$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: HHURLsbbU8r46n20jbIkVEKjGcwpz+Y8T1DZuFiSdyQ= Subject key identifier: 88:20:F5:89:11:F6:25:2D:E7:0B:60:FB:FA:F4:0B:98:36:CF:9E:E8 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 09AD Signing time: Sun 31 May 2026 20:35:50 +0000 Manifest this update: Sun 31 May 2026 20:35:50 +0000 Manifest next update: Sun 07 Jun 2026 20:35:50 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: mqLdCrU+aVqboMT7eCKDfAVzP5EZKBKPkY0D0ZSdaG4=) 2: 73F46EA421DE11F18A474186263D8C67.roa (hash: 3UN4xbRTimMuR44cwoOR2FSGZhlpECHhB+D/CVZEmSY=) 3: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=) 4: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 20:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: May 31 20:35:50 2026 GMT Not After : Jun 7 20:35:50 2026 GMT Subject: CN=6a1c9ba6-ae02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:54:6a:34:ed:14:b7:89:a8:1e:0f:23:5d: aa:97:e9:c0:7a:f6:ba:26:b6:ae:08:39:97:21:8b: 66:08:7f:27:2c:92:d8:34:5f:2c:63:37:41:6b:3d: 43:61:42:89:53:6e:79:9c:b6:c5:a1:ef:2b:5f:5e: 85:da:68:76:66:e6:5b:96:48:7a:84:a7:5a:e2:74: 9d:19:ed:f5:b0:d6:1f:d1:a9:bd:b1:2d:8a:6d:69: 0a:ba:af:64:eb:72:b8:c6:ff:93:cb:97:0d:87:92: f2:99:0d:a2:21:ed:98:5e:ca:8e:56:91:57:ef:7a: 57:d7:66:47:ae:43:c2:89:dd:4e:8a:a0:5e:54:7b: e2:52:e6:0f:94:43:5b:83:bb:80:21:13:17:86:73: 5e:70:25:0a:a7:73:36:0e:13:b7:a9:ef:64:a4:30: 2c:a4:9c:03:95:aa:2d:ac:86:7a:64:e1:19:ce:a5: bf:0b:ef:13:2a:2b:22:4c:15:1c:2c:0b:51:6b:7d: a5:c8:02:7b:39:ee:54:d6:9f:19:84:df:68:91:a2: fd:00:7c:e4:47:9a:77:c9:b1:b9:0b:1b:64:7a:1c: 4a:08:4e:97:cf:2b:92:6d:43:d7:1b:ac:ef:53:be: 44:fc:93:2e:4d:50:dd:b3:62:41:38:39:07:96:fd: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:20:F5:89:11:F6:25:2D:E7:0B:60:FB:FA:F4:0B:98:36:CF:9E:E8 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a4:11:96:a0:81:a7:5a:5b:e1:30:fe:62:8d:6b:9a:b6:93: 5c:75:22:ac:f9:86:14:91:de:1b:be:b3:9f:e8:25:76:af:78: 49:2c:7c:85:52:19:1a:08:69:42:eb:76:2d:74:91:58:2f:7c: df:27:2f:29:d0:9b:23:fd:15:d1:8b:a8:ee:10:24:48:e4:af: a5:5b:4f:30:ff:4b:71:b8:f5:1d:0e:17:d0:23:4e:24:23:fc: 64:55:68:fb:e2:a8:58:b8:78:6a:c2:b3:d5:7e:92:d3:a0:8c: 44:a1:d6:ea:c1:f7:0c:75:68:54:1c:71:b9:83:1e:12:e6:24: 13:f0:71:f8:b8:49:55:d5:2f:04:2b:4e:c5:7d:d9:a2:4d:b7: 88:80:68:70:32:0a:33:ee:50:b3:28:f7:8d:f1:6c:d0:1f:f7: df:34:27:e6:c3:42:40:de:6e:62:da:26:d1:dc:f3:dc:cf:ae: 0c:4d:eb:0e:d9:e8:27:cf:8a:14:78:f9:b9:16:39:fe:07:53: c2:20:0b:70:d6:7b:84:da:b0:a8:f9:1d:5e:7a:93:de:1c:f2: 2d:24:c1:59:c5:f5:f4:cb:67:4b:67:a1:3f:bd:e7:f5:61:f0: 08:6c:58:42:b9:d4:e6:93:08:66:6f:17:2b:d1:bc:96:37:0e: 76:d0:6b:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwNTMxMjAzNTUwWhcNMjYwNjA3MjAzNTUwWjAYMRYwFAYD VQQDEw02YTFjOWJhNi1hZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstJUajTtFLeJqB4PI12ql+nAeva6JrauCDmXIYtmCH8nLJLYNF8sYzdBaz1D YUKJU255nLbFoe8rX16F2mh2ZuZblkh6hKda4nSdGe31sNYf0am9sS2KbWkKuq9k 63K4xv+Ty5cNh5LymQ2iIe2YXsqOVpFX73pX12ZHrkPCid1OiqBeVHviUuYPlENb g7uAIRMXhnNecCUKp3M2DhO3qe9kpDAspJwDlaotrIZ6ZOEZzqW/C+8TKisiTBUc LAtRa32lyAJ7Oe5U1p8ZhN9okaL9AHzkR5p3ybG5CxtkehxKCE6XzyuSbUPXG6zv U75E/JMuTVDds2JBODkHlv3W9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgg9YkR 9iUt5wtg+/r0C5g2z57oMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADqQRlqCBp1pb4TD+Yo1rmraTXHUirPmGFJHeG76zn+gldq94SSx8hVIZGghp Qut2LXSRWC983ycvKdCbI/0V0Yuo7hAkSOSvpVtPMP9Lcbj1HQ4X0CNOJCP8ZFVo ++KoWLh4asKz1X6S06CMRKHW6sH3DHVoVBxxuYMeEuYkE/Bx+LhJVdUvBCtOxX3Z ok23iIBocDIKM+5Qsyj3jfFs0B/33zQn5sNCQN5uYtom0dzz3M+uDE3rDtnoJ8+K FHj5uRY5/gdTwiALcNZ7hNqwqPkdXnqT3hzyLSTBWcX19MtnS2ehP73n9WHwCGxY QrnU5pMIZm8XK9G8ljcOdtBrFQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:18 2026 by rpki-client