$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: usPZCztHdlinXmGzLFT8/8dcT/B9iYmJHDbCXbERFGk= Subject key identifier: CA:0E:91:99:AD:F2:B6:C4:A6:20:38:76:94:43:C3:09:C5:D3:25:85 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 1583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 1579 Signing time: Tue 24 Mar 2026 16:40:21 +0000 Manifest this update: Tue 24 Mar 2026 16:40:20 +0000 Manifest next update: Tue 31 Mar 2026 16:40:20 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: YjrPASnunZSdN/VM4n+Zvh2c4zQ1oZiBS+XBcpzohxo=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: Uw1PTuG+Y4DM/ehlZNwhTINh8c0K6j13Gv43hlbWGr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5507 (0x1583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Mar 24 16:40:20 2026 GMT Not After : Mar 31 16:40:20 2026 GMT Subject: CN=69c2be75-7f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:43:f9:48:a6:0c:69:94:1b:cc:2b:f7:ed: 3f:87:22:e0:4f:5a:ba:5e:5d:e7:8c:7d:1a:f1:c4: 8f:7f:e9:4a:d0:5c:46:4b:68:9b:c3:66:e9:4e:1c: c0:9c:bb:13:84:a0:60:ff:7e:04:2e:5f:0d:12:3c: 4f:68:bd:f6:40:15:1c:5a:d2:ac:da:2e:f0:55:26: 1a:09:e2:0d:07:c5:07:ce:2d:2b:1e:fb:4d:03:27: 19:58:78:9b:ec:37:f2:2d:f9:d4:37:79:0f:e1:24: c3:cc:5f:e0:09:5c:49:62:4e:ed:13:d8:95:bb:80: ce:37:e3:ac:78:2a:32:e7:83:e9:55:b5:76:6c:6f: 7e:9f:57:c5:87:fd:37:5e:97:6c:a9:24:a8:b4:1e: 7e:46:f0:50:7d:b9:a8:ad:b6:78:52:ad:7c:8f:ad: 97:bc:8c:56:83:f9:f4:ec:35:85:2c:6a:9b:6d:c0: 8b:9c:7a:b5:e7:f5:b1:9f:c1:b6:a1:fb:68:82:22: 06:2c:88:94:45:ba:40:2c:f1:9b:d9:04:12:25:cd: 29:28:3b:6b:f8:b0:db:43:ea:f5:9b:01:a2:85:b2: f5:ba:65:d3:9d:21:19:fc:e2:81:41:b4:1f:7e:38: a9:6f:82:f7:f4:d2:c1:cc:4d:f0:aa:6b:9f:c9:dc: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0E:91:99:AD:F2:B6:C4:A6:20:38:76:94:43:C3:09:C5:D3:25:85 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:08:50:36:94:4d:61:88:10:2d:f0:b3:80:c7:4f:63:47:e6: 97:1f:ea:d9:7b:44:7c:df:c8:da:5d:f1:67:91:b8:1b:79:24: 64:6f:eb:60:0c:d9:61:c8:6a:b7:ed:f7:d7:66:d7:0e:48:b9: f7:4d:74:95:b2:29:e8:02:23:9f:6b:e0:6f:ab:1f:bb:1f:69: fb:22:bd:dc:e7:ee:82:09:7e:36:62:23:5e:25:55:06:b7:4d: 6e:d1:ee:95:43:f0:f5:95:6e:2d:51:1b:dc:43:a8:0b:cf:bd: 6d:9a:bb:43:9c:00:2a:2e:af:1a:0e:6a:50:0f:50:36:0f:6f: cc:31:e1:38:84:e5:1c:29:a1:52:ef:ee:65:77:52:d6:b9:00: c3:5b:3f:68:5c:8f:c4:65:3c:fc:ab:4e:be:43:ab:4a:9d:85: 65:d7:7d:6f:33:1e:5c:d4:43:ec:87:b3:00:51:ae:54:13:38: d6:e5:be:97:bd:99:9a:81:bd:0c:17:af:e4:ee:ed:03:a5:0c: 05:2e:9d:c7:ac:1a:1a:f2:8d:b6:af:fa:2e:06:f5:c5:b2:3c: f6:43:ae:fe:cd:b1:28:09:e8:e6:2e:f5:e3:33:b4:fa:2d:fd: 2e:fd:26:19:8b:db:38:46:c0:e0:9a:3f:92:45:c3:48:8c:e8: 8a:b1:a0:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjYwMzI0MTY0MDIwWhcNMjYwMzMxMTY0MDIwWjAYMRYwFAYD VQQDEw02OWMyYmU3NS03ZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJlD+UimDGmUG8wr9+0/hyLgT1q6Xl3njH0a8cSPf+lK0FxGS2ibw2bpThzA nLsThKBg/34ELl8NEjxPaL32QBUcWtKs2i7wVSYaCeINB8UHzi0rHvtNAycZWHib 7DfyLfnUN3kP4STDzF/gCVxJYk7tE9iVu4DON+OseCoy54PpVbV2bG9+n1fFh/03 XpdsqSSotB5+RvBQfbmorbZ4Uq18j62XvIxWg/n07DWFLGqbbcCLnHq15/Wxn8G2 oftogiIGLIiURbpALPGb2QQSJc0pKDtr+LDbQ+r1mwGihbL1umXTnSEZ/OKBQbQf fjipb4L39NLBzE3wqmufydxMjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoOkZmt 8rbEpiA4dpRDwwnF0yWFMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeAhQNpRNYYgQLfCzgMdPY0fmlx/q2XtEfN/I2l3xZ5G4G3kkZG/rYAzZYchq t+3312bXDki59010lbIp6AIjn2vgb6sfux9p+yK93Ofuggl+NmIjXiVVBrdNbtHu lUPw9ZVuLVEb3EOoC8+9bZq7Q5wAKi6vGg5qUA9QNg9vzDHhOITlHCmhUu/uZXdS 1rkAw1s/aFyPxGU8/KtOvkOrSp2FZdd9bzMeXNRD7IezAFGuVBM41uW+l72ZmoG9 DBev5O7tA6UMBS6dx6waGvKNtq/6Lgb1xbI89kOu/s2xKAno5i714zO0+i39Lv0m GYvbOEbA4Jo/kkXDSIzoirGgaQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:27 2026 by rpki-client