$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: dTj7dkcS3x/ce0RuHaosGR46JShBKf65OKHRacBlYSY= Subject key identifier: AE:96:34:6B:90:BB:7D:F3:D2:12:8B:74:BC:59:42:38:D1:37:F7:E6 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 0C Signing time: Wed 25 Mar 2026 08:21:02 +0000 Manifest this update: Wed 25 Mar 2026 08:21:01 +0000 Manifest next update: Wed 01 Apr 2026 08:21:01 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: ahRenb+mbW+M1hieiSmYsCGqEYlh+UZRSnY9kAlTS6Y=) 2: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: YICsi1o5Z1QCNa3raABk0vbNZqKDNF4/heN9D5mwTtc=) 3: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Mar 25 08:21:01 2026 GMT Not After : Apr 1 08:21:01 2026 GMT Subject: CN=69c39aee-8593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:6b:53:41:10:39:c3:83:d6:76:3f:0d:57: e5:20:93:87:71:e7:4a:d3:16:6a:cc:79:ea:fb:68: 97:84:81:79:b8:26:52:84:45:6d:c8:a3:75:46:d9: da:29:37:39:b1:66:bc:2a:8d:75:e8:c9:fe:ee:24: 4f:de:9f:a8:8f:0a:c4:ca:3b:61:6d:da:d8:96:9e: e1:80:44:1b:19:2b:7c:b4:e9:d9:15:c4:ba:63:98: 02:40:59:ba:de:30:03:c0:e4:32:74:8c:05:39:f3: 1b:21:8c:f8:08:58:cf:42:4a:33:30:55:ae:c0:4f: 09:31:74:aa:ce:d3:9d:ab:8e:43:c1:77:94:67:e9: c9:d2:70:ba:59:7f:bf:4f:e5:f3:86:db:b4:63:cb: 13:5e:ac:1a:29:da:b5:c7:cc:05:9b:70:2a:bf:35: b3:30:ae:2e:01:ac:21:73:b7:d6:be:21:04:c5:b8: 1b:00:d4:e8:60:04:ff:29:82:b4:f1:55:78:b9:2b: 42:7f:8a:37:d7:72:49:b6:15:fb:1a:9d:01:db:91: 18:27:21:36:f5:a8:9b:35:f1:c3:e5:c5:cf:0f:f9: ef:45:7a:3d:c5:9c:e5:cf:c8:f7:d1:e3:70:c3:5f: 20:9f:28:fc:f6:a7:1e:be:56:65:02:a2:98:f3:24: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:96:34:6B:90:BB:7D:F3:D2:12:8B:74:BC:59:42:38:D1:37:F7:E6 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cd:42:b2:ec:62:62:c3:2d:8a:69:72:0d:2b:96:3c:e9:12: 7d:5e:58:81:52:98:34:f4:5d:23:c8:79:30:b4:48:2f:79:ee: f3:eb:03:4b:8c:1e:a6:3d:98:0f:bc:a0:51:f5:55:60:a2:3d: 51:fc:3a:1d:88:db:28:e1:26:e7:12:c5:ca:87:eb:62:31:f2: 3a:ee:2c:8d:be:3d:5d:ae:2b:83:c4:95:c5:b3:f1:a5:c6:68: aa:04:e8:c6:35:49:f1:c7:e4:9c:0e:33:b2:cb:9c:6a:de:b9: 12:5a:d0:47:e6:6a:37:da:5f:30:a1:b9:a8:3e:07:b2:84:5d: a9:69:87:e6:48:7f:55:15:0a:c8:c9:cc:bf:66:0f:08:40:e8: 54:8b:a5:a8:2b:6f:85:b8:6b:c2:ee:82:21:33:ce:2d:bc:91: fe:9a:61:f4:79:6a:ed:4c:21:dd:31:18:88:8b:29:d6:54:79: bb:91:9f:27:f3:ad:73:26:e0:bd:46:bb:a9:da:7f:d3:64:a8: 08:05:2e:ed:83:d7:37:b6:ad:58:c1:83:c8:0f:c9:fc:80:d8: 58:21:8a:6e:65:d0:2c:33:9d:55:b2:a8:f6:2d:37:8b:fd:7d: 31:2e:98:3c:52:9b:f8:6f:ee:66:c0:91:29:c0:45:e1:7f:c6: d0:dd:fb:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjAzMjUwODIxMDFaFw0yNjA0MDEwODIxMDFaMBgxFjAUBgNV BAMTDTY5YzM5YWVlLTg1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClCGtTQRA5w4PWdj8NV+Ugk4dx50rTFmrMeer7aJeEgXm4JlKERW3Io3VG2dop NzmxZrwqjXXoyf7uJE/en6iPCsTKO2Ft2tiWnuGARBsZK3y06dkVxLpjmAJAWbre MAPA5DJ0jAU58xshjPgIWM9CSjMwVa7ATwkxdKrO052rjkPBd5Rn6cnScLpZf79P 5fOG27RjyxNerBop2rXHzAWbcCq/NbMwri4BrCFzt9a+IQTFuBsA1OhgBP8pgrTx VXi5K0J/ijfXckm2FfsanQHbkRgnITb1qJs18cPlxc8P+e9Fej3FnOXPyPfR43DD XyCfKPz2px6+VmUCopjzJKkTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrpY0a5C7 ffPSEot0vFlCONE39+YwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB/zUKy7GJiwy2KaXINK5Y86RJ9XliBUpg09F0jyHkwtEgvee7z6wNLjB6mPZgP vKBR9VVgoj1R/DodiNso4SbnEsXKh+tiMfI67iyNvj1driuDxJXFs/GlxmiqBOjG NUnxx+ScDjOyy5xq3rkSWtBH5mo32l8wobmoPgeyhF2paYfmSH9VFQrIycy/Zg8I QOhUi6WoK2+FuGvC7oIhM84tvJH+mmH0eWrtTCHdMRiIiynWVHm7kZ8n861zJuC9 Rrup2n/TZKgIBS7tg9c3tq1YwYPID8n8gNhYIYpuZdAsM51Vsqj2LTeL/X0xLpg8 Upv4b+5mwJEpwEXhf8bQ3fv8 -----END CERTIFICATE-----Generated at Thu Mar 26 07:05:17 2026 by rpki-client