$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: tAXizt2U8tjPB4LTmnS5X9+1u0Au86fW/bHqT3oZXvw= Subject key identifier: 1B:46:97:30:B0:57:DB:43:CA:D9:8D:60:0A:2D:6E:5A:2A:5E:F8:A4 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 1290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 126D Signing time: Tue 24 Mar 2026 17:00:02 +0000 Manifest this update: Tue 24 Mar 2026 17:00:01 +0000 Manifest next update: Tue 31 Mar 2026 17:00:01 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: iahPeeOdzxC+Gd8rIjp4O5PUub5LKBx9PDGG7l1Kipw=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: xwp+vsBFySucNW4Yhnh8sJi71zn8ZQofjYnVbPZEHro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4752 (0x1290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Mar 24 17:00:01 2026 GMT Not After : Mar 31 17:00:01 2026 GMT Subject: CN=69c2c312-7bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:e5:2e:6a:e2:3f:f0:31:a4:ac:64:d1:00: ad:88:32:69:d4:ea:00:61:85:97:72:38:f5:b7:98: bb:8c:a4:d7:4a:94:f8:20:9e:8f:77:22:aa:8e:2d: 6f:31:80:3e:a1:be:5c:fa:4a:ab:46:12:8f:47:d3: fa:2a:d3:f0:5b:cb:a9:73:dd:c6:78:3f:58:19:ac: 91:22:66:ce:e2:2b:62:27:bd:49:51:85:52:fb:fe: 0f:e9:96:f4:41:ce:51:3f:50:45:a1:ce:26:96:8e: 21:10:a5:db:e6:d0:38:ea:03:fc:cf:d8:c8:a3:7b: b5:7a:e7:3b:8d:df:78:16:db:9b:63:44:b2:40:71: d5:62:0e:fe:fd:dd:92:9a:61:eb:f5:a9:5a:2f:70: 38:bb:fb:a7:bb:30:62:92:07:7b:41:98:89:fa:bb: 65:c0:a3:b5:69:07:6b:87:83:bd:b1:29:b7:aa:1e: 4f:bd:10:5b:99:4c:53:b6:78:f9:5e:95:0b:9c:4c: e4:9a:29:00:75:cd:a1:f7:73:35:05:dc:09:7a:95: 6e:14:06:a3:02:85:e2:e3:35:43:06:6e:bd:90:02: 85:e0:61:d9:b2:2e:f8:b7:b3:2c:6e:c7:cc:79:aa: 32:f7:c6:a5:f4:93:6e:e3:43:5e:1a:6f:7a:c1:ca: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:97:30:B0:57:DB:43:CA:D9:8D:60:0A:2D:6E:5A:2A:5E:F8:A4 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ec:ba:90:d7:4a:d3:f5:26:f5:d2:d1:5e:d7:0e:f2:f3:e7: 78:c9:f1:8f:b8:d7:c6:05:ca:75:07:e4:c6:ce:3f:52:a3:14: 7e:1d:b5:f3:d2:dd:44:20:f6:c3:e7:25:9c:9f:67:4c:a3:a1: 7f:09:13:53:1a:8a:9f:d0:ed:9e:40:69:10:41:4b:71:dc:41: 0b:a7:26:c1:e7:ca:2e:b5:a6:e3:b6:f0:40:e2:a8:31:a5:9d: 34:67:cf:43:1d:a3:c0:22:08:85:65:35:94:27:bd:47:57:b4: 34:77:df:99:be:17:f2:91:ca:18:f5:b2:b1:45:03:ba:b8:41: 54:1e:51:d8:df:15:8f:24:39:0e:48:57:7e:89:a3:12:16:e0: e9:1a:0d:31:d4:58:be:8d:f0:6a:19:66:5f:f0:09:4e:d5:51: 45:98:63:82:0f:8b:26:39:38:95:34:c8:c4:a0:95:5a:9b:61: c1:bb:a9:13:b5:9c:5e:20:d7:6a:cd:22:65:c0:74:86:ae:39: e9:cd:d5:58:0a:76:85:34:47:c5:98:76:62:1a:eb:67:6f:76: d9:b9:bc:35:d7:e1:24:40:21:e7:e6:cc:b6:6a:e7:92:3e:a2: a7:7b:00:52:39:30:f3:2e:a1:d5:2d:08:79:c5:11:b8:c7:28: 57:61:f5:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjYwMzI0MTcwMDAxWhcNMjYwMzMxMTcwMDAxWjAYMRYwFAYD VQQDEw02OWMyYzMxMi03YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlM7lLmriP/AxpKxk0QCtiDJp1OoAYYWXcjj1t5i7jKTXSpT4IJ6PdyKqji1v MYA+ob5c+kqrRhKPR9P6KtPwW8upc93GeD9YGayRImbO4itiJ71JUYVS+/4P6Zb0 Qc5RP1BFoc4mlo4hEKXb5tA46gP8z9jIo3u1euc7jd94FtubY0SyQHHVYg7+/d2S mmHr9alaL3A4u/unuzBikgd7QZiJ+rtlwKO1aQdrh4O9sSm3qh5PvRBbmUxTtnj5 XpULnEzkmikAdc2h93M1BdwJepVuFAajAoXi4zVDBm69kAKF4GHZsi74t7MsbsfM eaoy98al9JNu40NeGm96wcp4ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtGlzCw V9tDytmNYAotbloqXvikMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEuy6kNdK0/Um9dLRXtcO8vPneMnxj7jXxgXKdQfkxs4/UqMUfh2189LdRCD2 w+clnJ9nTKOhfwkTUxqKn9DtnkBpEEFLcdxBC6cmwefKLrWm47bwQOKoMaWdNGfP Qx2jwCIIhWU1lCe9R1e0NHffmb4X8pHKGPWysUUDurhBVB5R2N8VjyQ5DkhXfomj Ehbg6RoNMdRYvo3wahlmX/AJTtVRRZhjgg+LJjk4lTTIxKCVWpthwbupE7WcXiDX as0iZcB0hq456c3VWAp2hTRHxZh2YhrrZ2922bm8NdfhJEAh5+bMtmrnkj6ip3sA Ujkw8y6h1S0IecURuMcoV2H14Q== -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:43 2026 by rpki-client