$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json) Hash identifier: 7r0Qetyv8W+pD6et3ld5iNGNKm8cl3pCT1csBPBcptc= Subject key identifier: F8:6B:7C:21:71:09:02:5D:B3:98:5E:26:5B:13:8C:13:58:2D:D3:3E Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 07:55:12 +0000 Manifest this update: Wed 25 Mar 2026 07:55:12 +0000 Manifest next update: Wed 01 Apr 2026 07:55:12 +0000 Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: i0uk2AAVSSZcMh43CzDaTfd1U7iDa1pVITufVPivGSY=) 2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Validity Not Before: Mar 25 07:55:12 2026 GMT Not After : Apr 1 07:55:12 2026 GMT Subject: CN=69c394e0-abcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:c4:60:4a:ac:b4:d4:f5:e0:c4:3a:34:a7: 12:d7:ef:39:a9:96:ea:31:02:bc:97:47:80:d9:e4: 2f:e0:65:4e:a3:ae:0c:63:c4:52:78:97:f6:aa:44: 74:bb:f4:03:3d:dd:d4:7b:f3:09:bc:59:ae:21:a2: ae:70:d3:02:7d:e1:62:2e:5a:17:da:f1:51:26:e9: b9:de:f3:ee:2e:37:6f:53:46:b7:7f:39:b4:4f:1b: 74:50:c8:e6:5b:bb:16:2f:e0:51:b2:fe:7e:4d:cd: 4e:11:10:ee:e7:75:84:8c:28:a0:5e:36:7c:8f:a4: e3:76:d6:a1:5b:0b:4e:2a:33:97:47:84:77:08:da: 32:61:4f:a3:c5:bd:54:91:06:70:53:71:64:9d:cb: 9a:ff:02:1f:81:ea:d9:bf:61:ed:f9:5e:e8:a9:f6: 99:5b:33:19:e4:34:73:79:92:eb:77:67:a7:b3:e2: 2b:06:68:8d:b3:fa:fc:37:40:4c:c8:bf:a7:33:5d: 58:2a:00:4f:53:51:d3:c2:39:36:ee:61:7b:51:4b: 67:58:13:bf:60:7d:6f:06:99:cb:e4:59:ee:82:71: 89:89:6e:3e:cd:db:31:3c:ae:65:f5:f6:86:9a:d6: c1:52:55:c3:b4:7b:0a:9e:3e:8f:f1:fa:51:a6:5e: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:7C:21:71:09:02:5D:B3:98:5E:26:5B:13:8C:13:58:2D:D3:3E X509v3 Authority Key Identifier: keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:3c:72:ed:d5:98:2b:9e:2d:b1:d8:1f:36:ae:7d:4d:15:4d: 49:24:f0:a3:fc:bd:f3:7c:c8:a7:ea:58:89:d1:82:ee:85:d8: 51:e5:ce:b5:13:00:52:ec:2e:bd:95:b0:a2:8d:ca:51:6d:19: 9e:0e:ff:46:34:98:45:bd:82:90:2d:fb:e8:51:99:36:06:54: 1b:99:91:c4:b4:e7:59:06:94:c0:3f:fc:ca:f1:cf:a4:0a:68: b1:0b:28:5c:88:3e:20:cc:50:6e:65:ae:5b:fa:40:ad:8e:51: e6:ba:9d:40:77:86:79:9d:79:fd:11:77:8a:75:21:83:b8:b2: 5c:3a:f0:25:36:98:16:52:d7:1b:bb:0a:3e:65:b1:08:ba:25: c7:47:f2:15:ec:bd:67:53:69:b6:a5:9e:df:ea:77:d8:58:d1: eb:f4:75:9d:86:74:ad:6e:da:ec:5e:65:47:b8:00:1e:67:38: 5d:d2:8e:1e:0c:7e:81:8e:f3:5e:17:20:32:50:f6:0a:1e:77: a1:53:39:7c:1e:b1:17:16:60:e1:41:75:cf:3b:0b:f5:8e:75: 29:6c:32:b4:cc:86:b9:5b:5e:d1:f7:0a:f9:f5:c9:46:fb:75: 9c:43:b0:19:fa:73:a8:8d:ed:90:3f:b0:18:8a:29:f3:65:b8: 42:55:0b:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjQ2MDExMC8GA1UEBRMoOTQwRDI3QUUxNDRBQURDQTlFMzQ1MkNCMzhDMzIzNkFD QkY3MDI1QjAeFw0yNjAzMjUwNzU1MTJaFw0yNjA0MDEwNzU1MTJaMBgxFjAUBgNV BAMTDTY5YzM5NGUwLWFiY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZVcRgSqy01PXgxDo0pxLX7zmpluoxAryXR4DZ5C/gZU6jrgxjxFJ4l/aqRHS7 9AM93dR78wm8Wa4hoq5w0wJ94WIuWhfa8VEm6bne8+4uN29TRrd/ObRPG3RQyOZb uxYv4FGy/n5NzU4REO7ndYSMKKBeNnyPpON21qFbC04qM5dHhHcI2jJhT6PFvVSR BnBTcWSdy5r/Ah+B6tm/Ye35Xuip9plbMxnkNHN5kut3Z6ez4isGaI2z+vw3QEzI v6czXVgqAE9TUdPCOTbuYXtRS2dYE79gfW8GmcvkWe6CcYmJbj7N2zE8rmX19oaa 1sFSVcO0ewqePo/x+lGmXmelAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+Gt8IXEJ Al2zmF4mWxOME1gt0z4wHwYDVR0jBBgwFoAUlA0nrhRKrcqeNFLLOMMjasv3Alsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCNDYwLzAyQUU0NjcyRUQy QTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fs cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEEwbnJoUktyY3FlTkZMTE9NTWphc3YzQWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC NDYwLzAyQUU0NjcyRUQyQTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNx ZU5GTExPTU1qYXN2M0Fscy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXPHLt1Zgrni2x2B82rn1NFU1JJPCj/L3zfMin6liJ0YLuhdhR5c61EwBS7C69 lbCijcpRbRmeDv9GNJhFvYKQLfvoUZk2BlQbmZHEtOdZBpTAP/zK8c+kCmixCyhc iD4gzFBuZa5b+kCtjlHmup1Ad4Z5nXn9EXeKdSGDuLJcOvAlNpgWUtcbuwo+ZbEI uiXHR/IV7L1nU2m2pZ7f6nfYWNHr9HWdhnStbtrsXmVHuAAeZzhd0o4eDH6BjvNe FyAyUPYKHnehUzl8HrEXFmDhQXXPOwv1jnUpbDK0zIa5W17R9wr59clG+3WcQ7AZ +nOoje2QP7AYiinzZbhCVQsD -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:12 2026 by rpki-client