$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: 8A4hbmoP9x+PXTGVaU3K16im1/yCRy4adZBb2DbzTSk= Subject key identifier: F0:A7:68:8C:C1:B3:60:E1:A0:04:9C:16:F1:1D:19:1B:60:77:FA:CA Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 09C7 Signing time: Thu 16 Jul 2026 20:13:40 +0000 Manifest this update: Thu 16 Jul 2026 20:13:39 +0000 Manifest next update: Thu 23 Jul 2026 20:13:39 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: 9z4421IMfOsXBZixHWf4M99g5Vyt8LLS1XhZBa6NLes=) 2: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=) 3: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Jul 16 20:13:39 2026 GMT Not After : Jul 23 20:13:39 2026 GMT Subject: CN=6a593b74-aa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:f9:7d:6a:14:88:30:df:4a:8c:dc:a1:65: 96:8e:1a:84:8f:27:5c:b7:c4:84:dd:35:ba:c6:52: 27:f1:d9:3a:b6:04:c6:8c:0d:54:ed:69:57:fc:6a: 6b:9c:a3:16:c4:ea:0a:8a:8d:69:24:7f:5d:2d:d2: 45:6b:61:fc:26:c1:e3:52:6b:fa:bb:26:63:d4:65: cb:6b:61:84:9b:65:2d:0b:e3:da:92:04:06:47:37: 10:8c:29:11:a9:f6:0c:dd:12:c2:7f:d7:28:5e:9e: 10:dc:b9:6f:74:38:8c:f0:89:f3:e9:db:0e:70:8b: bf:86:64:c9:49:c2:11:aa:8c:4e:db:17:a1:7f:07: 71:1e:5a:54:49:b1:52:91:37:6f:45:9f:dd:d7:62: 13:fc:d5:63:7f:8c:b4:ec:f5:af:d1:d6:dc:55:3e: 76:0f:c3:d3:1e:89:e5:b9:e8:d9:ca:f9:bb:89:07: 97:9b:78:e6:f4:76:7c:bd:dd:45:75:f9:bb:e4:5d: e7:7a:ed:e2:84:60:f6:bb:9c:d6:81:d0:b3:6f:8e: cf:04:da:a7:e6:0b:bd:c0:5b:f5:2a:fe:f2:9a:02: 17:64:35:36:e9:96:fa:c4:10:63:0e:9b:ff:a6:8f: ba:18:ef:63:55:1f:75:7a:90:08:fe:53:0d:67:47: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A7:68:8C:C1:B3:60:E1:A0:04:9C:16:F1:1D:19:1B:60:77:FA:CA X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:96:ba:ec:ea:5c:9c:b3:f9:f9:1c:42:fb:06:44:82:45:fa: e7:36:00:f9:85:c4:e9:28:fd:af:bc:ce:ae:46:44:0a:f0:41: d7:61:db:12:36:74:e6:fe:51:7f:d1:95:a3:18:0a:e7:88:1d: 09:aa:9d:c3:ce:eb:07:48:8b:85:bb:91:e6:c3:fb:b6:2e:5b: e9:49:b8:cb:a6:98:66:3a:8e:22:d7:fd:88:8e:0d:10:2b:2c: ed:33:a8:03:72:56:53:97:2e:e4:74:72:dd:83:58:87:c3:e4: 2b:55:f6:d0:76:d1:39:f0:13:54:96:bf:55:24:9d:63:62:20: 98:7c:35:5c:57:54:7f:d2:7d:eb:da:65:0f:36:ab:5e:77:ec: 65:3b:09:2d:b9:5d:3a:17:64:bb:20:66:d6:c5:67:fe:78:62: 00:17:cf:7d:34:dd:46:eb:c9:ad:b7:51:44:b2:1e:35:71:00: cb:3a:a9:81:45:fc:67:7e:9d:9e:b7:f1:c5:72:7a:24:97:ef: 64:fa:d4:32:62:cd:21:ce:b5:70:3d:77:43:43:d6:71:5b:c2: 90:36:d9:ea:15:54:4c:3b:0c:eb:3a:06:39:74:08:30:10:ec: 52:c8:47:c4:96:47:d5:83:e8:6e:b0:8d:8d:a3:ac:5b:da:0b: aa:74:b6:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwNzE2MjAxMzM5WhcNMjYwNzIzMjAxMzM5WjAYMRYwFAYD VQQDEw02YTU5M2I3NC1hYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkX5fWoUiDDfSozcoWWWjhqEjydct8SE3TW6xlIn8dk6tgTGjA1U7WlX/Gpr nKMWxOoKio1pJH9dLdJFa2H8JsHjUmv6uyZj1GXLa2GEm2UtC+PakgQGRzcQjCkR qfYM3RLCf9coXp4Q3LlvdDiM8Inz6dsOcIu/hmTJScIRqoxO2xehfwdxHlpUSbFS kTdvRZ/d12IT/NVjf4y07PWv0dbcVT52D8PTHonluejZyvm7iQeXm3jm9HZ8vd1F dfm75F3neu3ihGD2u5zWgdCzb47PBNqn5gu9wFv1Kv7ymgIXZDU26Zb6xBBjDpv/ po+6GO9jVR91epAI/lMNZ0c9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCnaIzB s2DhoAScFvEdGRtgd/rKMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnZa67OpcnLP5+RxC+wZEgkX65zYA+YXE6Sj9r7zOrkZECvBB12HbEjZ05v5R f9GVoxgK54gdCaqdw87rB0iLhbuR5sP7ti5b6Um4y6aYZjqOItf9iI4NECss7TOo A3JWU5cu5HRy3YNYh8PkK1X20HbROfATVJa/VSSdY2IgmHw1XFdUf9J969plDzar XnfsZTsJLbldOhdkuyBm1sVn/nhiABfPfTTdRuvJrbdRRLIeNXEAyzqpgUX8Z36d nrfxxXJ6JJfvZPrUMmLNIc61cD13Q0PWcVvCkDbZ6hVUTDsM6zoGOXQIMBDsUshH xJZH1YPobrCNjaOsW9oLqnS2CA== -----END CERTIFICATE-----Generated at Sat Jul 18 07:16:44 2026 by rpki-client