$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: P/4vBOFH2RvLeWmmY+/xfCDG8JqhJLsIuX2AWZaY3yU= Subject key identifier: 47:2C:C1:4B:89:8B:EE:F6:94:8D:07:CB:50:E0:97:78:91:59:9D:F5 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0BE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0BCF Signing time: Tue 24 Mar 2026 18:45:08 +0000 Manifest this update: Tue 24 Mar 2026 18:45:07 +0000 Manifest next update: Tue 31 Mar 2026 18:45:07 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: zQP2pR/Mga+2J2r1Zyyaj3cY5JjlsqlT7hDtPaTDYuA=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3046 (0xbe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Mar 24 18:45:07 2026 GMT Not After : Mar 31 18:45:07 2026 GMT Subject: CN=69c2dbb4-988c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:5d:69:69:fe:d8:51:2b:3b:c2:2a:42:a6: 5e:ed:b4:ee:9a:c7:9e:81:1d:8f:c4:cb:73:03:bd: 6d:b8:3f:d4:f3:94:14:24:1d:e1:fd:d1:53:45:c6: 21:e1:86:00:ec:a0:bb:57:7a:6a:a0:23:30:fc:1d: 2b:a7:4b:b7:0b:1f:af:7d:dd:41:59:ac:7f:f1:c6: e4:44:dd:96:f8:7b:62:ed:92:d8:36:af:c1:d3:57: e3:1d:5d:61:96:7a:39:03:ac:f1:ef:46:bf:6b:e5: 43:23:85:2c:94:8a:d0:84:8d:24:c0:ee:52:21:87: 2e:ea:d7:ba:c1:97:1d:2e:a5:0a:4f:6a:63:7e:e5: 2b:60:23:ae:57:18:72:9d:d0:64:10:43:c8:a1:63: 29:58:d6:42:81:56:2c:99:99:12:09:1d:bb:51:28: b8:4d:5d:e6:1b:5d:62:10:8f:4a:4a:ff:86:41:54: 12:fc:5f:96:2f:a3:7f:16:03:53:88:82:5c:5c:c7: 21:81:c5:60:2e:63:d0:5d:38:9f:d0:54:55:4e:c0: 4b:3b:6d:de:14:39:b0:85:14:4d:ba:e7:3f:2d:6b: 4d:89:bb:a8:23:03:66:51:d1:e0:c6:de:30:ef:0b: 97:e7:63:70:a7:57:00:b4:0d:97:5e:6d:bc:31:38: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:C1:4B:89:8B:EE:F6:94:8D:07:CB:50:E0:97:78:91:59:9D:F5 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:17:ff:02:78:7b:28:6f:ff:a7:49:8b:a2:35:8e:10:15:e2: 59:4d:9b:17:19:70:d9:28:ec:88:09:66:7b:eb:3a:07:80:10: 7f:4d:a4:00:8a:36:2a:53:75:54:fa:f7:d1:a2:5e:f5:ee:61: 76:84:0d:f1:5b:df:d0:44:ae:98:f9:4f:c6:c9:50:e3:6d:ee: 32:94:89:c8:97:ea:c6:d3:b0:ea:6d:fa:9a:a9:84:07:4a:af: 55:01:73:14:dc:97:b1:ce:ad:d6:2b:61:ed:60:32:5f:a6:ed: 2f:ea:cf:ff:9b:18:53:4a:02:ee:69:2f:fd:81:c0:19:b7:a9: 34:54:93:f3:dc:72:fc:30:11:98:6e:84:cd:85:e7:63:a8:4d: 8c:be:1f:a0:ad:da:83:92:ba:f6:b9:6f:df:fa:40:a0:d1:69: b3:3b:33:3d:94:b8:98:2f:5c:64:78:af:c6:a9:64:0a:0b:fd: af:20:a4:24:d4:22:df:0e:a1:8d:80:ec:6d:94:69:87:a8:af: 7d:8f:82:c2:c3:f8:23:fa:7c:5f:88:e4:f2:42:72:97:a7:20: 66:e6:9c:ed:b5:80:cb:a1:0e:05:2d:d4:b4:d1:7b:e6:4a:2e: d6:e9:ab:35:52:f9:1e:49:f6:b7:35:69:19:c6:17:41:cb:38: 4f:bc:dd:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwMzI0MTg0NTA3WhcNMjYwMzMxMTg0NTA3WjAYMRYwFAYD VQQDEw02OWMyZGJiNC05ODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/hdaWn+2FErO8IqQqZe7bTumseegR2PxMtzA71tuD/U85QUJB3h/dFTRcYh 4YYA7KC7V3pqoCMw/B0rp0u3Cx+vfd1BWax/8cbkRN2W+Hti7ZLYNq/B01fjHV1h lno5A6zx70a/a+VDI4UslIrQhI0kwO5SIYcu6te6wZcdLqUKT2pjfuUrYCOuVxhy ndBkEEPIoWMpWNZCgVYsmZkSCR27USi4TV3mG11iEI9KSv+GQVQS/F+WL6N/FgNT iIJcXMchgcVgLmPQXTif0FRVTsBLO23eFDmwhRRNuuc/LWtNibuoIwNmUdHgxt4w 7wuX52Nwp1cAtA2XXm28MTgDBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcswUuJ i+72lI0Hy1Dgl3iRWZ31MB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdBf/Anh7KG//p0mLojWOEBXiWU2bFxlw2SjsiAlme+s6B4AQf02kAIo2KlN1 VPr30aJe9e5hdoQN8Vvf0ESumPlPxslQ423uMpSJyJfqxtOw6m36mqmEB0qvVQFz FNyXsc6t1ith7WAyX6btL+rP/5sYU0oC7mkv/YHAGbepNFST89xy/DARmG6EzYXn Y6hNjL4foK3ag5K69rlv3/pAoNFpszszPZS4mC9cZHivxqlkCgv9ryCkJNQi3w6h jYDsbZRph6ivfY+CwsP4I/p8X4jk8kJyl6cgZuac7bWAy6EOBS3UtNF75kou1umr NVL5Hkn2tzVpGcYXQcs4T7zdaQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:23:46 2026 by rpki-client