$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: HUqpPMO4HYTFiy62mz/k7lixfVxLYtop6y6ipcfdRic= Subject key identifier: 04:46:6E:29:DC:EB:50:30:1E:23:7A:1D:17:3B:05:3E:7F:E1:E9:0D Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 3B Signing time: Tue 03 Mar 2026 08:12:58 +0000 Manifest this update: Tue 03 Mar 2026 08:12:58 +0000 Manifest next update: Tue 10 Mar 2026 08:12:58 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: Cke7I5YDBvEJFGBsvG8ZleOmi+3s40052nKRxR6SBcI=) 2: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: CmD1Hjq4sfRE9Mv41rm1funIPuK1g5FmHQfKUDMPpY0=) 3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: 0oflx8PpfYumWtaDNjRKvV2EgmoaxGKFDbpGgqR6stI=) 4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: 4qRFCjnxENmZCJsvaf8pCtTsmkbUQtbzT+9x0GNwtBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Mar 3 08:12:58 2026 GMT Not After : Mar 10 08:12:58 2026 GMT Subject: CN=69a6980a-b945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:21:6c:56:89:70:6b:bb:4d:c8:a4:38:50: af:05:1c:82:07:ce:5b:61:14:4b:00:32:8d:63:f6: 18:c6:e3:50:cc:1f:c8:93:56:a5:c9:33:8d:67:40: 6d:3b:30:4e:8a:54:de:ad:25:9f:f5:74:26:d2:45: 0f:37:17:36:52:f6:94:9a:12:6e:bd:30:b0:79:5a: db:ab:aa:29:08:5a:82:19:80:12:68:8b:36:da:c4: 0b:e7:c7:59:63:c3:d9:f9:04:f6:be:26:1f:9a:12: 62:01:6a:3d:87:33:9c:54:b8:42:a6:b2:e8:78:f3: bf:17:a3:57:b9:ca:f5:70:9c:c2:7f:7b:c5:82:c6: bf:6d:7b:f0:c0:73:97:3c:a7:18:9f:88:6c:05:4b: 00:7b:63:b7:56:3b:4b:c0:4e:3f:15:3d:ec:d2:49: a1:6d:49:87:da:03:5d:39:5e:9e:5b:f2:18:19:e8: 24:96:a7:06:4c:fc:cb:ee:97:99:c1:eb:b4:92:8f: ed:4d:6c:ea:54:29:c9:61:b1:63:21:7e:36:93:47: c7:a2:75:99:57:55:ff:7e:d3:9b:06:c1:e4:a9:cc: fb:80:db:be:33:64:09:be:80:18:90:c1:81:75:0d: 73:ee:e7:6a:d6:33:52:da:43:ec:74:da:f5:df:ba: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:46:6E:29:DC:EB:50:30:1E:23:7A:1D:17:3B:05:3E:7F:E1:E9:0D X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:14:a5:26:27:f4:9b:4d:61:02:c3:76:cc:95:c9:14:09:7f: cb:7b:d2:3b:37:4f:d5:5d:23:85:33:28:d8:a8:9d:34:d8:88: 37:cd:38:03:02:09:af:db:ae:2d:00:39:d4:dd:5e:32:5e:f0: 6a:cd:c7:d3:7a:08:6b:7b:d0:05:e0:96:68:6e:52:2d:b7:9e: be:3e:38:48:e4:1f:9b:7a:65:45:db:ca:8e:e1:28:da:c7:a2: b3:ea:6f:f5:df:12:dc:e0:fa:88:e1:dc:80:65:5a:f7:dc:c5: 5f:98:66:a0:cf:2c:b9:ef:7d:24:53:14:6b:85:3f:c1:7a:9b: 22:57:d5:c9:6d:7f:5d:c1:a1:f1:c9:48:d4:cd:15:44:32:85: 67:10:49:02:ce:87:24:d3:bd:f8:30:e5:87:c1:58:b2:45:84: 52:4d:cf:e1:12:ed:a4:ee:95:79:4d:d3:d7:38:39:bf:9a:a6: 0f:a6:50:94:b7:69:97:83:09:d6:ee:bd:f9:0a:17:55:b8:c4: f8:69:fb:b9:cd:df:bc:55:01:06:d2:41:e3:30:8a:c9:1d:ac: da:4d:1b:ca:4a:50:3f:05:83:f3:4a:d5:d5:7f:4b:8d:20:6b: 06:d0:34:0c:f5:f0:ea:36:82:0a:3d:a2:86:3f:31:b1:75:ad: 77:9e:a5:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNjAzMDMwODEyNThaFw0yNjAzMTAwODEyNThaMBgxFjAUBgNV BAMTDTY5YTY5ODBhLWI5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4SCFsVolwa7tNyKQ4UK8FHIIHzlthFEsAMo1j9hjG41DMH8iTVqXJM41nQG07 ME6KVN6tJZ/1dCbSRQ83FzZS9pSaEm69MLB5WturqikIWoIZgBJoizbaxAvnx1lj w9n5BPa+Jh+aEmIBaj2HM5xUuEKmsuh4878Xo1e5yvVwnMJ/e8WCxr9te/DAc5c8 pxifiGwFSwB7Y7dWO0vATj8VPezSSaFtSYfaA105Xp5b8hgZ6CSWpwZM/Mvul5nB 67SSj+1NbOpUKclhsWMhfjaTR8eidZlXVf9+05sGweSpzPuA274zZAm+gBiQwYF1 DXPu52rWM1LaQ+x02vXfuucTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBEZuKdzr UDAeI3odFzsFPn/h6Q0wHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAHFKUmJ/SbTWECw3bMlckUCX/Le9I7N0/VXSOFMyjYqJ002Ig3zTgDAgmv264t ADnU3V4yXvBqzcfTeghre9AF4JZoblItt56+PjhI5B+bemVF28qO4Sjax6Kz6m/1 3xLc4PqI4dyAZVr33MVfmGagzyy5730kUxRrhT/BepsiV9XJbX9dwaHxyUjUzRVE MoVnEEkCzock0734MOWHwViyRYRSTc/hEu2k7pV5TdPXODm/mqYPplCUt2mXgwnW 7r35ChdVuMT4afu5zd+8VQEG0kHjMIrJHazaTRvKSlA/BYPzStXVf0uNIGsG0DQM 9fDqNoIKPaKGPzGxda13nqVS -----END CERTIFICATE-----Generated at Wed Mar 4 15:39:26 2026 by rpki-client