:d7:77:e2:97:30:99:14: 8c:13:d2:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYwMzI1MDYxMzA2WhcNMjYwNDAxMDYxMzA2WjAYMRYwFAYD VQQDEw02OWMzN2NmMy02NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopRMweDwZXvJZEdZUDtKAnUeHTJMCj3R44Vg0VjPfk3ipoazyMO/fmLaORgY 7rQZDJiDRV/mXzrVc/+YInLezj8FDSLGZH3bPNtEdlsk1HfnL/k29evwViGUMHCX oavF+N2xbn2glxzAWz1witn839cppRAmeegAUUk8XHyF/LzWH/c+7ZvlaJOryqe4 OWwYaBOHtrHOFAAGAwk80t75xSySnS5MSZrRKdHEGlgi2MKR/lKF3AydEM4V6wLq bBgde6tJ8+IQWZDuAtmPkmulYj0+AbiwYBu95xD9fxQAE7q9a4jBLU6MmCRx6um+ L0y2/D0AZS3upo1K6OE5AWz2dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWAm+U5 WnHuHsZjXFGu9GgTwO88MB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiybHVoREYXwamoB7KbwG7vgYMqBgdptVyiGAndIYyageRBf0i7b/K9oYgkEb jX/jauWkCxPaU4Qe7kwPXH6WBOFNCMTEDIyKNcNUYB4d4Ku/Nun2VT5vnByJERPy h+xR08BOL0NU/KAllQeGjB+5wNkK+Aqexk/lfV97/WwpE9LQ3m9+t23E0zn1GeMt v7DmIt+2lz9rOjct0xDpiOuHFXqB+tFzylxRxD1/9Rm6H3SKWl8kbvMUnKn+dvzq 69fq9Jnkr4vOQZuHzFlTSv8y0vn6knGFxpg1TmchhK2RuLZJJcd6a42Xycr0fUCn R8CvtxqElVrXd+KXMJkUjBPSSw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:15:23 2026 by rpki-client