$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: vd790ehRcrf+oqDlPe4Y1XRSDAMNIbYx/gecUU2KYZ4= Subject key identifier: 0F:C9:BD:11:E8:E8:AE:B8:46:83:52:BC:31:91:CB:72:38:BA:D6:6A Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 09C2 Signing time: Wed 04 Mar 2026 19:42:06 +0000 Manifest this update: Wed 04 Mar 2026 19:42:06 +0000 Manifest next update: Wed 11 Mar 2026 19:42:06 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: JQK3byuhM3v2+IGhl/yXakxyNHOvYPonnaoz9X/w1pk=) 2: 570B25FA305111F0BED81784C4F9AE02.roa (hash: eZhzZi3CwVEnS9NlTLeYR4evm5a/vAmuDsYCinkgRxE=) 3: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: zlrAgbF9PZCaOlylJDdA6t0BFDUpb6RyPswUdUZ16EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 19:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Mar 4 19:42:06 2026 GMT Not After : Mar 11 19:42:06 2026 GMT Subject: CN=69a88b0e-2d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:da:ab:f4:b1:87:b1:24:bd:b5:d4:fc:64: 67:f0:f2:60:ce:85:45:ac:7b:43:be:0f:50:f6:fc: c2:7f:7c:d6:da:46:90:8c:1c:99:29:93:f8:9f:3a: 1a:a5:42:b2:35:c9:99:25:3c:05:83:ca:f1:2d:28: ff:ca:c9:65:e9:9c:dd:9a:43:20:d1:a1:e8:73:48: d6:c7:24:3c:67:83:00:40:d4:52:bc:05:09:1a:4f: 04:9b:92:39:6b:60:ef:7e:81:32:13:cf:a5:59:0b: 06:88:53:f0:f3:7d:f5:ef:df:07:14:c7:f5:35:9f: 7c:1a:5f:17:95:56:ec:51:4c:d2:5d:ad:38:81:bb: 66:47:d0:65:6b:88:b4:1b:cf:e8:f1:d7:6d:5d:f9: 97:4d:57:b3:8e:5a:90:70:71:4f:71:b2:3d:1e:39: 4f:39:b6:6b:b1:cf:0f:82:f3:4c:76:3b:ce:c7:a6: 7e:7d:e9:04:15:c9:44:07:c0:3e:a9:3a:e6:69:c3: 8e:72:d7:b4:9a:79:15:b7:52:12:3c:42:f3:a8:d5: a0:72:5b:ae:1f:e9:dd:02:ce:71:b2:12:61:54:90: 46:2d:35:7e:26:90:44:15:e0:11:4a:02:6c:bb:9c: 27:af:9d:9a:08:05:dc:c3:74:7e:f2:f3:8d:66:b6: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:BD:11:E8:E8:AE:B8:46:83:52:BC:31:91:CB:72:38:BA:D6:6A X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ca:d3:51:a6:e2:9b:7b:8d:35:13:08:81:fc:28:42:72:04: 17:45:97:83:0e:f7:eb:48:a7:2f:ef:d5:1d:97:8d:71:26:04: c5:46:da:e1:2a:a9:fb:cd:ea:03:3d:7c:e8:d8:60:ea:0b:34: f6:4a:bd:48:34:72:c8:72:4a:85:d8:f3:a7:e1:0b:73:90:52: 45:ae:e1:1a:86:a9:3b:b3:20:84:ca:5e:e8:79:7b:2f:29:d6: 5f:b8:06:bc:e9:92:6c:36:dc:39:b2:71:ee:91:4d:10:86:dc: b9:ab:37:89:b0:f2:03:6d:58:e7:de:04:45:83:1e:31:ee:7a: 7d:51:56:b1:e4:f2:ce:71:3a:16:30:4a:f0:af:ec:93:c6:78: 33:35:3d:80:f9:2a:27:68:7c:90:77:6f:5c:b0:e5:9c:69:87: 43:e7:4a:fe:3b:b1:86:be:c2:19:93:da:67:c7:dd:15:72:27: 25:6d:f2:64:7a:f3:0b:80:6e:29:75:c4:17:9f:7a:3f:bc:d4: e5:23:ce:40:fa:2b:35:3d:62:0d:40:27:24:43:c7:8f:cd:f5: 56:84:68:7a:b8:40:35:01:b3:6f:a5:92:3a:5b:06:5c:ca:49: 11:32:c5:b2:df:36:1a:1c:60:a1:df:c4:c5:b9:94:6c:51:4a: 9a:34:6a:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjYwMzA0MTk0MjA2WhcNMjYwMzExMTk0MjA2WjAYMRYwFAYD VQQDEw02OWE4OGIwZS0yZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22vaq/Sxh7EkvbXU/GRn8PJgzoVFrHtDvg9Q9vzCf3zW2kaQjByZKZP4nzoa pUKyNcmZJTwFg8rxLSj/ysll6ZzdmkMg0aHoc0jWxyQ8Z4MAQNRSvAUJGk8Em5I5 a2DvfoEyE8+lWQsGiFPw8331798HFMf1NZ98Gl8XlVbsUUzSXa04gbtmR9Bla4i0 G8/o8ddtXfmXTVezjlqQcHFPcbI9HjlPObZrsc8PgvNMdjvOx6Z+fekEFclEB8A+ qTrmacOOcte0mnkVt1ISPELzqNWgcluuH+ndAs5xshJhVJBGLTV+JpBEFeARSgJs u5wnr52aCAXcw3R+8vONZrZhxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/JvRHo 6K64RoNSvDGRy3I4utZqMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU8rTUabim3uNNRMIgfwoQnIEF0WXgw7360inL+/VHZeNcSYExUba4Sqp+83q Az186Nhg6gs09kq9SDRyyHJKhdjzp+ELc5BSRa7hGoapO7MghMpe6Hl7LynWX7gG vOmSbDbcObJx7pFNEIbcuas3ibDyA21Y594ERYMeMe56fVFWseTyznE6FjBK8K/s k8Z4MzU9gPkqJ2h8kHdvXLDlnGmHQ+dK/juxhr7CGZPaZ8fdFXInJW3yZHrzC4Bu KXXEF596P7zU5SPOQPorNT1iDUAnJEPHj831VoRoerhANQGzb6WSOlsGXMpJETLF st82Ghxgod/ExbmUbFFKmjRqQw== -----END CERTIFICATE-----Generated at Thu Mar 5 22:21:26 2026 by rpki-client