$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: wXRrvRs+lnF4K5ebglyusczUvbu/1HL8RMQermL2h/Y= Subject key identifier: 39:CA:3C:14:81:4F:38:8D:88:9C:EF:17:85:38:A1:5B:03:85:7D:EB Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 07D8 Signing time: Thu 26 Mar 2026 21:10:06 +0000 Manifest this update: Thu 26 Mar 2026 21:10:06 +0000 Manifest next update: Thu 02 Apr 2026 21:10:06 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: OiOU66yZE2R7uOTE5/7s4P8YboxWgPWIJDc4zHKwH6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Mar 26 21:10:06 2026 GMT Not After : Apr 2 21:10:06 2026 GMT Subject: CN=69c5a0ae-0924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:b5:66:68:14:9b:46:49:b4:03:77:23:65: 2c:fe:7b:7f:10:aa:a3:5d:b2:50:03:dc:9f:8e:74: bb:1c:ea:cb:79:61:39:5f:d8:d7:13:03:2e:7f:4b: 99:ff:67:89:95:2b:1b:a9:f3:b2:31:89:ce:57:78: 5a:13:5c:51:0f:22:09:db:66:24:12:df:5a:c8:a3: a0:e8:b9:af:a0:54:4e:1d:f1:0e:a1:af:0c:fd:dd: 63:37:07:08:7a:63:b8:34:e5:3d:32:a9:e5:29:3e: 24:ae:0c:8c:54:8f:d6:53:28:52:8a:a7:4a:e6:06: c6:03:83:3d:55:0c:7e:78:fe:2b:c8:cc:72:f3:24: a1:0b:d5:65:96:22:28:dc:9d:4d:d4:c3:10:8a:96: 31:d6:1e:c4:e3:08:a6:0c:df:fb:b0:de:0d:66:57: d6:ae:fa:30:35:c4:c6:10:cb:bf:09:b9:bd:e8:1e: b3:bf:cc:35:a0:57:fc:4b:f4:03:64:dc:84:e1:ca: 38:03:f6:16:94:30:28:05:16:94:f2:97:b4:6f:e9: 4c:29:8d:f0:e2:1e:06:26:86:ba:e5:3c:d7:6b:8a: 85:f2:c9:ab:30:b4:41:03:e2:b1:b8:58:4a:18:59: 36:74:ad:88:52:86:0b:23:5b:53:7a:68:e9:e8:e7: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:3C:14:81:4F:38:8D:88:9C:EF:17:85:38:A1:5B:03:85:7D:EB X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3e:b8:be:39:72:81:cd:ef:5a:f2:6c:e1:50:09:a8:26:a4: 0f:35:11:d1:b1:a6:38:91:52:8d:9d:3b:46:d3:dd:95:4a:ef: f1:e1:f1:67:ab:97:a4:7b:f6:ca:51:0b:90:63:50:59:04:15: b6:7c:00:93:7e:f5:a1:7a:50:7c:b6:87:82:21:6c:3f:23:48: b1:8a:ac:5d:ee:21:d1:44:ad:11:2f:5e:32:2e:a0:b6:5e:e7: 96:61:8c:50:5e:e9:42:f3:3e:17:43:af:65:ca:cf:60:30:b5: 34:2a:11:c9:8d:12:8a:fc:10:e4:b5:bd:bb:56:17:11:7a:f1: 7f:4c:3c:5c:e9:45:eb:9a:13:83:d0:e3:21:98:e3:d9:9f:de: e5:93:79:03:36:cb:09:28:af:86:44:4a:77:65:66:bd:87:b5: 9c:a1:2f:00:74:c4:ff:43:84:dc:1f:8e:d2:ec:e2:ad:96:23: 93:f9:e1:ec:a8:a7:fc:a9:10:1b:bd:c4:3e:c8:02:c0:42:f2: 5f:5c:ab:b9:9f:fe:d6:e6:17:e0:b6:07:e6:41:37:b4:6f:76: c9:7f:d6:96:6e:ae:2c:0d:10:f9:c7:ce:c7:f3:bb:cc:45:54: 14:a7:7a:55:4d:ab:d1:94:3b:5d:90:95:ad:3e:24:7e:21:c4: 1b:d9:01:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjYwMzI2MjExMDA2WhcNMjYwNDAyMjExMDA2WjAYMRYwFAYD VQQDEw02OWM1YTBhZS0wOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1i1ZmgUm0ZJtAN3I2Us/nt/EKqjXbJQA9yfjnS7HOrLeWE5X9jXEwMuf0uZ /2eJlSsbqfOyMYnOV3haE1xRDyIJ22YkEt9ayKOg6LmvoFROHfEOoa8M/d1jNwcI emO4NOU9MqnlKT4krgyMVI/WUyhSiqdK5gbGA4M9VQx+eP4ryMxy8yShC9VlliIo 3J1N1MMQipYx1h7E4wimDN/7sN4NZlfWrvowNcTGEMu/Cbm96B6zv8w1oFf8S/QD ZNyE4co4A/YWlDAoBRaU8pe0b+lMKY3w4h4GJoa65TzXa4qF8smrMLRBA+KxuFhK GFk2dK2IUoYLI1tTemjp6OdlhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnKPBSB TziNiJzvF4U4oVsDhX3rMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMj64vjlygc3vWvJs4VAJqCakDzUR0bGmOJFSjZ07RtPdlUrv8eHxZ6uXpHv2 ylELkGNQWQQVtnwAk371oXpQfLaHgiFsPyNIsYqsXe4h0UStES9eMi6gtl7nlmGM UF7pQvM+F0OvZcrPYDC1NCoRyY0SivwQ5LW9u1YXEXrxf0w8XOlF65oTg9DjIZjj 2Z/e5ZN5AzbLCSivhkRKd2VmvYe1nKEvAHTE/0OE3B+O0uzirZYjk/nh7Kin/KkQ G73EPsgCwELyX1yruZ/+1uYX4LYH5kE3tG92yX/Wlm6uLA0Q+cfOx/O7zEVUFKd6 VU2r0ZQ7XZCVrT4kfiHEG9kBjg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:21:09 2026 by rpki-client