$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: dfNgnij/rNXm73DU7yfp0jtfcaTuzbDumfPyzZBxpBI= Subject key identifier: 82:6F:42:A8:60:0D:F3:80:BC:37:A9:3A:EF:50:5B:4F:B8:F3:4D:D3 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 01AC Signing time: Wed 25 Mar 2026 03:24:17 +0000 Manifest this update: Wed 25 Mar 2026 03:24:16 +0000 Manifest next update: Wed 01 Apr 2026 03:24:16 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: 8ZuzX/QVGJWgyplirkfPTMmGBl9/hrjQvSkYdRCFHSk=) 2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Mar 25 03:24:16 2026 GMT Not After : Apr 1 03:24:16 2026 GMT Subject: CN=69c35560-231a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:66:1d:97:57:0e:4d:0a:b9:d0:44:3d:48: a7:c2:ac:fb:ea:19:3f:34:e9:16:a3:18:80:ca:f2: 2d:71:7a:c0:5f:30:b4:bc:cf:e5:bc:4b:3e:2e:e3: d2:44:dd:5e:c4:95:b2:95:e5:fa:78:b3:64:f5:54: 8b:6f:55:d9:ec:13:0b:04:bb:0a:d5:a0:0e:a2:6a: fc:48:77:c8:85:55:29:53:f6:b5:16:7d:53:8f:74: f7:9f:40:3b:90:81:b4:e8:60:6b:ce:61:2f:b5:3d: 27:97:e5:17:62:bd:6f:bb:bf:59:14:82:a9:a3:ce: 5d:36:32:18:d5:45:d1:dd:ea:d9:51:05:1c:b5:0a: 72:87:68:f2:da:f6:43:96:44:c9:6f:a8:88:af:ed: 83:e6:90:00:11:7a:3c:93:a1:bc:48:7c:3c:90:f3: c1:df:0c:8a:dc:f6:07:4d:f8:58:6f:9a:73:90:35: 42:98:37:5d:ba:6d:ef:ee:63:fd:9f:4e:0f:73:93: 58:d8:8f:43:39:72:25:52:a0:8c:b8:ba:92:85:f6: 50:3e:09:87:59:4d:8d:00:15:ce:25:b3:71:c5:78: f3:3c:cf:54:fb:54:28:30:aa:13:96:29:ce:ec:e8: b8:fa:c2:28:46:10:e6:b4:19:1d:2d:86:c2:63:f7: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6F:42:A8:60:0D:F3:80:BC:37:A9:3A:EF:50:5B:4F:B8:F3:4D:D3 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:ac:15:00:9c:e4:d9:32:98:86:6c:4e:d8:21:47:6d:b9:6a: 56:81:2b:c4:5a:20:b0:b3:bc:6a:75:a4:a8:c4:bd:93:ab:8c: b7:ba:db:19:71:07:21:69:fd:25:5b:fa:59:50:ff:d1:bc:00: f7:8d:c5:f3:d3:fb:db:12:ad:c3:66:e0:ff:a0:78:a7:90:b5: 18:eb:c2:19:a6:0b:c0:2d:95:c4:0f:ad:2c:15:c5:fa:b1:ec: 3b:0b:17:cd:c2:fa:fb:78:0e:9a:de:80:86:5c:03:94:11:3d: 31:8c:4d:8a:fa:1f:f3:78:17:fe:33:7f:6c:a0:e4:69:74:c4: 6d:e5:cc:d0:f3:7a:bc:6c:97:fc:53:d7:06:90:e7:33:71:28: b9:83:36:db:98:79:0e:25:3a:79:bd:63:5f:81:71:2d:55:18: 8e:bf:34:1b:1f:3c:56:d5:d9:39:42:b8:4a:1d:4f:18:4f:02: b8:cc:fe:f5:f7:87:bd:79:d7:4a:f6:df:99:22:0d:77:e4:7e: c9:ab:4e:cc:94:6c:82:77:86:44:ce:60:3e:6b:b9:99:1c:2b: e7:d1:3c:8c:0d:14:67:a0:42:85:74:a4:f1:de:a0:53:f9:d5: 4d:bc:4b:a5:ff:6f:18:57:cb:cf:20:46:30:7d:43:2a:c7:70: 21:4b:9a:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjYwMzI1MDMyNDE2WhcNMjYwNDAxMDMyNDE2WjAYMRYwFAYD VQQDEw02OWMzNTU2MC0yMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ApmHZdXDk0KudBEPUinwqz76hk/NOkWoxiAyvItcXrAXzC0vM/lvEs+LuPS RN1exJWyleX6eLNk9VSLb1XZ7BMLBLsK1aAOomr8SHfIhVUpU/a1Fn1Tj3T3n0A7 kIG06GBrzmEvtT0nl+UXYr1vu79ZFIKpo85dNjIY1UXR3erZUQUctQpyh2jy2vZD lkTJb6iIr+2D5pAAEXo8k6G8SHw8kPPB3wyK3PYHTfhYb5pzkDVCmDddum3v7mP9 n04Pc5NY2I9DOXIlUqCMuLqShfZQPgmHWU2NABXOJbNxxXjzPM9U+1QoMKoTlinO 7Oi4+sIoRhDmtBkdLYbCY/cL0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJvQqhg DfOAvDepOu9QW0+4803TMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyawVAJzk2TKYhmxO2CFHbblqVoErxFogsLO8anWkqMS9k6uMt7rbGXEHIWn9 JVv6WVD/0bwA943F89P72xKtw2bg/6B4p5C1GOvCGaYLwC2VxA+tLBXF+rHsOwsX zcL6+3gOmt6AhlwDlBE9MYxNivof83gX/jN/bKDkaXTEbeXM0PN6vGyX/FPXBpDn M3EouYM225h5DiU6eb1jX4FxLVUYjr80Gx88VtXZOUK4Sh1PGE8CuMz+9feHvXnX SvbfmSINd+R+yatOzJRsgneGRM5gPmu5mRwr59E8jA0UZ6BChXSk8d6gU/nVTbxL pf9vGFfLzyBGMH1DKsdwIUuaKg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:20:57 2026 by rpki-client