$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: oCuFksZiPvTSyOcFL+9llcNo6m22XuyenIjXjcCt874= Subject key identifier: 15:4A:7A:51:F7:CF:75:97:5A:75:3F:AC:73:0D:BB:03:1B:CE:AF:CD Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 1502 Signing time: Tue 24 Mar 2026 18:19:52 +0000 Manifest this update: Tue 24 Mar 2026 18:19:52 +0000 Manifest next update: Tue 31 Mar 2026 18:19:52 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: MUOWkGNrHSqgluT4pS1FbFwQCBWsB/tSHp3dX1PBpM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: Mar 24 18:19:52 2026 GMT Not After : Mar 31 18:19:52 2026 GMT Subject: CN=69c2d5c8-ba96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:1e:dc:0b:05:d4:04:28:33:4e:3e:3f:62: 25:6c:12:82:60:03:61:d2:4a:42:22:a2:b6:5b:76: 0c:7f:e5:07:fc:83:95:80:85:cb:cf:e4:db:4a:b3: 6d:98:25:16:3d:de:b8:d9:74:c5:f5:ef:36:53:37: aa:fc:27:0d:92:91:f6:2b:9c:7d:7f:1b:77:2a:f4: d7:84:3e:7d:f4:79:a0:f9:54:9b:99:e4:34:e0:69: d9:ed:01:ac:f5:24:a5:a3:41:91:79:59:7e:0f:f4: be:0a:00:b2:eb:9d:2e:38:69:c8:c2:ad:7d:5c:91: 70:53:0f:bf:ae:e2:7e:0c:ce:8a:2b:d9:71:b9:b0: 3b:fd:f6:9d:4b:87:97:b0:dc:b1:68:d1:40:23:26: a2:64:0e:74:8a:26:74:89:d2:93:d5:1d:78:0a:8d: f4:80:aa:d4:d0:e5:b8:9d:a7:db:ee:3d:61:ec:28: ce:36:5c:c3:ef:52:99:5c:7c:d8:83:4e:ff:2a:c0: d2:d9:78:e3:d1:b2:b6:c1:9e:c9:a6:4d:72:47:64: 8f:b3:1b:46:99:1a:16:b6:1c:42:8e:ca:be:58:13: 4d:69:02:da:b4:30:13:ff:2f:ed:20:46:f0:6f:cb: ee:de:fe:e4:31:07:58:ea:db:51:50:b4:23:e7:1c: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:7A:51:F7:CF:75:97:5A:75:3F:AC:73:0D:BB:03:1B:CE:AF:CD X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:73:d9:9b:ee:b4:e7:70:e2:e3:03:2e:62:cf:e9:86:4b:7f: 83:b7:ee:e3:93:50:21:d6:4c:48:11:9f:fa:5d:ae:59:88:24: a5:fb:e8:30:d2:bc:09:df:b2:fd:65:e2:ff:9f:84:8d:73:26: e4:01:56:a1:01:34:cf:74:25:3a:73:7e:87:f6:1b:01:4b:ed: 4f:3c:e1:11:28:d2:c8:fc:40:21:af:01:55:96:78:f5:c8:8b: c9:c1:9c:8a:48:62:21:2a:3e:43:bd:fb:9c:7b:eb:76:7b:8b: ca:3c:1b:fe:82:11:5d:5f:5d:31:96:ae:18:7c:7e:e8:f2:cc: 0f:1c:ca:07:c5:7c:ed:ca:24:4e:c2:44:9f:ff:b0:93:f2:ba: 41:c3:95:3e:ba:7d:17:90:c6:34:40:79:08:98:db:ec:ce:db: 34:a2:52:06:8e:f8:97:f3:06:1a:cf:5e:d1:d9:89:a9:a6:e1: 22:5b:98:0e:5a:3c:cb:8e:88:15:da:9c:ef:ef:0d:cb:47:09: 64:5c:a4:29:55:9a:55:68:c7:e3:4e:74:31:e5:b7:43:48:e9: 2f:14:98:09:08:83:15:5a:29:05:31:ac:13:c1:86:56:99:a0: 8d:36:be:8b:65:9a:17:3d:5d:8d:d5:4d:73:8a:17:87:12:ee: 0b:be:93:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjYwMzI0MTgxOTUyWhcNMjYwMzMxMTgxOTUyWjAYMRYwFAYD VQQDEw02OWMyZDVjOC1iYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLke3AsF1AQoM04+P2IlbBKCYANh0kpCIqK2W3YMf+UH/IOVgIXLz+TbSrNt mCUWPd642XTF9e82Uzeq/CcNkpH2K5x9fxt3KvTXhD599Hmg+VSbmeQ04GnZ7QGs 9SSlo0GReVl+D/S+CgCy650uOGnIwq19XJFwUw+/ruJ+DM6KK9lxubA7/fadS4eX sNyxaNFAIyaiZA50iiZ0idKT1R14Co30gKrU0OW4nafb7j1h7CjONlzD71KZXHzY g07/KsDS2Xjj0bK2wZ7Jpk1yR2SPsxtGmRoWthxCjsq+WBNNaQLatDAT/y/tIEbw b8vu3v7kMQdY6ttRULQj5xwo9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVKelH3 z3WXWnU/rHMNuwMbzq/NMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPnPZm+6053Di4wMuYs/phkt/g7fu45NQIdZMSBGf+l2uWYgkpfvoMNK8Cd+y /WXi/5+EjXMm5AFWoQE0z3QlOnN+h/YbAUvtTzzhESjSyPxAIa8BVZZ49ciLycGc ikhiISo+Q737nHvrdnuLyjwb/oIRXV9dMZauGHx+6PLMDxzKB8V87cokTsJEn/+w k/K6QcOVPrp9F5DGNEB5CJjb7M7bNKJSBo74l/MGGs9e0dmJqabhIluYDlo8y46I Fdqc7+8Ny0cJZFykKVWaVWjH4050MeW3Q0jpLxSYCQiDFVopBTGsE8GGVpmgjTa+ i2WaFz1djdVNc4oXhxLuC76Teg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:05 2026 by rpki-client