$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: +VG5tagFyoe7f4ESclX6Rop+ZHkBimMFzVmQSHR5yQk= Subject key identifier: 59:80:5B:52:B9:7A:F0:85:F4:1A:7F:8A:3D:F0:13:03:15:5C:03:2B Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 09CE Signing time: Tue 24 Mar 2026 20:26:18 +0000 Manifest this update: Tue 24 Mar 2026 20:26:18 +0000 Manifest next update: Tue 31 Mar 2026 20:26:18 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: zFfuLZSvQNnbH29Qiks1t/j137wzFgJk0On4Chi2DIk=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: 9cZAA819ZNYxdN7xk7f1AZKeDye0bv4EBp7wGGivMIU=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: UNamoSLqPfgLYpd2PGo2wGNk5GFxnnncmR2Esq//UuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Mar 24 20:26:18 2026 GMT Not After : Mar 31 20:26:18 2026 GMT Subject: CN=69c2f36a-3403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:dc:2c:86:7f:44:dc:c3:ca:a0:c9:de:b6: 33:b5:87:6a:45:32:a2:2c:65:16:4a:9b:ec:f2:51: 25:32:c1:0b:73:bf:9f:39:19:a2:ea:32:a7:64:d1: ae:d4:58:31:28:c3:e7:44:47:94:63:64:d7:8e:70: a7:6b:b8:49:5a:00:e6:32:a4:b7:e9:fc:d9:f4:e9: 2d:79:fa:9c:fe:03:dd:78:39:ca:79:7f:ae:36:44: 1d:bf:f0:71:06:32:b8:85:98:3f:14:da:e8:6e:bd: 91:14:0a:de:59:1f:98:fc:d4:18:d4:ff:f0:bf:6d: e4:e6:e0:9a:eb:19:91:b9:0e:70:ca:61:fc:49:81: 7b:62:7c:43:7f:74:d6:b2:f4:27:a7:c4:aa:97:c6: ed:45:0b:d9:67:61:44:7b:14:3c:2b:ea:5c:fa:66: 36:68:bc:9f:d0:1c:72:a9:d7:73:9d:6d:cb:d4:05: 0b:a2:01:61:f2:7b:ca:70:d9:1d:05:91:b5:01:7a: 12:2b:04:fe:82:2e:7c:10:3f:7a:fe:ab:52:36:8c: 45:50:50:47:c9:33:fd:9b:a9:8d:70:ba:fb:cf:fa: 8e:ad:b3:97:cf:e7:75:e3:5d:ef:98:94:43:a2:61: 01:72:b3:38:96:b4:81:60:0f:53:d1:a4:db:bb:e6: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:80:5B:52:B9:7A:F0:85:F4:1A:7F:8A:3D:F0:13:03:15:5C:03:2B X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:47:78:7d:41:3f:7b:79:cc:ba:40:ef:eb:e2:24:2b:21:36: 5d:e6:f0:ba:f1:8a:69:67:11:bc:2e:21:30:44:d3:08:dd:59: c2:51:09:0d:fe:2c:10:4f:05:ac:b5:c4:40:06:1a:ea:94:66: e0:36:ac:67:21:d1:aa:cb:7b:d2:fe:4c:17:a5:c6:31:00:70: ca:0d:87:f3:9b:75:32:7d:00:bc:95:f9:f7:dc:9e:b2:58:6b: b9:5c:a3:d5:a4:f4:c7:9b:ec:7a:53:d6:86:a1:d3:ab:15:55: 29:ba:08:70:22:24:b8:90:d2:46:c9:06:1d:1c:5f:4a:ae:a9: 05:03:27:2d:b7:49:20:a1:26:8e:23:fb:be:63:af:41:3b:a7: 87:05:27:c2:a4:29:d4:a8:71:b4:c4:ca:b3:16:c9:d3:dd:a1: b0:74:e5:08:d7:f6:87:8a:f5:d4:26:fc:ef:12:1a:9f:3a:2c: 9f:17:6f:ca:7b:4a:58:b4:9e:43:f8:aa:c9:ea:3b:e3:4e:c9: 78:d2:e4:93:66:5a:34:05:fe:e2:06:aa:53:5d:f7:e3:10:f3: a5:fa:5e:32:b0:28:80:bc:c9:2b:05:fd:5f:19:a2:18:66:a1: bf:ff:56:ee:b5:da:77:fa:47:2a:5c:66:7d:f0:7d:dc:9a:c9: 84:d3:f1:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjYwMzI0MjAyNjE4WhcNMjYwMzMxMjAyNjE4WjAYMRYwFAYD VQQDEw02OWMyZjM2YS0zNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyHcLIZ/RNzDyqDJ3rYztYdqRTKiLGUWSpvs8lElMsELc7+fORmi6jKnZNGu 1FgxKMPnREeUY2TXjnCna7hJWgDmMqS36fzZ9Oktefqc/gPdeDnKeX+uNkQdv/Bx BjK4hZg/FNrobr2RFAreWR+Y/NQY1P/wv23k5uCa6xmRuQ5wymH8SYF7YnxDf3TW svQnp8Sql8btRQvZZ2FEexQ8K+pc+mY2aLyf0BxyqddznW3L1AULogFh8nvKcNkd BZG1AXoSKwT+gi58ED96/qtSNoxFUFBHyTP9m6mNcLr7z/qOrbOXz+d1413vmJRD omEBcrM4lrSBYA9T0aTbu+aXjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmAW1K5 evCF9Bp/ij3wEwMVXAMrMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtUd4fUE/e3nMukDv6+IkKyE2XebwuvGKaWcRvC4hMETTCN1ZwlEJDf4sEE8F rLXEQAYa6pRm4DasZyHRqst70v5MF6XGMQBwyg2H85t1Mn0AvJX599yeslhruVyj 1aT0x5vselPWhqHTqxVVKboIcCIkuJDSRskGHRxfSq6pBQMnLbdJIKEmjiP7vmOv QTunhwUnwqQp1KhxtMTKsxbJ092hsHTlCNf2h4r11Cb87xIanzosnxdvyntKWLSe Q/iqyeo7407JeNLkk2ZaNAX+4gaqU1334xDzpfpeMrAogLzJKwX9XxmiGGahv/9W 7rXad/pHKlxmffB93JrJhNPxlA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:46:07 2026 by rpki-client