$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: mm7kG6KXFieOZjs54OrOC3+5iXDrEhXjpR7qzWUW0hs= Subject key identifier: D0:4C:3E:6D:72:D7:66:59:19:0D:46:8E:36:23:20:3C:FA:E8:FE:1E Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0A3C Signing time: Sat 04 Apr 2026 19:31:35 +0000 Manifest this update: Sat 04 Apr 2026 19:31:35 +0000 Manifest next update: Sat 11 Apr 2026 19:31:35 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: I11CXBdy8PV4d/B9Aw53z4z1qdNZfb+U8+WUDzA9j40=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: GNVMRmxpK7mVQconnlOE34cE3Vp+VynLXCF2Ha4Paq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Apr 4 19:31:35 2026 GMT Not After : Apr 11 19:31:35 2026 GMT Subject: CN=69d16717-5a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:2b:83:d1:77:57:b6:40:a8:77:6b:fc:1b: 18:ba:62:28:7e:91:77:b9:4d:83:ca:5e:44:08:9b: 7f:13:30:87:92:9c:90:ca:53:f7:30:0f:8d:e6:af: c3:c0:8b:99:54:08:d5:41:fd:86:01:dc:ca:c4:3b: 62:5c:89:75:53:aa:8a:37:e7:a3:41:d3:6b:34:3f: e2:80:57:90:9e:76:1e:41:94:4d:39:65:20:aa:af: 47:ab:8a:ce:b4:f9:b6:08:53:e6:cd:2f:a5:94:e4: 91:4c:ed:e7:67:97:b0:9f:28:c3:00:79:1b:a5:ef: 9d:ea:2f:b4:96:b7:eb:ff:ac:6c:3b:9c:7f:a1:d1: 54:6c:7c:db:cd:7c:81:a2:86:7c:7b:7e:d6:56:8e: 1d:ca:ea:62:20:07:c2:82:53:d9:81:88:3f:14:4f: b5:f5:5c:9d:ed:45:fa:53:a8:fd:e5:ed:2b:93:94: b1:19:6f:dd:d6:ca:ae:e3:88:91:9b:8e:59:6e:c7: b2:16:7e:3d:e9:c6:dd:7b:d9:8d:ae:09:49:ec:60: 54:9f:f7:0c:27:fe:08:28:ae:a9:c5:fd:0c:59:1a: fe:f4:80:b2:ad:a5:69:35:2d:87:fe:fd:d8:ea:24: 5e:4a:9d:87:5c:48:91:7f:f9:79:42:f3:fc:d8:a6: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4C:3E:6D:72:D7:66:59:19:0D:46:8E:36:23:20:3C:FA:E8:FE:1E X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:81:a8:13:aa:f4:01:00:7d:d1:03:7c:b7:0e:0b:75:31:38: cb:3e:7d:e5:cb:85:d5:57:ef:25:b6:1a:94:fe:2c:90:9a:99: 8f:13:55:85:eb:5d:09:3d:86:0f:8f:91:ac:fa:f0:ea:60:b4: fa:20:d4:13:60:e6:61:9b:d7:2f:56:ad:ce:69:12:9a:e2:86: af:26:25:d1:97:a0:8f:32:5d:0d:16:15:c1:de:81:c3:95:8b: 0d:d0:b0:f9:aa:ea:3f:94:f9:74:ef:c2:bf:45:52:0a:21:49: f0:5a:fd:03:86:98:64:1f:d0:20:18:e1:c3:a2:33:62:17:f2: 57:f8:5a:41:43:4c:51:0d:4f:2b:68:6d:3a:06:a8:21:37:90: 86:0e:8d:0b:a5:63:23:8f:0c:1c:7f:85:4f:7f:af:e3:65:25: 6c:9a:72:c7:fe:7d:16:e9:80:8e:17:40:7e:c2:32:5c:02:54: c5:ec:47:2f:f6:5f:2d:11:f3:28:12:49:c0:34:e5:a9:4e:46: e9:16:7d:bc:82:1e:c6:ab:5d:a9:a9:24:56:2f:ab:b2:c2:93: 55:00:b9:89:84:30:09:20:93:89:e9:4b:75:1a:0a:84:c2:74: b5:a5:90:09:72:b7:46:36:fa:b6:89:99:b0:e9:ab:74:8c:14: fc:35:af:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjYwNDA0MTkzMTM1WhcNMjYwNDExMTkzMTM1WjAYMRYwFAYD VQQDEw02OWQxNjcxNy01YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cMrg9F3V7ZAqHdr/BsYumIofpF3uU2Dyl5ECJt/EzCHkpyQylP3MA+N5q/D wIuZVAjVQf2GAdzKxDtiXIl1U6qKN+ejQdNrND/igFeQnnYeQZRNOWUgqq9Hq4rO tPm2CFPmzS+llOSRTO3nZ5ewnyjDAHkbpe+d6i+0lrfr/6xsO5x/odFUbHzbzXyB ooZ8e37WVo4dyupiIAfCglPZgYg/FE+19Vyd7UX6U6j95e0rk5SxGW/d1squ44iR m45ZbseyFn496cbde9mNrglJ7GBUn/cMJ/4IKK6pxf0MWRr+9ICyraVpNS2H/v3Y 6iReSp2HXEiRf/l5QvP82KaQGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBMPm1y 12ZZGQ1GjjYjIDz66P4eMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVYGoE6r0AQB90QN8tw4LdTE4yz595cuF1VfvJbYalP4skJqZjxNVhetdCT2G D4+RrPrw6mC0+iDUE2DmYZvXL1atzmkSmuKGryYl0ZegjzJdDRYVwd6Bw5WLDdCw +arqP5T5dO/Cv0VSCiFJ8Fr9A4aYZB/QIBjhw6IzYhfyV/haQUNMUQ1PK2htOgao ITeQhg6NC6VjI48MHH+FT3+v42UlbJpyx/59FumAjhdAfsIyXAJUxexHL/ZfLRHz KBJJwDTlqU5G6RZ9vIIexqtdqakkVi+rssKTVQC5iYQwCSCTielLdRoKhMJ0taWQ CXK3Rjb6tomZsOmrdIwU/DWvZQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:34 2026 by rpki-client