$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: qNo01wmnImYRCiw0+p0cKcLK71awN8cIgzG8vKKtD/w= Subject key identifier: E9:24:CB:E9:40:C2:58:C4:D4:0C:82:65:BE:C7:9E:A7:27:8C:F0:54 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 034C Signing time: Sun 29 Mar 2026 00:58:27 +0000 Manifest this update: Sun 29 Mar 2026 00:58:26 +0000 Manifest next update: Sun 05 Apr 2026 00:58:26 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: DqOW4NOGnpOipoFaCYZqOGpqo77J+UqHJukRoGZu7rs=) 2: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: E7fRSEBOLv1Ini1ZezJ3o4e+j0VIouEQB2U+Yt1JiHk=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: mrc+cxs94exImU0Ktd+W0zTUefZVbMzpj2efZtfe1u4=) 4: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: L30iK7dh2UBoLwZCcS09NDV2Ski8+Dnjm3U61xlQdMU=) 5: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: dN1N9jOQ9lXo9nzVGcBV8aQYADLpe/fS4AN1ynKiNyM=) 6: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: sEyRt8mINjCRGw1GnqUNqLlYGgoMXd39x1kvAdkspPE=) 7: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: PvFqtplY41UVVf2R0ennX4p3dtRWDb3fEF8YqwmTnCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 00:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Mar 29 00:58:26 2026 GMT Not After : Apr 5 00:58:26 2026 GMT Subject: CN=69c87933-625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:7a:10:bb:3c:60:ba:1d:66:f6:e3:ca:3c: 81:55:28:df:1c:76:a2:df:f7:69:47:57:10:f6:4d: b4:6a:fe:44:ef:4c:53:49:e3:5c:10:ee:85:51:6b: a8:ba:5a:ad:df:1b:83:6f:92:a5:1b:2e:95:b3:f9: fe:da:37:cf:92:a7:4e:ec:fb:2a:4d:56:65:bb:43: b2:29:a1:e8:62:52:ef:7b:29:23:c0:3e:59:93:42: dc:55:4e:49:b4:9f:fd:07:e0:91:ef:76:bd:14:58: 1a:08:f3:75:b0:7b:96:4b:af:d0:70:14:2b:da:9d: 79:08:32:93:9f:05:1a:0a:00:a4:d9:42:d4:f1:13: 13:2f:04:c2:9c:5b:31:ac:6c:a1:24:2c:ba:96:76: 36:90:b0:1c:03:79:88:40:12:09:25:09:b4:b3:cc: a7:fc:fa:e7:a8:97:25:b0:26:6d:1c:82:0a:9a:88: 38:59:22:40:26:e4:d6:2b:68:63:d6:c3:91:70:04: 7c:79:69:19:17:23:c2:1c:76:41:ab:01:02:83:16: ed:c6:68:f3:f8:a4:b7:75:58:57:ca:bf:2c:00:a6: be:e8:c6:72:99:4a:d8:ce:d7:50:ae:fc:fa:b9:c8: f0:e5:1c:fb:91:e5:7f:17:93:1e:08:23:ea:48:bb: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:24:CB:E9:40:C2:58:C4:D4:0C:82:65:BE:C7:9E:A7:27:8C:F0:54 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:b4:3d:6c:c2:6c:ae:07:62:5b:83:dd:72:2e:7b:0d:fc: 68:44:b6:f0:06:1e:ec:a6:5f:b3:08:af:20:16:bb:9a:ed:11: 0f:88:84:84:df:a2:b0:aa:ca:c2:53:71:7a:67:ca:aa:c6:63: 35:53:fc:d7:06:aa:8b:fe:9d:10:81:ed:89:31:5f:9f:9f:ad: de:63:45:93:dc:20:b7:d1:76:60:5e:e1:d8:01:62:b6:3c:e1: 1f:4f:52:f2:88:bd:e7:82:14:fc:44:b1:35:27:11:5a:a7:cd: 8f:8d:e1:7b:cf:54:fd:e5:49:98:e2:c7:ba:f0:a9:38:d4:b4: 24:dc:fc:a8:2a:80:fc:9e:05:39:78:2e:d5:db:aa:b2:d7:2f: c9:54:ed:8f:93:cd:c3:d5:a5:c1:51:51:65:5f:25:99:06:3d: 5d:9e:b6:4f:21:36:47:59:36:fd:56:b0:44:b7:de:24:ad:66: f8:38:54:11:a7:bf:e8:08:41:c2:b9:db:9b:d1:91:fd:3f:e9: e8:75:cd:24:64:83:ae:82:4c:34:29:51:ca:87:31:39:54:92: bf:c4:5b:6a:4e:36:08:35:8c:c8:62:c8:39:b8:6b:0d:85:8d: 6b:62:86:18:da:3f:28:81:2c:68:7e:28:eb:27:6e:35:af:ff: 7e:c0:0a:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwMzI5MDA1ODI2WhcNMjYwNDA1MDA1ODI2WjAYMRYwFAYD VQQDEw02OWM4NzkzMy02MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjfp6ELs8YLodZvbjyjyBVSjfHHai3/dpR1cQ9k20av5E70xTSeNcEO6FUWuo ulqt3xuDb5KlGy6Vs/n+2jfPkqdO7PsqTVZlu0OyKaHoYlLveykjwD5Zk0LcVU5J tJ/9B+CR73a9FFgaCPN1sHuWS6/QcBQr2p15CDKTnwUaCgCk2ULU8RMTLwTCnFsx rGyhJCy6lnY2kLAcA3mIQBIJJQm0s8yn/PrnqJclsCZtHIIKmog4WSJAJuTWK2hj 1sORcAR8eWkZFyPCHHZBqwECgxbtxmjz+KS3dVhXyr8sAKa+6MZymUrYztdQrvz6 ucjw5Rz7keV/F5MeCCPqSLtp9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkky+lA wljE1AyCZb7HnqcnjPBUMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASse0PWzCbK4HYluD3XIuew38aES28AYe7KZfswivIBa7mu0RD4iEhN+isKrK wlNxemfKqsZjNVP81waqi/6dEIHtiTFfn5+t3mNFk9wgt9F2YF7h2AFitjzhH09S 8oi954IU/ESxNScRWqfNj43he89U/eVJmOLHuvCpONS0JNz8qCqA/J4FOXgu1duq stcvyVTtj5PNw9WlwVFRZV8lmQY9XZ62TyE2R1k2/VawRLfeJK1m+DhUEae/6AhB wrnbm9GR/T/p6HXNJGSDroJMNClRyocxOVSSv8Rbak42CDWMyGLIObhrDYWNa2KG GNo/KIEsaH4o6yduNa//fsAKVA== -----END CERTIFICATE-----Generated at Mon Mar 30 01:26:52 2026 by rpki-client