$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json) Hash identifier: U20IwNNd0Sz6etqu6+gg+927IdpqBlQd4nT6pzc9Lsk= Subject key identifier: 2C:C5:2B:F5:BC:7D:BA:2B:0A:B4:CA:98:4C:0F:E8:09:32:74:BB:3C Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft Manifest number: 0122 Signing time: Tue 24 Mar 2026 19:01:03 +0000 Manifest this update: Tue 24 Mar 2026 19:01:03 +0000 Manifest next update: Tue 31 Mar 2026 19:01:03 +0000 Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: WyQu5FDf0wEIDthp1f8cDXmzH16ny716xUy0quY9/Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Validity Not Before: Mar 24 19:01:03 2026 GMT Not After : Mar 31 19:01:03 2026 GMT Subject: CN=69c2df6f-63ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:3f:2c:86:99:33:30:bd:67:33:05:46:51: 6c:8c:71:e2:35:8a:86:ef:01:16:8e:07:e9:95:83: 05:0a:58:81:a5:59:d3:e3:85:88:5a:96:f2:b8:0a: 57:05:62:9f:8a:8e:9f:72:83:a9:3e:39:50:0b:08: 3b:03:50:97:08:02:0c:7f:a4:ab:99:f0:a5:88:ff: 75:b6:4b:d8:69:b6:9c:fc:f1:c3:8d:0c:59:85:b5: 8a:ff:a8:cc:0e:87:96:c2:01:42:bc:88:16:90:0b: 96:77:a8:7c:01:ec:9c:da:cf:b5:01:07:b1:29:63: 98:9a:4c:75:97:f5:86:a8:bf:63:58:c0:d6:d4:60: b3:39:b0:7a:cf:75:5d:d8:36:04:c4:b5:7d:bc:90: c0:ce:d1:d1:3e:de:c5:63:3d:20:ca:08:6d:83:81: ab:53:ca:59:94:a9:82:86:34:32:3e:ab:9b:ac:ec: a3:9c:95:ad:ca:c3:62:58:5b:77:b9:46:3d:b9:22: 14:59:fd:44:b6:5f:da:3c:4a:a3:2c:bb:38:fb:bf: bb:ab:9f:8c:1f:eb:db:e9:21:22:13:47:b9:8d:ef: a7:a2:c1:33:2d:b3:7f:fe:52:22:51:98:ed:2c:51: 0b:0c:8b:a2:11:18:55:dc:49:37:c7:25:93:82:46: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C5:2B:F5:BC:7D:BA:2B:0A:B4:CA:98:4C:0F:E8:09:32:74:BB:3C X509v3 Authority Key Identifier: keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a6:d4:13:82:8d:ac:3b:db:25:37:d1:6b:d0:b5:c9:d7:73: 38:60:1e:a2:05:9b:05:13:a0:66:75:46:c8:92:1e:46:38:5d: 88:e8:31:ba:f4:34:e7:7d:b2:01:25:97:ae:93:9a:3c:e0:20: ba:b1:ec:08:69:75:74:cf:26:22:52:b1:d8:14:7b:25:d0:81: b7:52:23:43:70:72:40:98:8e:5b:6e:22:c3:80:ba:64:44:3f: f3:6b:ed:47:c8:c1:e9:40:b7:a5:6d:8a:1f:ea:a3:ed:cc:01: 5b:dc:1f:68:23:d6:68:1d:fa:83:56:d5:80:77:e3:12:db:5b: a0:64:84:4e:75:11:d4:07:ee:0d:f1:0e:10:76:84:06:8a:46: 3c:f5:f5:e2:79:e2:d0:6d:15:99:0a:10:00:06:39:51:e6:5b: e8:52:00:ef:90:c0:64:99:5e:43:0e:2a:48:e9:7d:8d:f9:03: d4:c4:2e:f7:59:04:4d:5d:f8:3f:52:1d:d0:63:f5:97:66:64: 08:75:8c:ff:86:e0:d3:33:28:29:9c:f5:bf:96:6a:be:54:08: eb:48:6a:1e:74:50:47:af:3b:bf:21:b7:8d:2c:77:74:d4:c9: 90:38:30:1a:f9:bb:86:b1:6b:32:36:4a:c4:ca:d4:1a:23:c7: 09:6f:91:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKDJDN0I1RDg0NzIwMDNDRjM0MzZBQ0ZFNUI2MUU4OUVD OEIxQUQ4QUIwHhcNMjYwMzI0MTkwMTAzWhcNMjYwMzMxMTkwMTAzWjAYMRYwFAYD VQQDEw02OWMyZGY2Zi02M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMs/LIaZMzC9ZzMFRlFsjHHiNYqG7wEWjgfplYMFCliBpVnT44WIWpbyuApX BWKfio6fcoOpPjlQCwg7A1CXCAIMf6SrmfCliP91tkvYabac/PHDjQxZhbWK/6jM DoeWwgFCvIgWkAuWd6h8Aeyc2s+1AQexKWOYmkx1l/WGqL9jWMDW1GCzObB6z3Vd 2DYExLV9vJDAztHRPt7FYz0gyghtg4GrU8pZlKmChjQyPqubrOyjnJWtysNiWFt3 uUY9uSIUWf1Etl/aPEqjLLs4+7+7q5+MH+vb6SEiE0e5je+nosEzLbN//lIiUZjt LFELDIuiERhV3Ek3xyWTgkb6lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzFK/W8 fborCrTKmEwP6AkydLs8MB8GA1UdIwQYMBaAFCx7XYRyADzzQ2rP5bYeieyLGtir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS80RTExRjRENjcx OTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQTkRhc19sdGg2SjdJc2Ey S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS80RTExRjRENjcxOTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQ TkRhc19sdGg2SjdJc2EyS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6bUE4KNrDvbJTfRa9C1yddzOGAeogWbBROgZnVGyJIeRjhdiOgxuvQ0532y ASWXrpOaPOAgurHsCGl1dM8mIlKx2BR7JdCBt1IjQ3ByQJiOW24iw4C6ZEQ/82vt R8jB6UC3pW2KH+qj7cwBW9wfaCPWaB36g1bVgHfjEttboGSETnUR1AfuDfEOEHaE BopGPPX14nni0G0VmQoQAAY5UeZb6FIA75DAZJleQw4qSOl9jfkD1MQu91kETV34 P1Id0GP1l2ZkCHWM/4bg0zMoKZz1v5ZqvlQI60hqHnRQR687vyG3jSx3dNTJkDgw Gvm7hrFrMjZKxMrUGiPHCW+Rqg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:30 2026 by rpki-client