$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json) Hash identifier: NhJEMwFUj0gAmjUmFDyozt60st+yXIHihWVuuogBYxM= Subject key identifier: F0:88:51:F5:1C:FB:A8:0F:F3:27:54:79:4E:AE:CB:05:A7:EB:7E:17 Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft Manifest number: 1C Signing time: Wed 25 Mar 2026 08:08:30 +0000 Manifest this update: Wed 25 Mar 2026 08:08:29 +0000 Manifest next update: Wed 01 Apr 2026 08:08:29 +0000 Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: TcZLiAl6JCKhbTsdd8vC8DhcQRkFf92rLwpBKE2iXnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Validity Not Before: Mar 25 08:08:29 2026 GMT Not After : Apr 1 08:08:29 2026 GMT Subject: CN=69c397fe-f6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:63:56:47:01:35:a8:93:a8:e4:91:37:c4: 88:58:b9:3f:2d:1d:ce:c2:f0:15:c7:45:88:97:5e: 3d:97:c7:f6:ad:8d:eb:95:69:7f:81:77:9d:1c:6a: ca:0d:b2:a5:6a:d7:8c:fe:83:ce:0e:40:fa:8b:94: cf:a7:cc:b6:0b:99:ba:bf:97:32:43:eb:40:e1:be: 6d:c0:88:da:6a:a1:ba:df:50:51:58:6d:de:aa:54: 9f:c4:2b:87:27:f5:57:2b:70:07:85:06:cf:55:c1: bb:4d:89:ec:06:27:f4:e2:90:2d:ec:55:4a:4d:d6: 73:7c:f2:d2:52:5e:b9:ab:78:3c:b2:bb:52:fc:99: f1:66:bb:07:da:a5:30:68:5f:42:ad:08:d8:a3:96: 00:f8:68:f6:f7:f9:91:fe:bc:e5:18:9e:fd:11:d8: 62:a4:f0:01:26:59:fc:eb:f7:e4:ed:35:e8:3c:c8: 1e:bd:36:67:3b:9c:d0:ee:b9:d2:f9:ee:79:51:4d: 1c:06:19:0d:39:c8:57:5b:33:96:63:d3:3e:ec:c8: 18:6b:b2:67:1b:8d:e9:0d:fc:e0:24:04:9c:54:ae: ad:76:18:20:29:11:80:ee:db:15:43:d3:87:51:df: 02:b3:b3:35:30:e2:3e:22:5c:36:89:cb:50:fd:94: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:88:51:F5:1C:FB:A8:0F:F3:27:54:79:4E:AE:CB:05:A7:EB:7E:17 X509v3 Authority Key Identifier: keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:94:8b:e3:91:c8:1c:4b:d6:bc:74:01:de:df:62:0d:31:92: 9e:d3:27:c6:00:4b:8d:fb:9a:56:82:55:81:34:ba:96:b5:32: d0:44:37:c5:38:ba:04:c5:a0:be:59:20:57:9b:d5:9d:f8:4d: bc:98:2d:7b:30:9e:28:04:06:e4:0e:2e:c2:bf:aa:26:4a:7b: 96:84:03:c3:25:a6:74:64:ed:26:34:4a:ca:a1:fa:24:56:1c: 71:73:78:d4:2e:fc:ab:9f:f5:69:eb:5b:e3:dc:8b:e6:d4:5a: f1:92:a0:13:26:7c:00:59:59:e1:97:b0:19:40:ad:8b:a8:1f: 47:1f:55:c2:31:a3:7a:29:d7:20:36:dc:3b:18:5d:47:85:4b: 86:d9:2d:fa:66:89:af:63:40:a3:34:29:64:97:7b:bf:e4:8b: cd:be:ad:2e:e3:a4:9a:fe:2e:c9:4a:a5:de:29:a0:52:22:8f: 99:6a:8a:c0:ac:f9:ae:29:e6:00:33:53:26:3f:50:99:8c:34: 60:ce:02:94:2f:70:5d:35:e6:b1:d9:8d:45:39:fe:6d:7d:c4: b2:19:44:2e:a4:10:cb:aa:8d:ec:f6:f6:f9:6c:04:90:e5:16: 9f:46:03:b1:70:69:52:d0:e9:c3:f4:9a:7a:53:d3:47:44:0b: fe:b2:ec:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDQ5QTExMC8GA1UEBRMoMkU1NjdDQjRENjY1NkJFRTBDRjlEQzI4QUYwREU3MjE1 QjdGNjdFODAeFw0yNjAzMjUwODA4MjlaFw0yNjA0MDEwODA4MjlaMBgxFjAUBgNV BAMTDTY5YzM5N2ZlLWY2ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLOWNWRwE1qJOo5JE3xIhYuT8tHc7C8BXHRYiXXj2Xx/atjeuVaX+Bd50casoN sqVq14z+g84OQPqLlM+nzLYLmbq/lzJD60Dhvm3AiNpqobrfUFFYbd6qVJ/EK4cn 9VcrcAeFBs9VwbtNiewGJ/TikC3sVUpN1nN88tJSXrmreDyyu1L8mfFmuwfapTBo X0KtCNijlgD4aPb3+ZH+vOUYnv0R2GKk8AEmWfzr9+TtNeg8yB69Nmc7nNDuudL5 7nlRTRwGGQ05yFdbM5Zj0z7syBhrsmcbjekN/OAkBJxUrq12GCApEYDu2xVD04dR 3wKzszUw4j4iXDaJy1D9lAmHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8IhR9Rz7 qA/zJ1R5Tq7LBafrfhcwHwYDVR0jBBgwFoAULlZ8tNZla+4M+dworw3nIVt/Z+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzFBNzU4QzFBMDJD QTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00TS1kd29ydzNuSVZ0X1ot Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTGxaOHROWmxhLTRNLWR3b3J3M25JVnRfWi1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NDlBLzFBNzU4QzFBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00 TS1kd29ydzNuSVZ0X1otZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC3lIvjkcgcS9a8dAHe32INMZKe0yfGAEuN+5pWglWBNLqWtTLQRDfFOLoExaC+ WSBXm9Wd+E28mC17MJ4oBAbkDi7Cv6omSnuWhAPDJaZ0ZO0mNErKofokVhxxc3jU Lvyrn/Vp61vj3Ivm1FrxkqATJnwAWVnhl7AZQK2LqB9HH1XCMaN6KdcgNtw7GF1H hUuG2S36ZomvY0CjNClkl3u/5IvNvq0u46Sa/i7JSqXeKaBSIo+ZaorArPmuKeYA M1MmP1CZjDRgzgKUL3BdNeax2Y1FOf5tfcSyGUQupBDLqo3s9vb5bASQ5RafRgOx cGlS0OnD9Jp6U9NHRAv+suzb -----END CERTIFICATE-----Generated at Thu Mar 26 19:35:42 2026 by rpki-client