$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: FOfrPk5eLfkKCOjqcBOSf5xlUzZwF7ALQ2U9TISq0cw= Subject key identifier: 72:D0:BF:00:28:E4:E1:6B:5E:D4:08:41:7E:9D:98:DC:AA:8A:B3:BF Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 045C Signing time: Tue 24 Mar 2026 23:51:08 +0000 Manifest this update: Tue 24 Mar 2026 23:51:07 +0000 Manifest next update: Tue 31 Mar 2026 23:51:07 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: O0MYqNha6ZRuc10Ij2t+GweTLD+LFXueGp1b+2wys6I=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Mar 24 23:51:07 2026 GMT Not After : Mar 31 23:51:07 2026 GMT Subject: CN=69c3236c-e513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:1c:e5:05:dd:05:fd:1e:ec:e4:f0:bb:d5: 07:b2:74:9b:10:2d:43:ff:b4:e2:a7:f0:e9:0e:cb: b5:05:bb:ad:13:64:c7:69:d7:4c:07:2e:74:73:46: 33:f6:4d:df:c0:6c:73:e6:d4:22:ad:17:0f:ce:ea: b2:37:d7:05:cf:b7:e6:ff:a1:e2:25:d8:f2:3c:8d: 06:56:f5:8e:40:30:7a:03:26:9e:c5:2e:f6:64:fe: c7:03:91:5e:3e:5d:1e:61:cc:6c:55:39:95:99:dc: 9d:db:d6:cf:b8:48:ac:70:6f:5f:17:6e:c7:a5:b1: ce:e1:bb:1f:bc:7a:c4:cc:06:d0:86:a4:69:ac:ee: ed:82:88:c0:03:f9:ed:62:a0:99:c4:1f:ea:b2:76: 1c:8a:a9:17:15:02:c2:49:cd:7d:a0:12:4f:c6:dc: 91:3f:1f:43:ef:51:8c:2d:fe:a1:78:87:d6:36:d2: 7c:ff:e7:12:86:48:cc:9c:2e:a7:2e:50:a2:40:cf: c3:e4:fc:5f:76:de:43:8d:81:4f:4b:61:6e:56:20: 7d:02:48:07:08:5c:49:5b:10:49:f5:ba:b7:f6:13: fa:e9:0a:c0:85:47:32:0e:ac:c4:a9:8e:14:2e:20: 03:fe:a6:6a:d6:18:7a:ea:d2:6f:b3:e6:df:41:d9: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:BF:00:28:E4:E1:6B:5E:D4:08:41:7E:9D:98:DC:AA:8A:B3:BF X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c2:ca:c8:e0:e9:f0:22:44:47:de:18:27:1b:45:d7:d2:f3: d8:bb:46:c9:0b:e4:81:51:5c:95:e3:d1:ab:1c:d4:c7:82:c2: 83:b8:e5:14:83:bb:02:d6:6b:7b:51:14:3c:8f:46:c1:f9:0c: e8:f9:25:89:17:65:cc:23:f0:9a:a5:3f:a3:ad:5e:c5:c5:e6: e9:f2:7a:9b:cc:42:25:e3:8d:9a:9a:40:c7:f1:23:a2:a0:aa: 20:b3:c4:79:48:de:2b:9a:77:40:bd:15:26:e8:84:08:ba:4f: e2:dd:d8:32:9d:69:c2:ef:27:a0:06:26:58:eb:fd:5e:e3:b2: 6c:68:5c:ec:7f:cd:b6:9d:5b:b8:f1:3e:4a:e2:f4:33:db:47: 5c:6f:94:d3:8c:ba:18:bd:9b:79:3e:a5:97:91:ab:19:6d:dc: 68:dc:8c:c9:b7:bf:2d:d5:a0:8a:a3:fb:67:4d:5b:fd:b2:61: cc:c8:85:17:69:ca:33:39:ba:50:9d:20:16:fa:4f:25:7c:cd: 8c:ea:6e:a3:60:b4:45:ff:e0:db:39:78:42:3a:76:af:62:ee: 11:92:62:89:02:6b:57:28:c8:a2:ac:c3:c9:fa:b6:96:7f:b2: 55:f5:6e:a6:9c:22:5d:60:bc:0d:68:01:5c:ef:22:8b:27:d5: 88:be:be:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjYwMzI0MjM1MTA3WhcNMjYwMzMxMjM1MTA3WjAYMRYwFAYD VQQDEw02OWMzMjM2Yy1lNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMsc5QXdBf0e7OTwu9UHsnSbEC1D/7Tip/DpDsu1BbutE2THaddMBy50c0Yz 9k3fwGxz5tQirRcPzuqyN9cFz7fm/6HiJdjyPI0GVvWOQDB6AyaexS72ZP7HA5Fe Pl0eYcxsVTmVmdyd29bPuEiscG9fF27HpbHO4bsfvHrEzAbQhqRprO7tgojAA/nt YqCZxB/qsnYciqkXFQLCSc19oBJPxtyRPx9D71GMLf6heIfWNtJ8/+cShkjMnC6n LlCiQM/D5Pxfdt5DjYFPS2FuViB9AkgHCFxJWxBJ9bq39hP66QrAhUcyDqzEqY4U LiAD/qZq1hh66tJvs+bfQdk8qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLQvwAo 5OFrXtQIQX6dmNyqirO/MB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABMLKyODp8CJER94YJxtF19Lz2LtGyQvkgVFclePRqxzUx4LCg7jlFIO7AtZr e1EUPI9GwfkM6PkliRdlzCPwmqU/o61excXm6fJ6m8xCJeONmppAx/EjoqCqILPE eUjeK5p3QL0VJuiECLpP4t3YMp1pwu8noAYmWOv9XuOybGhc7H/Ntp1buPE+SuL0 M9tHXG+U04y6GL2beT6ll5GrGW3caNyMybe/LdWgiqP7Z01b/bJhzMiFF2nKMzm6 UJ0gFvpPJXzNjOpuo2C0Rf/g2zl4Qjp2r2LuEZJiiQJrVyjIoqzDyfq2ln+yVfVu ppwiXWC8DWgBXO8iiyfViL6+jg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:34:44 2026 by rpki-client