$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft File: lslPY1zHgehZd0oRr3Nii2CmVs8.mft (raw, json) Hash identifier: AcwGfpdHdjYP0MVW5nVScjWHROB/2kzDnmsL1eHxk5k= Subject key identifier: 2D:2A:E4:E9:42:BE:D2:6B:14:8B:73:9D:5C:79:C1:14:4F:C5:44:FB Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF Certificate issuer: /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft Manifest number: 1E Signing time: Wed 25 Mar 2026 08:08:18 +0000 Manifest this update: Wed 25 Mar 2026 08:08:18 +0000 Manifest next update: Wed 01 Apr 2026 08:08:18 +0000 Files and hashes: 1: lslPY1zHgehZd0oRr3Nii2CmVs8.crl (hash: x7OhQ4JsVlsPBbjaMFrmMvgarwkv7VUHRkfivE8pZFQ=) 2: 38D7A57E02B311F1B5A042A33E3D8C67.roa (hash: i+cONdh4kL/zy5o+bEmmDqg3gYQAN5WXBgxD3TrRI7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF Validity Not Before: Mar 25 08:08:18 2026 GMT Not After : Apr 1 08:08:18 2026 GMT Subject: CN=69c397f2-399c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:a7:82:5e:03:8e:30:c6:fe:1f:86:9a:57: 36:f5:52:14:f0:fb:72:64:fc:92:4f:5a:3b:65:ab: cb:2e:bf:06:2c:3b:19:6a:c2:46:c1:f8:f6:e6:1d: 64:05:0a:c7:67:bf:f2:a3:d1:34:d0:82:e1:a5:9e: eb:fb:75:c2:6b:59:bc:c0:72:3e:7d:e3:88:d9:79: ef:3f:9e:af:bf:04:c7:2e:0c:99:c0:e9:19:1a:7c: 7f:9a:28:5e:75:34:01:4b:7a:3e:8c:8e:9e:00:18: 20:a5:55:dc:0b:a5:3c:76:db:fc:6d:91:62:30:7c: 3a:91:f4:72:bb:0a:16:0d:51:61:52:29:2d:3b:55: 2e:95:c2:ba:c1:42:8b:8a:c8:b9:e3:65:81:60:4b: 2a:0b:96:d5:b7:74:04:08:9a:fb:db:49:5a:e3:51: 0a:63:4f:4f:84:8a:a0:8c:36:d3:69:2f:a1:50:f9: 9e:9f:e4:b1:2a:81:59:fe:6d:d8:b6:1c:29:8a:a3: 73:d4:9a:c5:f6:56:12:ea:29:3f:c3:db:e4:ef:0a: 6d:01:4f:e1:06:87:9f:ff:06:ae:c9:51:cc:00:b9: 53:11:69:13:0f:35:52:1c:5f:8f:3d:6d:a6:b1:f2: 8d:4c:2a:73:97:b0:28:5f:ae:2d:b3:d3:24:5e:0c: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:E4:E9:42:BE:D2:6B:14:8B:73:9D:5C:79:C1:14:4F:C5:44:FB X509v3 Authority Key Identifier: keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2f:7a:b3:ba:68:b3:58:d5:11:65:4b:8e:63:1a:4e:00:22: 3f:3f:42:12:4c:f7:21:94:4e:bb:26:e2:66:9d:06:df:63:8d: 52:cb:8a:e0:b5:9d:b9:26:be:ec:54:56:0c:e8:07:4b:7f:75: 80:ab:d8:74:23:9d:d2:60:9c:97:89:12:ec:e5:4d:3e:d7:30: ee:83:44:fc:b8:c5:ce:96:0b:4d:19:1c:3a:2d:e0:10:dc:f1: 6c:1c:2c:df:d4:e3:03:c8:35:49:ef:67:e2:b8:87:d4:8b:05: 46:df:42:81:0c:45:59:bf:2f:d1:f8:e7:d3:48:fe:70:ff:73: 86:b3:0e:e3:e6:3b:01:41:c1:ab:fc:47:a0:3a:fd:2f:ec:48: 42:6b:7f:5a:74:85:4f:b5:ff:1a:a4:32:84:7f:38:52:ff:6b: b9:dc:0b:d0:2c:31:40:af:ae:ac:66:7c:2b:ce:c1:4c:76:4f: a0:b8:b7:62:9c:04:68:1a:39:93:a0:6f:37:6e:87:85:f8:84: ed:8d:8a:7b:38:d0:55:a1:dc:a1:46:43:16:3d:83:37:3f:5a: 36:96:1e:d4:ed:fd:9a:f8:39:1d:d8:5d:67:83:be:ac:4d:3f: 73:68:3b:51:5e:b6:ed:dc:04:cb:20:dc:bb:a2:26:e2:77:2f: 3d:60:eb:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTgwMzExMC8GA1UEBRMoOTZDOTRGNjM1Q0M3ODFFODU5Nzc0QTExQUY3MzYyOEI2 MEE2NTZDRjAeFw0yNjAzMjUwODA4MThaFw0yNjA0MDEwODA4MThaMBgxFjAUBgNV BAMTDTY5YzM5N2YyLTM5OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XKeCXgOOMMb+H4aaVzb1UhTw+3Jk/JJPWjtlq8suvwYsOxlqwkbB+PbmHWQF Csdnv/Kj0TTQguGlnuv7dcJrWbzAcj5944jZee8/nq+/BMcuDJnA6RkafH+aKF51 NAFLej6Mjp4AGCClVdwLpTx22/xtkWIwfDqR9HK7ChYNUWFSKS07VS6VwrrBQouK yLnjZYFgSyoLltW3dAQImvvbSVrjUQpjT0+EiqCMNtNpL6FQ+Z6f5LEqgVn+bdi2 HCmKo3PUmsX2VhLqKT/D2+TvCm0BT+EGh5//Bq7JUcwAuVMRaRMPNVIcX489baax 8o1MKnOXsChfri2z0yReDC4vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULSrk6UK+ 0msUi3OdXHnBFE/FRPswHwYDVR0jBBgwFoAUlslPY1zHgehZd0oRr3Nii2CmVs8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxODAzL0UzODYzQkRBMDJC MjExRjFCRUZBQzdBMTNFM0Q4QzY3L2xzbFBZMXpIZ2VoWmQwb1JyM05paTJDbVZz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbHNsUFkxekhnZWhaZDBvUnIzTmlpMkNtVnM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx ODAzL0UzODYzQkRBMDJCMjExRjFCRUZBQzdBMTNFM0Q4QzY3L2xzbFBZMXpIZ2Vo WmQwb1JyM05paTJDbVZzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+L3qzumizWNURZUuOYxpOACI/P0ISTPchlE67JuJmnQbfY41Sy4rgtZ25Jr7s VFYM6AdLf3WAq9h0I53SYJyXiRLs5U0+1zDug0T8uMXOlgtNGRw6LeAQ3PFsHCzf 1OMDyDVJ72fiuIfUiwVG30KBDEVZvy/R+OfTSP5w/3OGsw7j5jsBQcGr/EegOv0v 7EhCa39adIVPtf8apDKEfzhS/2u53AvQLDFAr66sZnwrzsFMdk+guLdinARoGjmT oG83boeF+ITtjYp7ONBVodyhRkMWPYM3P1o2lh7U7f2a+Dkd2F1ng76sTT9zaDtR Xrbt3ATLINy7oibidy89YOtf -----END CERTIFICATE-----Generated at Thu Mar 26 05:02:49 2026 by rpki-client