$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: xK9lkmiZ8QP8Ob0y9WXg8b4wyoDfU0vEueiKwkbJcLs= Subject key identifier: 6D:A2:D8:B0:D4:E8:AB:40:2C:C9:4A:4C:9C:44:15:0B:F5:1F:41:BE Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 01E5 Signing time: Mon 02 Mar 2026 21:25:52 +0000 Manifest this update: Mon 02 Mar 2026 21:25:51 +0000 Manifest next update: Mon 09 Mar 2026 21:25:51 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: A3UZYlkcnn3NHkYuPNk3rppW3JZCvKZGc5a2B/Zzmnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 21:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Mar 2 21:25:51 2026 GMT Not After : Mar 9 21:25:51 2026 GMT Subject: CN=69a60060-a571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:7b:7a:7a:d8:5a:f8:ab:75:8b:09:f7:e6: 86:31:8c:fd:6e:89:53:e2:8d:05:2e:44:dd:ef:7e: 84:b2:ee:34:ee:2a:24:c6:cb:84:b7:e8:27:76:b3: 73:1e:fb:46:60:c1:88:09:f1:f0:05:bf:76:74:cf: 01:43:22:9b:c0:ed:14:c1:80:ad:10:06:f9:1c:13: d0:d5:9e:fd:24:0f:40:df:fe:89:d8:7e:7d:2e:f5: 7e:6d:20:11:cd:c4:d5:fb:bf:1b:53:95:60:b6:05: fc:f1:14:8e:b8:36:00:cc:a4:63:83:0f:cc:75:eb: aa:48:c7:13:0b:63:8a:9f:fb:6a:8b:69:4a:77:95: 9f:fa:60:53:c1:4a:78:68:19:cb:6b:18:d3:e4:6a: 27:0f:8b:78:e5:41:63:9b:62:1f:38:a1:dd:0b:2a: 9f:3a:ef:0e:cb:19:f7:71:4f:4b:5e:0b:fb:fd:ef: cd:f2:5a:78:2d:ee:f6:f2:6c:41:61:18:3f:6b:a9: 13:fe:9f:6f:39:31:7b:35:b3:5f:8f:2f:17:5e:c1: 5f:1d:8d:bb:3b:e7:22:01:08:16:31:41:e3:7a:fe: 01:9c:e6:09:fe:40:d7:9c:d4:1b:c4:09:98:16:49: 83:98:df:e1:1d:78:be:35:13:8d:19:b1:dd:33:a1: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A2:D8:B0:D4:E8:AB:40:2C:C9:4A:4C:9C:44:15:0B:F5:1F:41:BE X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:96:68:19:df:6b:8e:01:94:1f:b0:2a:b4:c1:f7:c5:af: b4:60:f3:79:e6:87:1c:54:03:9a:8c:32:9e:49:7a:bb:fe:54: e9:24:fd:6d:a5:ca:a2:d9:4f:f5:01:8c:c5:c8:7a:98:9b:9e: 80:f2:1a:a4:bb:f0:39:b9:ec:1f:80:8e:92:00:7b:4d:f4:b3: ec:85:e0:b9:17:d5:e7:38:2f:c7:e7:92:80:63:3c:b3:ba:e9: b0:08:cf:f6:09:12:66:b4:cd:c1:4f:4a:88:94:26:6a:10:54: 46:90:b5:58:74:62:05:87:c4:34:7e:fc:63:a1:53:41:ca:a4: e3:e5:75:a7:86:b3:b8:09:13:48:4b:a1:f9:2a:c3:67:16:06: 01:fe:23:bc:5b:2f:58:93:e7:95:7c:28:6a:9b:9a:30:de:89: 67:32:36:8b:82:98:c0:53:05:bf:33:30:0d:db:a3:65:70:83: 3e:c8:f6:14:3e:28:df:a0:c9:b2:58:40:ac:ed:da:7c:67:17: f1:93:25:71:df:2f:0c:be:35:11:35:d1:e9:be:68:e6:07:38: 48:42:3a:3d:0f:1c:92:fa:84:19:6a:11:73:86:06:db:47:96: 91:d2:84:3a:78:3f:dc:98:01:1b:64:a0:e4:35:6b:ac:6e:cc: e9:c0:5c:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjYwMzAyMjEyNTUxWhcNMjYwMzA5MjEyNTUxWjAYMRYwFAYD VQQDEw02OWE2MDA2MC1hNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBh7enrYWvirdYsJ9+aGMYz9bolT4o0FLkTd736Esu407iokxsuEt+gndrNz HvtGYMGICfHwBb92dM8BQyKbwO0UwYCtEAb5HBPQ1Z79JA9A3/6J2H59LvV+bSAR zcTV+78bU5VgtgX88RSOuDYAzKRjgw/MdeuqSMcTC2OKn/tqi2lKd5Wf+mBTwUp4 aBnLaxjT5GonD4t45UFjm2IfOKHdCyqfOu8Oyxn3cU9LXgv7/e/N8lp4Le728mxB YRg/a6kT/p9vOTF7NbNfjy8XXsFfHY27O+ciAQgWMUHjev4BnOYJ/kDXnNQbxAmY FkmDmN/hHXi+NRONGbHdM6FEOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2i2LDU 6KtALMlKTJxEFQv1H0G+MB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYceWaBnfa44BlB+wKrTB98WvtGDzeeaHHFQDmowynkl6u/5U6ST9baXKotlP 9QGMxch6mJuegPIapLvwObnsH4COkgB7TfSz7IXguRfV5zgvx+eSgGM8s7rpsAjP 9gkSZrTNwU9KiJQmahBURpC1WHRiBYfENH78Y6FTQcqk4+V1p4azuAkTSEuh+SrD ZxYGAf4jvFsvWJPnlXwoapuaMN6JZzI2i4KYwFMFvzMwDdujZXCDPsj2FD4o36DJ slhArO3afGcX8ZMlcd8vDL41ETXR6b5o5gc4SEI6PQ8ckvqEGWoRc4YG20eWkdKE Ong/3JgBG2Sg5DVrrG7M6cBclw== -----END CERTIFICATE-----Generated at Wed Mar 4 08:29:57 2026 by rpki-client