$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: 7rEoMDF41tqIc941iiWvIZGk7K8jbbYo6vX6+1zZFqE= Subject key identifier: 26:84:BF:8E:8E:9E:AE:22:0C:4A:DB:39:BA:C9:91:20:6D:FA:A1:09 Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: 025B Signing time: Tue 23 Jun 2026 02:23:20 +0000 Manifest this update: Tue 23 Jun 2026 02:23:19 +0000 Manifest next update: Tue 30 Jun 2026 02:23:19 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: dTXGFUQD6haOgnDdPfn/IjP36CUqFvmqCmMQqFNKt14=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: GKFjPcvO4ucG2wu+o52C6baSSl36UQN43VyTX2VF8tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 02:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: Jun 23 02:23:19 2026 GMT Not After : Jun 30 02:23:19 2026 GMT Subject: CN=6a39ee18-919a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:bb:38:f7:c9:94:33:ca:da:7a:87:8d:51: 94:16:f6:30:56:3d:3a:dc:68:b4:80:78:95:b5:bd: cc:0a:1f:fe:d8:67:f9:bc:af:21:5e:5e:a8:c6:b7: e2:81:83:6e:fd:ab:84:e7:cf:08:6c:c1:15:63:87: 15:ab:44:31:18:0e:e2:38:e9:a5:83:d8:da:ba:44: c1:d7:5a:6a:d5:d8:77:72:b1:db:51:99:0a:52:ac: f3:37:f8:9a:5b:1f:55:04:51:c5:b4:0c:50:40:f0: 4e:c2:57:07:00:1e:d4:ee:5b:06:b0:35:fe:51:26: 92:cc:51:d4:0a:d4:d6:01:47:cf:86:c7:ec:41:b9: f2:60:2d:94:aa:21:b7:ba:76:97:f5:42:2b:a4:63: 6f:ae:2a:61:4d:56:aa:fb:27:68:c1:62:53:11:3d: a9:21:1e:d9:cf:0d:64:21:41:01:0c:8c:99:5d:33: d2:8d:51:1c:8c:20:6d:f0:0e:b6:de:9f:cf:36:c7: 27:75:c5:88:d8:eb:04:14:42:fc:b4:4f:9e:fb:a3: 7b:22:73:d4:e8:03:2a:af:07:38:d0:53:5b:c4:2d: dc:da:a6:ad:c3:6d:42:3b:74:52:53:ef:31:00:dd: 16:8f:f6:03:e2:61:3b:d9:95:ff:ef:01:8d:07:f8: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:84:BF:8E:8E:9E:AE:22:0C:4A:DB:39:BA:C9:91:20:6D:FA:A1:09 X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6d:1b:b4:9c:70:9e:67:3c:e5:27:a9:05:4f:ba:e5:19:c6: a1:52:cf:92:31:16:3d:22:e6:e5:91:3b:0f:15:fe:28:f9:e1: 90:a0:2f:da:0f:f4:4b:65:a0:e8:5d:6e:d8:e4:06:cb:93:65: 9b:34:64:6a:b1:2c:ab:d3:49:7d:a9:dd:52:31:e4:35:20:9e: 3d:e0:5e:3b:3f:eb:0b:ea:70:e0:3b:7f:c7:40:38:40:e5:de: e0:16:2a:01:3b:62:e7:ca:50:69:55:12:a5:30:db:24:9e:be: 01:b3:1e:dd:a4:07:cd:b9:56:3b:5c:6e:c4:41:db:fe:83:10: 02:0a:98:8a:f3:ab:82:7f:ce:0c:68:c8:ce:29:e3:ac:42:44: e1:a6:08:76:91:81:55:db:3b:0f:0a:fd:42:9c:ac:2f:6d:dc: e6:5d:9c:e4:ab:19:a6:d9:c3:a8:97:12:81:f1:8d:4e:59:ca: 72:7e:e7:bc:70:5f:a7:49:10:e0:cb:0e:16:11:34:25:00:b6: 74:0c:ce:3d:e8:12:1f:b7:ff:9b:56:38:d2:33:89:10:b2:dc: d4:54:d2:50:ee:eb:8e:dc:ee:94:ac:fa:fe:aa:52:e3:c2:63: f7:41:f0:70:ce:c5:4c:01:fd:56:e9:a4:68:0d:e0:a1:1c:8c: 48:f5:01:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjYwNjIzMDIyMzE5WhcNMjYwNjMwMDIyMzE5WjAYMRYwFAYD VQQDEw02YTM5ZWUxOC05MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOW7OPfJlDPK2nqHjVGUFvYwVj063Gi0gHiVtb3MCh/+2Gf5vK8hXl6oxrfi gYNu/auE588IbMEVY4cVq0QxGA7iOOmlg9jaukTB11pq1dh3crHbUZkKUqzzN/ia Wx9VBFHFtAxQQPBOwlcHAB7U7lsGsDX+USaSzFHUCtTWAUfPhsfsQbnyYC2UqiG3 unaX9UIrpGNvriphTVaq+ydowWJTET2pIR7Zzw1kIUEBDIyZXTPSjVEcjCBt8A62 3p/PNscndcWI2OsEFEL8tE+e+6N7InPU6AMqrwc40FNbxC3c2qatw21CO3RSU+8x AN0Wj/YD4mE72ZX/7wGNB/gouwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaEv46O nq4iDErbObrJkSBt+qEJMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW20btJxwnmc85SepBU+65RnGoVLPkjEWPSLm5ZE7DxX+KPnhkKAv2g/0S2Wg 6F1u2OQGy5NlmzRkarEsq9NJfandUjHkNSCePeBeOz/rC+pw4Dt/x0A4QOXe4BYq ATti58pQaVUSpTDbJJ6+AbMe3aQHzblWO1xuxEHb/oMQAgqYivOrgn/ODGjIzinj rEJE4aYIdpGBVds7Dwr9QpysL23c5l2c5KsZptnDqJcSgfGNTlnKcn7nvHBfp0kQ 4MsOFhE0JQC2dAzOPegSH7f/m1Y40jOJELLc1FTSUO7rjtzulKz6/qpS48Jj90Hw cM7FTAH9VumkaA3goRyMSPUBNw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:38 2026 by rpki-client