$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: ra+HxZ7qX/UyGQPqsV/QNrv9u4CMaMvYjvfVOgeTXKQ= Subject key identifier: B0:78:D3:7F:FD:D1:84:67:BD:81:12:27:41:E3:73:E7:EC:CB:27:E3 Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 0A3F Signing time: Tue 24 Mar 2026 19:32:18 +0000 Manifest this update: Tue 24 Mar 2026 19:32:17 +0000 Manifest next update: Tue 31 Mar 2026 19:32:17 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: eSA5DrAUOBbnp9Fu06DoUjjoy5TFFruiAcZ38wOZsa0=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Mar 24 19:32:17 2026 GMT Not After : Mar 31 19:32:17 2026 GMT Subject: CN=69c2e6c1-e655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:44:9f:64:26:fb:84:66:d1:a4:28:ee:0b:26: 54:32:e0:4d:ad:86:d7:33:34:a7:68:42:90:1a:9e: 8a:bb:0b:c1:67:b4:ab:08:a4:0b:dd:3b:ad:5e:39: 46:6e:0e:2e:b4:46:7b:8e:80:4f:59:8e:bd:50:c7: 20:a1:f7:5f:e2:15:e2:1d:6c:4f:cb:88:4f:7a:b6: 99:af:55:fe:43:cd:cd:ca:f7:a2:af:17:03:0a:52: 3c:0e:48:21:23:c3:d3:5f:c2:8d:28:bc:18:a4:6a: 83:5b:7a:16:32:3e:74:c5:46:27:b7:59:d6:19:fa: d6:d3:13:04:05:20:61:14:48:fe:45:0f:0e:d5:af: e2:ba:97:58:0f:98:33:ab:46:50:c8:4d:c2:6f:98: 42:b1:64:ab:81:33:60:9c:c3:71:1a:05:0a:36:8a: db:7b:34:27:7f:9f:8b:d2:b4:88:59:04:78:c7:14: ba:4e:89:73:14:3b:6f:27:44:87:a1:04:dd:e8:52: 9f:bc:d1:e5:e6:38:bb:1c:37:e2:eb:e4:e1:69:9b: 1a:6f:43:2a:7f:89:e9:c7:a8:c5:18:8e:85:a0:6d: c6:6d:75:42:54:bb:ab:43:3e:2f:87:ff:17:22:28: 6e:b1:8c:97:8c:24:25:22:da:bc:13:d1:f0:9c:62: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:78:D3:7F:FD:D1:84:67:BD:81:12:27:41:E3:73:E7:EC:CB:27:E3 X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8f:8a:84:d8:4e:2b:7d:39:8b:90:3d:8d:bd:5c:85:ec:37: 0a:56:e9:41:b2:5b:8e:12:99:15:0a:f3:8d:31:f5:48:58:cd: f7:73:88:2e:78:e2:37:67:51:74:81:c9:b5:46:4b:f4:8a:77: 81:f5:5d:d7:b4:a7:e4:df:79:13:b7:67:a7:ba:f4:00:e4:58: 3e:41:38:e6:68:67:8a:83:3d:4f:05:8c:83:fc:f9:18:4c:9f: fe:de:de:db:51:79:8d:9e:d8:fd:a6:02:49:21:8b:65:4c:b6: 5e:53:81:62:58:c9:ed:5c:b9:43:22:5e:3f:98:8d:12:23:d5: 87:e1:4c:2c:5b:d3:57:97:ed:a5:8c:f7:6c:b1:29:b0:84:17: 95:43:42:03:ff:23:c2:0d:55:a8:e7:20:7d:db:b2:77:71:e7: a1:39:0f:a1:02:89:ee:41:92:6b:f1:76:a4:72:1b:72:e0:cf: a9:33:96:04:34:e2:24:6d:db:0d:25:1c:75:76:a7:8e:fb:28: 75:1e:2b:49:4d:ab:54:57:2d:e3:87:10:b0:ef:75:36:f9:2a: 1e:a7:fe:31:60:a7:dd:61:bc:fa:5d:68:a5:76:3a:84:66:67: 96:72:a2:fa:59:fb:cc:38:ed:72:58:2a:1e:86:f9:d5:75:96: d5:71:06:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjYwMzI0MTkzMjE3WhcNMjYwMzMxMTkzMjE3WjAYMRYwFAYD VQQDEw02OWMyZTZjMS1lNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80SfZCb7hGbRpCjuCyZUMuBNrYbXMzSnaEKQGp6KuwvBZ7SrCKQL3TutXjlG bg4utEZ7joBPWY69UMcgofdf4hXiHWxPy4hPeraZr1X+Q83NyveirxcDClI8Dkgh I8PTX8KNKLwYpGqDW3oWMj50xUYnt1nWGfrW0xMEBSBhFEj+RQ8O1a/iupdYD5gz q0ZQyE3Cb5hCsWSrgTNgnMNxGgUKNorbezQnf5+L0rSIWQR4xxS6TolzFDtvJ0SH oQTd6FKfvNHl5ji7HDfi6+ThaZsab0Mqf4npx6jFGI6FoG3GbXVCVLurQz4vh/8X IihusYyXjCQlItq8E9HwnGJMYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLB403/9 0YRnvYESJ0Hjc+fsyyfjMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvo+KhNhOK305i5A9jb1chew3ClbpQbJbjhKZFQrzjTH1SFjN93OILnjiN2dR dIHJtUZL9Ip3gfVd17Sn5N95E7dnp7r0AORYPkE45mhnioM9TwWMg/z5GEyf/t7e 21F5jZ7Y/aYCSSGLZUy2XlOBYljJ7Vy5QyJeP5iNEiPVh+FMLFvTV5ftpYz3bLEp sIQXlUNCA/8jwg1VqOcgfduyd3HnoTkPoQKJ7kGSa/F2pHIbcuDPqTOWBDTiJG3b DSUcdXanjvsodR4rSU2rVFct44cQsO91NvkqHqf+MWCn3WG8+l1opXY6hGZnlnKi +ln7zDjtclgqHob51XWW1XEGtw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:10 2026 by rpki-client