$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: 3/NWrkJOJTCIwfnfgXPgu+cjol2nDKMqUNRrMaj8KPw= Subject key identifier: D2:B2:61:A4:D0:F8:58:DE:EB:59:28:31:C2:F2:1B:52:65:45:85:4F Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0BB4 Signing time: Sun 08 Mar 2026 18:43:10 +0000 Manifest this update: Sun 08 Mar 2026 18:43:10 +0000 Manifest next update: Sun 15 Mar 2026 18:43:10 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 1C9HVuPHaAVJoAxgJfWDBErjp+qqK+/yba57OsvmA1k=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: nALmFx4QbD9mgsNW6j0fno4vQEX9hP6WHdbPbuXctXM=) 3: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: 7++VXIIQ/2BV1xHqCF3NwkqZGS7smz3wo59HOc5L1qA=) 4: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vQgKkU+QtQWKKcMm6jhL0g3J0MHWWdGeRCmjJbM/2vU=) 5: F62847A2177911F18F01239F253D8C67.roa (hash: JBeW1rdY6GlTOUqqMMum9prGSAeNYsK+P09Gd+alKfI=) 6: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: QNaa4w23l7Y82bTjgOsQxPiCwaFcnV0djxntPTBPsOg=) 7: F6A7E804177911F18F01239F253D8C67.roa (hash: Aqvsakafkw8x+1EMnuzVKvyQkhXbGYvngvcI/pmGvzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 18:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Mar 8 18:43:10 2026 GMT Not After : Mar 15 18:43:10 2026 GMT Subject: CN=69adc33e-8fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:e9:70:0a:b1:8c:c6:23:66:2d:45:77:4b: 6f:cb:19:81:d4:5c:e1:3c:59:7f:b3:d9:38:dc:56: 6e:52:c4:2f:4a:0a:31:0f:82:0a:a3:a8:4f:5c:7c: 64:31:9a:2e:8a:2e:43:18:28:dd:3b:c2:46:25:b5: f6:8c:5c:3a:1f:ed:fa:77:56:a1:ff:d9:cc:9d:b2: 2e:45:f3:b8:8a:ae:16:82:2e:0a:26:e1:1a:b7:13: 80:6c:6e:ac:69:9f:ab:a6:23:68:3e:7f:d3:59:0d: 7e:c9:e6:d9:6a:0d:41:93:2c:92:8a:24:4d:d1:8f: dd:ac:d8:89:98:5c:70:65:fe:13:80:85:06:02:38: fe:34:22:6c:8c:8f:fe:fd:9a:61:21:7c:c7:5b:00: 64:c0:5c:83:ac:bb:f3:d9:f8:a8:af:2c:d8:b6:5f: 65:cf:35:f1:52:53:99:38:57:5e:d4:2c:1b:44:e2: 19:af:1a:ce:3b:d5:38:ba:12:70:90:7b:6f:09:61: 92:55:f5:ad:29:d3:03:b9:67:d8:14:7c:b2:66:ad: 98:06:3a:54:7e:af:6b:53:f5:b2:48:f6:5d:30:c5: b3:99:c2:bd:ba:e3:da:9b:4c:a9:e0:b1:a2:46:43: a9:6a:b8:79:f2:28:d9:14:bd:77:4e:24:e7:7e:0c: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B2:61:A4:D0:F8:58:DE:EB:59:28:31:C2:F2:1B:52:65:45:85:4F X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b6:df:c2:f8:04:de:05:e7:be:bd:f2:04:f1:2d:f3:75:d0: 24:eb:39:3d:88:9d:1c:b0:b6:d0:60:a7:11:bb:5c:fc:4f:9f: da:f3:c0:43:1c:23:85:ac:b9:6a:24:ea:61:3f:ae:da:81:47: e7:67:ad:35:a6:59:42:1c:d3:ab:f4:25:b8:b6:df:9d:6d:d0: e8:a2:d5:f7:a4:fb:39:6a:df:fe:34:f3:3d:f7:31:83:b8:73: e5:be:d1:0b:dc:1e:00:8b:33:a8:81:12:69:4d:6c:21:39:9b: 78:a8:8f:e2:a4:04:44:2e:48:af:bf:98:d6:eb:54:77:0f:02: c8:fe:1f:d3:09:ec:95:72:20:e1:39:2f:4d:95:45:42:c1:9d: 9a:85:8a:ee:97:7e:b4:4a:e0:3b:42:47:af:d2:f5:4c:12:4c: bc:4d:19:f8:cc:55:b1:db:2f:77:f9:4f:21:96:ad:36:64:3a: 92:3b:82:3a:4e:05:cc:96:21:a5:61:a2:b0:4f:29:83:ef:89: 33:53:26:cf:a4:86:bc:20:3c:c9:fb:af:3d:96:74:73:49:3c: 40:e0:8f:7f:6c:4b:6c:9b:2f:23:4a:ba:f3:c7:ac:1e:86:fa: 50:3b:b5:f2:02:84:9b:33:b1:bb:4c:77:5d:7c:39:20:fe:cd: bb:c1:97:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwMzA4MTg0MzEwWhcNMjYwMzE1MTg0MzEwWjAYMRYwFAYD VQQDEw02OWFkYzMzZS04ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyHpcAqxjMYjZi1Fd0tvyxmB1FzhPFl/s9k43FZuUsQvSgoxD4IKo6hPXHxk MZouii5DGCjdO8JGJbX2jFw6H+36d1ah/9nMnbIuRfO4iq4Wgi4KJuEatxOAbG6s aZ+rpiNoPn/TWQ1+yebZag1BkyySiiRN0Y/drNiJmFxwZf4TgIUGAjj+NCJsjI/+ /ZphIXzHWwBkwFyDrLvz2fioryzYtl9lzzXxUlOZOFde1CwbROIZrxrOO9U4uhJw kHtvCWGSVfWtKdMDuWfYFHyyZq2YBjpUfq9rU/WySPZdMMWzmcK9uuPam0yp4LGi RkOparh58ijZFL13TiTnfgw9ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKyYaTQ +Fje61koMcLyG1JlRYVPMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQrbfwvgE3gXnvr3yBPEt83XQJOs5PYidHLC20GCnEbtc/E+f2vPAQxwjhay5 aiTqYT+u2oFH52etNaZZQhzTq/QluLbfnW3Q6KLV96T7OWrf/jTzPfcxg7hz5b7R C9weAIszqIESaU1sITmbeKiP4qQERC5Ir7+Y1utUdw8CyP4f0wnslXIg4TkvTZVF QsGdmoWK7pd+tErgO0JHr9L1TBJMvE0Z+MxVsdsvd/lPIZatNmQ6kjuCOk4FzJYh pWGisE8pg++JM1Mmz6SGvCA8yfuvPZZ0c0k8QOCPf2xLbJsvI0q688esHob6UDu1 8gKEmzOxu0x3XXw5IP7Nu8GXJQ== -----END CERTIFICATE-----Generated at Tue Mar 10 13:22:40 2026 by rpki-client