$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: k/9X2WJ4c9Jh24r47+vm1hgSAEJJg7BigYqSOIzdLrc= Subject key identifier: 13:9F:DB:94:76:29:3F:39:6D:B8:D7:27:FA:E2:2F:1E:00:50:A8:94 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 06D1 Signing time: Tue 24 Mar 2026 21:58:47 +0000 Manifest this update: Tue 24 Mar 2026 21:58:47 +0000 Manifest next update: Tue 31 Mar 2026 21:58:47 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: gA7vBa3LkowQLEPLHgqcAJ7CcLE4hGVpQUY6ZvrtFl0=) 2: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: v9b/yGtqVwFD8gxkWfJo/P1ZI/EvbUBmOLRUxAaLNxY=) 3: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: I0WpDgMmllreaPhV65poRHSHDSmFE5dRW9kHHGyYH/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Mar 24 21:58:47 2026 GMT Not After : Mar 31 21:58:47 2026 GMT Subject: CN=69c30917-ba44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:3c:1b:71:01:86:e7:a7:41:3b:09:d1:51: a2:b0:8d:e4:fc:68:4d:fa:bd:d5:10:78:81:0a:18: 85:86:c1:29:6c:08:7c:d1:b9:5d:db:c8:fb:a8:85: 08:db:12:03:c2:13:82:59:64:3f:38:28:e3:f7:48: 1f:36:3f:05:84:60:1d:d7:c0:65:b0:f0:0a:5a:93: 43:c6:57:0b:6f:b7:8d:8c:a2:c4:1f:70:1d:b7:27: be:c4:c1:b2:f7:04:e2:8e:1b:1f:de:1b:05:4f:97: 73:7b:53:f8:4f:bc:2a:7a:8e:48:17:b2:89:d8:69: 93:cb:df:16:3f:69:d2:74:c0:65:27:51:07:cd:d7: c4:1b:42:59:b9:35:e4:5a:74:61:57:49:63:18:1f: 1d:fd:34:25:12:f4:9f:66:28:3e:95:53:e2:a6:90: e8:2b:03:1d:d9:75:73:b8:e9:55:08:b2:85:a3:f2: 2a:6a:fa:39:87:fe:fd:8c:d9:4d:6e:11:f9:cd:c8: 35:6e:6d:b0:cc:53:74:fc:2a:24:5d:18:d8:55:b6: f1:00:a8:59:68:84:b3:0f:66:70:ab:88:af:9b:72: 9b:f3:f8:73:e7:44:3b:f0:01:14:b0:65:49:02:03: 72:c3:1c:c0:b5:94:a5:bf:8a:e2:ad:55:f3:58:ae: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9F:DB:94:76:29:3F:39:6D:B8:D7:27:FA:E2:2F:1E:00:50:A8:94 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:33:af:3b:bd:80:9b:0c:18:ec:5b:56:c5:52:2f:c3:49:8b: 51:e9:e2:e7:8e:4a:67:e5:47:7d:81:43:fc:e1:0e:a0:b4:d8: 49:10:2c:72:97:d9:4e:58:c5:1c:45:b8:63:f3:c8:8d:bd:0b: 97:08:7f:90:e3:fb:96:10:0e:ab:7c:c4:d2:be:0e:f4:c4:d7: f3:a1:3d:2b:fb:dc:a4:8c:8a:08:ca:4c:5b:7d:64:ef:59:7b: 16:bb:50:c5:f9:9f:e9:79:06:ed:4d:99:dc:99:22:84:9c:40: 8e:67:8b:38:1d:c0:dc:32:52:17:c1:a4:31:8f:ad:94:ff:91: 34:c3:d2:90:98:65:87:0f:bb:fc:fb:f1:15:95:a4:82:9d:b6: 0b:9d:81:ca:11:67:71:c5:eb:3b:e2:48:5b:ba:5f:b1:21:09: 27:db:c9:33:e3:75:3b:57:0b:e6:bd:ca:a6:ba:5a:e5:e1:f4: ed:d8:3c:74:f9:59:53:12:03:09:69:fd:52:df:8a:5b:9d:9f: db:c9:4b:e2:8c:91:33:6b:15:e6:b3:fd:2f:77:49:91:06:13: 85:32:8c:63:18:3b:4c:d1:f5:de:dc:50:51:eb:b0:c4:99:34: 69:5d:19:ec:2a:6a:f1:23:29:d3:54:88:ee:a7:38:6c:6d:f6: c1:e3:f4:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjYwMzI0MjE1ODQ3WhcNMjYwMzMxMjE1ODQ3WjAYMRYwFAYD VQQDEw02OWMzMDkxNy1iYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQo8G3EBhuenQTsJ0VGisI3k/GhN+r3VEHiBChiFhsEpbAh80bld28j7qIUI 2xIDwhOCWWQ/OCjj90gfNj8FhGAd18BlsPAKWpNDxlcLb7eNjKLEH3Adtye+xMGy 9wTijhsf3hsFT5dze1P4T7wqeo5IF7KJ2GmTy98WP2nSdMBlJ1EHzdfEG0JZuTXk WnRhV0ljGB8d/TQlEvSfZig+lVPippDoKwMd2XVzuOlVCLKFo/Iqavo5h/79jNlN bhH5zcg1bm2wzFN0/CokXRjYVbbxAKhZaISzD2Zwq4ivm3Kb8/hz50Q78AEUsGVJ AgNywxzAtZSlv4rirVXzWK7s9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOf25R2 KT85bbjXJ/riLx4AUKiUMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeDOvO72AmwwY7FtWxVIvw0mLUeni545KZ+VHfYFD/OEOoLTYSRAscpfZTljF HEW4Y/PIjb0Llwh/kOP7lhAOq3zE0r4O9MTX86E9K/vcpIyKCMpMW31k71l7FrtQ xfmf6XkG7U2Z3JkihJxAjmeLOB3A3DJSF8GkMY+tlP+RNMPSkJhlhw+7/PvxFZWk gp22C52ByhFnccXrO+JIW7pfsSEJJ9vJM+N1O1cL5r3Kprpa5eH07dg8dPlZUxID CWn9Ut+KW52f28lL4oyRM2sV5rP9L3dJkQYThTKMYxg7TNH13txQUeuwxJk0aV0Z 7Cpq8SMp01SI7qc4bG32weP0mg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:11 2026 by rpki-client