$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: ThEQBYPlYog8rJbEdNb7c9yrEzyCxS/WZfvnpX1n6No= Subject key identifier: BA:3B:21:50:5D:5A:9B:5C:AA:82:B0:19:37:6F:BE:D7:31:9C:83:E9 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 01E4 Signing time: Fri 27 Mar 2026 02:53:43 +0000 Manifest this update: Fri 27 Mar 2026 02:53:43 +0000 Manifest next update: Fri 03 Apr 2026 02:53:43 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: I67bk8DD4j5lMnKh0Ck4tipsnCTuEepiXfEttg1n1M4=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Mar 27 02:53:43 2026 GMT Not After : Apr 3 02:53:43 2026 GMT Subject: CN=69c5f137-8d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:e6:2e:3a:7d:0d:ee:58:ed:88:af:33:f1: e5:18:7b:37:19:45:dc:a8:97:82:57:e3:e1:32:80: 51:05:32:48:3d:85:dc:bd:7b:a8:4a:2c:8e:17:bd: e6:d6:a4:ed:ed:9b:71:59:20:3e:2e:c7:92:53:9d: 9b:ba:f7:8f:8d:5c:0c:42:26:f9:ae:67:41:66:a0: 0f:31:b7:44:26:74:ab:54:f9:52:46:27:c0:5c:c0: 00:e9:5e:73:3d:75:87:42:24:60:58:ed:9c:f1:32: 1e:6f:ef:5d:29:ef:e3:5e:e0:e8:55:9f:b3:0c:1d: 95:03:c6:ee:c0:c6:d1:f4:bb:58:eb:a7:80:ca:18: e9:32:fb:7c:2c:0a:ef:cf:70:01:bb:e5:0d:25:76: 98:9c:75:b5:0f:86:d9:ba:df:78:58:af:91:90:16: f6:e0:82:9d:75:fc:1f:06:4b:fa:8c:e0:08:cb:a6: 99:02:3a:32:27:18:02:fc:76:7b:26:40:68:ef:1f: 62:29:ed:10:2e:46:c0:6b:be:98:d1:a7:ba:a4:4a: ce:f1:52:41:40:1e:31:54:41:a6:c5:7f:34:4b:77: a3:3f:33:da:70:70:e4:a1:95:49:eb:5a:c1:dd:75: 9d:a3:13:5c:e2:83:aa:c2:0d:be:22:39:d8:17:54: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:21:50:5D:5A:9B:5C:AA:82:B0:19:37:6F:BE:D7:31:9C:83:E9 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:01:8a:3e:5f:e9:9f:b7:48:73:07:65:03:2f:c1:50:12:5d: 8a:50:df:a6:aa:17:75:fe:45:94:7d:ce:28:9d:5a:55:c9:ab: 05:41:bd:7a:23:60:c9:44:de:84:76:35:55:cb:3a:22:90:a0: a2:59:48:6f:b0:1f:e2:9f:3d:7a:a3:d2:fa:78:ef:c7:f1:7c: a0:3e:2a:e7:bc:50:fd:b2:3d:92:d5:a1:c1:09:0e:71:9a:87: ae:65:0a:33:05:97:31:a8:d9:cf:7e:d0:4e:0f:ef:d7:a6:75: 85:f0:10:9f:40:60:cc:b1:d4:4b:42:ea:21:68:99:ef:5d:3d: 16:8a:f9:72:3e:fa:c3:de:33:ef:a5:f7:7e:ec:9b:d8:c9:16: bf:8f:91:79:05:4d:9c:23:2c:43:d2:b3:63:aa:73:5e:5e:39: 04:97:e0:cd:d4:3a:34:ad:7c:66:4b:48:bc:bd:a8:78:0e:d6: ed:57:65:06:26:1f:d3:13:70:75:ae:4d:37:a1:fd:d4:73:f9: 65:9d:c2:bd:b2:d8:d2:8c:4e:e4:36:f9:10:47:18:94:6a:15: d9:9e:42:76:db:b2:c2:f6:99:e2:9b:0d:7f:ab:30:f6:10:cd: fe:c5:b1:e8:06:a6:b9:1e:a2:6a:b8:7c:60:c1:1f:dd:18:3e: 6d:2a:21:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjYwMzI3MDI1MzQzWhcNMjYwNDAzMDI1MzQzWjAYMRYwFAYD VQQDEw02OWM1ZjEzNy04ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLTmLjp9De5Y7YivM/HlGHs3GUXcqJeCV+PhMoBRBTJIPYXcvXuoSiyOF73m 1qTt7ZtxWSA+LseSU52buvePjVwMQib5rmdBZqAPMbdEJnSrVPlSRifAXMAA6V5z PXWHQiRgWO2c8TIeb+9dKe/jXuDoVZ+zDB2VA8buwMbR9LtY66eAyhjpMvt8LArv z3ABu+UNJXaYnHW1D4bZut94WK+RkBb24IKddfwfBkv6jOAIy6aZAjoyJxgC/HZ7 JkBo7x9iKe0QLkbAa76Y0ae6pErO8VJBQB4xVEGmxX80S3ejPzPacHDkoZVJ61rB 3XWdoxNc4oOqwg2+IjnYF1ScSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLo7IVBd WptcqoKwGTdvvtcxnIPpMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmAGKPl/pn7dIcwdlAy/BUBJdilDfpqoXdf5FlH3OKJ1aVcmrBUG9eiNgyUTe hHY1Vcs6IpCgollIb7Af4p89eqPS+njvx/F8oD4q57xQ/bI9ktWhwQkOcZqHrmUK MwWXMajZz37QTg/v16Z1hfAQn0BgzLHUS0LqIWiZ7109For5cj76w94z76X3fuyb 2MkWv4+ReQVNnCMsQ9KzY6pzXl45BJfgzdQ6NK18ZktIvL2oeA7W7VdlBiYf0xNw da5NN6H91HP5ZZ3CvbLY0oxO5Db5EEcYlGoV2Z5CdtuywvaZ4psNf6sw9hDN/sWx 6AamuR6iarh8YMEf3Rg+bSohHQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:37:17 2026 by rpki-client