$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: joPtMevpzfWoLNxlqRUbot+SN72skOFehtpmZvh052Q= Subject key identifier: A1:9C:4D:88:D4:0E:DD:21:AA:D1:54:56:61:52:19:C9:66:04:3E:62 Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 0A53 Signing time: Tue 24 Mar 2026 19:27:45 +0000 Manifest this update: Tue 24 Mar 2026 19:27:45 +0000 Manifest next update: Tue 31 Mar 2026 19:27:45 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: ChPa5ANoVAYO75T4A3Z5QzI4chx2P1x6EkX/qjHlBr0=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: xYf6QNwyh/TfYBwfKMFox0Y2KD6yEqZCCyhoM2C9YaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: Mar 24 19:27:45 2026 GMT Not After : Mar 31 19:27:45 2026 GMT Subject: CN=69c2e5b1-d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:08:02:1e:ed:db:c9:b3:0b:1d:25:5f:45: 42:69:6a:9b:5a:0c:ca:32:08:e2:1a:87:63:ce:93: 7c:3c:2e:a6:c8:43:34:60:40:93:bb:f8:c5:e3:e3: d0:92:d1:c6:7d:6f:f0:ae:36:41:45:66:b6:f4:b8: 7e:db:73:68:e9:50:f5:3c:93:40:d8:ea:93:f1:cd: 76:bd:86:b7:07:4e:b8:35:f5:2b:0b:b1:20:a8:47: 81:0a:82:f4:09:36:d6:e5:28:4b:14:62:1b:da:5f: 44:de:78:fd:71:19:b5:89:5d:6e:39:93:7a:40:86: 09:43:c6:4f:96:ea:79:3a:59:53:17:02:08:27:b2: c6:cd:85:04:d7:50:11:23:c1:4b:6c:0a:94:9c:27: 43:98:1e:88:f0:05:ac:c0:29:13:07:73:fa:bd:48: 33:e5:ae:1a:9a:b6:16:f0:1a:8a:20:b7:c6:78:5a: d3:31:8d:b4:6a:c4:31:cd:49:86:56:60:dd:64:60: 55:4e:49:cd:9d:45:81:92:f0:2d:9c:23:e3:1b:d9: 37:61:24:52:59:29:68:65:c7:d8:6a:55:ce:3d:d0: 0d:ef:d0:fe:70:98:b6:2b:94:e7:0f:a2:77:0f:2f: 6a:79:22:b1:c5:ff:76:25:7b:c9:4f:e7:da:ea:5f: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:4D:88:D4:0E:DD:21:AA:D1:54:56:61:52:19:C9:66:04:3E:62 X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:4d:fa:60:6d:f5:4c:c0:f7:ec:5a:8c:71:60:2e:bc:6c:b3: 4f:66:90:30:6f:d4:71:09:00:0a:64:dd:50:d6:e2:1d:a9:7e: 53:bc:c3:97:d4:c7:3b:d6:4c:e2:9b:c9:ef:b8:1b:29:7f:e0: 85:46:30:f5:f1:d5:48:b0:06:a5:8e:45:98:b6:1b:c7:93:d5: 16:e8:3d:e3:a8:65:f0:9d:40:ac:36:63:3a:f2:94:fd:f6:dd: f7:46:6a:4c:f2:76:97:63:65:8c:73:b4:54:84:85:e0:c7:a7: 00:9a:8f:70:da:38:65:d3:0a:25:14:b7:ba:f2:d2:3f:d7:25: c6:1c:c7:54:12:f5:fa:ce:aa:2d:3f:91:d0:0b:48:0d:33:cf: 92:a4:b7:71:2c:09:d3:80:6d:ef:ae:1e:7c:4e:33:ff:7f:4b: 70:b7:98:f9:08:f2:63:c7:a7:97:f4:01:d4:35:25:61:b0:a9: f8:5d:e7:65:24:fc:b4:85:c2:7b:51:40:56:67:a5:f4:b1:92: 5a:cb:db:77:e6:eb:10:d3:b7:fd:86:6c:e1:63:22:86:5b:88: f7:35:4b:fa:3d:b3:1b:79:c1:e3:9a:4c:36:db:f0:b2:24:ff: 7e:f7:e1:7c:22:ca:08:6d:18:6b:bb:91:a9:a0:27:77:bc:68: 11:bf:8d:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjYwMzI0MTkyNzQ1WhcNMjYwMzMxMTkyNzQ1WjAYMRYwFAYD VQQDEw02OWMyZTViMS1kMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugkIAh7t28mzCx0lX0VCaWqbWgzKMgjiGodjzpN8PC6myEM0YECTu/jF4+PQ ktHGfW/wrjZBRWa29Lh+23No6VD1PJNA2OqT8c12vYa3B064NfUrC7EgqEeBCoL0 CTbW5ShLFGIb2l9E3nj9cRm1iV1uOZN6QIYJQ8ZPlup5OllTFwIIJ7LGzYUE11AR I8FLbAqUnCdDmB6I8AWswCkTB3P6vUgz5a4amrYW8BqKILfGeFrTMY20asQxzUmG VmDdZGBVTknNnUWBkvAtnCPjG9k3YSRSWSloZcfYalXOPdAN79D+cJi2K5TnD6J3 Dy9qeSKxxf92JXvJT+fa6l+SqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGcTYjU Dt0hqtFUVmFSGclmBD5iMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg036YG31TMD37FqMcWAuvGyzT2aQMG/UcQkACmTdUNbiHal+U7zDl9THO9ZM 4pvJ77gbKX/ghUYw9fHVSLAGpY5FmLYbx5PVFug946hl8J1ArDZjOvKU/fbd90Zq TPJ2l2NljHO0VISF4MenAJqPcNo4ZdMKJRS3uvLSP9clxhzHVBL1+s6qLT+R0AtI DTPPkqS3cSwJ04Bt764efE4z/39LcLeY+QjyY8enl/QB1DUlYbCp+F3nZST8tIXC e1FAVmel9LGSWsvbd+brENO3/YZs4WMihluI9zVL+j2zG3nB45pMNtvwsiT/fvfh fCLKCG0Ya7uRqaAnd7xoEb+Nig== -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:25 2026 by rpki-client