$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json) Hash identifier: 3xH/tCH9UXqnJa5aWajH/fgEUU9lQSXwTLz3Hkhu5vc= Subject key identifier: 16:4A:3A:04:9D:A4:27:04:38:72:50:C4:D7:A5:59:AF:B8:30:BC:55 Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft Manifest number: 024B Signing time: Wed 25 Mar 2026 01:50:13 +0000 Manifest this update: Wed 25 Mar 2026 01:50:13 +0000 Manifest next update: Wed 01 Apr 2026 01:50:13 +0000 Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: GX6b3GcGpCGlD+VcCq68ELszoRXjic82Wbdzng5RPRI=) 2: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: WmBY6H2Pxb5MPx5KAzZ8boIEzNFVP9GdLcZ09Lb1yaU=) 3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: NL0jQJ7rLtLZWjCp8BXBJTX2QdcLzvQo49oQ+wque98=) 4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: NpxyDYgZgt6C5E4ll2xjCVcUh5jIelMwBSZZdnJdQJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Validity Not Before: Mar 25 01:50:13 2026 GMT Not After : Apr 1 01:50:13 2026 GMT Subject: CN=69c33f55-c1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:8d:ad:c8:67:b5:45:77:0d:49:b8:40:5e: 4a:1a:f9:97:cb:f4:f7:4d:3a:c6:d1:f7:06:fa:82: 9f:65:d7:8a:49:7c:15:68:53:4e:8f:55:2f:68:81: 70:e5:b8:be:8d:90:79:b6:06:0c:ae:d9:4d:0d:a0: 7a:60:0c:7b:8f:8c:b7:eb:51:94:c6:8a:5c:4c:88: c8:dd:ed:8f:3f:cc:69:e5:90:42:3a:5c:76:d5:96: 17:1f:5b:3c:9b:6c:de:36:69:ea:4d:db:a9:a2:91: 07:c7:6b:07:19:b5:8b:77:f6:d5:30:18:b1:57:79: 59:1b:ef:e0:d2:5a:b7:22:a2:cb:8f:36:53:11:07: 21:1b:d5:34:0d:f2:de:10:b8:b4:6e:83:a6:91:ff: 0a:9c:66:a3:82:bb:53:32:95:81:ab:a5:db:48:b8: 60:68:85:49:e4:01:79:94:a9:f5:01:5d:8a:72:74: 48:e0:e0:bf:a8:27:d9:0e:77:c2:f9:18:5c:70:41: 53:af:5b:00:d0:77:75:1e:65:ae:68:c9:7e:5e:d7: 8c:18:09:c4:c3:65:80:52:b9:11:1d:6e:2a:68:4e: ac:d6:96:ff:ff:2e:0f:1f:3c:b1:10:23:0e:8c:69: 89:78:b2:2d:be:56:c5:19:66:a2:a8:b6:fc:07:fb: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4A:3A:04:9D:A4:27:04:38:72:50:C4:D7:A5:59:AF:B8:30:BC:55 X509v3 Authority Key Identifier: keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:89:49:61:0b:03:54:9d:28:83:47:a3:37:54:ad:40:5b:fd: 8d:09:8b:f6:0f:0e:9b:da:8e:af:a8:14:76:d2:ed:c7:7d:be: 7a:bf:9d:ec:8c:b5:0c:18:e9:a0:f3:7d:ee:0b:12:32:d5:25: 2b:fd:5e:a0:f9:86:d9:33:3e:38:17:6d:5f:d5:2b:00:2d:c4: 72:3d:77:3f:8a:96:86:a5:3e:49:8c:bb:47:f1:13:dc:b5:b0: d1:9d:e3:49:b9:42:34:2a:81:9a:1e:d0:a5:b9:9f:8c:ef:be: bb:4a:41:e4:06:7d:4a:d7:9c:7c:e2:6a:e4:31:f5:65:bb:84: a1:98:2c:0a:1c:44:3b:74:8e:9f:ab:82:67:71:96:b1:f3:2b: 83:f6:ed:ba:fb:de:c5:e4:b2:1e:b7:d6:4c:4d:78:73:29:8e: 9c:52:79:13:6a:98:01:57:e6:eb:84:37:3e:aa:f6:d1:15:04: 4c:1c:e8:ff:88:43:bc:22:36:93:04:b1:11:11:e4:e6:dc:4f: 2a:46:d7:48:e8:1b:bc:8e:b6:62:be:cc:dc:bf:a9:cd:16:57: 90:ba:fa:d3:0d:3d:77:6c:5c:e6:f3:05:3a:3c:51:95:2d:b4: 4e:c4:17:79:c8:4c:40:e6:52:b3:79:fa:aa:3d:c6:a7:11:ee: 33:df:d1:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG QkVGQTVDRDAwHhcNMjYwMzI1MDE1MDEzWhcNMjYwNDAxMDE1MDEzWjAYMRYwFAYD VQQDEw02OWMzM2Y1NS1jMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybCNrchntUV3DUm4QF5KGvmXy/T3TTrG0fcG+oKfZdeKSXwVaFNOj1UvaIFw 5bi+jZB5tgYMrtlNDaB6YAx7j4y361GUxopcTIjI3e2PP8xp5ZBCOlx21ZYXH1s8 m2zeNmnqTdupopEHx2sHGbWLd/bVMBixV3lZG+/g0lq3IqLLjzZTEQchG9U0DfLe ELi0boOmkf8KnGajgrtTMpWBq6XbSLhgaIVJ5AF5lKn1AV2KcnRI4OC/qCfZDnfC +RhccEFTr1sA0Hd1HmWuaMl+XteMGAnEw2WAUrkRHW4qaE6s1pb//y4PHzyxECMO jGmJeLItvlbFGWaiqLb8B/vyiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZKOgSd pCcEOHJQxNelWa+4MLxVMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1 RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz NzlzVGgtTUw3RF83NzZYTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX4lJYQsDVJ0og0ejN1StQFv9jQmL9g8Om9qOr6gUdtLtx32+er+d7Iy1DBjp oPN97gsSMtUlK/1eoPmG2TM+OBdtX9UrAC3Ecj13P4qWhqU+SYy7R/ET3LWw0Z3j SblCNCqBmh7QpbmfjO++u0pB5AZ9StecfOJq5DH1ZbuEoZgsChxEO3SOn6uCZ3GW sfMrg/btuvvexeSyHrfWTE14cymOnFJ5E2qYAVfm64Q3Pqr20RUETBzo/4hDvCI2 kwSxERHk5txPKkbXSOgbvI62Yr7M3L+pzRZXkLr60w09d2xc5vMFOjxRlS20TsQX echMQOZSs3n6qj3GpxHuM9/RxA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:13 2026 by rpki-client