$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: 3VXGFpicCj8/TUK2t+eCwIrijAMIIcJ1LGGAVKej0P8= Subject key identifier: 99:17:7D:5C:22:06:55:70:92:79:A8:6B:AA:8E:79:D7:DA:41:91:D7 Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 01BC Signing time: Fri 27 Mar 2026 03:24:39 +0000 Manifest this update: Fri 27 Mar 2026 03:24:38 +0000 Manifest next update: Fri 03 Apr 2026 03:24:38 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: IDC99YXSeJqpwlZTdQDWwF4ARriFQkgICg9/R4bdve0=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Mar 27 03:24:38 2026 GMT Not After : Apr 3 03:24:38 2026 GMT Subject: CN=69c5f876-58f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:6f:0f:85:56:99:40:26:25:8e:f1:63:82: 96:62:69:58:0a:fd:1d:70:18:9d:bd:39:50:f9:a4: f7:64:c4:15:0b:21:4e:15:e6:fd:ea:5e:0f:7e:97: d4:46:f3:ed:8c:ce:50:a6:6b:3d:d1:de:6c:7c:3d: 8a:c0:dd:ed:3a:5a:33:92:52:c6:4a:5d:36:c4:39: ed:f8:65:88:bb:c0:a9:19:8f:75:f2:e4:5b:c6:b4: 9a:8b:42:bd:46:cd:ed:79:14:77:ac:03:1d:a8:fc: 5c:ce:7b:21:53:ae:57:b2:14:a6:cb:7d:72:a1:c0: f5:a2:8a:be:09:22:55:04:e1:39:3d:d6:68:33:e9: 8c:6a:d8:a9:e1:b3:9d:84:6b:a8:26:17:3f:3a:12: 46:ed:4c:c7:ed:01:77:2c:b5:35:a3:0f:d1:80:9c: 4b:46:c2:9f:a8:55:06:c5:0b:c4:57:7f:35:ec:29: 7d:3a:4d:7e:23:7f:47:94:52:42:ba:a1:bd:df:96: 4e:90:35:25:49:c4:5d:f6:98:15:5b:4a:04:27:5f: bf:9c:8d:10:27:d4:04:16:67:ea:c8:0e:b2:46:f1: 6b:62:d3:bc:5d:99:1c:98:c7:e4:b7:3a:7c:e6:e8: 6a:b2:1f:3c:ce:ac:92:3d:57:5c:79:67:4c:4a:a9: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:17:7D:5C:22:06:55:70:92:79:A8:6B:AA:8E:79:D7:DA:41:91:D7 X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a7:16:31:33:67:7a:2a:ff:54:40:a4:c1:90:1e:45:2a:47: a0:4b:c1:1d:7f:18:d6:a6:88:b6:09:31:c8:3e:df:31:39:f5: 86:93:4f:ec:bd:e7:0b:64:96:eb:2f:bd:e6:61:5b:64:2b:06: 45:76:dd:ce:e7:2a:80:1b:04:fb:6b:f4:32:fe:82:f4:6e:e4: 7f:2c:5a:c0:26:e4:f4:94:e8:23:4a:f2:96:e2:78:90:d3:0a: 29:1a:82:1c:61:0b:c3:b2:c2:d0:c8:40:7a:bc:5e:1f:b3:35: 33:18:ca:7f:84:b0:67:82:9c:4a:71:a4:9e:2d:b7:33:c0:d5: c4:3d:31:f6:7f:1f:17:b1:b9:8e:95:db:54:ac:52:67:44:b2: bf:f9:eb:f5:15:f2:ab:b6:ab:89:94:4f:12:d3:ee:bd:dd:06: 3e:a8:5f:60:9c:d1:47:ec:41:c7:af:73:52:0a:5d:b1:d8:ce: d4:9a:1b:3a:9f:97:d3:4b:72:e3:d2:d0:a4:6a:0f:27:6d:81: 17:42:ad:5a:6a:3c:f3:2b:f7:2b:43:1f:2c:10:bf:c8:6c:fd: ce:cc:5a:65:79:0b:a7:12:77:b9:56:d7:80:c2:88:9a:2e:55: c5:e6:5e:34:8b:66:5f:f5:7c:26:68:c6:1a:2e:06:ba:82:cc: 0c:11:f9:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjYwMzI3MDMyNDM4WhcNMjYwNDAzMDMyNDM4WjAYMRYwFAYD VQQDEw02OWM1Zjg3Ni01OGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYBvD4VWmUAmJY7xY4KWYmlYCv0dcBidvTlQ+aT3ZMQVCyFOFeb96l4PfpfU RvPtjM5Qpms90d5sfD2KwN3tOlozklLGSl02xDnt+GWIu8CpGY918uRbxrSai0K9 Rs3teRR3rAMdqPxcznshU65XshSmy31yocD1ooq+CSJVBOE5PdZoM+mMatip4bOd hGuoJhc/OhJG7UzH7QF3LLU1ow/RgJxLRsKfqFUGxQvEV3817Cl9Ok1+I39HlFJC uqG935ZOkDUlScRd9pgVW0oEJ1+/nI0QJ9QEFmfqyA6yRvFrYtO8XZkcmMfktzp8 5uhqsh88zqySPVdceWdMSqkgfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkXfVwi BlVwknmoa6qOedfaQZHXMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWKcWMTNneir/VECkwZAeRSpHoEvBHX8Y1qaItgkxyD7fMTn1hpNP7L3nC2SW 6y+95mFbZCsGRXbdzucqgBsE+2v0Mv6C9G7kfyxawCbk9JToI0ryluJ4kNMKKRqC HGELw7LC0MhAerxeH7M1MxjKf4SwZ4KcSnGkni23M8DVxD0x9n8fF7G5jpXbVKxS Z0Syv/nr9RXyq7ariZRPEtPuvd0GPqhfYJzRR+xBx69zUgpdsdjO1JobOp+X00ty 49LQpGoPJ22BF0KtWmo88yv3K0MfLBC/yGz9zsxaZXkLpxJ3uVbXgMKImi5VxeZe NItmX/V8JmjGGi4GuoLMDBH5jQ== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:43 2026 by rpki-client