$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: rmDsNBOm7hBmPzq3C7aNNKzcsfEOnCRMSz1rZYH+vsU= Subject key identifier: F5:B3:C2:11:A6:1B:7A:84:C6:D1:A6:38:EE:A3:C0:9D:6C:32:B1:30 Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 035E Signing time: Wed 25 Mar 2026 00:34:10 +0000 Manifest this update: Wed 25 Mar 2026 00:34:10 +0000 Manifest next update: Wed 01 Apr 2026 00:34:10 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: HxBrMj2gEMNTnxIdtbQ5+se0BZugwvtyE8mLSXbm/rQ=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: 1UM0zzO1Qgt86BQ5nOPIG0SOHvOKriG0v7quuhyaytc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Mar 25 00:34:10 2026 GMT Not After : Apr 1 00:34:10 2026 GMT Subject: CN=69c32d82-8fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:06:0b:f9:01:c1:4e:49:e3:1e:db:31:42: 88:97:32:9e:c6:76:1f:49:e2:62:c1:3e:df:16:e3: dd:ff:9d:34:80:74:75:c1:8c:22:3c:cb:e5:2a:a4: d6:b1:3b:8a:35:69:fb:03:33:49:36:08:c9:ae:b5: a3:c7:35:f9:d1:55:5f:eb:d1:3b:5d:e4:b0:f3:cf: 71:bc:4d:cf:fb:ee:0c:e9:5b:f6:58:01:51:ed:61: be:f4:0c:f9:dc:92:f9:65:31:cb:b8:13:a7:fd:73: a4:20:f8:bc:2f:2e:fe:b2:99:47:bd:a6:9f:01:50: ba:f5:56:b4:72:b0:d8:0c:00:ee:91:8b:ea:ef:3a: 46:48:99:b7:0a:c6:61:a0:ad:8a:e5:fb:23:f8:8a: bc:d6:fd:4d:16:8a:64:f0:c4:68:0b:bb:73:53:6a: cb:35:48:20:94:32:e9:0d:0e:43:ae:d2:e1:c2:99: 26:0e:89:c2:93:7d:be:7b:df:06:cf:81:98:23:5b: 1b:fd:82:38:b1:c3:b2:67:8b:e3:85:c2:1e:c4:e0: 5a:7c:10:bc:bf:d4:d8:2a:a1:3b:fc:a4:57:e1:74: d5:e6:6d:f4:1d:2c:ca:f0:d4:b4:d1:99:c6:2e:0f: 6d:2b:71:0c:78:0d:3c:d9:ef:9b:24:f8:d1:58:63: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B3:C2:11:A6:1B:7A:84:C6:D1:A6:38:EE:A3:C0:9D:6C:32:B1:30 X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:fc:22:a2:63:cf:3b:80:a2:60:76:d7:e9:6a:f2:f4:75:dd: 48:9c:e6:eb:e8:e2:63:fb:6b:f9:93:83:84:4b:91:68:57:ae: 10:26:de:51:13:ae:6d:36:e0:d3:2d:2b:47:5f:d9:85:62:b0: 40:e5:e9:43:52:48:3f:24:d7:86:4b:94:18:c9:8f:0a:45:93: 36:85:3c:ed:4a:02:a1:5c:7a:15:43:fc:37:c0:1c:39:a0:32: 6c:53:06:c4:fc:42:3e:8b:f6:7b:26:0c:18:6b:7d:1a:6f:71: 32:b2:30:9e:65:96:ef:75:43:0e:ef:60:50:dc:70:d5:a0:bd: b7:cb:0b:32:ad:ff:71:dd:89:b5:68:29:89:0c:56:6f:ec:3f: 1c:4e:85:6d:48:fe:20:2f:fc:e2:c2:be:e6:60:0c:c3:64:e3: be:0d:57:4b:dd:ac:0b:2d:55:fc:de:3a:79:07:21:5b:27:5b: f6:23:08:03:a0:3b:22:02:12:5a:4e:d4:50:ec:1d:1e:41:54: 5c:4d:22:fb:c2:f0:bd:93:69:f4:ad:fd:37:9c:0f:16:65:d8: c3:83:3d:0b:93:c8:5f:5c:44:14:dd:14:d5:9c:64:63:20:e1: 08:d0:05:5a:89:a3:b9:04:2a:22:e5:f3:01:81:6c:80:23:92: f7:d7:7b:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjYwMzI1MDAzNDEwWhcNMjYwNDAxMDAzNDEwWjAYMRYwFAYD VQQDEw02OWMzMmQ4Mi04ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubMGC/kBwU5J4x7bMUKIlzKexnYfSeJiwT7fFuPd/500gHR1wYwiPMvlKqTW sTuKNWn7AzNJNgjJrrWjxzX50VVf69E7XeSw889xvE3P++4M6Vv2WAFR7WG+9Az5 3JL5ZTHLuBOn/XOkIPi8Ly7+splHvaafAVC69Va0crDYDADukYvq7zpGSJm3CsZh oK2K5fsj+Iq81v1NFopk8MRoC7tzU2rLNUgglDLpDQ5DrtLhwpkmDonCk32+e98G z4GYI1sb/YI4scOyZ4vjhcIexOBafBC8v9TYKqE7/KRX4XTV5m30HSzK8NS00ZnG Lg9tK3EMeA082e+bJPjRWGOlaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWzwhGm G3qExtGmOO6jwJ1sMrEwMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU/wiomPPO4CiYHbX6Wry9HXdSJzm6+jiY/tr+ZODhEuRaFeuECbeUROubTbg 0y0rR1/ZhWKwQOXpQ1JIPyTXhkuUGMmPCkWTNoU87UoCoVx6FUP8N8AcOaAybFMG xPxCPov2eyYMGGt9Gm9xMrIwnmWW73VDDu9gUNxw1aC9t8sLMq3/cd2JtWgpiQxW b+w/HE6FbUj+IC/84sK+5mAMw2Tjvg1XS92sCy1V/N46eQchWydb9iMIA6A7IgIS Wk7UUOwdHkFUXE0i+8LwvZNp9K39N5wPFmXYw4M9C5PIX1xEFN0U1ZxkYyDhCNAF WomjuQQqIuXzAYFsgCOS99d7fA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:11:42 2026 by rpki-client