$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: tjqNiflTp8dwz3QIi/cetgz+TI51MblqLlXehFhuqc4= Subject key identifier: EE:84:39:43:39:A1:AF:57:E9:EC:95:B3:E9:5C:88:2E:8D:A6:F9:4F Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 02C0 Signing time: Wed 25 Mar 2026 01:03:08 +0000 Manifest this update: Wed 25 Mar 2026 01:03:07 +0000 Manifest next update: Wed 01 Apr 2026 01:03:07 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: QUE8LDlQJ7zr62wJt7MuSCSTkDD4GbDz9pz1VjSa5nU=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: UPDUd4t5zx8UFYbNLzFGnvRhyMjEHl7Tb9rUHZFXp40=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 7/ANmUusyhHaIQ0U3dh4piILL1EQvQjyTLSsoXWQ5XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Mar 25 01:03:07 2026 GMT Not After : Apr 1 01:03:07 2026 GMT Subject: CN=69c3344c-5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:a3:90:8c:4c:5f:8d:c4:fc:d1:15:e3:01: be:15:69:7e:30:7b:fb:35:20:d9:45:9e:49:ed:fa: 9e:71:4a:b5:7c:5e:7f:24:db:88:d9:c7:c2:fa:0e: da:12:83:1e:b2:11:18:45:52:9c:ac:b4:94:4f:5c: 4c:30:10:f0:52:23:95:e6:70:e8:fc:01:f3:f2:11: 3a:ef:4a:79:8e:98:78:d2:3e:e2:a8:a2:e8:3c:cb: d1:55:ed:48:ce:72:e9:fb:ee:da:61:37:fe:b0:dd: 28:09:d7:5c:6c:b2:1c:91:90:70:37:57:3c:70:6c: d1:e4:7d:83:65:e5:b4:32:ab:ec:ee:9f:65:5d:2a: 4d:62:e3:3c:43:ab:79:73:18:d2:a3:02:87:b7:0e: dc:c6:91:9a:97:fa:e6:12:31:5b:bb:75:76:f4:7e: d3:aa:b4:e5:a4:d0:80:6f:5e:68:29:99:6d:48:14: 9f:51:ee:92:e8:ca:f3:86:21:25:46:9a:81:97:1f: 7d:2e:66:2b:0e:bb:42:a2:81:37:18:ba:bf:da:df: 6a:36:e3:72:b2:86:eb:77:a9:69:a1:04:50:e4:b3: 51:a0:9b:58:e5:6f:8c:01:22:6d:54:a6:b2:27:c7: 29:2c:cf:8b:ca:d0:15:b1:6b:60:9d:79:dc:c9:4b: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:84:39:43:39:A1:AF:57:E9:EC:95:B3:E9:5C:88:2E:8D:A6:F9:4F X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:c6:74:f8:d1:f1:e9:cd:a5:d3:9c:8f:cc:81:69:97:ba:e1: e0:69:d5:3e:94:44:7c:fb:c9:81:b0:8b:50:2c:8c:ed:43:b9: 7d:fd:ed:04:ca:79:55:3f:f3:29:da:fb:2a:e0:5e:27:25:91: cb:37:ea:80:b8:5f:54:2f:d7:59:7f:20:bc:ea:f3:ab:d1:d7: ee:be:6a:24:1b:61:bb:95:43:67:7a:de:60:8b:8c:32:d7:96: 70:62:bb:ff:d4:3c:65:78:5a:49:85:23:41:97:46:10:2e:3d: 5d:f4:48:4f:e0:87:fb:97:14:74:63:40:62:3a:47:e3:b7:95: e6:76:42:f6:26:68:da:11:68:c5:e3:7e:d2:6a:f7:9d:a5:8f: 7d:b3:2e:12:06:d7:78:06:68:4d:05:63:6f:f3:d6:70:ff:96: 5c:85:a9:ba:17:f0:b7:f4:89:27:65:c4:a9:9b:dc:da:cf:53: 56:3d:cb:af:cd:9e:a5:99:e8:3d:02:77:33:e9:33:6d:13:9f: ec:52:71:1a:4f:08:6a:4e:b1:71:e4:84:b1:33:9c:d1:99:c6: ee:03:55:9d:50:d2:a1:77:47:e4:71:33:21:7a:86:90:1a:44: 56:e2:16:3f:58:b8:3b:18:bc:50:de:b5:06:64:c3:15:ba:9f: bd:6d:27:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjYwMzI1MDEwMzA3WhcNMjYwNDAxMDEwMzA3WjAYMRYwFAYD VQQDEw02OWMzMzQ0Yy01YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteajkIxMX43E/NEV4wG+FWl+MHv7NSDZRZ5J7fqecUq1fF5/JNuI2cfC+g7a EoMeshEYRVKcrLSUT1xMMBDwUiOV5nDo/AHz8hE670p5jph40j7iqKLoPMvRVe1I znLp++7aYTf+sN0oCddcbLIckZBwN1c8cGzR5H2DZeW0Mqvs7p9lXSpNYuM8Q6t5 cxjSowKHtw7cxpGal/rmEjFbu3V29H7TqrTlpNCAb15oKZltSBSfUe6S6MrzhiEl RpqBlx99LmYrDrtCooE3GLq/2t9qNuNysobrd6lpoQRQ5LNRoJtY5W+MASJtVKay J8cpLM+LytAVsWtgnXncyUvmyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6EOUM5 oa9X6eyVs+lciC6NpvlPMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd8Z0+NHx6c2l05yPzIFpl7rh4GnVPpREfPvJgbCLUCyM7UO5ff3tBMp5VT/z Kdr7KuBeJyWRyzfqgLhfVC/XWX8gvOrzq9HX7r5qJBthu5VDZ3reYIuMMteWcGK7 /9Q8ZXhaSYUjQZdGEC49XfRIT+CH+5cUdGNAYjpH47eV5nZC9iZo2hFoxeN+0mr3 naWPfbMuEgbXeAZoTQVjb/PWcP+WXIWpuhfwt/SJJ2XEqZvc2s9TVj3Lr82epZno PQJ3M+kzbROf7FJxGk8Iak6xceSEsTOc0ZnG7gNVnVDSoXdH5HEzIXqGkBpEVuIW P1i4Oxi8UN61BmTDFbqfvW0njA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:56:03 2026 by rpki-client