$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: flXcudZ90npzRb/xaBJPC6Jknw8CWsQFdkIPx7Mld2Q= Subject key identifier: 9C:F9:6D:A3:6C:A2:2A:45:E9:65:0F:22:6D:63:A1:49:5C:62:A4:71 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 093D Signing time: Thu 26 Mar 2026 20:06:02 +0000 Manifest this update: Thu 26 Mar 2026 20:06:02 +0000 Manifest next update: Thu 02 Apr 2026 20:06:02 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: 4ajZILsDBqJO+uQH6dbGrRWwwmxFUHVByBwqHOQ4E7c=) 2: E984A66AAC3211F09AD8CA60C4F9AE02.roa (hash: K3c5oq/qmuRX+k4/b8uhhcLi8asZQ+2HUoQXvrhiTHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Mar 26 20:06:02 2026 GMT Not After : Apr 2 20:06:02 2026 GMT Subject: CN=69c591aa-b136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:11:5e:07:d5:90:e9:3b:08:67:5c:8b:78: 3c:45:c0:8c:25:9f:44:be:07:c9:30:42:83:b3:c6: e7:e9:a2:36:f1:41:ee:e1:3e:7b:8f:3f:7f:3a:23: 8f:19:b8:8d:84:a6:bf:06:c4:7e:84:7f:77:6d:0d: bf:a2:16:52:b1:62:85:94:b9:28:f3:a8:3f:fb:e7: 48:21:92:67:01:4a:6b:a2:e6:b8:81:2a:ae:41:d9: dd:8d:63:e2:f1:a0:26:aa:1c:d8:2a:8f:f3:b3:7e: e8:8f:f4:fc:2f:61:e7:b4:f0:c6:ed:df:6c:66:c0: 47:10:eb:a9:7d:9f:3a:0e:00:27:83:09:3a:fe:54: 3f:03:48:68:2d:ee:3e:db:0f:29:cb:85:5e:f0:88: 1e:9f:20:51:9e:b8:2c:20:c3:c0:95:11:e2:c4:38: 5d:f7:fa:24:fe:c8:18:02:f6:cf:52:4a:0f:50:a7: f8:11:e7:44:b2:33:47:6a:15:4f:41:3b:f7:25:e0: e5:07:98:ff:f9:15:08:79:77:45:d7:8d:02:b7:bf: 48:94:12:79:6c:39:c3:c7:34:fe:b5:9b:75:2c:7b: fa:08:d4:6d:f9:fa:84:64:45:25:8f:77:af:fa:cc: 87:ce:20:97:05:a8:30:6a:db:67:00:a0:c5:db:f4: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F9:6D:A3:6C:A2:2A:45:E9:65:0F:22:6D:63:A1:49:5C:62:A4:71 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b0:6e:d6:c3:6b:b3:5d:05:1f:6c:2f:24:d4:9b:cd:46:02: 63:f3:2e:f4:27:67:02:c7:8b:37:2a:23:9f:84:6b:70:9c:d0: e5:f0:2c:f1:16:db:2f:9a:86:aa:65:53:8f:dc:b9:44:86:85: 70:de:89:9e:df:73:29:be:1f:82:94:a6:8a:0a:54:f6:2a:c2: 57:a2:aa:30:5d:0c:32:53:ae:b6:9b:0e:18:3b:45:f9:71:f2: 21:9a:78:0e:8a:53:84:2f:97:45:9e:44:be:ad:25:15:e0:9e: 85:35:ca:c9:79:31:8a:e5:61:9e:05:e7:e3:57:5a:cd:77:0b: 7d:ee:1e:14:ce:9b:89:db:1d:1e:4d:77:2f:99:12:d9:bb:56: 0d:29:68:0c:33:07:2a:8c:2d:f3:e2:a8:9c:a1:1e:e8:7d:c4: 00:95:0c:72:3f:fe:00:f3:8a:76:f8:6f:66:7d:47:be:5b:0d: c7:db:09:c0:5e:71:7f:22:a5:50:eb:7f:38:aa:0f:3a:ba:a6: 24:1c:d1:3c:44:f8:7c:85:03:ba:b2:ce:02:1c:fb:7c:41:b6: b4:86:0e:01:a2:c6:74:95:af:28:fd:32:e4:0e:b8:09:df:f8: ca:12:84:81:9f:b6:e2:df:dc:f5:31:3b:d3:e7:7c:5c:ab:7c: 31:f3:6e:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjYwMzI2MjAwNjAyWhcNMjYwNDAyMjAwNjAyWjAYMRYwFAYD VQQDEw02OWM1OTFhYS1iMTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwckRXgfVkOk7CGdci3g8RcCMJZ9EvgfJMEKDs8bn6aI28UHu4T57jz9/OiOP GbiNhKa/BsR+hH93bQ2/ohZSsWKFlLko86g/++dIIZJnAUproua4gSquQdndjWPi 8aAmqhzYKo/zs37oj/T8L2HntPDG7d9sZsBHEOupfZ86DgAngwk6/lQ/A0hoLe4+ 2w8py4Ve8IgenyBRnrgsIMPAlRHixDhd9/ok/sgYAvbPUkoPUKf4EedEsjNHahVP QTv3JeDlB5j/+RUIeXdF140Ct79IlBJ5bDnDxzT+tZt1LHv6CNRt+fqEZEUlj3ev +syHziCXBagwattnAKDF2/QMIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJz5baNs oipF6WUPIm1joUlcYqRxMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnrBu1sNrs10FH2wvJNSbzUYCY/Mu9CdnAseLNyojn4RrcJzQ5fAs8RbbL5qG qmVTj9y5RIaFcN6Jnt9zKb4fgpSmigpU9irCV6KqMF0MMlOutpsOGDtF+XHyIZp4 DopThC+XRZ5Evq0lFeCehTXKyXkxiuVhngXn41dazXcLfe4eFM6bidsdHk13L5kS 2btWDSloDDMHKowt8+KonKEe6H3EAJUMcj/+APOKdvhvZn1HvlsNx9sJwF5xfyKl UOt/OKoPOrqmJBzRPET4fIUDurLOAhz7fEG2tIYOAaLGdJWvKP0y5A64Cd/4yhKE gZ+24t/c9TE70+d8XKt8MfNuSQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:08 2026 by rpki-client