$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: +74IaFp4UNjHJxu3scBxqG2ihjmH08nMeXXRJmvxf5c= Subject key identifier: 6E:3A:CB:AA:B6:BE:DE:D6:C9:57:70:DD:2A:F1:55:1C:E9:24:D0:31 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0A36 Signing time: Tue 24 Mar 2026 19:31:01 +0000 Manifest this update: Tue 24 Mar 2026 19:31:01 +0000 Manifest next update: Tue 31 Mar 2026 19:31:01 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: LY/AHZgRMWCB9UdguqIpnOfWID/vucUre2D/i3mJWJQ=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: GNVMRmxpK7mVQconnlOE34cE3Vp+VynLXCF2Ha4Paq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Mar 24 19:31:01 2026 GMT Not After : Mar 31 19:31:01 2026 GMT Subject: CN=69c2e675-a40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:92:05:57:ff:b3:a8:5a:9b:46:4b:e9:74: 25:5e:15:4c:c1:7d:1a:e8:4c:5a:e2:e9:f9:0f:d6: 1c:be:eb:28:17:98:17:9a:e5:dd:92:7d:4b:f0:0d: e5:ec:f9:61:90:11:e6:c2:35:aa:86:5b:90:c1:09: 64:64:57:75:56:b5:79:5c:4f:2a:8d:08:39:c8:57: 2f:57:4d:4b:64:1e:16:34:d1:cd:a2:a0:e3:f0:32: 06:22:23:08:a2:76:8d:eb:87:43:04:7c:6a:65:ad: 92:8c:7e:44:cf:9e:b7:fc:b1:ec:2c:fc:bf:cb:58: af:85:2d:14:94:1a:f0:f1:2a:db:6a:4b:32:36:0a: 89:7b:c0:b3:7e:71:2c:62:90:cb:18:f2:ff:2f:bc: e8:02:9a:45:a3:aa:e5:ef:5f:0a:e7:25:92:90:97: 16:f3:67:b9:79:3d:50:17:c5:3b:d1:75:70:5b:7a: b6:86:ad:aa:28:54:17:b3:76:1a:3b:17:99:e1:41: c8:02:1c:43:83:d5:93:51:72:97:19:1e:4f:95:de: e0:8d:0b:db:bc:20:e8:87:23:1a:2a:15:dd:42:05: 81:51:8b:58:67:7e:18:24:31:54:ac:1f:c7:8c:93: fd:bd:c4:34:27:d5:2f:41:07:61:1a:16:19:c1:b3: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3A:CB:AA:B6:BE:DE:D6:C9:57:70:DD:2A:F1:55:1C:E9:24:D0:31 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:07:c4:52:d4:6d:38:8f:79:39:9d:a8:97:5c:85:6a:da:0d: bd:df:28:97:c8:e4:f0:b5:bf:05:b3:76:71:17:df:9c:c1:52: d9:83:fc:a3:1e:01:fc:fe:44:1a:28:47:00:36:a6:11:a3:4d: 22:78:91:a1:08:b4:b9:2b:1c:9f:3d:98:31:88:e3:96:11:3a: 0e:4d:d8:58:b8:39:4c:97:79:d2:a7:96:40:95:77:ac:ff:c9: 29:7f:0a:51:3c:97:67:18:73:bc:bd:3f:ce:ec:a5:71:80:f9: 93:7c:9f:24:27:5a:71:03:36:a0:a7:b9:fc:fd:59:41:75:13: 2d:b0:64:e8:55:e2:73:f3:54:f1:4a:85:99:94:d1:17:c0:2d: ac:d5:07:f1:ea:47:39:2c:2d:72:76:41:99:e5:5f:25:07:b8: 26:84:41:a7:d0:1b:bd:13:02:d1:8d:7c:ad:98:d2:ef:69:76: 79:72:8b:28:dd:ca:73:7c:06:c2:3c:8e:53:39:7b:41:7d:28: b4:06:49:88:11:1b:c8:67:f7:d7:b8:58:b4:9b:95:a9:55:40: ad:8d:36:50:8e:07:30:8d:6c:ce:2b:2d:68:41:de:90:7e:15: fa:94:22:40:8f:0b:b8:9b:c3:b5:f9:ea:dd:49:ce:f4:5b:e5: 90:8b:1a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjYwMzI0MTkzMTAxWhcNMjYwMzMxMTkzMTAxWjAYMRYwFAYD VQQDEw02OWMyZTY3NS1hNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoomSBVf/s6ham0ZL6XQlXhVMwX0a6Exa4un5D9YcvusoF5gXmuXdkn1L8A3l 7PlhkBHmwjWqhluQwQlkZFd1VrV5XE8qjQg5yFcvV01LZB4WNNHNoqDj8DIGIiMI onaN64dDBHxqZa2SjH5Ez563/LHsLPy/y1ivhS0UlBrw8SrbaksyNgqJe8CzfnEs YpDLGPL/L7zoAppFo6rl718K5yWSkJcW82e5eT1QF8U70XVwW3q2hq2qKFQXs3Ya OxeZ4UHIAhxDg9WTUXKXGR5Pld7gjQvbvCDohyMaKhXdQgWBUYtYZ34YJDFUrB/H jJP9vcQ0J9UvQQdhGhYZwbOdAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG46y6q2 vt7WyVdw3SrxVRzpJNAxMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApAfEUtRtOI95OZ2ol1yFatoNvd8ol8jk8LW/BbN2cRffnMFS2YP8ox4B/P5E GihHADamEaNNIniRoQi0uSscnz2YMYjjlhE6Dk3YWLg5TJd50qeWQJV3rP/JKX8K UTyXZxhzvL0/zuylcYD5k3yfJCdacQM2oKe5/P1ZQXUTLbBk6FXic/NU8UqFmZTR F8AtrNUH8epHOSwtcnZBmeVfJQe4JoRBp9AbvRMC0Y18rZjS72l2eXKLKN3Kc3wG wjyOUzl7QX0otAZJiBEbyGf317hYtJuVqVVArY02UI4HMI1szistaEHekH4V+pQi QI8LuJvDtfnq3UnO9FvlkIsaAA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:10 2026 by rpki-client