$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: Lzgecd38tES4/gNc1BdZ6OiYu247tFk6sw/IwZjcTRY= Subject key identifier: B6:BC:E8:1B:07:BC:D6:26:27:6A:D0:AC:C4:C4:73:33:4F:C3:C3:08 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0CCD Signing time: Tue 24 Mar 2026 18:13:32 +0000 Manifest this update: Tue 24 Mar 2026 18:13:32 +0000 Manifest next update: Tue 31 Mar 2026 18:13:32 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: kXEJ4/wLDF0O9G3K5RN0gMDcislF+TsHTrJ4v4ZNSX0=) 2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=) 3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Mar 24 18:13:32 2026 GMT Not After : Mar 31 18:13:32 2026 GMT Subject: CN=69c2d44c-8373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:1b:67:df:c4:3f:58:dc:a3:71:03:5c:df: e4:98:73:6f:01:e0:c2:f6:5d:f1:2c:2d:f0:5d:0a: 68:d5:33:24:f1:8a:cb:2d:12:0e:ca:44:c1:25:86: cc:79:88:bf:f8:5d:f9:c9:b0:c2:5e:ab:57:24:39: 4b:41:5b:cf:01:4b:50:64:cd:b5:b3:98:6b:cb:e2: 3c:52:6d:41:e3:4d:9d:68:58:35:0f:f7:96:99:43: bb:9c:d5:b1:3c:ef:b6:b2:9b:46:20:a5:e3:3c:50: 0f:0a:29:f3:44:2c:30:50:d3:e3:3a:41:42:c3:c7: d5:d2:00:40:eb:3b:53:4f:30:86:5a:10:a1:86:57: 5c:46:91:35:ed:aa:d0:79:3a:7c:df:fc:04:06:8b: 70:08:4c:b1:6e:6d:29:41:48:56:2e:fb:36:ef:d5: c5:6c:b0:cc:4d:12:dd:ca:3e:88:a3:6e:73:89:7f: 3f:55:ea:cd:0b:74:6c:4c:96:12:bc:7d:3a:cc:f3: b0:e9:ff:b7:c8:3e:f8:98:43:ff:5b:15:ba:d1:d2: 0b:93:bd:f6:50:1c:72:cf:15:03:fd:21:0d:e5:f7: 3d:dc:e1:43:f2:74:fa:63:f3:66:31:d8:1a:d9:11: 56:c0:7c:df:46:06:93:e5:fa:55:c5:67:2d:9b:51: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BC:E8:1B:07:BC:D6:26:27:6A:D0:AC:C4:C4:73:33:4F:C3:C3:08 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:ad:fa:5d:16:a9:cc:67:7a:ba:be:0e:db:56:30:26:fc: 6b:91:17:4f:c9:1a:b9:ae:04:70:c0:01:83:5d:2f:4e:b3:b1: ae:cd:8f:0e:89:2c:10:31:1a:bb:4b:11:2d:01:c3:59:c2:b0: a8:1d:51:1d:4b:dd:ef:49:5c:3e:d5:f5:e5:74:8c:43:21:aa: 7a:c1:db:9f:ac:ab:01:2f:f3:e8:7c:6e:92:cd:26:41:35:a4: a8:3f:3e:38:0e:3f:dd:66:87:ee:a7:9f:1c:70:2a:05:24:36: 5b:ae:be:53:ca:92:a5:a7:27:d0:96:f9:6f:bd:f5:4e:01:49: 62:01:72:34:96:d2:79:ed:e9:67:6c:34:b0:09:c3:d1:49:29: 20:a6:65:12:f7:c7:0a:6c:e7:c3:ca:69:c0:61:b0:59:93:5d: ab:9d:43:0e:16:8e:47:50:e7:7e:8f:42:26:5c:e2:82:b5:83: a3:2d:9b:2f:10:2a:6d:a8:25:76:14:a2:bd:60:19:a6:de:fa: eb:2c:bd:88:92:51:11:b1:70:ce:91:21:e7:15:d6:2f:45:49: 21:f2:49:32:0d:28:36:33:09:1f:0b:c5:1a:e9:1e:b0:06:0c: e9:13:0c:56:65:ab:5d:cd:cf:26:f6:b6:ae:c2:83:19:b7:31: 96:82:e5:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjYwMzI0MTgxMzMyWhcNMjYwMzMxMTgxMzMyWjAYMRYwFAYD VQQDEw02OWMyZDQ0Yy04MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMQbZ9/EP1jco3EDXN/kmHNvAeDC9l3xLC3wXQpo1TMk8YrLLRIOykTBJYbM eYi/+F35ybDCXqtXJDlLQVvPAUtQZM21s5hry+I8Um1B402daFg1D/eWmUO7nNWx PO+2sptGIKXjPFAPCinzRCwwUNPjOkFCw8fV0gBA6ztTTzCGWhChhldcRpE17arQ eTp83/wEBotwCEyxbm0pQUhWLvs279XFbLDMTRLdyj6Io25ziX8/VerNC3RsTJYS vH06zPOw6f+3yD74mEP/WxW60dILk732UBxyzxUD/SEN5fc93OFD8nT6Y/NmMdga 2RFWwHzfRgaT5fpVxWctm1EZ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLa86BsH vNYmJ2rQrMTEczNPw8MIMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdq6t+l0Wqcxnerq+DttWMCb8a5EXT8kaua4EcMABg10vTrOxrs2PDoksEDEa u0sRLQHDWcKwqB1RHUvd70lcPtX15XSMQyGqesHbn6yrAS/z6Hxuks0mQTWkqD8+ OA4/3WaH7qefHHAqBSQ2W66+U8qSpacn0Jb5b731TgFJYgFyNJbSee3pZ2w0sAnD 0UkpIKZlEvfHCmznw8ppwGGwWZNdq51DDhaOR1Dnfo9CJlzigrWDoy2bLxAqbagl dhSivWAZpt766yy9iJJREbFwzpEh5xXWL0VJIfJJMg0oNjMJHwvFGukesAYM6RMM VmWrXc3PJva2rsKDGbcxloLl5g== -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:14 2026 by rpki-client