$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: cwBl8kCStMxxubbAa7HyVcigN8hskDqXNcZUv/1sToQ= Subject key identifier: A0:86:D6:C1:22:C6:33:9A:BF:16:CA:74:D6:3E:AD:C1:EE:8B:CF:E2 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 062B Signing time: Tue 24 Mar 2026 22:33:35 +0000 Manifest this update: Tue 24 Mar 2026 22:33:34 +0000 Manifest next update: Tue 31 Mar 2026 22:33:34 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: 73ULHw5xH+nhWA23EaasZr4sJWYutNWFCXjYX0I+WU0=) 2: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 145MNVXkN1NCb/lHfvK7TOxcT8rHdAXVTu1hEwZJ0U4=) 3: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: 78ADOvf19erzq2Lml4tYjNVaZ8mjFM61d51drgntiM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Mar 24 22:33:34 2026 GMT Not After : Mar 31 22:33:34 2026 GMT Subject: CN=69c3113f-5ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:df:cc:9f:7d:79:cf:76:ab:5d:f0:04:7b: 0c:63:21:53:28:88:e0:4a:c2:ba:7a:95:51:34:fe: e3:15:f4:cb:e1:f2:11:bd:37:73:19:a6:c6:94:a6: b1:30:b3:41:9c:8e:b0:d6:a6:8b:f5:73:df:ab:d0: fc:f6:e8:cc:8f:56:55:fa:0e:41:45:d6:2c:c5:53: 6e:95:fa:c5:cb:b4:0d:be:b9:72:35:12:1d:ad:3b: 90:6f:8d:cb:71:23:bb:fd:c6:16:33:d7:01:5e:51: c8:66:45:44:0d:1d:19:5a:e4:87:55:34:9f:85:18: e5:b8:36:b1:20:37:96:fa:f6:b8:fe:55:a2:8d:19: 36:78:0a:06:24:5f:d2:a6:80:ed:6a:8e:6e:2f:11: 81:bf:a8:27:88:a8:73:18:74:c9:ea:58:5a:67:a4: 8c:fa:ba:67:9e:d4:fa:1f:0e:0e:fb:a7:88:5c:c8: 7f:63:dc:1e:9a:b3:df:de:57:c4:39:c2:6b:44:81: 4a:6d:2a:b3:f1:2c:f1:35:85:7c:e9:8f:71:c6:ee: c9:1b:03:21:0c:06:fb:e4:7a:d9:a8:09:da:99:99: 41:24:f0:e8:fe:25:98:25:ab:08:00:6d:ec:2e:65: e4:dc:bd:bf:04:d4:a7:45:03:1a:c5:da:33:2b:d3: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:86:D6:C1:22:C6:33:9A:BF:16:CA:74:D6:3E:AD:C1:EE:8B:CF:E2 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9d:7a:4e:e5:0e:98:82:42:97:c9:19:41:f0:85:6d:e5:f4: 19:2b:c4:f4:72:d1:8e:7c:35:e0:c4:91:8f:e7:36:39:43:61: d8:cd:18:07:4c:3d:a9:cc:bc:54:d6:bd:a4:dc:b0:76:d2:01: 5e:97:05:b6:af:ce:d7:8f:02:17:69:5f:e9:80:e3:a9:b5:38: 42:e1:31:d7:ef:94:14:f3:0d:22:26:51:75:85:29:9a:cc:c3: 87:f7:e9:97:ef:d6:84:79:31:d6:cf:09:01:a5:bb:ed:60:a3: c2:0b:c7:76:35:72:50:5f:09:99:74:42:53:ba:77:d0:45:14: f9:02:35:82:d9:e9:3b:66:e3:10:c8:9c:fc:da:a4:53:01:75: 15:c1:22:4b:d3:23:eb:d9:1c:c4:32:d8:6d:49:9e:f3:89:43: 87:8c:c2:10:e0:9f:c1:18:24:d7:7d:2a:31:65:e4:72:b5:8c: ff:c8:c7:b5:ba:82:e6:1b:5a:65:a6:4a:7e:dd:09:68:5f:33: cb:63:d3:eb:67:2c:5b:9b:c6:92:19:80:21:69:97:b2:7a:f9: e0:e6:23:6a:33:80:58:ff:bb:f7:b5:d8:7e:d6:b3:a1:1c:cb: e7:40:8d:f2:a6:b4:5c:65:9b:56:f8:13:bd:e2:8f:df:88:ad: 29:c8:6c:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjYwMzI0MjIzMzM0WhcNMjYwMzMxMjIzMzM0WjAYMRYwFAYD VQQDEw02OWMzMTEzZi01ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZrfzJ99ec92q13wBHsMYyFTKIjgSsK6epVRNP7jFfTL4fIRvTdzGabGlKax MLNBnI6w1qaL9XPfq9D89ujMj1ZV+g5BRdYsxVNulfrFy7QNvrlyNRIdrTuQb43L cSO7/cYWM9cBXlHIZkVEDR0ZWuSHVTSfhRjluDaxIDeW+va4/lWijRk2eAoGJF/S poDtao5uLxGBv6gniKhzGHTJ6lhaZ6SM+rpnntT6Hw4O+6eIXMh/Y9wemrPf3lfE OcJrRIFKbSqz8SzxNYV86Y9xxu7JGwMhDAb75HrZqAnamZlBJPDo/iWYJasIAG3s LmXk3L2/BNSnRQMaxdozK9O2yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCG1sEi xjOavxbKdNY+rcHui8/iMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi516TuUOmIJCl8kZQfCFbeX0GSvE9HLRjnw14MSRj+c2OUNh2M0YB0w9qcy8 VNa9pNywdtIBXpcFtq/O148CF2lf6YDjqbU4QuEx1++UFPMNIiZRdYUpmszDh/fp l+/WhHkx1s8JAaW77WCjwgvHdjVyUF8JmXRCU7p30EUU+QI1gtnpO2bjEMic/Nqk UwF1FcEiS9Mj69kcxDLYbUme84lDh4zCEOCfwRgk130qMWXkcrWM/8jHtbqC5hta ZaZKft0JaF8zy2PT62csW5vGkhmAIWmXsnr54OYjajOAWP+797XYftazoRzL50CN 8qa0XGWbVvgTveKP34itKchsFg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:31 2026 by rpki-client