$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: TUP4yawHepoMeVOkNHqiVloAwqeLxe9NGQykUBcqCu0= Subject key identifier: FB:8F:DA:E6:57:B0:BB:20:5B:B3:D5:01:F9:99:48:EE:A0:FB:35:BE Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 021D Signing time: Wed 25 Mar 2026 02:20:09 +0000 Manifest this update: Wed 25 Mar 2026 02:20:08 +0000 Manifest next update: Wed 01 Apr 2026 02:20:08 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: aN8HxcctaABV2laHUg3azhLOZjWHtkeVORj+Iwq3p+E=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ikN5tRwLqDlsCqslEfbzVnOUPYHIszI42NOtjTWTVog=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: l+wLTHIqrekcKTj0QKuQF0Rx57+DsEFBlDvziPYrkC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Mar 25 02:20:08 2026 GMT Not After : Apr 1 02:20:08 2026 GMT Subject: CN=69c34659-9f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:96:02:01:2f:4e:04:04:e3:21:c4:59:ff: d8:e7:c0:9f:35:a6:72:05:b1:3d:6a:de:86:db:69: 38:dd:3d:4f:6c:28:a9:1a:55:1a:41:b9:77:f6:f0: 8d:ff:5a:c2:a1:16:2d:2f:3a:33:ed:80:59:c7:7b: 3f:9d:ea:a6:33:92:73:6b:c4:ee:9e:75:74:92:37: 2d:89:bf:d5:e2:50:2a:19:2e:56:cc:d1:1b:50:c5: f8:3d:8a:ff:8e:4a:05:43:75:b1:70:d0:78:8e:f2: 1c:b6:41:51:de:14:50:39:da:7e:51:a6:d2:15:fd: 48:2f:63:d6:d4:c0:27:b3:f2:73:39:e8:df:19:4e: e6:00:39:cb:9e:02:38:c3:cf:0e:fe:b7:6d:c7:29: 0a:0d:6c:df:1a:a7:29:c9:6e:96:b9:e3:8b:7a:c1: 9c:f3:49:ae:db:01:55:16:0a:05:bc:fd:60:ae:3b: 14:0b:62:65:3b:0f:68:ac:01:71:d9:fb:66:e2:21: 69:68:7b:1b:3a:be:01:4f:82:40:27:1f:e0:e7:42: b0:ef:b6:bf:6c:4d:d5:70:26:b9:d2:0a:12:28:ae: f9:da:24:eb:f4:b8:b8:b6:af:08:ac:c2:7b:13:f9: 45:d4:14:3c:7b:9f:08:60:f7:90:55:96:4e:6f:69: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:DA:E6:57:B0:BB:20:5B:B3:D5:01:F9:99:48:EE:A0:FB:35:BE X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:39:34:75:e9:f1:d9:b6:bb:46:ab:93:08:18:3f:df:f4:00: 9a:24:99:67:ec:0d:35:2d:06:dc:4e:68:cd:d5:88:8b:0a:48: 27:34:c8:ea:4f:fd:23:14:25:fd:c1:16:cb:37:18:eb:12:15: 48:3e:12:41:5d:26:13:7f:2e:1f:b2:47:ae:43:33:80:ab:07: 1c:59:18:2b:74:19:7a:eb:b1:c3:fe:ce:43:97:dc:e4:62:41: 95:6c:ec:dd:6e:00:07:f6:db:45:6d:4c:57:c5:43:5e:82:0a: 39:12:b8:58:58:ec:82:03:29:fa:f9:b5:75:06:92:16:a1:8f: b7:ca:ee:96:71:7c:6b:33:91:34:d5:d9:f9:b4:04:d5:54:ac: 6c:82:fd:e0:c6:d7:b3:1d:f6:af:d6:22:c6:88:ee:b4:b9:81: 08:1a:67:e4:bf:66:54:8c:5f:63:79:69:59:de:ed:c7:d5:e9: f5:39:50:41:53:cb:25:c5:83:a0:82:e5:15:db:b3:81:c0:79: 0e:6e:69:e0:71:c5:2a:c6:99:49:ff:66:4b:0d:b6:d8:85:56: c5:7f:51:0f:20:a9:c6:35:fc:00:20:a3:50:99:a9:57:b2:29: e2:44:e0:9f:04:ac:da:fe:5c:db:02:13:05:69:7d:84:ad:92: 74:aa:a0:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjYwMzI1MDIyMDA4WhcNMjYwNDAxMDIyMDA4WjAYMRYwFAYD VQQDEw02OWMzNDY1OS05ZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNaWAgEvTgQE4yHEWf/Y58CfNaZyBbE9at6G22k43T1PbCipGlUaQbl39vCN /1rCoRYtLzoz7YBZx3s/neqmM5Jza8TunnV0kjctib/V4lAqGS5WzNEbUMX4PYr/ jkoFQ3WxcNB4jvIctkFR3hRQOdp+UabSFf1IL2PW1MAns/JzOejfGU7mADnLngI4 w88O/rdtxykKDWzfGqcpyW6WueOLesGc80mu2wFVFgoFvP1grjsUC2JlOw9orAFx 2ftm4iFpaHsbOr4BT4JAJx/g50Kw77a/bE3VcCa50goSKK752iTr9Li4tq8IrMJ7 E/lF1BQ8e58IYPeQVZZOb2nkxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuP2uZX sLsgW7PVAfmZSO6g+zW+MB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApDk0denx2ba7RquTCBg/3/QAmiSZZ+wNNS0G3E5ozdWIiwpIJzTI6k/9IxQl /cEWyzcY6xIVSD4SQV0mE38uH7JHrkMzgKsHHFkYK3QZeuuxw/7OQ5fc5GJBlWzs 3W4AB/bbRW1MV8VDXoIKORK4WFjsggMp+vm1dQaSFqGPt8rulnF8azORNNXZ+bQE 1VSsbIL94MbXsx32r9YixojutLmBCBpn5L9mVIxfY3lpWd7tx9Xp9TlQQVPLJcWD oILlFduzgcB5Dm5p4HHFKsaZSf9mSw222IVWxX9RDyCpxjX8ACCjUJmpV7Ip4kTg nwSs2v5c2wITBWl9hK2SdKqg4w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:49 2026 by rpki-client