$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: /ZlxGOgyp0KqdX1L0vLEa3g60DlgZj+1o9HrxPE4nyw= Subject key identifier: FE:2B:E0:0C:D8:A6:28:A0:C5:CE:D7:D7:EB:16:C8:A2:36:49:BB:FF Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 027D Signing time: Fri 27 Mar 2026 01:42:38 +0000 Manifest this update: Fri 27 Mar 2026 01:42:37 +0000 Manifest next update: Fri 03 Apr 2026 01:42:37 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: pfI+ExN5fBS3cEbOUwD9FtkIwoBjyW+o42197L/5MuI=) 2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Mar 27 01:42:37 2026 GMT Not After : Apr 3 01:42:37 2026 GMT Subject: CN=69c5e08e-d1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:a3:b6:ae:f0:28:2f:f7:34:5e:d4:84:0f: 5d:6f:84:a8:ab:17:54:60:cf:aa:47:dc:2f:b6:bd: 3e:73:ae:57:93:c1:64:da:87:08:83:e3:a1:23:9e: c1:47:c9:17:59:74:37:b5:02:1e:8c:5a:ae:6f:b6: 23:d8:6a:a9:91:f4:7c:5b:b1:b1:a3:7d:7c:a9:36: 50:61:9f:0d:2d:9b:19:c9:1e:56:74:59:27:23:34: c6:53:b3:e1:a2:c6:d8:90:4f:26:b3:3f:68:83:1e: 32:36:b7:d0:56:d2:66:41:cc:7e:b7:c1:e8:e6:91: 0c:55:0c:6e:94:d2:e5:4c:67:8f:9e:8e:21:41:9d: 6e:96:ff:f3:85:a1:81:a9:64:c8:85:d1:4e:1a:07: 8d:cd:ef:00:1b:8d:c7:eb:a7:cf:3f:5b:ff:c5:52: 11:fd:c0:ab:2e:11:42:14:44:53:e3:5b:cf:7e:5a: df:bf:6c:da:1e:0b:e0:23:a1:e5:3a:5e:47:e3:f9: a3:6f:19:3c:d1:3d:04:c9:e7:d3:14:14:04:e8:8d: 79:de:48:cd:6d:f6:2b:a6:8d:1f:0d:c0:df:59:e5: c7:45:34:c7:7f:7e:2f:cb:7a:1d:ec:55:fd:92:49: bc:1a:f9:a5:43:6b:11:a8:f8:57:a4:87:74:a9:8a: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:E0:0C:D8:A6:28:A0:C5:CE:D7:D7:EB:16:C8:A2:36:49:BB:FF X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:95:54:1f:f7:69:94:5a:51:a5:e1:f4:b4:1f:5c:43:67:7b: d7:6b:b1:59:65:7f:48:b5:02:d6:ef:65:14:a6:46:77:1d:b1: 55:d3:2e:5a:3c:43:e1:5a:e7:7f:60:1e:01:3e:ba:c4:b3:b7: 2c:52:f2:9e:7d:da:c6:7a:84:ef:be:17:f6:3d:12:be:da:7f: 5c:89:25:6d:71:de:be:2f:1a:c0:dc:b2:2e:ce:fe:c1:bb:3f: 0f:48:a1:d0:0c:56:8d:3f:40:b4:1c:f4:89:82:a4:c7:60:e7: c5:f7:35:b7:47:0d:1a:8a:6a:b6:4c:7c:31:1f:d8:69:9c:b5: 68:c9:a9:b6:32:c7:60:72:6c:b7:75:62:87:55:69:27:93:a9: 7a:46:c7:36:26:c9:d6:11:a7:12:94:b3:77:42:ed:54:f3:a6: 0a:56:bc:b0:fa:bb:02:31:b4:81:40:be:c7:14:d3:e3:4f:37: ac:be:7c:ab:d4:78:96:ac:c8:19:39:4b:4a:c4:0b:97:1e:1b: 50:e1:b2:f9:59:68:ec:59:3e:9b:0e:1a:e4:70:69:18:18:03: e1:8a:77:d0:38:67:50:a2:0f:84:36:0d:f8:88:06:ce:df:63: 05:8e:ec:49:e0:35:71:d7:06:bb:52:20:f2:6d:33:95:a5:b3: 64:95:18:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYwMzI3MDE0MjM3WhcNMjYwNDAzMDE0MjM3WjAYMRYwFAYD VQQDEw02OWM1ZTA4ZS1kMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wKjtq7wKC/3NF7UhA9db4SoqxdUYM+qR9wvtr0+c65Xk8Fk2ocIg+OhI57B R8kXWXQ3tQIejFqub7Yj2GqpkfR8W7Gxo318qTZQYZ8NLZsZyR5WdFknIzTGU7Ph osbYkE8msz9ogx4yNrfQVtJmQcx+t8Ho5pEMVQxulNLlTGePno4hQZ1ulv/zhaGB qWTIhdFOGgeNze8AG43H66fPP1v/xVIR/cCrLhFCFERT41vPflrfv2zaHgvgI6Hl Ol5H4/mjbxk80T0EyefTFBQE6I153kjNbfYrpo0fDcDfWeXHRTTHf34vy3od7FX9 kkm8GvmlQ2sRqPhXpId0qYpnfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4r4AzY piigxc7X1+sWyKI2Sbv/MB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqpVUH/dplFpRpeH0tB9cQ2d712uxWWV/SLUC1u9lFKZGdx2xVdMuWjxD4Vrn f2AeAT66xLO3LFLynn3axnqE774X9j0Svtp/XIklbXHevi8awNyyLs7+wbs/D0ih 0AxWjT9AtBz0iYKkx2Dnxfc1t0cNGopqtkx8MR/YaZy1aMmptjLHYHJst3Vih1Vp J5OpekbHNibJ1hGnEpSzd0LtVPOmCla8sPq7AjG0gUC+xxTT4083rL58q9R4lqzI GTlLSsQLlx4bUOGy+Vlo7Fk+mw4a5HBpGBgD4Yp30DhnUKIPhDYN+IgGzt9jBY7s SeA1cdcGu1Ig8m0zlaWzZJUYig== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:52 2026 by rpki-client