$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json) Hash identifier: vL5kkUGJkpsQ9FudTxgVruG5Rul02M+VTpm2H9zRTvY= Subject key identifier: 21:31:24:39:9A:DD:2B:D5:A0:BD:3B:72:6D:D1:61:DD:E7:96:01:24 Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft Manifest number: 011A Signing time: Wed 25 Mar 2026 05:01:30 +0000 Manifest this update: Wed 25 Mar 2026 05:01:30 +0000 Manifest next update: Wed 01 Apr 2026 05:01:30 +0000 Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: S7HTBaF8eh0xe0Br6QDNLt417j2z6tZ4rv8ZANfM5mE=) 2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: BOLBqg6HB+WZgDmASuick5DSh+pZdhSvC9fPbTzN5P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Validity Not Before: Mar 25 05:01:30 2026 GMT Not After : Apr 1 05:01:30 2026 GMT Subject: CN=69c36c2a-691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:3a:77:a3:4a:a8:22:09:14:67:2c:cd:37: db:b8:75:0a:46:b4:8c:ab:c5:c3:71:0b:b5:37:25: 2f:cd:f6:cc:82:95:c2:a0:98:82:4e:1f:e9:41:b1: 9a:84:9d:5d:76:1f:1a:0f:0a:5f:8f:5b:85:e8:e4: 14:ab:6c:8b:95:96:cc:c8:ee:18:c4:9a:e3:a8:91: 22:e9:71:22:88:e3:04:d9:51:92:3f:f5:b8:82:c2: 63:2f:fe:86:bf:65:cc:ca:76:a4:c7:f2:c3:45:a0: bb:3c:8f:39:67:fc:41:29:9d:9d:c8:37:38:b4:ec: 06:33:7c:a2:67:2f:9b:b8:6c:8b:79:1c:28:f2:87: 6a:b4:75:ce:be:38:3e:ad:da:e6:f2:80:7e:f2:ec: 2b:c4:17:09:a1:2f:7f:53:bd:85:15:4f:3b:5a:6c: 17:18:f5:13:2a:72:7d:fe:0e:b5:fc:fd:1b:2f:46: f9:3c:e2:4b:92:6d:41:0e:30:ab:1d:86:ee:15:c7: 6d:be:de:9a:9f:40:3b:43:e0:f6:dd:0a:c4:c4:84: 08:f2:e4:f8:3f:51:5a:fd:b4:6e:47:06:fa:8e:2f: 29:4d:69:cb:13:e7:28:05:98:e3:79:cb:c3:d1:05: 3c:c3:4b:fc:96:fb:f0:fd:cd:1a:bf:1d:29:c0:99: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:31:24:39:9A:DD:2B:D5:A0:BD:3B:72:6D:D1:61:DD:E7:96:01:24 X509v3 Authority Key Identifier: keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:24:3b:c1:d3:6a:95:9e:e7:73:3a:32:cf:2a:84:0e:9d:fa: 70:b0:fd:2d:12:e7:95:77:cc:02:5e:11:54:c9:a2:e6:f9:04: 79:fe:2e:43:f9:fa:7f:43:93:6b:4a:d2:6b:44:fd:74:27:e9: 3b:cd:ae:51:38:64:36:7c:c3:72:ab:71:ff:d5:01:10:1d:60: 4b:9b:2e:9b:e4:92:f4:88:3a:e5:90:bb:e1:92:9a:0d:eb:f2: 5d:e8:0a:af:fe:91:e9:88:b6:6d:37:bd:35:1b:2d:18:20:3c: b9:c3:36:76:6c:ac:05:42:77:79:55:20:74:87:a7:6d:33:72: e9:17:f7:a3:8d:c4:a0:0a:7c:f1:be:aa:ee:e5:86:cc:5a:97: 7c:de:fb:9d:ac:dc:a5:7e:32:99:5b:0e:e0:3c:78:d2:bc:86: 76:aa:df:b9:da:74:b0:be:37:c0:e8:45:1b:d6:6d:d7:06:ae: 35:a4:ef:88:72:e2:55:08:fc:aa:61:b6:5b:31:70:ad:d0:60: dc:74:11:18:3d:d5:be:3d:a4:d8:57:51:9d:ce:b3:bb:dd:1b: ac:5b:ea:a9:41:0e:96:23:f1:1b:9a:6a:e2:a8:8f:73:4c:c9: 9e:bb:fa:40:cb:38:c5:ec:98:78:e6:21:e5:b8:6c:0e:77:9c: e1:d0:a5:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKDJEMTgwNkJCNzlGN0VDNkE2OTdDQjBBNjVBMjFFNUNC MTIyRkRFNzYwHhcNMjYwMzI1MDUwMTMwWhcNMjYwNDAxMDUwMTMwWjAYMRYwFAYD VQQDEw02OWMzNmMyYS02OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApks6d6NKqCIJFGcszTfbuHUKRrSMq8XDcQu1NyUvzfbMgpXCoJiCTh/pQbGa hJ1ddh8aDwpfj1uF6OQUq2yLlZbMyO4YxJrjqJEi6XEiiOME2VGSP/W4gsJjL/6G v2XMynakx/LDRaC7PI85Z/xBKZ2dyDc4tOwGM3yiZy+buGyLeRwo8odqtHXOvjg+ rdrm8oB+8uwrxBcJoS9/U72FFU87WmwXGPUTKnJ9/g61/P0bL0b5POJLkm1BDjCr HYbuFcdtvt6an0A7Q+D23QrExIQI8uT4P1Fa/bRuRwb6ji8pTWnLE+coBZjjecvD 0QU8w0v8lvvw/c0avx0pwJndhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCExJDma 3SvVoL07cm3RYd3nlgEkMB8GA1UdIwQYMBaAFC0YBrt59+xqaXywploh5csSL952 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ERjY5NEJBNjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdHcHBmTENtV2lIbHl4SXYz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ERjY5NEJBNjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdH cHBmTENtV2lIbHl4SXYzblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyCQ7wdNqlZ7nczoyzyqEDp36cLD9LRLnlXfMAl4RVMmi5vkEef4uQ/n6f0OT a0rSa0T9dCfpO82uUThkNnzDcqtx/9UBEB1gS5sum+SS9Ig65ZC74ZKaDevyXegK r/6R6Yi2bTe9NRstGCA8ucM2dmysBUJ3eVUgdIenbTNy6Rf3o43EoAp88b6q7uWG zFqXfN77nazcpX4ymVsO4Dx40ryGdqrfudp0sL43wOhFG9Zt1wauNaTviHLiVQj8 qmG2WzFwrdBg3HQRGD3Vvj2k2FdRnc6zu90brFvqqUEOliPxG5pq4qiPc0zJnrv6 QMs4xeyYeOYh5bhsDnec4dClxg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:52:05 2026 by rpki-client