$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: jX45dEm691nc4qG3a4sRTsObUQt+MhsgjQfacEDtg7A= Subject key identifier: 4C:B2:39:C4:DF:EE:98:74:79:D8:73:25:B9:8D:E1:8B:A2:48:D9:B8 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 1984 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 196D Signing time: Tue 24 Mar 2026 16:19:50 +0000 Manifest this update: Tue 24 Mar 2026 16:19:50 +0000 Manifest next update: Tue 31 Mar 2026 16:19:50 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: OCo9z/iYiVJYuP6HVeGE6MpPqEh2Lhs20VcKtwprRvQ=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: DzKmtYCdBRynloESEDJ88OdtBxNoXDc9M+RZzPAZ8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6532 (0x1984) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Mar 24 16:19:50 2026 GMT Not After : Mar 31 16:19:50 2026 GMT Subject: CN=69c2b9a6-e710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:0c:fb:ac:7e:82:02:d9:09:3f:35:44:3e: f3:36:a9:55:cd:5b:e0:5e:34:28:9e:8e:76:fa:2a: f0:ab:46:0c:b2:e0:4a:73:c6:4b:68:ef:c2:83:bf: 7e:bc:48:d8:36:a1:e0:9e:46:f6:b1:6a:12:f8:84: d2:ed:ab:da:b5:c9:b8:a8:9a:e5:ce:a1:24:dc:bd: 45:95:78:0c:66:10:10:5b:92:d2:22:e9:c7:e9:d8: 4b:3a:e8:21:17:fe:4e:64:b1:58:85:d2:bb:f1:c6: 56:8f:d2:ac:a8:17:5e:df:17:0d:28:d8:96:9c:ba: 46:8c:a0:67:97:d5:df:bb:63:5d:ac:8f:28:58:e6: 90:33:28:08:2d:14:21:f0:6b:2c:a3:90:6e:d5:18: 9a:ff:96:1d:c8:ad:dd:53:fb:c8:8a:d0:40:30:9e: f7:55:58:51:34:06:c4:e1:7d:4b:1d:94:b2:a0:0b: 32:04:cc:7c:fc:b1:c0:88:96:e7:9e:2d:db:44:9f: 7e:5a:8d:c4:2b:2f:1e:75:d2:61:a3:67:21:5e:52: 78:6a:22:cb:a8:c0:82:8b:96:85:88:0c:82:8b:71: 64:2e:af:1e:93:81:be:b3:d6:e7:0c:5a:1f:bc:ed: 6a:63:82:7b:a0:25:bc:e2:c9:fd:e3:ef:f6:26:75: a0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B2:39:C4:DF:EE:98:74:79:D8:73:25:B9:8D:E1:8B:A2:48:D9:B8 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:00:31:98:da:a9:68:b7:45:65:d8:5e:d3:34:0b:52:40:46: c8:b8:63:c2:30:3b:dc:7b:d2:a5:81:83:fa:7e:86:33:9d:42: 3a:39:78:8f:18:14:8f:78:60:6b:79:a5:d8:9a:6b:04:40:4f: 41:fd:68:3d:46:4e:17:c4:15:bf:1c:0b:7c:d9:2b:ef:1e:5d: cf:db:a8:41:2e:83:e0:44:d3:46:5a:66:7e:e7:58:e3:58:ba: 92:c6:ff:38:95:df:d2:8f:36:a7:a0:ee:97:7e:48:46:04:fb: d1:d6:d5:66:cd:b1:59:28:f9:7b:9c:7d:15:57:80:f3:2a:fa: b2:b8:b4:e5:ce:0a:5f:9c:b6:18:e8:49:f0:74:2a:a2:72:42: f7:fd:85:b8:07:3c:1c:b6:1b:3f:7e:58:f0:b6:36:4d:33:d7: d8:7a:68:79:8e:cd:f2:29:80:45:56:d7:73:38:2b:45:1d:26: fe:6c:47:a1:28:2f:64:cc:8c:e1:2f:e3:0e:f8:f7:ca:cb:d8: 56:fe:d7:46:55:a1:81:36:b8:f7:8a:94:30:98:6a:d6:f1:7c: ce:00:14:e0:73:2a:24:87:67:6f:71:8b:67:c8:01:7c:d5:be: 53:f6:c5:c5:ab:eb:31:03:3f:fd:f9:a6:fa:cf:ce:62:ef:d0: c4:e0:3a:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYwMzI0MTYxOTUwWhcNMjYwMzMxMTYxOTUwWjAYMRYwFAYD VQQDEw02OWMyYjlhNi1lNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC0M+6x+ggLZCT81RD7zNqlVzVvgXjQono52+irwq0YMsuBKc8ZLaO/Cg79+ vEjYNqHgnkb2sWoS+ITS7avatcm4qJrlzqEk3L1FlXgMZhAQW5LSIunH6dhLOugh F/5OZLFYhdK78cZWj9KsqBde3xcNKNiWnLpGjKBnl9Xfu2NdrI8oWOaQMygILRQh 8Gsso5Bu1Ria/5YdyK3dU/vIitBAMJ73VVhRNAbE4X1LHZSyoAsyBMx8/LHAiJbn ni3bRJ9+Wo3EKy8eddJho2chXlJ4aiLLqMCCi5aFiAyCi3FkLq8ek4G+s9bnDFof vO1qY4J7oCW84sn94+/2JnWgAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyyOcTf 7ph0edhzJbmN4YuiSNm4MB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgAxmNqpaLdFZdhe0zQLUkBGyLhjwjA73HvSpYGD+n6GM51COjl4jxgUj3hg a3ml2JprBEBPQf1oPUZOF8QVvxwLfNkr7x5dz9uoQS6D4ETTRlpmfudY41i6ksb/ OJXf0o82p6Dul35IRgT70dbVZs2xWSj5e5x9FVeA8yr6sri05c4KX5y2GOhJ8HQq onJC9/2FuAc8HLYbP35Y8LY2TTPX2HpoeY7N8imARVbXczgrRR0m/mxHoSgvZMyM 4S/jDvj3ysvYVv7XRlWhgTa494qUMJhq1vF8zgAU4HMqJIdnb3GLZ8gBfNW+U/bF xavrMQM//fmm+s/OYu/QxOA6dg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:21 2026 by rpki-client