$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: A1kHP17QtdCErg+6A26vUVPr7RoVC47B9neUEOasoEw= Subject key identifier: 96:F2:CF:78:43:5C:97:30:68:4D:3D:37:08:5E:B6:47:A5:9C:8F:6C Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0C1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0C01 Signing time: Thu 26 Mar 2026 18:45:52 +0000 Manifest this update: Thu 26 Mar 2026 18:45:52 +0000 Manifest next update: Thu 02 Apr 2026 18:45:52 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: 5dKMPZEV8+Www8JuHJWvHDh7xpwEovpV4iCWCmsObOw=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: QfT2Eaqv5QPDrORQi1WneHGHYWsLdTVYS3iMbBaZBv4=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: 1aYucsJJizOrJGwERLeDG0d5XIi/bHOIooEKsMrUEo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3102 (0xc1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Mar 26 18:45:52 2026 GMT Not After : Apr 2 18:45:52 2026 GMT Subject: CN=69c57ee0-880e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:36:6e:69:5c:4f:ac:43:c9:7d:8b:10:c3: b7:b8:07:68:c6:9b:a8:23:9e:9a:e9:6c:27:18:15: 79:12:4c:95:38:86:58:77:e1:97:80:68:20:67:4b: 9e:5f:1f:4f:ad:1e:05:4e:69:97:d6:6b:77:cb:6f: 0f:bd:9e:b5:58:e6:a1:73:ed:72:8e:d7:5a:fb:cb: fe:3a:47:c3:4d:fe:2f:3c:9c:b6:24:2f:8c:b4:bc: dd:97:c5:4c:2e:97:4e:41:bc:b7:4f:01:9f:d6:ef: 32:af:19:7a:4a:a8:40:84:36:2b:e6:ad:bf:dc:36: b8:32:e2:d4:21:6d:dd:ca:24:4c:63:c6:ca:0f:d8: 95:3b:c9:5b:7f:58:5d:15:3d:4a:7c:69:a9:36:e1: 9c:67:80:f4:2a:84:98:8b:f9:7c:15:3e:8c:20:41: 1f:b7:b5:88:64:f5:be:2a:52:4c:b5:b8:03:f3:90: 85:ef:8a:71:2d:12:0f:5c:65:8f:56:44:4d:f1:0c: 6a:51:c8:67:30:15:7e:fa:f4:fa:74:c3:00:a8:b9: d3:4f:07:6d:c8:da:4b:40:32:bb:34:ab:c8:2e:da: 7a:12:b9:20:a3:7f:f4:c2:a5:4a:4b:98:47:37:19: 47:ff:ff:96:96:6f:62:83:ec:fc:19:07:f5:84:18: 6d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:CF:78:43:5C:97:30:68:4D:3D:37:08:5E:B6:47:A5:9C:8F:6C X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:53:67:9b:89:d8:db:b5:ae:32:2d:05:87:ef:c3:34:2f:00: e8:24:9b:da:e4:34:37:9a:84:e5:06:83:6c:b8:a2:59:2b:fe: 0b:d0:bd:7e:94:01:09:a6:19:1f:bd:c5:94:ab:d5:06:62:45: 20:d8:2c:36:ae:f8:b1:3c:64:b4:39:19:67:1b:eb:7a:e1:9b: 82:ba:3b:31:ff:44:27:98:4d:e9:a2:f6:7e:55:bb:e0:07:c7: 81:25:88:cb:0e:91:d0:a2:4f:81:75:9c:9d:61:1d:d9:a9:f2: 16:ad:01:19:e1:0b:99:5b:67:1d:d4:c0:b1:f7:b9:79:81:5e: a8:6b:ca:bd:fb:15:77:e0:e0:94:a2:ff:bf:0e:e3:7d:4a:40: 55:9d:c5:48:39:ad:8b:7f:24:1e:3d:66:b1:26:46:f0:b2:a7: 78:c6:31:94:5c:e9:a1:bb:3b:e6:54:5b:7d:bf:c1:39:1d:ca: fd:a9:fd:b0:ee:5b:ab:16:4d:e9:7c:8f:04:a5:2b:f0:4e:f4: 31:4e:f4:8c:26:87:42:bd:0b:b6:52:b7:8f:cc:ed:df:e2:b5: 02:1b:99:ab:ad:80:e4:2e:b0:c2:6f:5e:57:80:51:41:73:a2: 20:82:ac:29:74:f5:b7:e6:83:01:d6:eb:83:fc:98:89:23:e6: 3d:bb:2a:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjYwMzI2MTg0NTUyWhcNMjYwNDAyMTg0NTUyWjAYMRYwFAYD VQQDEw02OWM1N2VlMC04ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAigA2bmlcT6xDyX2LEMO3uAdoxpuoI56a6WwnGBV5EkyVOIZYd+GXgGggZ0ue Xx9PrR4FTmmX1mt3y28PvZ61WOahc+1yjtda+8v+OkfDTf4vPJy2JC+MtLzdl8VM LpdOQby3TwGf1u8yrxl6SqhAhDYr5q2/3Da4MuLUIW3dyiRMY8bKD9iVO8lbf1hd FT1KfGmpNuGcZ4D0KoSYi/l8FT6MIEEft7WIZPW+KlJMtbgD85CF74pxLRIPXGWP VkRN8QxqUchnMBV++vT6dMMAqLnTTwdtyNpLQDK7NKvILtp6Erkgo3/0wqVKS5hH NxlH//+Wlm9ig+z8GQf1hBhtdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbyz3hD XJcwaE09NwhetkelnI9sMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZVNnm4nY27WuMi0Fh+/DNC8A6CSb2uQ0N5qE5QaDbLiiWSv+C9C9fpQBCaYZ H73FlKvVBmJFINgsNq74sTxktDkZZxvreuGbgro7Mf9EJ5hN6aL2flW74AfHgSWI yw6R0KJPgXWcnWEd2anyFq0BGeELmVtnHdTAsfe5eYFeqGvKvfsVd+DglKL/vw7j fUpAVZ3FSDmti38kHj1msSZG8LKneMYxlFzpobs75lRbfb/BOR3K/an9sO5bqxZN 6XyPBKUr8E70MU70jCaHQr0LtlK3j8zt3+K1AhuZq62A5C6wwm9eV4BRQXOiIIKs KXT1t+aDAdbrg/yYiSPmPbsqGw== -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:36 2026 by rpki-client