$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: L7KVeGsq/Fi0+UXSt67WjuiYOEJG/nhibfAzLvUmeDc= Subject key identifier: 35:DE:32:51:88:14:F3:ED:9C:00:A5:E4:1E:39:D8:9A:6F:3B:96:EA Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 02CE Signing time: Wed 25 Mar 2026 01:01:47 +0000 Manifest this update: Wed 25 Mar 2026 01:01:46 +0000 Manifest next update: Wed 01 Apr 2026 01:01:46 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: auV+L1D1UpW13xEy3RyoIsKnjAekGq5ciiut8s61opQ=) 2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: fau8zrxoL5+rKWWTOegWV7fze5dW+nWi1/hJ5SSwjv0=) 3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Mar 25 01:01:46 2026 GMT Not After : Apr 1 01:01:46 2026 GMT Subject: CN=69c333fb-4cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:b9:56:42:66:a7:3f:6e:a2:5a:04:ee:f2: 66:c2:48:85:f3:db:b1:c7:1d:9c:8b:c5:fe:87:8a: 5b:43:3b:e0:b6:4a:02:7e:ea:03:16:f6:08:5e:9c: aa:32:27:62:7c:c3:07:f4:53:52:ec:f5:d4:12:75: 1a:94:82:c0:22:9b:e0:9f:49:8d:5b:2d:1d:b2:2d: 32:9a:11:bc:42:44:81:94:49:50:dc:6e:eb:d4:3d: bc:81:2a:00:1d:a9:c5:6c:06:ca:6e:2b:2b:bd:0a: 87:72:80:61:18:d9:43:8c:4a:2b:e8:19:73:10:9e: 14:99:b4:03:f4:65:30:94:a7:ed:e7:93:eb:f8:ad: 82:0c:d2:3a:3b:02:50:88:33:95:b8:82:63:f6:fd: 93:28:00:30:1f:54:53:ed:23:ae:39:d9:2d:1b:74: 2c:dd:a2:78:26:bc:2c:ba:44:0d:e6:7b:3e:ee:c9: e9:30:ee:3c:0c:cb:76:49:0b:8f:a2:ff:fe:f5:19: 2d:e2:97:76:e1:e0:93:5e:5f:40:f8:64:59:58:d0: e5:4b:f5:95:53:77:6f:04:26:f5:25:00:37:f5:7c: be:cc:55:87:92:ef:f4:2f:67:2b:e4:85:ea:8d:8d: 98:bb:cd:95:6f:c0:90:0a:4f:9b:2e:af:20:7e:9b: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:32:51:88:14:F3:ED:9C:00:A5:E4:1E:39:D8:9A:6F:3B:96:EA X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:13:42:5e:36:0b:ac:20:58:b5:66:46:7c:3e:0c:2e:a6:73: e4:12:19:bc:ee:a2:b2:9e:ab:00:68:b5:65:41:ac:f0:36:10: 5a:56:b4:ba:70:d2:81:bc:7d:f0:1e:e3:b3:f2:d9:fe:39:ff: 09:be:39:ee:f2:e8:23:47:ef:5e:4f:3b:39:54:f3:40:2b:af: b9:7e:e9:9b:34:d9:0a:ce:6d:f9:94:35:23:25:b9:ab:61:e6: 07:c6:ac:ae:7d:7f:62:57:25:99:88:1b:0e:07:34:cc:06:a7: 8b:37:e4:25:36:0f:da:90:5b:71:ff:d9:75:09:d6:fd:4e:f0: 70:28:dd:96:80:31:53:ce:6a:42:ae:1c:52:26:e9:05:7d:31: cc:34:90:f1:84:8d:28:2d:34:6a:94:80:f6:d7:a3:19:e2:a8: 95:57:2d:fa:7e:5b:23:3e:11:3b:81:c0:68:3f:7c:eb:a2:e6: e3:47:c1:cf:34:1b:4d:e3:95:07:8c:f7:2f:a9:c3:27:cc:3f: 7c:fe:47:d8:93:6b:b6:b8:5d:be:85:29:f4:40:e3:8f:ce:86: 9c:1b:86:f9:5a:54:f5:f5:3b:03:4d:e0:38:04:aa:9b:de:81: 9f:43:f1:ce:54:2f:b2:2a:ed:93:ef:91:ef:c7:50:0c:53:74: c7:9e:f6:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjYwMzI1MDEwMTQ2WhcNMjYwNDAxMDEwMTQ2WjAYMRYwFAYD VQQDEw02OWMzMzNmYi00Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3+5VkJmpz9uoloE7vJmwkiF89uxxx2ci8X+h4pbQzvgtkoCfuoDFvYIXpyq MidifMMH9FNS7PXUEnUalILAIpvgn0mNWy0dsi0ymhG8QkSBlElQ3G7r1D28gSoA HanFbAbKbisrvQqHcoBhGNlDjEor6BlzEJ4UmbQD9GUwlKft55Pr+K2CDNI6OwJQ iDOVuIJj9v2TKAAwH1RT7SOuOdktG3Qs3aJ4JrwsukQN5ns+7snpMO48DMt2SQuP ov/+9Rkt4pd24eCTXl9A+GRZWNDlS/WVU3dvBCb1JQA39Xy+zFWHku/0L2cr5IXq jY2Yu82Vb8CQCk+bLq8gfpux0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXeMlGI FPPtnACl5B452JpvO5bqMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcxNCXjYLrCBYtWZGfD4MLqZz5BIZvO6isp6rAGi1ZUGs8DYQWla0unDSgbx9 8B7js/LZ/jn/Cb457vLoI0fvXk87OVTzQCuvuX7pmzTZCs5t+ZQ1IyW5q2HmB8as rn1/YlclmYgbDgc0zAanizfkJTYP2pBbcf/ZdQnW/U7wcCjdloAxU85qQq4cUibp BX0xzDSQ8YSNKC00apSA9tejGeKolVct+n5bIz4RO4HAaD9866Lm40fBzzQbTeOV B4z3L6nDJ8w/fP5H2JNrtrhdvoUp9EDjj86GnBuG+VpU9fU7A03gOASqm96Bn0Px zlQvsirtk++R78dQDFN0x5721g== -----END CERTIFICATE-----Generated at Thu Mar 26 23:52:24 2026 by rpki-client