$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: Gq14q8+UZ7ujy6L/L5rlbcsWCQOa8WptPEiUjgwuzCE= Subject key identifier: 22:81:BF:D7:BC:FE:78:DB:8E:27:A8:AA:70:60:A6:5A:09:0E:00:87 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 03B0 Signing time: Wed 25 Mar 2026 00:21:55 +0000 Manifest this update: Wed 25 Mar 2026 00:21:55 +0000 Manifest next update: Wed 01 Apr 2026 00:21:55 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: mpHRoj96s6XQtJ6vBjhJCIga/NBAnzOB7WqbKkAz8uw=) 2: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=) 3: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=) 4: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=) 5: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=) 6: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=) 7: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Mar 25 00:21:55 2026 GMT Not After : Apr 1 00:21:55 2026 GMT Subject: CN=69c32aa3-d70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:fb:c3:c7:4d:e1:66:fb:05:07:c9:50:96: 9e:9e:e9:31:14:26:57:2a:ba:39:8e:35:52:40:0f: 7f:01:75:e3:a1:ca:d8:b1:b9:49:b7:90:d0:70:09: c9:89:97:2f:02:dd:97:8b:27:d5:4a:11:96:0e:dc: 52:43:46:0a:5a:59:23:fb:73:d5:ff:bc:97:81:3e: 88:49:da:12:fc:e4:da:13:ab:4c:a4:82:31:39:52: ee:42:ca:93:26:c8:0a:45:2a:16:c8:43:6d:e4:ce: cb:b9:77:56:7d:72:e1:ec:6f:43:0c:07:6d:e2:fc: 78:81:49:4a:93:56:77:86:09:50:71:46:d0:2c:30: 4b:86:d6:d3:84:6e:80:1c:16:09:6e:e6:85:ae:d7: 9a:7e:56:c0:29:af:42:da:50:53:5c:5d:78:85:c8: 1e:57:6b:cd:8e:69:0a:a2:90:6e:07:55:ae:7b:ed: e2:e2:53:7d:de:11:f0:6a:03:0c:fe:c0:32:aa:36: 5e:ec:c2:1c:54:47:88:38:1e:b4:cc:cc:11:fa:fa: 41:4d:0d:31:05:2d:4e:fc:6d:bf:8c:6f:c5:2a:9c: bb:10:7c:d3:01:50:00:e0:21:a0:52:03:d0:08:06: 96:d3:94:89:94:27:ad:5d:c2:73:a0:96:6d:6b:2d: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:BF:D7:BC:FE:78:DB:8E:27:A8:AA:70:60:A6:5A:09:0E:00:87 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:65:ec:1e:60:3e:f9:32:da:09:a8:4f:a0:a5:7b:70:4a:a7: da:fa:7b:8c:21:49:c5:c8:87:5e:cb:ba:17:d7:aa:15:b3:bc: f3:25:d7:df:fb:d1:63:1f:bc:4f:d6:89:2d:51:a3:3a:6e:9c: ef:05:8e:88:db:2b:b9:7e:d1:25:e0:1d:b4:76:24:ee:0e:30: f2:ed:38:be:2a:c2:84:e6:e7:3e:c6:f3:52:94:db:e1:77:d4: db:ed:2f:de:2d:cc:bf:43:31:cd:13:1b:b3:a3:38:1d:3d:de: 4b:ab:d1:99:a8:68:29:9e:20:78:4e:ea:43:02:a1:63:9b:76: 63:6a:27:f7:6c:c3:0e:87:4b:24:06:2c:41:6d:94:f6:10:b8: 52:56:a4:46:6c:6d:0f:7e:88:5b:61:ad:59:6e:b5:b7:d1:83: 1c:0d:1f:3f:dc:6c:21:f6:2a:4d:28:fc:9e:a8:56:30:0f:96: 8c:8c:2c:93:4a:4d:04:10:d1:40:42:95:81:54:d7:9d:cf:96: 46:f6:4c:99:07:0f:7e:a6:9e:da:49:e0:df:65:d0:8f:fb:25: a5:51:d0:13:3c:57:5f:e7:01:85:c5:95:dc:60:d9:5b:e9:a0: 7c:ba:69:9b:cc:4b:33:13:a2:96:71:19:86:33:a1:dc:da:d6: d5:c6:b9:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwMzI1MDAyMTU1WhcNMjYwNDAxMDAyMTU1WjAYMRYwFAYD VQQDEw02OWMzMmFhMy1kNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsv7w8dN4Wb7BQfJUJaenukxFCZXKro5jjVSQA9/AXXjocrYsblJt5DQcAnJ iZcvAt2XiyfVShGWDtxSQ0YKWlkj+3PV/7yXgT6ISdoS/OTaE6tMpIIxOVLuQsqT JsgKRSoWyENt5M7LuXdWfXLh7G9DDAdt4vx4gUlKk1Z3hglQcUbQLDBLhtbThG6A HBYJbuaFrteaflbAKa9C2lBTXF14hcgeV2vNjmkKopBuB1Wue+3i4lN93hHwagMM /sAyqjZe7MIcVEeIOB60zMwR+vpBTQ0xBS1O/G2/jG/FKpy7EHzTAVAA4CGgUgPQ CAaW05SJlCetXcJzoJZtay3+owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKBv9e8 /njbjieoqnBgploJDgCHMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT2XsHmA++TLaCahPoKV7cEqn2vp7jCFJxciHXsu6F9eqFbO88yXX3/vRYx+8 T9aJLVGjOm6c7wWOiNsruX7RJeAdtHYk7g4w8u04virChObnPsbzUpTb4XfU2+0v 3i3Mv0MxzRMbs6M4HT3eS6vRmahoKZ4geE7qQwKhY5t2Y2on92zDDodLJAYsQW2U 9hC4UlakRmxtD36IW2GtWW61t9GDHA0fP9xsIfYqTSj8nqhWMA+WjIwsk0pNBBDR QEKVgVTXnc+WRvZMmQcPfqae2kng32XQj/slpVHQEzxXX+cBhcWV3GDZW+mgfLpp m8xLMxOilnEZhjOh3NrW1ca5Uw== -----END CERTIFICATE-----Generated at Fri Mar 27 00:32:30 2026 by rpki-client