$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: GuszLMcrFbBRsyspb+N/7dZohpH3LrSYicpmFS/GF0Q= Subject key identifier: 1E:F1:5E:6C:2A:BE:2D:73:98:14:E3:F2:28:57:8C:63:40:DD:A5:56 Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: 9F Signing time: Tue 03 Mar 2026 06:54:06 +0000 Manifest this update: Tue 03 Mar 2026 06:54:06 +0000 Manifest next update: Tue 10 Mar 2026 06:54:06 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: v2zfzJkWbDfHUGHy4upfeY1yeP4Wdv8LoqoJu4CBPB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Mar 3 06:54:06 2026 GMT Not After : Mar 10 06:54:06 2026 GMT Subject: CN=69a6858e-cffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:52:c2:06:7c:c3:fc:b0:da:f0:92:72:f8: a1:08:59:1a:19:c7:62:54:e9:ab:eb:68:a4:e3:9f: 90:14:7f:6a:aa:30:c6:50:a9:f2:11:ba:8d:1b:c0: f3:08:37:76:82:79:b5:43:58:29:ea:b4:8b:99:51: 9b:cc:27:ce:84:2d:c0:81:77:94:52:67:86:2e:07: dc:47:0a:b2:de:eb:4f:78:86:81:db:14:ad:87:8b: 4c:f4:4c:9f:78:bd:7a:7c:60:b4:64:dc:5a:c5:a9: 23:ad:c4:05:7d:1e:ab:4f:a2:ad:3d:fd:51:c7:21: 8f:0b:a0:c3:50:ae:13:b7:ac:ee:7c:34:fe:48:92: b8:af:47:94:01:8a:4a:f7:54:fc:1a:44:a9:39:17: 69:b5:9c:ff:d7:78:9f:48:ea:5d:2d:12:db:16:89: eb:98:3c:62:71:5d:16:bc:d0:1d:55:84:6b:bd:21: 7c:67:e5:1e:58:22:8b:4d:f7:ef:bc:56:ca:4e:c0: 7f:f9:09:d9:98:80:3f:b6:a6:93:99:99:f7:31:8e: 43:87:18:0f:cc:4a:25:6f:da:58:fa:5b:74:6d:a8: 8d:1f:d7:a4:bb:b2:4a:9e:15:59:d6:2e:49:e7:12: 93:fe:ab:e8:de:dc:53:e7:08:bf:e5:a0:ad:61:43: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F1:5E:6C:2A:BE:2D:73:98:14:E3:F2:28:57:8C:63:40:DD:A5:56 X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:19:59:d5:9c:fc:d3:69:58:fb:c5:08:b7:e6:00:b7:4b:52: c4:cb:bc:07:6c:bf:26:f8:4c:75:18:42:7a:73:37:aa:59:95: d2:57:18:56:ed:bc:35:07:fe:a1:37:ae:65:d0:e8:66:50:f1: a3:44:52:78:91:13:dd:7a:fb:26:90:a2:6e:4d:1b:49:d1:e9: 68:72:55:ad:30:9d:0f:cc:ab:5d:eb:86:1e:53:d9:c4:c9:87: 5e:ea:c0:df:68:5e:f0:dc:bb:db:dc:55:fe:20:f7:16:9b:71: 7d:e0:1a:cc:34:81:bf:37:5c:2d:25:16:67:9d:fa:ea:6c:6f: 5c:bc:64:8b:6f:b8:c3:7c:65:79:00:cf:b8:fe:aa:84:30:3e: 17:5c:9e:13:eb:8c:0d:93:e4:06:c7:ed:4d:d9:d6:9c:51:d1: 30:6c:17:8c:21:d6:9b:b9:9d:b3:a4:40:73:5b:7e:85:b9:8c: 92:d8:9f:ff:bc:80:db:44:d3:06:ec:f9:22:8f:62:be:50:a5: 23:bb:f6:aa:06:ee:54:6b:14:7e:e0:71:62:89:c0:a8:fe:a9: 4f:85:62:fa:dc:71:e1:83:fd:45:1f:42:e1:5e:ca:c6:5a:93: 27:ab:7e:62:d9:6f:93:39:cf:a6:d9:8d:02:9c:ba:96:73:4e: 33:5b:56:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0NzYzMTFGMzc1 Q0Q4M0MwRDIwHhcNMjYwMzAzMDY1NDA2WhcNMjYwMzEwMDY1NDA2WjAYMRYwFAYD VQQDEw02OWE2ODU4ZS1jZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgxSwgZ8w/yw2vCScvihCFkaGcdiVOmr62ik45+QFH9qqjDGUKnyEbqNG8Dz CDd2gnm1Q1gp6rSLmVGbzCfOhC3AgXeUUmeGLgfcRwqy3utPeIaB2xSth4tM9Eyf eL16fGC0ZNxaxakjrcQFfR6rT6KtPf1RxyGPC6DDUK4Tt6zufDT+SJK4r0eUAYpK 91T8GkSpORdptZz/13ifSOpdLRLbFonrmDxicV0WvNAdVYRrvSF8Z+UeWCKLTffv vFbKTsB/+QnZmIA/tqaTmZn3MY5DhxgPzEolb9pY+lt0baiNH9eku7JKnhVZ1i5J 5xKT/qvo3txT5wi/5aCtYUPldQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7xXmwq vi1zmBTj8ihXjGNA3aVWMB8GA1UdIwQYMBaAFJZztczwqOpc5BouR2MR83XNg8DS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DMTkzOUNFNjI0 MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZsemtHaTVIWXhIemRjMkR3 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZs emtHaTVIWXhIemRjMkR3TkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJhlZ1Zz802lY+8UIt+YAt0tSxMu8B2y/JvhMdRhCenM3qlmV0lcYVu28NQf+ oTeuZdDoZlDxo0RSeJET3Xr7JpCibk0bSdHpaHJVrTCdD8yrXeuGHlPZxMmHXurA 32he8Ny729xV/iD3FptxfeAazDSBvzdcLSUWZ5366mxvXLxki2+4w3xleQDPuP6q hDA+F1yeE+uMDZPkBsftTdnWnFHRMGwXjCHWm7mds6RAc1t+hbmMktif/7yA20TT Buz5Io9ivlClI7v2qgbuVGsUfuBxYonAqP6pT4Vi+txx4YP9RR9C4V7KxlqTJ6t+ YtlvkznPptmNApy6lnNOM1tWkg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:42 2026 by rpki-client