$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: 6+VoIWNoh86wBRLwPKeNorgt5ujralSFrQVRX97MO/0= Subject key identifier: 29:43:E3:3D:7F:68:C7:D9:31:DE:F2:DF:0D:2C:20:23:8B:3A:9C:7E Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 48 Signing time: Wed 25 Mar 2026 07:36:22 +0000 Manifest this update: Wed 25 Mar 2026 07:36:21 +0000 Manifest next update: Wed 01 Apr 2026 07:36:21 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: d1++DBDz08GujRf6m+kSKkmgh5CLGF+JDqAIdi5Qqs4=) 2: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: 4qRFCjnxENmZCJsvaf8pCtTsmkbUQtbzT+9x0GNwtBg=) 3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: 0oflx8PpfYumWtaDNjRKvV2EgmoaxGKFDbpGgqR6stI=) 4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: CmD1Hjq4sfRE9Mv41rm1funIPuK1g5FmHQfKUDMPpY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Mar 25 07:36:21 2026 GMT Not After : Apr 1 07:36:21 2026 GMT Subject: CN=69c39076-5065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:b7:c6:96:b1:53:69:40:15:b2:4a:78:97: 5b:2d:3e:8d:74:a8:1e:e7:0c:61:c6:95:e7:e9:24: 40:9d:9b:64:de:a6:f8:7b:81:6c:97:b7:8f:c3:f1: 46:36:2f:41:3c:39:8e:56:99:ed:da:ed:ac:3d:20: 92:d7:22:8f:3e:6a:85:10:7a:94:78:9a:4f:cf:19: d2:22:df:fe:a0:76:35:c8:23:23:c0:65:c3:20:d1: ed:19:a3:5f:a6:7a:fc:9f:18:42:e0:d7:76:83:4e: 32:2d:ac:78:b7:b5:f3:bf:55:ce:c2:30:5b:8b:3a: 4b:8b:6b:3f:88:1e:ab:86:15:eb:80:3d:cb:34:30: 0e:84:d7:88:5f:5b:d6:36:f4:9c:ab:a4:d5:c0:c9: 29:0b:1c:01:31:4a:5e:f0:7f:9b:c5:ab:b6:b3:ea: 7c:a0:83:7e:df:8e:6e:82:98:58:a6:27:81:8c:0a: 79:79:27:8a:db:27:4e:8a:fd:f3:13:a6:f4:ac:53: a6:cb:b9:6c:7c:48:b8:05:04:90:ec:80:5a:3d:2a: af:c0:18:a3:50:b0:9b:70:82:72:ae:98:f5:22:f0: 9c:cb:72:93:57:a4:a0:e7:9f:f3:d9:5d:94:e7:7a: d9:b2:95:67:f6:0c:b7:cd:9e:6c:16:2c:23:55:33: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:E3:3D:7F:68:C7:D9:31:DE:F2:DF:0D:2C:20:23:8B:3A:9C:7E X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:f2:ec:29:12:3a:09:8c:29:9f:52:56:ec:92:4f:11:a2: ac:09:32:d7:0b:cf:82:e9:a5:8c:34:f0:7b:8e:bc:a6:2d:3e: f2:96:c7:ac:68:4d:08:6e:05:99:6d:1f:2d:c8:db:ee:df:23: 8c:f4:c0:64:cc:e3:25:a6:28:ed:53:ea:a7:3f:af:f1:cf:d3: 44:22:d1:0d:44:cf:9c:a3:2d:b3:f5:05:ce:17:d1:7e:50:20: ba:bc:68:72:18:7e:7f:30:65:1c:0d:fc:2c:ef:bf:b0:cb:03: 84:ba:d0:09:cb:0d:a4:2d:5a:fc:63:e2:af:d7:d4:68:5f:32: 91:69:d2:f3:b0:b0:cf:26:db:b5:df:61:59:47:1e:a2:b8:cd: 42:e6:48:c9:f5:3f:3c:57:87:09:93:e4:36:10:c7:3f:5b:b5: 2c:8a:02:6e:b4:bd:9a:0f:67:85:b9:b8:70:5c:2c:6a:18:57: 26:e3:63:ce:a4:6b:87:19:99:62:f2:f8:81:ac:ba:65:67:89: 38:a3:5c:33:57:89:9b:3d:78:59:65:4e:d0:6e:d6:27:3a:86: c6:3e:4d:b7:3b:42:c7:b0:96:3e:92:21:93:30:e1:53:11:67: 40:58:46:84:8e:6e:53:1b:16:17:35:15:b2:72:29:6f:4c:7f: fb:8a:61:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNjAzMjUwNzM2MjFaFw0yNjA0MDEwNzM2MjFaMBgxFjAUBgNV BAMTDTY5YzM5MDc2LTUwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgzLfGlrFTaUAVskp4l1stPo10qB7nDGHGlefpJECdm2Tepvh7gWyXt4/D8UY2 L0E8OY5Wme3a7aw9IJLXIo8+aoUQepR4mk/PGdIi3/6gdjXIIyPAZcMg0e0Zo1+m evyfGELg13aDTjItrHi3tfO/Vc7CMFuLOkuLaz+IHquGFeuAPcs0MA6E14hfW9Y2 9JyrpNXAySkLHAExSl7wf5vFq7az6nygg37fjm6CmFimJ4GMCnl5J4rbJ06K/fMT pvSsU6bLuWx8SLgFBJDsgFo9Kq/AGKNQsJtwgnKumPUi8JzLcpNXpKDnn/PZXZTn etmylWf2DLfNnmwWLCNVM3YDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKUPjPX9o x9kx3vLfDSwgI4s6nH4wHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBT+fLsKRI6CYwpn1JW7JJPEaKsCTLXC8+C6aWMNPB7jrymLT7ylsesaE0IbgWZ bR8tyNvu3yOM9MBkzOMlpijtU+qnP6/xz9NEItENRM+coy2z9QXOF9F+UCC6vGhy GH5/MGUcDfws77+wywOEutAJyw2kLVr8Y+Kv19RoXzKRadLzsLDPJtu132FZRx6i uM1C5kjJ9T88V4cJk+Q2EMc/W7UsigJutL2aD2eFubhwXCxqGFcm42POpGuHGZli 8viBrLplZ4k4o1wzV4mbPXhZZU7QbtYnOobGPk23O0LHsJY+kiGTMOFTEWdAWEaE jm5TGxYXNRWycilvTH/7imHV -----END CERTIFICATE-----Generated at Thu Mar 26 03:21:00 2026 by rpki-client