$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft File: LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft (raw, json) Hash identifier: TOqUmYYrNUO1+XgSq7CDYbrRRkncacYV8bWVX8syFnw= Subject key identifier: D0:78:D6:D8:95:56:B8:14:F4:EF:54:13:7E:66:CD:48:A1:9C:1A:0D Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 Certificate issuer: /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft Manifest number: 02E9 Signing time: Thu 21 May 2026 01:23:41 +0000 Manifest this update: Thu 21 May 2026 01:23:41 +0000 Manifest next update: Thu 28 May 2026 01:23:41 +0000 Files and hashes: 1: LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl (hash: W7GwALySryzE3xVoMgWs8tODxgWPLvm3rfDEUJ5AVlU=) 2: 49CEB44A28D111EDB364C870C4F9AE02.roa (hash: KYxgbKkbHxGZy90LePidqYYy5WjWj5ewerN5tHIii0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Validity Not Before: May 21 01:23:41 2026 GMT Not After : May 28 01:23:41 2026 GMT Subject: CN=6a0e5e9d-3a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:95:9c:0a:43:0c:08:58:80:4b:33:ec:2f: 84:4c:88:03:54:5c:28:1e:72:b5:fd:ee:6a:52:f4: 7d:cc:5e:2a:f7:2e:19:c6:6e:4e:19:8b:72:75:5f: 02:05:7b:86:4d:08:50:87:c7:9b:1d:33:84:fc:0b: 1d:15:a9:99:ca:da:ac:55:f1:79:9b:10:60:17:b8: 1a:9d:b5:54:6c:af:68:08:b1:d0:89:b2:a6:c5:0f: f1:9f:41:e6:91:ce:d6:94:7c:32:db:7c:63:83:49: 82:83:eb:07:87:8e:e4:55:5a:c9:a0:ad:4b:e6:93: d9:8a:19:a1:af:c7:b0:bc:e6:2a:7f:27:a6:7c:88: 7f:35:91:59:72:e7:a9:cd:26:a5:7a:df:f3:62:4b: cd:fc:be:61:6b:ed:bf:88:ad:3b:92:cd:8f:44:7d: 84:9f:fd:25:d8:3b:86:98:f4:7f:0b:41:3f:ad:64: 51:e5:08:56:2b:83:96:c5:c5:35:2e:cd:39:2c:a2: 3a:92:6f:ce:9d:9a:88:57:6f:53:e4:29:d4:74:49: 32:ac:29:d8:98:61:7f:69:30:3f:46:3d:22:c7:f0: e5:8f:dd:85:1f:1c:6d:80:02:18:f7:7b:22:8b:1c: 72:30:0f:86:f5:ea:d3:f4:1d:5e:9d:be:82:0e:62: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:D6:D8:95:56:B8:14:F4:EF:54:13:7E:66:CD:48:A1:9C:1A:0D X509v3 Authority Key Identifier: keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e0:08:01:b4:5c:0f:70:fd:ff:a1:94:11:24:0e:bb:e2:ce: 50:6e:82:f7:de:c1:48:da:4c:c4:cf:0e:80:14:a1:7b:66:6f: 7b:60:20:ed:53:f6:5e:ff:99:16:82:06:ca:8b:7d:52:2b:df: 21:03:a2:74:dd:43:0a:45:55:cd:a7:71:89:cb:2b:28:91:ae: c4:7f:88:18:2d:e0:f3:64:1b:05:aa:7e:5d:8b:d0:6c:c5:1e: f6:b0:4c:09:4d:2c:30:cb:84:90:90:ab:db:2d:36:c6:60:09: cf:f1:a4:17:0b:d9:75:98:26:b0:a7:dd:f0:d4:ee:a4:7c:b3: b7:73:33:8d:78:db:ca:3d:78:bf:8f:1f:79:8d:eb:7c:e4:98: ba:e8:15:01:09:eb:e3:6c:ab:76:f9:28:cd:6c:76:98:b3:01: 39:c2:76:02:56:b3:03:36:9c:f1:a4:46:d9:af:2f:f0:9a:d7: 55:0a:fa:b8:09:01:d3:fe:5e:a0:74:08:1e:56:35:78:5e:fd: 40:e3:6a:b0:96:5e:0a:e9:1c:e4:51:ac:52:29:06:3e:23:72: b0:58:42:be:5b:c7:1e:38:8c:b0:3e:73:c7:72:b4:36:dd:79: 17:0a:a8:1b:f0:31:d7:ad:83:fb:23:d9:56:a0:0f:83:cb:08: 73:8e:a6:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMjgxMTAvBgNVBAUTKDJFMDZGMzA5MUFENThFRDA2MzNGRjk4OUIxRkQzMjk3 NzNFQzNBQTcwHhcNMjYwNTIxMDEyMzQxWhcNMjYwNTI4MDEyMzQxWjAYMRYwFAYD VQQDEw02YTBlNWU5ZC0zYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD+VnApDDAhYgEsz7C+ETIgDVFwoHnK1/e5qUvR9zF4q9y4Zxm5OGYtydV8C BXuGTQhQh8ebHTOE/AsdFamZytqsVfF5mxBgF7ganbVUbK9oCLHQibKmxQ/xn0Hm kc7WlHwy23xjg0mCg+sHh47kVVrJoK1L5pPZihmhr8ewvOYqfyemfIh/NZFZcuep zSalet/zYkvN/L5ha+2/iK07ks2PRH2En/0l2DuGmPR/C0E/rWRR5QhWK4OWxcU1 Ls05LKI6km/OnZqIV29T5CnUdEkyrCnYmGF/aTA/Rj0ix/Dlj92FHxxtgAIY93si ixxyMA+G9erT9B1enb6CDmIKaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNB41tiV VrgU9O9UE35mzUihnBoNMB8GA1UdIwQYMBaAFC4G8wka1Y7QYz/5ibH9Mpdz7Dqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QyOC80QkRBRUVEQzI4 Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0QmpQX21Kc2YweWwzUHNP cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnYnpDUnJWanRCalBfbUpzZjB5bDNQc09xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QyOC80QkRBRUVEQzI4Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0 QmpQX21Kc2YweWwzUHNPcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYeAIAbRcD3D9/6GUESQOu+LOUG6C997BSNpMxM8OgBShe2Zve2Ag7VP2Xv+Z FoIGyot9UivfIQOidN1DCkVVzadxicsrKJGuxH+IGC3g82QbBap+XYvQbMUe9rBM CU0sMMuEkJCr2y02xmAJz/GkFwvZdZgmsKfd8NTupHyzt3MzjXjbyj14v48feY3r fOSYuugVAQnr42yrdvkozWx2mLMBOcJ2AlazAzac8aRG2a8v8JrXVQr6uAkB0/5e oHQIHlY1eF79QONqsJZeCukc5FGsUikGPiNysFhCvlvHHjiMsD5zx3K0Nt15Fwqo G/Ax162D+yPZVqAPg8sIc46m0g== -----END CERTIFICATE-----Generated at Thu May 21 10:37:12 2026 by rpki-client