$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: 1LJR34Hay5N6H9WmafI086LAWKl2oTp310FTFAfSxyw= Subject key identifier: 5E:4F:7B:C7:7B:15:26:7E:7D:DE:C9:F7:F4:71:7A:25:B8:B9:84:71 Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: F1 Signing time: Wed 25 Mar 2026 05:34:36 +0000 Manifest this update: Wed 25 Mar 2026 05:34:35 +0000 Manifest next update: Wed 01 Apr 2026 05:34:35 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: Bm8osZ5n9j7taXan8+OnAa8m6KFF7kBVHbYFPbPTBr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Mar 25 05:34:35 2026 GMT Not After : Apr 1 05:34:35 2026 GMT Subject: CN=69c373eb-07fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:e8:1a:07:c3:d0:30:01:06:fd:98:23:0e: 22:d3:eb:06:70:b1:7f:df:89:d2:48:f6:43:10:4e: 62:27:a9:63:1f:f8:f7:d0:e1:8e:0f:5e:2a:0d:5c: 82:2e:9e:9b:fa:7c:84:43:e1:f7:46:34:2c:35:fa: 0c:cb:2f:a9:12:5e:0e:80:bf:1c:cd:66:b6:96:b5: 81:22:5f:d3:6d:c5:40:31:f5:a6:78:48:17:6e:16: 9f:14:5a:25:08:1e:d0:e0:5a:34:5a:5e:8c:c2:4f: 63:4f:bc:d2:13:3b:d3:e8:e0:45:22:28:f5:84:78: 86:95:ee:3a:b2:12:00:ca:ca:89:05:01:82:62:f0: 17:5e:79:a1:18:09:8b:47:d1:b3:ac:d0:99:21:af: ae:18:ad:b6:68:00:f4:89:63:af:59:81:40:64:09: 49:94:80:8c:55:21:5b:1a:68:df:3a:88:16:70:48: dd:b5:78:0f:b0:23:3b:90:b3:d2:2f:6c:7d:b5:29: 48:19:7e:86:39:3c:3a:c5:59:51:3c:c4:40:ae:30: d5:9b:72:08:67:60:ba:83:68:2b:eb:e2:7a:56:16: c5:15:c8:8f:ca:70:02:e9:c4:cc:e0:35:70:13:79: 75:e2:df:06:e6:20:91:cd:39:e5:e7:0f:42:a2:c7: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:7B:C7:7B:15:26:7E:7D:DE:C9:F7:F4:71:7A:25:B8:B9:84:71 X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:24:b3:3a:9b:b9:3f:3b:4d:02:dc:82:11:10:ed:6b:ca:06: 65:2d:a6:cb:36:13:31:ae:42:ef:c9:16:b4:8d:32:1f:52:90: b7:9f:e3:80:a0:9c:8e:ab:90:71:f6:c1:a0:41:90:47:a2:ab: ce:c8:1f:81:26:fa:a9:13:2a:e8:e1:20:b0:ab:5c:4d:92:9f: 18:90:23:9c:08:98:b4:f7:04:b4:6c:ad:5c:df:95:4f:d6:4c: 9b:8c:32:07:1f:e4:e0:e5:e1:b7:5b:70:bd:8b:64:19:1b:a8: 12:7c:5c:f7:53:4f:ec:ec:78:05:cf:b1:d0:5d:14:9f:4e:7b: d6:90:7e:d6:f0:e8:7c:f5:0b:dd:58:00:84:11:56:45:cd:39: 19:bb:50:d7:64:08:4e:86:62:48:c6:ed:c9:93:ee:a1:72:65: f3:98:c4:cb:d0:41:b7:df:2c:89:3c:47:53:a8:a2:48:27:93: 96:57:1c:b4:75:fd:da:89:80:47:ab:94:1b:1c:71:13:b4:03: 16:f9:06:cd:a5:e2:ec:c5:34:0a:d7:03:38:a8:87:64:10:a6: 43:a0:ef:2c:70:04:59:d5:8f:12:02:82:e8:77:9f:c0:47:0c: 75:01:47:39:d3:7c:e6:e2:de:05:7a:09:db:fa:94:02:31:26: 9b:38:4c:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzOEIxMTAvBgNVBAUTKDJGNkIxRTdFMTQwMURFMDBBQzhFRURCN0E4NTkwRDAz REM1NDBGNzgwHhcNMjYwMzI1MDUzNDM1WhcNMjYwNDAxMDUzNDM1WjAYMRYwFAYD VQQDEw02OWMzNzNlYi0wN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gDoGgfD0DABBv2YIw4i0+sGcLF/34nSSPZDEE5iJ6ljH/j30OGOD14qDVyC Lp6b+nyEQ+H3RjQsNfoMyy+pEl4OgL8czWa2lrWBIl/TbcVAMfWmeEgXbhafFFol CB7Q4Fo0Wl6Mwk9jT7zSEzvT6OBFIij1hHiGle46shIAysqJBQGCYvAXXnmhGAmL R9GzrNCZIa+uGK22aAD0iWOvWYFAZAlJlICMVSFbGmjfOogWcEjdtXgPsCM7kLPS L2x9tSlIGX6GOTw6xVlRPMRArjDVm3IIZ2C6g2gr6+J6VhbFFciPynAC6cTM4DVw E3l14t8G5iCRzTnl5w9CosdTIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5Pe8d7 FSZ+fd7J9/RxeiW4uYRxMB8GA1UdIwQYMBaAFC9rHn4UAd4ArI7tt6hZDQPcVA94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM4Qi9BMUFCMkFCQ0JB ODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNnQ3NqdTIzcUZrTkE5eFVE M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM4Qi9BMUFCMkFCQ0JBODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNn Q3NqdTIzcUZrTkE5eFVEM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUySzOpu5PztNAtyCERDta8oGZS2myzYTMa5C78kWtI0yH1KQt5/jgKCcjquQ cfbBoEGQR6KrzsgfgSb6qRMq6OEgsKtcTZKfGJAjnAiYtPcEtGytXN+VT9ZMm4wy Bx/k4OXht1twvYtkGRuoEnxc91NP7Ox4Bc+x0F0Un0571pB+1vDofPUL3VgAhBFW Rc05GbtQ12QIToZiSMbtyZPuoXJl85jEy9BBt98siTxHU6iiSCeTllcctHX92omA R6uUGxxxE7QDFvkGzaXi7MU0CtcDOKiHZBCmQ6DvLHAEWdWPEgKC6HefwEcMdQFH OdN85uLeBXoJ2/qUAjEmmzhM+w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:32:09 2026 by rpki-client