$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: e27Ysp68m5rIF1Wvs+d23MifkhndWVfvhPOJvEZl9Bw= Subject key identifier: 2F:5D:74:48:8C:E3:C1:40:5A:E0:44:2B:13:7B:F6:DB:79:E8:FB:E8 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0D27 Signing time: Mon 20 Jul 2026 18:24:18 +0000 Manifest this update: Mon 20 Jul 2026 18:24:17 +0000 Manifest next update: Mon 27 Jul 2026 18:24:17 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: 5Wdmauvr0A6Obl/Fh3UyxcougiOQ7gs7LlugrUJwXww=) 2: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: xISdQPEU/tgGL3825DQzTOqAEuw/fttSle0JHEGoGIU=) 3: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: rRKeT0kqxIftdV3F6AfbXMGj7rcikk/GJ1vzJvNTP5w=) 4: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: u4SRnXxFN/h4OIsUBv1jRsmNV4FZEf84nLAb4GJslCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Jul 20 18:24:17 2026 GMT Not After : Jul 27 18:24:17 2026 GMT Subject: CN=6a5e67d2-be1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:dd:62:24:ff:d8:85:67:d7:3e:f9:a1:6e: 45:53:6c:75:cb:fc:80:55:0b:db:e1:9a:91:0f:5a: 88:b2:60:17:ac:7d:81:88:83:8a:f2:c0:93:4d:34: 06:26:60:91:f1:12:e2:18:82:76:f2:7a:d8:f3:a6: 61:53:42:6d:44:b6:a4:c7:70:47:e4:4f:6d:f3:2f: a3:a1:c1:83:bd:e2:17:3f:16:59:d3:65:78:64:39: d0:62:ef:d1:9b:c3:e1:e9:4f:88:29:30:96:55:e9: 90:65:4e:79:7d:f7:bc:72:37:44:63:ff:30:5c:14: 61:00:96:a1:55:bb:04:d6:e9:f6:db:55:08:3c:85: 73:76:f6:f8:8a:fd:cf:b2:58:e9:16:a2:12:04:10: a0:51:20:2d:61:8a:d5:7f:5c:92:28:aa:79:a0:55: 22:60:f4:dd:ff:e8:60:76:b6:b3:e5:91:d5:a0:c8: 2d:7a:af:03:56:88:6c:d6:7f:0d:68:b2:e4:59:d0: 24:b9:f1:24:be:75:84:0d:4b:a4:98:0f:8b:c6:7c: 3b:8d:e8:43:11:58:f2:50:b9:29:31:e3:36:0a:05: 3e:40:07:7e:b4:e2:9e:13:9c:10:29:d7:fb:ca:54: 0d:ce:3c:9e:18:97:3c:4b:14:ba:c6:a1:04:6d:c9: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5D:74:48:8C:E3:C1:40:5A:E0:44:2B:13:7B:F6:DB:79:E8:FB:E8 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:3b:6b:c0:b7:1d:88:89:70:81:12:b5:19:d1:6b:26:9b: f5:6b:ff:6c:64:00:b5:7b:e7:6f:4b:8c:57:8e:37:33:47:76: 65:5d:e9:0a:dc:75:35:79:99:60:fd:00:af:7b:7d:19:9e:ed: b6:9d:d5:70:0b:f7:a3:c0:48:4e:cf:ae:23:6b:26:57:24:cf: f0:66:3b:7e:eb:9c:7f:c5:ee:41:d3:94:36:2a:e4:ad:a3:19: 1c:a1:85:e2:cb:f6:9f:93:e8:4b:35:22:ad:75:e6:6f:02:83: 87:25:4d:87:5c:b8:e3:cc:15:ea:ec:8f:92:17:c0:04:40:bb: fe:12:63:7e:e2:01:ea:87:d6:f0:ce:32:a5:6e:bd:97:0e:12: c2:c6:43:30:4a:7b:c9:08:55:9f:b9:99:70:c2:d6:c7:ff:ad: 17:49:ab:20:08:da:4b:1e:81:25:57:42:97:43:86:03:51:d0: e0:58:24:e8:d1:64:8f:a8:ba:f7:28:2b:eb:86:d8:d3:02:ca: b0:bd:b6:aa:da:d0:db:61:50:7f:e9:da:37:bd:18:9d:dc:48: c8:b1:ea:43:cf:49:9f:91:1d:d7:5b:7c:1a:ba:de:6b:44:94: f7:de:e6:e9:2b:df:e5:b2:89:ab:41:a4:2a:67:a6:22:7d:d9: e3:3e:5d:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjYwNzIwMTgyNDE3WhcNMjYwNzI3MTgyNDE3WjAYMRYwFAYD VQQDEw02YTVlNjdkMi1iZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQHdYiT/2IVn1z75oW5FU2x1y/yAVQvb4ZqRD1qIsmAXrH2BiIOK8sCTTTQG JmCR8RLiGIJ28nrY86ZhU0JtRLakx3BH5E9t8y+jocGDveIXPxZZ02V4ZDnQYu/R m8Ph6U+IKTCWVemQZU55ffe8cjdEY/8wXBRhAJahVbsE1un221UIPIVzdvb4iv3P sljpFqISBBCgUSAtYYrVf1ySKKp5oFUiYPTd/+hgdraz5ZHVoMgteq8DVohs1n8N aLLkWdAkufEkvnWEDUukmA+Lxnw7jehDEVjyULkpMeM2CgU+QAd+tOKeE5wQKdf7 ylQNzjyeGJc8SxS6xqEEbcmt8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9ddEiM 48FAWuBEKxN79tt56PvoMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACXU7a8C3HYiJcIEStRnRayab9Wv/bGQAtXvnb0uMV443M0d2ZV3pCtx1NXmZ YP0Ar3t9GZ7ttp3VcAv3o8BITs+uI2smVyTP8GY7fuucf8XuQdOUNirkraMZHKGF 4sv2n5PoSzUirXXmbwKDhyVNh1y448wV6uyPkhfABEC7/hJjfuIB6ofW8M4ypW69 lw4SwsZDMEp7yQhVn7mZcMLWx/+tF0mrIAjaSx6BJVdCl0OGA1HQ4Fgk6NFkj6i6 9ygr64bY0wLKsL22qtrQ22FQf+naN70YndxIyLHqQ89Jn5Ed11t8Grrea0SU997m 6Svf5bKJq0GkKmemIn3Z4z5dzQ== -----END CERTIFICATE-----Generated at Wed Jul 22 03:35:53 2026 by rpki-client