$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: D6tF3S/xKjA85ysParRhjOxfL1LHULY+0tZc9lOOHJ4= Subject key identifier: E8:C9:B1:5B:A1:08:6A:95:C1:81:DF:76:98:62:B5:1B:06:DE:BD:96 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 0160 Signing time: Fri 27 Mar 2026 04:25:42 +0000 Manifest this update: Fri 27 Mar 2026 04:25:42 +0000 Manifest next update: Fri 03 Apr 2026 04:25:42 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: Tmns3L5FxqcaD9Spkb9eLuHcbzwcfZJHbIbsfLlqAzQ=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Mar 27 04:25:42 2026 GMT Not After : Apr 3 04:25:42 2026 GMT Subject: CN=69c606c6-e133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:81:9f:ab:45:6a:80:74:9e:6d:ee:81:0e: c6:0a:23:59:c2:7f:69:ca:7d:ca:65:e3:72:11:64: da:dc:a9:c6:aa:a9:50:35:1b:35:d3:b9:eb:3e:68: a2:07:15:56:28:56:ea:6d:61:19:07:8a:34:b9:cf: 84:5d:06:03:4f:f4:b1:75:e4:83:56:b6:c2:f2:aa: 23:1c:e8:4e:9a:1f:0f:2e:d1:65:52:c1:12:29:49: df:89:44:fd:9f:17:a5:c2:11:53:6c:49:b8:78:c5: 7f:4c:6a:91:40:ae:77:e9:12:29:7c:de:96:0f:79: 35:3a:09:72:08:9c:fc:bf:cd:e5:df:78:46:c3:36: 36:47:e4:cb:e8:56:9f:53:67:81:48:50:47:49:b2: 84:e1:09:be:3c:8d:35:d3:8d:5a:75:2e:d3:47:d1: 90:48:45:8b:24:d3:fe:c0:c8:b3:f3:1c:fe:53:78: 53:17:8f:2f:cd:88:25:c0:9c:5a:49:9d:92:14:62: 6f:ea:96:49:a8:3a:56:a4:ce:d7:e2:3b:37:85:13: 70:b1:43:6c:89:9e:ab:a8:8c:4b:05:d9:8a:af:b6: 91:7b:f7:e1:01:54:24:33:dd:1b:e7:5b:6e:81:ac: 53:df:a8:c9:a5:9e:cd:72:97:da:d3:14:42:d7:8d: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C9:B1:5B:A1:08:6A:95:C1:81:DF:76:98:62:B5:1B:06:DE:BD:96 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:bf:27:b6:76:ca:ab:79:b9:a0:64:ac:c4:25:ce:2d:b1: fb:d0:60:71:03:2c:5a:54:e1:0b:8c:26:66:ef:e1:ad:d9:a2: 6d:e6:bf:e2:a6:bd:d6:60:4e:eb:79:78:bc:40:be:32:be:2c: da:00:69:2e:33:cc:5c:80:d8:91:47:61:1f:61:e7:da:2f:31: 96:fc:73:9d:a9:96:6e:7f:93:29:36:d2:89:f6:b1:53:6f:40: 21:e2:af:c5:05:d2:f6:33:c4:0e:c2:16:0a:00:0d:0f:c1:83: 25:3c:85:5e:d7:6f:3e:de:48:4f:23:60:c3:9b:de:a9:b6:a8: c2:c9:5d:b1:77:d7:2e:19:e2:4d:d2:dc:79:f8:68:87:f0:37: 8c:8f:3c:57:d7:49:76:6c:84:6f:89:85:dd:ef:05:fd:70:31: 37:c7:2e:76:13:34:bd:4f:a3:64:e0:24:84:90:86:c1:d9:0a: 74:70:93:26:ab:49:86:e5:69:55:ea:1e:78:0a:d1:7a:6a:25: 52:6a:0a:91:e7:07:d4:d6:37:49:91:38:00:60:06:d1:13:1e: ac:21:04:bb:dd:14:ac:e7:0b:c4:21:1c:bb:02:a7:d6:a2:b9: fb:e7:d9:5b:97:10:93:64:1c:39:53:31:e5:f1:27:1a:b8:18: b1:bd:6a:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjYwMzI3MDQyNTQyWhcNMjYwNDAzMDQyNTQyWjAYMRYwFAYD VQQDEw02OWM2MDZjNi1lMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEyBn6tFaoB0nm3ugQ7GCiNZwn9pyn3KZeNyEWTa3KnGqqlQNRs107nrPmii BxVWKFbqbWEZB4o0uc+EXQYDT/SxdeSDVrbC8qojHOhOmh8PLtFlUsESKUnfiUT9 nxelwhFTbEm4eMV/TGqRQK536RIpfN6WD3k1OglyCJz8v83l33hGwzY2R+TL6Faf U2eBSFBHSbKE4Qm+PI01041adS7TR9GQSEWLJNP+wMiz8xz+U3hTF48vzYglwJxa SZ2SFGJv6pZJqDpWpM7X4js3hRNwsUNsiZ6rqIxLBdmKr7aRe/fhAVQkM90b51tu gaxT36jJpZ7Ncpfa0xRC141JKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjJsVuh CGqVwYHfdphitRsG3r2WMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPoy/J7Z2yqt5uaBkrMQlzi2x+9BgcQMsWlThC4wmZu/hrdmibea/4qa91mBO 63l4vEC+Mr4s2gBpLjPMXIDYkUdhH2Hn2i8xlvxznamWbn+TKTbSifaxU29AIeKv xQXS9jPEDsIWCgAND8GDJTyFXtdvPt5ITyNgw5veqbaowsldsXfXLhniTdLcefho h/A3jI88V9dJdmyEb4mF3e8F/XAxN8cudhM0vU+jZOAkhJCGwdkKdHCTJqtJhuVp VeoeeArRemolUmoKkecH1NY3SZE4AGAG0RMerCEEu90UrOcLxCEcuwKn1qK5++fZ W5cQk2QcOVMx5fEnGrgYsb1qRQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:21:08 2026 by rpki-client