$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft File: LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft (raw, json) Hash identifier: TqYGmyVpSUnj5EKEZLFOw8EwSCh2m1j8lnrcFJm9oVE= Subject key identifier: CD:8E:AA:F8:DD:00:62:6F:AE:5F:18:DB:30:A3:C2:58:73:8F:9C:3D Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 Certificate issuer: /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft Manifest number: 02CC Signing time: Wed 25 Mar 2026 01:02:07 +0000 Manifest this update: Wed 25 Mar 2026 01:02:07 +0000 Manifest next update: Wed 01 Apr 2026 01:02:07 +0000 Files and hashes: 1: LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl (hash: n/BkuwEuY7QC5mlBBqKTsvyTnAxfiKX2c1qsMXteyn8=) 2: 49CEB44A28D111EDB364C870C4F9AE02.roa (hash: KYxgbKkbHxGZy90LePidqYYy5WjWj5ewerN5tHIii0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Validity Not Before: Mar 25 01:02:07 2026 GMT Not After : Apr 1 01:02:07 2026 GMT Subject: CN=69c3340f-270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:0e:f4:09:98:f6:43:2f:4b:24:2b:12:c4: 80:1e:b5:dd:0e:bc:8c:5a:a1:17:02:cd:9a:bc:74: 03:bf:ec:4f:4a:4d:71:a7:85:85:15:24:87:1c:0f: 77:f1:1c:ef:09:ce:03:df:be:55:5e:3a:e5:da:41: 30:13:19:9e:59:ae:65:a2:ee:46:41:9c:ac:6c:60: db:3b:47:44:12:21:df:c1:8c:7b:59:c6:3b:c4:7b: f7:15:bc:2f:f3:10:46:79:bc:5d:f4:50:8c:e0:95: 77:2a:f4:28:3f:4a:c9:79:be:73:c4:59:08:58:d4: da:3c:48:37:24:1c:06:0c:bb:2b:3c:4e:6c:e9:c7: 07:8c:5d:4a:88:c6:1f:e4:48:dc:4f:3c:49:e0:1b: e4:98:ab:a1:9b:b1:e8:bb:be:0a:e9:03:a3:be:ad: e8:57:a3:9e:4f:13:52:42:af:dc:78:d4:56:4d:14: 5d:0b:5d:d7:03:58:2e:7e:a5:90:2c:5e:7b:f5:69: ee:a3:1e:f6:c8:ab:0a:af:c1:11:32:01:7c:1a:b6: 4a:cf:d3:b1:6b:65:88:a4:2e:7b:ad:92:e6:6d:76: c1:74:c9:d6:2d:c4:79:30:71:6f:72:00:94:3c:25: 63:40:6e:7d:b1:ff:49:7a:59:71:62:2b:4f:70:3a: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:AA:F8:DD:00:62:6F:AE:5F:18:DB:30:A3:C2:58:73:8F:9C:3D X509v3 Authority Key Identifier: keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a3:91:27:c9:06:37:19:46:23:47:ab:42:aa:53:4d:cc:8f: aa:71:d5:a7:81:dd:ca:83:d1:94:8d:ac:e9:7b:6b:13:22:9d: 3f:5a:06:96:ab:f2:bd:2e:20:8e:80:09:01:12:1c:4a:02:ec: 7c:55:e9:fb:02:dd:32:7f:6f:e0:b0:e4:3a:6c:34:70:be:74: 86:ad:96:33:2b:24:4f:5c:07:01:9b:eb:92:7e:68:80:1d:f4: 41:ad:ae:53:74:cb:39:04:88:12:a9:37:36:e4:ec:39:60:ae: f6:58:a3:45:5a:a3:38:c3:8c:3c:d3:62:10:b7:7a:c2:e4:b8: ff:37:59:30:ce:e3:06:1e:ee:9d:7a:b1:ce:66:6b:e7:0d:c5: b7:d2:b1:d8:c2:98:70:02:4e:0a:bf:58:0a:75:e2:6b:1b:a6: d0:f7:3e:ca:0e:7e:49:ef:28:52:9d:2d:52:5c:6d:20:e0:2d: 26:cb:a1:60:eb:67:cb:01:9a:b2:b3:8a:17:3c:df:5c:3c:d3: c5:9a:26:41:54:2b:d5:38:1a:b0:cf:21:a4:b7:d4:9b:c5:73: f7:e8:8b:4a:32:99:0e:dd:4d:f1:ff:97:88:a9:b0:38:8a:b5: 15:94:e3:cf:17:c5:e9:48:b2:c0:96:3f:d9:ac:83:10:64:4e: 74:40:26:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMjgxMTAvBgNVBAUTKDJFMDZGMzA5MUFENThFRDA2MzNGRjk4OUIxRkQzMjk3 NzNFQzNBQTcwHhcNMjYwMzI1MDEwMjA3WhcNMjYwNDAxMDEwMjA3WjAYMRYwFAYD VQQDEw02OWMzMzQwZi0yNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxd0O9AmY9kMvSyQrEsSAHrXdDryMWqEXAs2avHQDv+xPSk1xp4WFFSSHHA93 8RzvCc4D375VXjrl2kEwExmeWa5lou5GQZysbGDbO0dEEiHfwYx7WcY7xHv3Fbwv 8xBGebxd9FCM4JV3KvQoP0rJeb5zxFkIWNTaPEg3JBwGDLsrPE5s6ccHjF1KiMYf 5EjcTzxJ4BvkmKuhm7Hou74K6QOjvq3oV6OeTxNSQq/ceNRWTRRdC13XA1gufqWQ LF579Wnuox72yKsKr8ERMgF8GrZKz9Oxa2WIpC57rZLmbXbBdMnWLcR5MHFvcgCU PCVjQG59sf9JellxYitPcDrpRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2Oqvjd AGJvrl8Y2zCjwlhzj5w9MB8GA1UdIwQYMBaAFC4G8wka1Y7QYz/5ibH9Mpdz7Dqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QyOC80QkRBRUVEQzI4 Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0QmpQX21Kc2YweWwzUHNP cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnYnpDUnJWanRCalBfbUpzZjB5bDNQc09xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QyOC80QkRBRUVEQzI4Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0 QmpQX21Kc2YweWwzUHNPcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOaORJ8kGNxlGI0erQqpTTcyPqnHVp4HdyoPRlI2s6XtrEyKdP1oGlqvyvS4g joAJARIcSgLsfFXp+wLdMn9v4LDkOmw0cL50hq2WMyskT1wHAZvrkn5ogB30Qa2u U3TLOQSIEqk3NuTsOWCu9lijRVqjOMOMPNNiELd6wuS4/zdZMM7jBh7unXqxzmZr 5w3Ft9Kx2MKYcAJOCr9YCnXiaxum0Pc+yg5+Se8oUp0tUlxtIOAtJsuhYOtnywGa srOKFzzfXDzTxZomQVQr1TgasM8hpLfUm8Vz9+iLSjKZDt1N8f+XiKmwOIq1FZTj zxfF6UiywJY/2ayDEGROdEAmgw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:23 2026 by rpki-client