$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft File: LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json) Hash identifier: 51QssYKZKusrLJF0eYbE+Luz0Bmig//KXRhXHdugbkw= Subject key identifier: 93:8E:71:16:64:98:B8:4C:EA:DA:74:29:65:52:14:4D:37:CD:12:1C Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft Manifest number: 02B1 Signing time: Wed 25 Mar 2026 01:06:13 +0000 Manifest this update: Wed 25 Mar 2026 01:06:12 +0000 Manifest next update: Wed 01 Apr 2026 01:06:12 +0000 Files and hashes: 1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: 6ay30Oe17g5RA9dozd2HU3YQWr3NL30iqIWP62D9UNU=) 2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: FkAIc4PkSrjwjHI3WuneOyjO69joINPbfIEPkCYw/A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D Validity Not Before: Mar 25 01:06:12 2026 GMT Not After : Apr 1 01:06:12 2026 GMT Subject: CN=69c33505-a6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:ef:9d:66:78:cd:f2:d9:81:30:10:76:34: 2b:6f:fd:79:dd:e3:b9:fc:a6:f5:f7:33:6e:7e:b4: 03:b7:2b:aa:d1:f5:75:a0:0d:86:89:ab:a0:29:01: 9c:8a:f6:81:62:bd:9e:65:c6:26:34:fd:2f:29:49: 35:dd:dd:de:eb:f7:0c:5c:a9:67:c1:a7:48:bb:e0: a6:38:9a:c8:ac:2b:9d:1f:99:ca:85:aa:3a:65:24: e5:49:fc:00:ef:bf:3c:07:19:10:b2:55:66:73:03: 92:9c:b2:f3:63:6c:5e:1d:c2:3f:45:c0:aa:e1:1e: fb:e8:68:7e:bb:76:3c:a8:03:76:82:4d:03:fe:17: fe:b0:b8:47:98:ca:bd:1b:82:bc:1c:5f:6b:0f:ae: fc:38:2a:c6:a6:8b:ad:0e:31:2d:1f:2b:7e:6d:5a: c0:7a:21:7a:0a:ec:78:68:6d:d8:fe:2f:5b:6b:b7: 41:ce:ed:7f:0f:c8:8c:43:35:30:04:7d:46:86:b6: 7c:0d:bd:ec:8e:d6:a5:95:26:67:fc:a9:d4:00:e0: 5d:ec:07:12:f3:14:92:fb:47:6a:b7:52:a9:e7:e5: 3c:fc:6a:3e:e3:dc:ad:73:57:3a:d6:0b:f2:43:d2: 64:41:5f:c8:df:66:0b:61:95:2f:56:40:ed:83:19: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8E:71:16:64:98:B8:4C:EA:DA:74:29:65:52:14:4D:37:CD:12:1C X509v3 Authority Key Identifier: keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:21:d0:a1:e6:a3:02:23:1d:00:14:ac:39:e1:8b:a2:c2:eb: a4:0a:04:77:2a:ce:fc:bf:d5:ac:d4:89:69:21:2b:ff:9b:17: 6f:7e:ed:b3:d9:07:f3:5d:21:d2:12:32:3a:d7:74:55:1c:3c: 40:c3:8e:5c:63:d5:b9:a3:b0:11:7d:80:18:6f:00:ad:bc:85: 42:85:b9:13:bc:eb:7a:35:f9:15:2c:a6:8c:cf:d0:bb:3a:a1: 7e:b1:b4:eb:92:4f:da:65:0c:c8:9d:39:f6:73:13:b7:d7:b7: f3:ba:27:55:f7:b0:00:ae:2a:f3:0a:9c:ce:88:66:2f:c1:a1: 43:96:6f:41:5c:f8:ea:3e:a8:f1:60:f9:18:26:d4:cf:f1:ec: 7f:64:90:51:8a:f6:1d:5b:9c:83:c2:c1:05:96:06:39:98:57: 96:24:16:ab:f4:fc:dc:0f:7c:66:b9:59:0b:2f:38:4e:43:8f: 37:08:7e:1d:5e:37:db:6d:b2:ff:50:40:16:0d:0c:6c:f0:35: e0:80:b8:c9:85:45:ff:8d:2b:03:79:70:70:2f:1b:a0:d9:46: 28:c4:dd:f1:a4:07:70:ab:67:07:fd:51:b6:7d:ff:4d:c1:43: da:4b:31:2a:72:74:b0:95:78:be:26:3a:27:dc:20:fe:a2:4a: db:86:1e:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQkMxMTAvBgNVBAUTKDJEM0EwQTIzQzU5QjRERjZEQkUwMUE0QzVGM0I3QzhC RkZGRjcwMEQwHhcNMjYwMzI1MDEwNjEyWhcNMjYwNDAxMDEwNjEyWjAYMRYwFAYD VQQDEw02OWMzMzUwNS1hNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypTvnWZ4zfLZgTAQdjQrb/153eO5/Kb19zNufrQDtyuq0fV1oA2GiaugKQGc ivaBYr2eZcYmNP0vKUk13d3e6/cMXKlnwadIu+CmOJrIrCudH5nKhao6ZSTlSfwA 7788BxkQslVmcwOSnLLzY2xeHcI/RcCq4R776Gh+u3Y8qAN2gk0D/hf+sLhHmMq9 G4K8HF9rD678OCrGpoutDjEtHyt+bVrAeiF6Cux4aG3Y/i9ba7dBzu1/D8iMQzUw BH1GhrZ8Db3sjtallSZn/KnUAOBd7AcS8xSS+0dqt1Kp5+U8/Go+49ytc1c61gvy Q9JkQV/I32YLYZUvVkDtgxm8KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOOcRZk mLhM6tp0KWVSFE03zRIcMB8GA1UdIwQYMBaAFC06CiPFm0322+AaTF87fIv//3AN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCQy8yMDI0QjQ0ODM0 QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRmYmI0QnBNWHp0OGlfX19j QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUb0tJOFdiVGZiYjRCcE1YenQ4aV9fX2NBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCQy8yMDI0QjQ0ODM0QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRm YmI0QnBNWHp0OGlfX19jQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALSHQoeajAiMdABSsOeGLosLrpAoEdyrO/L/VrNSJaSEr/5sXb37ts9kH810h 0hIyOtd0VRw8QMOOXGPVuaOwEX2AGG8ArbyFQoW5E7zrejX5FSymjM/QuzqhfrG0 65JP2mUMyJ059nMTt9e387onVfewAK4q8wqczohmL8GhQ5ZvQVz46j6o8WD5GCbU z/Hsf2SQUYr2HVucg8LBBZYGOZhXliQWq/T83A98ZrlZCy84TkOPNwh+HV43222y /1BAFg0MbPA14IC4yYVF/40rA3lwcC8boNlGKMTd8aQHcKtnB/1Rtn3/TcFD2ksx KnJ0sJV4viY6J9wg/qJK24YeIQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:49 2026 by rpki-client