$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: urNbnsPBbzAfbQMbX/lHHtYFxnKz2dE2awceXMdU0HI= Subject key identifier: FC:FC:FB:74:3E:64:A1:21:36:0B:4B:EC:7F:FD:58:17:57:22:B1:92 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 034A Signing time: Wed 25 Mar 2026 00:42:44 +0000 Manifest this update: Wed 25 Mar 2026 00:42:44 +0000 Manifest next update: Wed 01 Apr 2026 00:42:44 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: IlSTfPxbPB3kmH7D+q1lnMuxBjtgHJfdJthbJ21ras4=) 2: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: sEyRt8mINjCRGw1GnqUNqLlYGgoMXd39x1kvAdkspPE=) 3: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: L30iK7dh2UBoLwZCcS09NDV2Ski8+Dnjm3U61xlQdMU=) 4: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: mrc+cxs94exImU0Ktd+W0zTUefZVbMzpj2efZtfe1u4=) 5: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: dN1N9jOQ9lXo9nzVGcBV8aQYADLpe/fS4AN1ynKiNyM=) 6: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: E7fRSEBOLv1Ini1ZezJ3o4e+j0VIouEQB2U+Yt1JiHk=) 7: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: PvFqtplY41UVVf2R0ennX4p3dtRWDb3fEF8YqwmTnCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Mar 25 00:42:44 2026 GMT Not After : Apr 1 00:42:44 2026 GMT Subject: CN=69c32f84-5130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:61:78:29:bd:18:da:a2:9b:fe:c2:49:9e: 6c:90:14:b3:75:0e:bf:7f:6f:cb:61:51:ce:17:0f: 3c:ca:56:c3:34:b1:f7:ab:7c:13:e1:2d:e5:78:99: ac:a3:97:45:0f:40:f5:6b:97:8e:14:23:ce:11:ce: c2:13:9b:ab:6e:3e:39:bb:c5:41:ca:a6:fd:9b:db: c0:73:83:55:b9:05:eb:5c:6f:dc:8f:52:b8:f0:b5: 3d:e8:41:e0:5a:98:fc:4f:9d:1e:d5:99:9c:f3:3f: 33:2a:40:c1:34:ef:94:aa:ab:bc:b2:58:b6:23:6d: d6:c5:f1:57:20:7f:1a:f4:a7:7b:9d:1b:c5:16:0d: 17:16:02:2f:43:80:95:fa:1f:f4:ac:73:57:4e:b5: fd:ad:41:26:87:04:7e:91:38:ad:04:1d:00:45:3d: 01:38:67:59:b7:e0:77:c9:1b:96:54:b4:48:81:57: f9:8c:43:3e:38:9c:b8:b1:de:e2:57:b2:93:4d:a3: 4d:39:66:f5:e0:4f:f9:91:25:a2:e6:08:46:04:18: 8c:b6:06:51:9a:b1:d8:15:0b:54:42:fa:bd:ac:9c: e7:db:91:02:f1:c1:47:35:4b:8e:f4:cf:70:9a:45: e4:81:56:76:6b:20:9b:88:ba:cc:9f:c4:7a:00:7c: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:FB:74:3E:64:A1:21:36:0B:4B:EC:7F:FD:58:17:57:22:B1:92 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a4:1f:30:5b:6d:30:62:a2:76:19:9b:23:dc:a4:4f:74:d4: b9:6c:82:8a:01:64:33:3c:f9:ea:f1:6b:da:d1:99:35:5b:8f: d9:d6:ae:cf:42:65:f3:68:df:2c:98:ac:33:dd:78:b3:cf:46: e5:f2:df:fb:07:43:c2:75:cf:f4:14:40:89:3c:6f:87:f2:ae: 3d:67:6f:95:cd:2e:46:5a:08:43:24:52:51:19:77:5a:4e:61: c8:19:dc:f2:43:59:ad:20:3e:64:90:bf:24:5f:1e:82:2f:d2: 3b:d3:0b:f7:bf:ce:50:61:1d:c8:ed:02:4e:f2:27:86:d3:82: 32:98:5b:06:a9:59:5e:49:a8:6a:50:27:d4:b2:9d:86:6a:9f: 92:2a:5e:0c:ce:e7:71:76:f9:b8:8d:14:66:1f:b0:3b:3f:49: d9:a2:eb:a0:5c:6f:b4:c7:e4:25:0c:83:6b:6c:a8:69:db:3c: 2e:e3:73:2d:cf:fd:53:50:cf:9f:6f:ff:24:33:68:31:93:51: ca:7d:94:8d:7d:6e:17:4a:5b:79:58:15:c2:c8:45:81:fd:94: b0:98:ef:bd:37:b8:e2:a3:ba:d9:37:39:e3:bc:1e:b2:6e:b0: a1:8e:d1:a2:57:2f:00:07:4c:13:ef:62:75:cd:b7:42:b7:5e: 4e:11:7d:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwMzI1MDA0MjQ0WhcNMjYwNDAxMDA0MjQ0WjAYMRYwFAYD VQQDEw02OWMzMmY4NC01MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc5heCm9GNqim/7CSZ5skBSzdQ6/f2/LYVHOFw88ylbDNLH3q3wT4S3leJms o5dFD0D1a5eOFCPOEc7CE5urbj45u8VByqb9m9vAc4NVuQXrXG/cj1K48LU96EHg Wpj8T50e1Zmc8z8zKkDBNO+Uqqu8sli2I23WxfFXIH8a9Kd7nRvFFg0XFgIvQ4CV +h/0rHNXTrX9rUEmhwR+kTitBB0ART0BOGdZt+B3yRuWVLRIgVf5jEM+OJy4sd7i V7KTTaNNOWb14E/5kSWi5ghGBBiMtgZRmrHYFQtUQvq9rJzn25EC8cFHNUuO9M9w mkXkgVZ2ayCbiLrMn8R6AHy0vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPz8+3Q+ ZKEhNgtL7H/9WBdXIrGSMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEKQfMFttMGKidhmbI9ykT3TUuWyCigFkMzz56vFr2tGZNVuP2dauz0Jl82jf LJisM914s89G5fLf+wdDwnXP9BRAiTxvh/KuPWdvlc0uRloIQyRSURl3Wk5hyBnc 8kNZrSA+ZJC/JF8egi/SO9ML97/OUGEdyO0CTvInhtOCMphbBqlZXkmoalAn1LKd hmqfkipeDM7ncXb5uI0UZh+wOz9J2aLroFxvtMfkJQyDa2yoads8LuNzLc/9U1DP n2//JDNoMZNRyn2UjX1uF0pbeVgVwshFgf2UsJjvvTe44qO62Tc547wesm6woY7R olcvAAdME+9idc23QrdeThF9+w== -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:18 2026 by rpki-client