$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: lVJagaHZFzCWwuWB55Av5WesItBVme7fYwDujIe0q9E= Subject key identifier: BD:AA:21:57:DC:13:37:86:05:25:CA:E0:8D:3B:6C:15:3A:97:83:A7 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 82 Signing time: Wed 25 Mar 2026 06:56:22 +0000 Manifest this update: Wed 25 Mar 2026 06:56:22 +0000 Manifest next update: Wed 01 Apr 2026 06:56:22 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: zPq/CQ/NG+VyHwx8MFUHbsKgq5YrrRgtOt1JchZT56Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Mar 25 06:56:22 2026 GMT Not After : Apr 1 06:56:22 2026 GMT Subject: CN=69c38716-c7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b8:6b:7d:2b:72:88:31:6d:65:ca:dc:9a:cf: 0f:38:b3:2d:8c:c3:ff:cb:b2:ba:7f:a7:47:a8:39: a9:fc:22:c5:17:31:de:9b:53:dd:69:90:14:e7:ee: 1d:6f:bb:04:2a:3a:d7:7d:e0:c0:e5:ba:c5:85:f1: c5:29:35:b0:0f:71:ad:ca:04:5b:c2:af:9f:aa:ba: 97:75:5b:5d:10:e6:7c:c8:09:d0:df:1e:5e:fd:fa: 76:30:9d:70:7c:c8:8a:06:ad:9b:2d:78:7d:ae:c1: 58:69:e7:e2:86:6f:2c:95:83:71:1b:42:d3:5b:48: 42:bf:ef:47:98:cf:af:dd:d3:10:6c:2a:f9:db:c9: 48:65:1b:d5:a0:76:69:5b:8b:f2:1d:60:87:cf:c0: 94:33:bc:db:bd:21:50:6e:25:0d:fa:af:1c:51:af: a0:13:bc:c9:23:48:ec:73:94:23:1a:73:71:17:a3: a8:8b:f0:e8:c7:f4:32:98:b7:5f:3a:e6:c4:4f:36: 6c:ca:dc:17:79:6c:a8:b0:f7:10:9f:5e:7e:c6:78: 18:d6:06:35:2c:39:a8:0e:40:d4:b5:13:ad:d8:e1: 5d:67:87:7d:9f:a0:e8:5f:f8:eb:cc:9d:1e:50:21: 15:a9:76:1a:1a:41:d3:59:1c:eb:5c:bb:5e:d6:fc: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AA:21:57:DC:13:37:86:05:25:CA:E0:8D:3B:6C:15:3A:97:83:A7 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:74:99:76:87:65:bd:8f:99:da:71:de:03:fb:02:dc:e0:6d: 43:e8:c3:0f:80:ad:05:31:63:20:56:b6:26:3c:44:73:bd:52: c4:dc:41:0c:31:86:b6:4c:8f:96:da:d3:cd:29:2d:2c:e8:e1: 2d:ce:94:81:50:aa:1e:d3:6f:bc:63:4b:36:2d:26:a8:5a:ed: f1:2c:98:a9:40:cd:d7:5f:1f:55:5f:c0:dc:20:36:e7:46:06: ae:8c:a5:2e:e2:80:78:36:08:17:dd:66:f5:e9:cb:4a:13:db: 6c:5d:82:a3:0e:41:36:b3:da:e0:56:6b:bd:ce:07:ba:30:0a: ea:fa:ce:80:29:32:81:43:61:c7:7b:59:61:64:a7:55:6e:70: d7:18:31:d8:6c:f5:9c:51:77:b5:11:c0:3f:42:16:d7:19:ea: 1c:57:fc:de:00:ab:1f:0f:7c:ba:18:65:61:8b:47:d3:51:61: 5a:82:27:bb:dd:b6:5d:09:66:c9:b5:26:02:7c:56:4a:02:d0: 83:c2:9a:0d:3b:23:5f:6f:d8:d4:d0:f6:65:b4:e2:01:51:d3: d8:40:fb:fd:56:70:d6:8f:92:7d:89:c0:ca:55:20:d0:19:ee: a8:aa:af:ba:f3:da:aa:7e:1c:a8:c9:00:0b:a4:85:c3:a2:f7: b8:07:2e:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMDExMTAvBgNVBAUTKDk0MzM0OUZEQjZEQzBBRjE1Q0Q1NzREQTQyRjhFQzdC NDlEQzBEQjcwHhcNMjYwMzI1MDY1NjIyWhcNMjYwNDAxMDY1NjIyWjAYMRYwFAYD VQQDEw02OWMzODcxNi1jN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bhrfStyiDFtZcrcms8POLMtjMP/y7K6f6dHqDmp/CLFFzHem1PdaZAU5+4d b7sEKjrXfeDA5brFhfHFKTWwD3GtygRbwq+fqrqXdVtdEOZ8yAnQ3x5e/fp2MJ1w fMiKBq2bLXh9rsFYaefihm8slYNxG0LTW0hCv+9HmM+v3dMQbCr528lIZRvVoHZp W4vyHWCHz8CUM7zbvSFQbiUN+q8cUa+gE7zJI0jsc5QjGnNxF6Ooi/Dox/QymLdf OubETzZsytwXeWyosPcQn15+xngY1gY1LDmoDkDUtROt2OFdZ4d9n6DoX/jrzJ0e UCEVqXYaGkHTWRzrXLte1vzAcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2qIVfc EzeGBSXK4I07bBU6l4OnMB8GA1UdIwQYMBaAFJQzSf223ArxXNV02kL47HtJ3A23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS9GNkE2NDVENjY3 QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2RmMxWFRhUXZqc2UwbmNE YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0RiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIwMS9GNkE2NDVENjY3QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2 RmMxWFRhUXZqc2UwbmNEYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnHSZdodlvY+Z2nHeA/sC3OBtQ+jDD4CtBTFjIFa2JjxEc71SxNxBDDGGtkyP ltrTzSktLOjhLc6UgVCqHtNvvGNLNi0mqFrt8SyYqUDN118fVV/A3CA250YGroyl LuKAeDYIF91m9enLShPbbF2Cow5BNrPa4FZrvc4HujAK6vrOgCkygUNhx3tZYWSn VW5w1xgx2Gz1nFF3tRHAP0IW1xnqHFf83gCrHw98uhhlYYtH01FhWoInu922XQlm ybUmAnxWSgLQg8KaDTsjX2/Y1ND2ZbTiAVHT2ED7/VZw1o+SfYnAylUg0BnuqKqv uvPaqn4cqMkAC6SFw6L3uAcu9Q== -----END CERTIFICATE-----Generated at Thu Mar 26 17:19:50 2026 by rpki-client