$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json) Hash identifier: 38nJu+fg7NVEAeYN5/kkYr+fZ+G2alcIhy3VyM1zvCg= Subject key identifier: 9A:58:5E:E8:6D:8D:05:97:72:EF:0F:66:0D:0E:7C:44:E6:71:B4:E6 Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft Manifest number: 024D Signing time: Sun 29 Mar 2026 02:07:50 +0000 Manifest this update: Sun 29 Mar 2026 02:07:49 +0000 Manifest next update: Sun 05 Apr 2026 02:07:49 +0000 Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: AhxLfh+CqQUXERhjIKmBwaFDWSd8gH1keOIcZcRcmc4=) 2: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: NL0jQJ7rLtLZWjCp8BXBJTX2QdcLzvQo49oQ+wque98=) 3: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: WmBY6H2Pxb5MPx5KAzZ8boIEzNFVP9GdLcZ09Lb1yaU=) 4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: NpxyDYgZgt6C5E4ll2xjCVcUh5jIelMwBSZZdnJdQJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 02:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Validity Not Before: Mar 29 02:07:49 2026 GMT Not After : Apr 5 02:07:49 2026 GMT Subject: CN=69c88975-b0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:2f:8c:d4:50:69:06:95:e7:a4:ed:cc:98: 39:3f:44:84:fa:e9:0d:1c:f8:d8:ce:9e:a5:98:25: 71:7c:8f:79:f8:d2:fe:cc:b8:fd:ea:9b:d2:17:a1: 15:be:d1:2d:1e:e5:ce:bb:d0:af:7c:82:c9:fb:57: 55:66:cd:cb:40:06:c0:d3:11:ae:5b:e8:8d:85:c4: 75:8c:ce:fb:ea:a8:13:60:83:43:0f:49:7e:f5:90: f2:3c:73:be:83:6c:be:91:fd:55:35:92:1e:75:1b: 93:f2:31:90:6c:9a:d5:d3:21:e0:8a:c0:b0:48:ad: cb:02:d2:e5:49:4f:4d:bf:02:0c:17:98:8c:5e:e6: 7b:7f:05:6a:a6:03:f4:47:59:a9:02:c2:96:f3:74: 15:b3:b4:58:89:2b:fb:1c:44:1a:2f:c8:70:0a:22: 97:f2:6a:3f:fc:50:24:be:49:9e:e4:63:f4:ff:12: c7:fb:73:70:86:85:86:2f:46:c0:bf:f3:4a:46:a1: 01:9d:df:cf:c4:23:a6:d7:ab:88:44:98:50:23:85: 22:24:a2:15:e4:92:d9:76:45:83:dc:93:91:0d:7e: 73:85:37:a5:d6:68:7e:4f:b1:eb:4f:ec:89:ff:a7: 81:b5:d2:b3:59:40:78:ea:6e:a0:11:de:cb:7d:e7: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:58:5E:E8:6D:8D:05:97:72:EF:0F:66:0D:0E:7C:44:E6:71:B4:E6 X509v3 Authority Key Identifier: keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:35:10:b8:59:6b:0f:b1:ff:66:4e:81:15:65:8c:3e:74: b3:3d:e8:e2:8f:6a:db:53:6c:5a:03:f9:8a:46:42:1c:25:bc: 86:f9:69:f7:12:81:64:71:4c:de:6c:c3:91:d2:4e:45:5a:8d: b4:48:f8:6d:8d:d2:3b:9b:85:3f:57:58:b3:43:09:cf:08:d6: 48:ff:16:b1:9b:2b:bf:e4:a2:6a:af:aa:c6:bf:83:5b:45:9d: 83:53:6b:de:a8:10:19:0b:5c:3f:9f:16:08:fa:34:13:68:2f: 99:1c:fb:65:f7:2d:60:65:9e:e8:52:67:0f:af:46:9b:36:7a: d1:c4:50:16:f5:fd:8d:80:37:96:6f:19:f6:69:5f:9c:cb:f2: 33:e8:ec:98:e1:e8:51:0c:48:79:82:3a:8e:f3:59:ef:cc:5d: 3f:e1:ab:a8:fa:5d:8d:d5:26:ea:c6:ca:33:eb:e9:2c:ca:f1: dd:d5:76:0a:c1:14:67:7a:f1:a2:da:14:f6:4a:8c:71:90:87: 68:13:1b:10:64:28:37:4f:26:e3:aa:33:18:44:6f:39:76:c1: ac:e0:08:df:3f:51:ab:90:9c:04:07:ff:4e:3f:e8:3a:e5:f6: 12:19:ff:07:1c:6f:92:41:d0:36:d4:ef:ca:b5:72:33:37:84: 98:64:65:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG QkVGQTVDRDAwHhcNMjYwMzI5MDIwNzQ5WhcNMjYwNDA1MDIwNzQ5WjAYMRYwFAYD VQQDEw02OWM4ODk3NS1iMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZ8vjNRQaQaV56TtzJg5P0SE+ukNHPjYzp6lmCVxfI95+NL+zLj96pvSF6EV vtEtHuXOu9CvfILJ+1dVZs3LQAbA0xGuW+iNhcR1jM776qgTYINDD0l+9ZDyPHO+ g2y+kf1VNZIedRuT8jGQbJrV0yHgisCwSK3LAtLlSU9NvwIMF5iMXuZ7fwVqpgP0 R1mpAsKW83QVs7RYiSv7HEQaL8hwCiKX8mo//FAkvkme5GP0/xLH+3NwhoWGL0bA v/NKRqEBnd/PxCOm16uIRJhQI4UiJKIV5JLZdkWD3JORDX5zhTel1mh+T7HrT+yJ /6eBtdKzWUB46m6gEd7Lfed+jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpYXuht jQWXcu8PZg0OfETmcbTmMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1 RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz NzlzVGgtTUw3RF83NzZYTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNI1ELhZaw+x/2ZOgRVljD50sz3o4o9q21NsWgP5ikZCHCW8hvlp9xKBZHFM 3mzDkdJORVqNtEj4bY3SO5uFP1dYs0MJzwjWSP8WsZsrv+Siaq+qxr+DW0Wdg1Nr 3qgQGQtcP58WCPo0E2gvmRz7ZfctYGWe6FJnD69GmzZ60cRQFvX9jYA3lm8Z9mlf nMvyM+jsmOHoUQxIeYI6jvNZ78xdP+GrqPpdjdUm6sbKM+vpLMrx3dV2CsEUZ3rx otoU9kqMcZCHaBMbEGQoN08m46ozGERvOXbBrOAI3z9Rq5CcBAf/Tj/oOuX2Ehn/ BxxvkkHQNtTvyrVyMzeEmGRlYQ== -----END CERTIFICATE-----Generated at Mon Mar 30 17:25:58 2026 by rpki-client