$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: JGPs2lB9nZCdrraHmWqknUihxdaue4+J5Q1kcyeW7H8= Subject key identifier: 29:F1:A0:36:E8:99:37:08:5A:8F:8B:C9:97:E7:88:92:55:0E:92:E6 Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: 020D Signing time: Tue 23 Jun 2026 03:10:29 +0000 Manifest this update: Tue 23 Jun 2026 03:10:28 +0000 Manifest next update: Tue 30 Jun 2026 03:10:28 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: FR6h9uwyu4y7pPTS5/0z7+37wv7fXNGlgovaIOM2OBc=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: wKye+Bf4sTbbkGL0Ip13QuqoroMtLnMn7BDQ5dOtrUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 03:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: Jun 23 03:10:28 2026 GMT Not After : Jun 30 03:10:28 2026 GMT Subject: CN=6a39f925-7154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:3d:78:ff:78:11:3b:49:82:10:7d:7e:e6: d3:83:6f:59:38:a7:f9:9b:88:3b:b4:a9:d4:d1:d8: 44:17:18:bd:2b:9d:c5:c9:2c:d2:f8:23:5b:90:2b: 52:b4:c4:63:50:15:d0:d1:ce:7a:cf:fa:d2:72:3b: 02:cf:88:06:56:d3:4c:ff:df:2e:c9:d9:87:9a:85: f0:14:99:3b:fd:9f:fc:4b:76:9b:d0:7b:ba:0a:0e: 79:46:57:e6:0e:1c:58:42:e8:60:e2:f1:a0:5d:2a: 7a:a0:ae:76:a5:df:3e:46:b5:ad:80:3a:3e:18:92: 0e:a9:e5:2b:34:c7:45:d6:42:84:8f:fd:35:cd:56: 42:27:17:f5:7f:55:2e:09:91:88:f0:30:33:47:74: f9:22:f8:a6:19:df:df:9d:53:5c:1e:d3:fe:02:01: 2a:6a:cc:fc:56:c7:8c:f2:0c:b5:22:c8:3e:7a:af: ac:a8:96:4c:76:47:23:18:4b:9c:4b:46:3e:31:91: 75:20:91:a4:5b:09:a2:dc:1d:fb:c1:cc:e7:59:93: 8c:0c:5f:b6:62:90:33:75:9b:aa:93:6b:83:a8:84: ac:40:64:ed:08:8d:3d:dd:89:49:0a:4b:83:a7:9d: f9:fe:6b:d4:8f:89:6b:52:e2:5e:02:e4:bc:24:08: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F1:A0:36:E8:99:37:08:5A:8F:8B:C9:97:E7:88:92:55:0E:92:E6 X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6e:d2:7b:65:08:e4:61:ab:62:96:6f:8a:79:a6:92:c7:44: e7:01:56:d0:41:37:e7:84:70:b7:9f:f7:d5:b5:9a:25:e4:1f: 7b:6f:0e:cf:28:97:2e:00:eb:f6:6b:2d:07:1f:04:a0:ad:c1: b2:bc:f9:c8:b3:92:a6:d3:8d:a0:ac:09:54:e1:b7:33:07:10: 64:31:d9:2a:89:9b:de:07:01:ec:47:8f:f8:f4:dd:43:94:2b: a4:f2:cb:2c:15:e3:e1:9d:93:a5:3e:7d:98:dd:65:c0:08:d4: 36:16:b0:92:55:4c:a5:e7:97:b1:b3:91:61:07:7a:85:65:fe: 8e:27:e1:e6:5f:47:0a:a4:0c:ab:f3:49:82:74:5c:5c:cc:32: ee:5e:b9:6a:c5:b7:6c:be:19:63:21:34:09:8c:81:93:d7:87: 60:78:ae:79:8f:0d:86:4c:66:2d:4a:0f:d7:72:14:02:36:a9: cb:c1:09:6b:92:89:ba:2c:9b:ba:9a:dc:c1:87:73:d3:9b:51: 6d:ab:27:c0:63:23:d0:6c:be:c3:11:a5:9d:52:ab:3b:1d:89: cc:45:01:a4:31:86:4b:98:9f:36:ff:ee:f9:6d:0c:d9:b4:ea: 2d:06:68:9e:39:29:10:3b:4c:8c:9f:4e:28:06:ba:cb:a8:80: 22:67:8b:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjYwNjIzMDMxMDI4WhcNMjYwNjMwMDMxMDI4WjAYMRYwFAYD VQQDEw02YTM5ZjkyNS03MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUc9eP94ETtJghB9fubTg29ZOKf5m4g7tKnU0dhEFxi9K53FySzS+CNbkCtS tMRjUBXQ0c56z/rScjsCz4gGVtNM/98uydmHmoXwFJk7/Z/8S3ab0Hu6Cg55Rlfm DhxYQuhg4vGgXSp6oK52pd8+RrWtgDo+GJIOqeUrNMdF1kKEj/01zVZCJxf1f1Uu CZGI8DAzR3T5IvimGd/fnVNcHtP+AgEqasz8VseM8gy1Isg+eq+sqJZMdkcjGEuc S0Y+MZF1IJGkWwmi3B37wcznWZOMDF+2YpAzdZuqk2uDqISsQGTtCI093YlJCkuD p535/mvUj4lrUuJeAuS8JAiH6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnxoDbo mTcIWo+LyZfniJJVDpLmMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATW7Se2UI5GGrYpZvinmmksdE5wFW0EE354Rwt5/31bWaJeQfe28OzyiXLgDr 9mstBx8EoK3Bsrz5yLOSptONoKwJVOG3MwcQZDHZKomb3gcB7EeP+PTdQ5QrpPLL LBXj4Z2TpT59mN1lwAjUNhawklVMpeeXsbORYQd6hWX+jifh5l9HCqQMq/NJgnRc XMwy7l65asW3bL4ZYyE0CYyBk9eHYHiueY8NhkxmLUoP13IUAjapy8EJa5KJuiyb uprcwYdz05tRbasnwGMj0Gy+wxGlnVKrOx2JzEUBpDGGS5ifNv/u+W0M2bTqLQZo njkpEDtMjJ9OKAa6y6iAImeL6Q== -----END CERTIFICATE-----Generated at Wed Jun 24 11:14:54 2026 by rpki-client