$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: oHjUQzMbDZX11fUndOuwIW048WFXVvYTTj7kpQdr5Tk= Subject key identifier: DA:8E:82:9F:46:3A:7E:70:05:54:FC:D6:54:05:CF:83:77:A8:CC:D2 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: B0 Signing time: Fri 27 Mar 2026 06:42:48 +0000 Manifest this update: Fri 27 Mar 2026 06:42:48 +0000 Manifest next update: Fri 03 Apr 2026 06:42:48 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: ejXSaI7EF4j0z2IZE8gDnt42C8NLMBOVF2ZznK5ugKc=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: xXN9mX48NmFk2vcx7rwVXSG4y30L3OeYK6lw11JbwLA=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: e1py/Dvzt5ULhjodeT2xOCGPBlZKvYaIHOb5jKyG0BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 06:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Mar 27 06:42:48 2026 GMT Not After : Apr 3 06:42:48 2026 GMT Subject: CN=69c626e8-7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:03:68:8f:ea:50:72:33:fb:1c:a4:16:0b:18: bc:32:67:e4:1b:3d:cb:33:e5:3e:9a:29:fe:a4:ed: 49:4d:59:4c:ea:07:b6:01:93:a0:60:3e:a2:a7:5e: f6:99:fd:a7:ed:8c:14:58:55:af:ec:6d:d3:8c:bc: ca:6d:66:47:4e:5b:13:8d:f4:33:c4:74:ac:df:08: 6f:65:49:b6:88:eb:92:de:c4:22:7c:e9:be:a9:76: b6:23:e0:0d:b5:5b:b9:3b:c1:40:a7:ed:ea:4a:90: 24:e3:86:25:42:ce:26:df:2f:50:f9:e7:96:96:15: 1f:ef:6f:06:c0:d4:1f:75:6d:c6:db:b5:02:9e:2f: 6e:5c:89:99:72:6a:47:6e:32:f9:3c:64:12:9d:2d: 9f:d5:70:8e:fc:3d:8f:87:49:59:fd:a8:8f:51:42: 3a:f0:5e:6f:e1:02:f6:8e:05:ae:32:49:07:68:31: 0a:3a:e2:56:7c:e5:35:38:f9:dd:b0:dc:fd:87:e0: 98:11:27:c0:54:73:18:70:f6:ee:c3:7b:16:98:c3: 02:fb:05:1d:7d:6e:38:c2:76:34:b6:b5:e5:7b:3c: f8:ed:e9:bc:68:30:6e:18:8c:0c:98:d0:02:f9:e2: 4e:e0:43:ff:ae:dd:e3:ad:c5:d5:cd:21:23:10:8c: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:82:9F:46:3A:7E:70:05:54:FC:D6:54:05:CF:83:77:A8:CC:D2 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e1:ff:94:6c:a0:a1:77:f7:de:fe:73:d2:a9:a8:b1:98:25: 1d:a3:ad:98:84:33:f6:77:b3:ad:09:05:a5:d4:67:33:e1:7f: ac:a8:9f:9f:14:20:0b:35:d9:22:98:63:50:97:b9:36:ae:f7: 0d:9d:cc:55:aa:80:d9:9b:55:30:d4:ff:a1:63:19:8d:ea:64: 43:6b:71:ba:aa:55:22:32:c3:80:fd:f3:85:b7:46:f2:92:ce: b1:55:ea:95:93:c7:1b:81:28:eb:6f:c4:c3:52:68:64:a8:d0: 97:8e:ec:08:82:79:0a:8c:9f:25:f8:0a:fd:9b:90:26:a7:d2: 62:0d:d8:cd:87:c4:44:a9:d7:f7:44:ad:e6:25:27:95:52:78: 45:d0:5a:90:6f:9c:89:b9:de:bc:87:d7:bd:2b:a9:b1:cd:cb: d5:ba:31:46:d1:19:82:b9:af:bc:ca:2b:c1:fe:fc:1c:c9:5c: 5f:d1:86:61:51:48:80:dd:8f:d8:fd:bc:d9:12:90:0c:c2:5d: 09:7c:a5:76:ec:ae:fe:86:53:6d:0e:17:79:69:c6:d1:70:b5: 05:db:d3:69:6e:95:46:ce:b2:4d:cb:c0:30:3e:84:18:ff:32: 58:c1:d1:32:9a:88:35:87:64:ff:59:f8:bc:61:03:f5:d4:7d: 88:79:dd:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0 NjZDQzRCMEEwHhcNMjYwMzI3MDY0MjQ4WhcNMjYwNDAzMDY0MjQ4WjAYMRYwFAYD VQQDEw02OWM2MjZlOC03ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wNoj+pQcjP7HKQWCxi8MmfkGz3LM+U+min+pO1JTVlM6ge2AZOgYD6ip172 mf2n7YwUWFWv7G3TjLzKbWZHTlsTjfQzxHSs3whvZUm2iOuS3sQifOm+qXa2I+AN tVu5O8FAp+3qSpAk44YlQs4m3y9Q+eeWlhUf728GwNQfdW3G27UCni9uXImZcmpH bjL5PGQSnS2f1XCO/D2Ph0lZ/aiPUUI68F5v4QL2jgWuMkkHaDEKOuJWfOU1OPnd sNz9h+CYESfAVHMYcPbuw3sWmMMC+wUdfW44wnY0trXlezz47em8aDBuGIwMmNAC +eJO4EP/rt3jrcXVzSEjEIzYtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqOgp9G On5wBVT81lQFz4N3qMzSMB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1 RkVxbThMWmtOc3BHYk1Td28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFuH/lGygoXf33v5z0qmosZglHaOtmIQz9nezrQkFpdRnM+F/rKifnxQgCzXZ IphjUJe5Nq73DZ3MVaqA2ZtVMNT/oWMZjepkQ2txuqpVIjLDgP3zhbdG8pLOsVXq lZPHG4Eo62/Ew1JoZKjQl47sCIJ5CoyfJfgK/ZuQJqfSYg3YzYfERKnX90St5iUn lVJ4RdBakG+cibnevIfXvSupsc3L1boxRtEZgrmvvMorwf78HMlcX9GGYVFIgN2P 2P282RKQDMJdCXylduyu/oZTbQ4XeWnG0XC1BdvTaW6VRs6yTcvAMD6EGP8yWMHR MpqINYdk/1n4vGED9dR9iHnd+Q== -----END CERTIFICATE-----Generated at Sat Mar 28 10:22:34 2026 by rpki-client