$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: N0gbJjXaG3uiWafrcTR4LYZhE0nV5i/kPztUiSYu2Ns= Subject key identifier: D1:7D:1F:CF:FD:0D:CF:FA:71:8C:0D:38:DD:74:89:44:8C:F0:AA:CC Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 01B0 Signing time: Wed 25 Mar 2026 03:18:28 +0000 Manifest this update: Wed 25 Mar 2026 03:18:27 +0000 Manifest next update: Wed 01 Apr 2026 03:18:27 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: vUv3wpL+dGsvMPaUxpSvBeTupawkaGuoVm4G7ZGnv0g=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 0KtoQs3ZoY6PT4dwxV6hf2YTYqT+rVXqQSGuTHbMQFg=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Mar 25 03:18:27 2026 GMT Not After : Apr 1 03:18:27 2026 GMT Subject: CN=69c35404-bfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:6d:9f:b9:c2:c2:28:ab:0f:28:09:91:0e: 82:68:5c:81:5c:8d:7f:11:58:c6:55:cc:29:6a:2d: 86:72:ca:8b:11:2a:bc:8f:50:68:c9:f4:e5:31:f1: 89:8a:66:62:54:fa:ed:b4:4d:f7:2d:cc:06:cc:b0: 7a:38:06:73:22:e8:63:c8:bf:24:12:37:11:e1:3b: fe:1f:62:78:c3:fd:19:6c:53:6e:7e:1c:a1:3c:19: 94:37:1e:cc:fd:12:b6:eb:d7:a1:79:96:0a:b0:b0: 75:d3:43:ac:3c:6c:e0:85:c8:61:18:31:dc:77:cb: f5:96:37:97:33:c3:a5:16:69:c3:f3:d1:be:ec:d9: 53:9d:6a:59:99:3d:3b:81:28:b2:0b:52:a9:de:02: 84:10:82:42:d6:81:1b:5a:24:03:80:da:66:96:a3: 89:25:6c:15:59:91:e6:9d:48:43:35:a2:64:b5:6f: 7a:8f:26:c2:b3:c4:dc:dc:26:53:87:3a:fc:48:1f: 3e:40:3f:b5:1c:69:87:f3:32:03:26:98:db:8b:d0: 27:70:e1:ef:42:3f:32:65:fe:ac:06:c3:54:f0:4b: 6d:ad:fc:da:d2:9a:49:b6:eb:d9:0c:7c:8a:d1:a3: 7f:5c:cd:d2:7c:47:4d:7e:25:b8:84:be:c6:24:48: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7D:1F:CF:FD:0D:CF:FA:71:8C:0D:38:DD:74:89:44:8C:F0:AA:CC X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c9:e8:3a:62:6b:13:90:6c:41:89:46:71:23:e5:9a:5a:49: b2:42:99:b3:8e:97:b6:1b:48:80:60:ed:1f:91:13:24:f0:f2: fc:fe:a6:a4:20:e1:fc:01:67:3b:ce:08:e1:45:29:77:48:7e: 2c:1d:40:9d:ed:09:ce:c9:fb:15:53:f7:85:43:eb:c6:5d:e5: 48:8d:76:d0:f4:5a:6f:4e:07:cd:25:7e:74:b7:ad:b4:3c:49: ae:dd:f0:88:26:09:71:1f:75:52:ec:60:8f:ed:88:31:9a:35: e0:e3:dd:9c:a9:e0:2e:3e:6e:05:59:69:51:65:a1:79:3a:d7: 2b:8f:6c:1d:5f:24:86:5f:37:8c:9f:11:6b:82:3a:04:09:ad: c4:38:f8:1b:2c:da:20:62:f5:9b:82:34:e0:65:97:84:4b:d6: 3c:84:3a:fe:3e:5a:12:de:94:cd:dd:23:15:91:e5:67:08:59: 61:26:61:ec:86:f5:9c:73:82:39:9c:14:ff:ca:ef:51:6f:85: f3:d8:bc:16:63:fc:84:e9:bd:1c:d0:47:46:73:c3:4d:e5:af: 4a:e8:9d:11:a6:04:e2:95:f8:2f:a5:84:af:7c:35:94:9b:76: c1:ef:17:f8:03:dd:ef:1f:66:a9:25:3d:08:01:9e:1d:e6:db: 89:62:73:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYwMzI1MDMxODI3WhcNMjYwNDAxMDMxODI3WjAYMRYwFAYD VQQDEw02OWMzNTQwNC1iZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBhtn7nCwiirDygJkQ6CaFyBXI1/EVjGVcwpai2GcsqLESq8j1BoyfTlMfGJ imZiVPrttE33LcwGzLB6OAZzIuhjyL8kEjcR4Tv+H2J4w/0ZbFNufhyhPBmUNx7M /RK269eheZYKsLB100OsPGzghchhGDHcd8v1ljeXM8OlFmnD89G+7NlTnWpZmT07 gSiyC1Kp3gKEEIJC1oEbWiQDgNpmlqOJJWwVWZHmnUhDNaJktW96jybCs8Tc3CZT hzr8SB8+QD+1HGmH8zIDJpjbi9AncOHvQj8yZf6sBsNU8Ettrfza0ppJtuvZDHyK 0aN/XM3SfEdNfiW4hL7GJEi1aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNF9H8/9 Dc/6cYwNON10iUSM8KrMMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn8noOmJrE5BsQYlGcSPlmlpJskKZs46XthtIgGDtH5ETJPDy/P6mpCDh/AFn O84I4UUpd0h+LB1Ane0Jzsn7FVP3hUPrxl3lSI120PRab04HzSV+dLettDxJrt3w iCYJcR91Uuxgj+2IMZo14OPdnKngLj5uBVlpUWWheTrXK49sHV8khl83jJ8Ra4I6 BAmtxDj4GyzaIGL1m4I04GWXhEvWPIQ6/j5aEt6Uzd0jFZHlZwhZYSZh7Ib1nHOC OZwU/8rvUW+F89i8FmP8hOm9HNBHRnPDTeWvSuidEaYE4pX4L6WEr3w1lJt2we8X +APd7x9mqSU9CAGeHebbiWJzOw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:39 2026 by rpki-client