$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: PGwfB2GEGE8HbML8FH3btJiHFpCI4y25/GxtQZdlSqM= Subject key identifier: 02:21:A2:12:7F:2B:0A:5F:88:C5:10:57:3F:92:5D:7A:9C:F7:CC:86 Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 3550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 3534 Signing time: Tue 24 Mar 2026 15:15:49 +0000 Manifest this update: Tue 24 Mar 2026 15:15:48 +0000 Manifest next update: Tue 31 Mar 2026 15:15:48 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: AdO+P9upjJKAiqd/iPPxLYqretvWSpQHB0dgYi4geyY=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: naU1L3sA/vwcpXLmBU/QE/974IoqN32UsdXdqlCcaP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Mar 24 15:15:48 2026 GMT Not After : Mar 31 15:15:48 2026 GMT Subject: CN=69c2aaa4-45e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:88:a8:6e:7f:af:fc:8c:f2:84:56:d3:47: 79:eb:34:47:b0:0e:91:5f:57:e2:2c:d9:51:44:95: 88:3d:e2:18:b3:a4:bd:a6:32:b2:95:0c:f0:3d:9c: 8d:cb:e0:64:1d:dc:30:87:a7:b2:b1:3c:04:70:a3: 34:c7:e9:22:aa:76:7c:de:d7:5c:0a:1c:81:f6:2c: 21:86:28:15:71:da:0c:14:fd:30:72:e5:1d:0c:89: 0f:2e:5f:00:7b:f6:a4:58:d1:99:ca:b5:7d:30:84: 78:2f:88:3b:f9:00:b5:36:9e:80:b0:46:18:a9:3f: 28:12:a1:18:c3:04:49:1d:95:48:97:4e:bf:c5:7d: 05:0f:3a:75:57:d4:5c:82:83:a4:cf:19:15:00:a5: c9:ae:9a:17:6f:a2:db:07:19:b6:d4:ef:2e:ef:42: 59:77:ac:a9:e3:1e:79:f4:00:d2:2a:c8:8e:ba:32: 7a:63:a9:32:fc:b5:16:e9:c9:48:42:5f:f3:22:6a: c1:d6:29:06:40:3f:d3:4e:ac:b9:32:ee:0c:db:8e: e7:ca:ec:68:fe:a8:fd:6d:b0:1f:38:08:b6:4d:2e: 80:f3:6a:64:b9:0d:b4:9d:c2:ec:e7:ef:ad:59:5f: 3e:52:90:33:93:46:75:46:bb:81:56:85:96:a4:35: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:A2:12:7F:2B:0A:5F:88:C5:10:57:3F:92:5D:7A:9C:F7:CC:86 X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:5e:69:fa:61:f1:7e:ee:79:62:12:48:a8:0e:d2:81:bb: ef:a5:49:7f:64:42:2e:5d:b0:5b:0c:eb:a9:94:81:33:80:b9: 99:c7:97:4e:89:39:f2:c0:cf:a7:ac:f5:fc:5c:99:5a:35:34: a2:34:63:2a:c4:e8:42:6a:fa:c3:e4:97:78:82:8a:fa:28:84: 83:2b:64:ea:52:82:e4:6a:ad:4b:0c:ea:81:34:e5:3c:77:0b: 6c:ef:25:a8:ea:20:83:05:a7:a2:2b:4a:ba:0e:1e:54:2c:61: ae:10:12:f5:c3:8d:ee:04:1f:6e:5d:e3:a1:e8:a2:f2:44:43: 9d:17:46:b4:95:75:fa:7e:1a:8c:a9:f0:2f:5d:6c:10:94:55: b0:f2:3b:a0:c9:47:c8:21:79:ca:d4:9c:5f:78:fe:4a:1a:bc: 9e:7a:34:05:52:87:b7:03:5b:ac:bb:32:aa:59:8a:64:c2:15: ce:f5:8c:d1:8d:3e:71:e2:f9:5a:79:44:59:de:aa:2f:51:54: 2e:a0:f9:d7:87:74:c0:cf:5f:4d:06:1c:dc:81:fb:df:a3:23: 1a:00:1e:4f:53:09:2e:d2:95:23:af:53:4e:63:68:60:5f:a0: 14:63:08:1c:1a:40:44:01:52:9c:f1:87:43:f6:5c:97:b9:38: f7:07:04:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjYwMzI0MTUxNTQ4WhcNMjYwMzMxMTUxNTQ4WjAYMRYwFAYD VQQDEw02OWMyYWFhNC00NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUSIqG5/r/yM8oRW00d56zRHsA6RX1fiLNlRRJWIPeIYs6S9pjKylQzwPZyN y+BkHdwwh6eysTwEcKM0x+kiqnZ83tdcChyB9iwhhigVcdoMFP0wcuUdDIkPLl8A e/akWNGZyrV9MIR4L4g7+QC1Np6AsEYYqT8oEqEYwwRJHZVIl06/xX0FDzp1V9Rc goOkzxkVAKXJrpoXb6LbBxm21O8u70JZd6yp4x559ADSKsiOujJ6Y6ky/LUW6clI Ql/zImrB1ikGQD/TTqy5Mu4M247nyuxo/qj9bbAfOAi2TS6A82pkuQ20ncLs5++t WV8+UpAzk0Z1RruBVoWWpDUHsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIhohJ/ KwpfiMUQVz+SXXqc98yGMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ91eafph8X7ueWISSKgO0oG776VJf2RCLl2wWwzrqZSBM4C5mceXTok58sDP p6z1/FyZWjU0ojRjKsToQmr6w+SXeIKK+iiEgytk6lKC5GqtSwzqgTTlPHcLbO8l qOoggwWnoitKug4eVCxhrhAS9cON7gQfbl3joeii8kRDnRdGtJV1+n4ajKnwL11s EJRVsPI7oMlHyCF5ytScX3j+Shq8nno0BVKHtwNbrLsyqlmKZMIVzvWM0Y0+ceL5 WnlEWd6qL1FULqD514d0wM9fTQYc3IH736MjGgAeT1MJLtKVI69TTmNoYF+gFGMI HBpARAFSnPGHQ/Zcl7k49wcEFA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:06 2026 by rpki-client