$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: zva7mzuFuBRr5oJXrdskHSx7iNQnveRdE8esYiaS2ek= Subject key identifier: 72:E4:FD:8A:A1:0E:87:16:29:84:34:93:24:07:73:A0:9C:7E:6A:1F Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0CDE Signing time: Tue 24 Mar 2026 18:06:50 +0000 Manifest this update: Tue 24 Mar 2026 18:06:50 +0000 Manifest next update: Tue 31 Mar 2026 18:06:50 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: 0jqIKDS4glXMpWhUQNpwR5VONuGlMJRorM2fvbN1F+I=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Mar 24 18:06:50 2026 GMT Not After : Mar 31 18:06:50 2026 GMT Subject: CN=69c2d2ba-8c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:41:50:7c:f1:d8:69:67:4a:44:f7:01:19: 71:05:85:ac:28:32:c2:d5:b5:01:ae:9a:bb:d0:2a: f7:94:8d:55:89:7a:fa:d4:91:23:a5:7e:2d:6c:81: 85:29:aa:5b:63:a1:6f:a8:a9:88:04:ec:cc:88:4f: f7:e7:30:89:8d:2e:97:ad:7f:2e:76:f9:53:66:3a: 67:a6:36:7b:f9:ce:7c:74:3b:09:fc:ac:d1:90:0e: e8:5a:6a:c2:03:db:9e:25:8e:2a:9f:3b:d2:a3:20: 2b:0c:27:17:3f:f2:6f:1c:c0:f2:6c:62:12:5f:53: 4b:e3:42:87:56:6b:ab:7e:98:56:55:de:ba:3a:b9: 31:be:93:db:1a:25:6b:33:6a:88:05:28:3a:3b:0a: e1:df:a8:b1:49:0a:0f:a6:03:66:d9:3f:b8:fb:0a: aa:11:90:a0:d2:e6:0a:b1:50:c7:9e:30:64:ae:47: 0b:3e:61:bd:f6:44:74:5d:f9:84:00:e1:b2:9e:a1: 43:56:ac:3d:fa:89:18:70:5d:9b:56:fc:1a:11:10: 6c:d3:18:be:a0:6e:ab:c8:82:dc:82:39:89:fd:8d: 96:fd:9e:d7:19:79:60:ec:99:24:5e:bc:7a:0c:6a: a5:39:9e:e3:0c:02:20:b5:5f:e5:1c:60:4b:cb:eb: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E4:FD:8A:A1:0E:87:16:29:84:34:93:24:07:73:A0:9C:7E:6A:1F X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:9b:72:96:ff:05:ca:01:7a:54:f7:74:71:1d:a7:ab:cd:9e: 1f:e7:b2:95:71:9b:20:c9:3c:97:3e:9e:8c:46:fb:76:1c:6b: eb:27:ff:1c:6f:4a:9c:5d:ac:f2:64:af:f8:2b:19:4e:5d:e8: b3:42:4e:8f:cd:df:e6:ca:da:92:6d:b4:84:f7:d1:f6:a2:90: 6a:bb:87:59:e5:75:41:87:55:f9:8b:1e:a2:a0:aa:2d:d2:3d: 83:f6:3c:fe:49:dc:dc:3a:af:8b:95:f7:a3:7c:8a:d5:7d:f5: 54:80:82:97:8f:9a:3b:2e:86:b2:be:0a:35:d8:d7:ad:70:14: e9:5d:62:69:90:82:ed:73:94:af:c6:59:08:c8:cb:9e:6b:0c: dc:25:39:30:75:f9:4e:60:46:db:1b:4f:24:3f:5f:07:4b:13: 98:dc:cc:00:7b:1e:e9:e2:f0:f2:20:fb:fa:87:7b:11:20:fe: 00:38:92:82:6e:dd:70:a9:21:c8:9e:0f:c3:4a:47:0c:4b:4d: 12:96:83:aa:ad:fb:d0:66:99:59:18:a1:a6:1f:f4:ab:25:be: b8:e4:17:c1:c0:de:48:d1:6a:8b:9b:9c:9d:20:ce:67:ea:8f: d1:06:31:c8:ea:fd:fd:54:fd:be:3a:33:2f:c4:b6:38:24:43: 75:94:b1:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjYwMzI0MTgwNjUwWhcNMjYwMzMxMTgwNjUwWjAYMRYwFAYD VQQDEw02OWMyZDJiYS04YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArftBUHzx2GlnSkT3ARlxBYWsKDLC1bUBrpq70Cr3lI1ViXr61JEjpX4tbIGF KapbY6FvqKmIBOzMiE/35zCJjS6XrX8udvlTZjpnpjZ7+c58dDsJ/KzRkA7oWmrC A9ueJY4qnzvSoyArDCcXP/JvHMDybGISX1NL40KHVmurfphWVd66OrkxvpPbGiVr M2qIBSg6Owrh36ixSQoPpgNm2T+4+wqqEZCg0uYKsVDHnjBkrkcLPmG99kR0XfmE AOGynqFDVqw9+okYcF2bVvwaERBs0xi+oG6ryILcgjmJ/Y2W/Z7XGXlg7JkkXrx6 DGqlOZ7jDAIgtV/lHGBLy+sSVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLk/Yqh DocWKYQ0kyQHc6CcfmofMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyZtylv8FygF6VPd0cR2nq82eH+eylXGbIMk8lz6ejEb7dhxr6yf/HG9KnF2s 8mSv+CsZTl3os0JOj83f5srakm20hPfR9qKQaruHWeV1QYdV+YseoqCqLdI9g/Y8 /knc3Dqvi5X3o3yK1X31VICCl4+aOy6Gsr4KNdjXrXAU6V1iaZCC7XOUr8ZZCMjL nmsM3CU5MHX5TmBG2xtPJD9fB0sTmNzMAHse6eLw8iD7+od7ESD+ADiSgm7dcKkh yJ4Pw0pHDEtNEpaDqq370GaZWRihph/0qyW+uOQXwcDeSNFqi5ucnSDOZ+qP0QYx yOr9/VT9vjozL8S2OCRDdZSxwg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:44 2026 by rpki-client