$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: qCSWkDHqzhOQbWYpbh4IzzvaKYlA9NTxD5TR4NDffOE= Subject key identifier: 30:67:48:AD:62:E0:9C:8D:6F:AC:67:4F:78:77:B9:97:2C:83:2C:E8 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 03CD Signing time: Thu 21 May 2026 00:42:28 +0000 Manifest this update: Thu 21 May 2026 00:42:28 +0000 Manifest next update: Thu 28 May 2026 00:42:28 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: SqFJG2MARDhPVGdFSDef5sEVMJInh98fyvxR79SE0mM=) 2: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=) 3: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=) 4: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=) 5: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=) 6: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=) 7: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: May 21 00:42:28 2026 GMT Not After : May 28 00:42:28 2026 GMT Subject: CN=6a0e54f4-ffab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:55:d1:1e:7c:87:72:d3:39:ca:d3:99:c4: 53:aa:e9:10:31:d7:38:2f:bc:62:37:3e:e9:8c:68: ef:60:a1:7d:25:c2:50:7b:d1:68:d1:b2:39:3c:00: 66:5f:38:ed:7d:53:28:96:1a:13:ed:8e:2f:72:12: 60:ed:0e:6c:46:ba:4d:fb:d4:61:2c:a5:5c:bf:08: 32:eb:8d:a4:94:dc:dd:9c:8d:8c:ee:57:02:7b:d8: b2:1a:92:5c:a5:75:62:fa:89:53:55:a7:16:44:aa: c8:d1:4f:da:3f:de:fc:30:6a:89:3d:a9:34:93:49: e0:b5:3f:20:cc:a5:c9:92:d1:e3:2c:96:22:12:5f: d0:48:25:39:9c:d7:69:f9:ad:2c:15:21:23:ba:86: a4:38:5d:9c:3f:5c:69:88:ff:78:3f:38:0b:b6:be: 48:32:93:1c:48:7a:27:0f:4f:d5:a5:29:8b:69:25: 59:27:85:f1:ae:f7:38:fc:93:b0:f1:7f:9b:4f:8a: 59:24:44:1d:80:db:e4:98:53:cc:5a:af:20:11:98: 72:8c:35:9a:11:46:c1:92:72:09:0d:6d:57:d4:72: 19:ee:0f:95:7e:e3:50:d3:59:56:cb:de:81:17:84: f1:62:ba:db:6e:cf:37:1a:32:c0:f4:f7:41:77:87: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:67:48:AD:62:E0:9C:8D:6F:AC:67:4F:78:77:B9:97:2C:83:2C:E8 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:41:f1:c7:6a:1a:2f:77:17:4d:b1:ba:70:5f:66:41:aa:b3: ca:da:90:b9:bc:7a:8a:e2:6b:56:31:b5:a2:69:27:47:f0:66: ab:ec:23:83:cc:0a:a6:ee:ce:14:7f:2a:d6:58:82:66:fd:51: b5:a4:0b:bb:64:a7:78:6d:15:59:db:49:7c:17:6f:81:8f:b2: 4c:f0:65:04:5a:11:ae:9b:c6:a4:a6:e7:5c:61:64:4a:00:50: aa:22:97:98:e3:74:d6:e6:e3:a0:65:d7:f1:87:3d:35:2e:ca: 4b:bd:0c:4d:ae:db:21:de:af:8d:2d:40:47:7e:6f:b4:12:0b: 9c:c6:d4:5b:b5:49:d9:d6:32:f7:9c:38:08:7b:2f:bc:b3:b8: 7a:f3:3a:15:99:75:0d:60:1e:c3:6f:7e:f0:34:be:a4:b9:a5: 7c:5a:be:a1:1b:db:3e:25:84:ce:fb:67:3f:e8:fd:b8:bf:0a: 2c:70:b3:a2:bf:70:95:43:fb:2e:5f:68:19:8b:71:ec:3d:f0: 21:d3:80:8c:df:7e:f6:6c:59:a3:1d:dc:5e:17:99:01:53:53: 23:36:72:af:4a:32:b8:b1:4a:d9:1f:42:17:71:2c:b5:39:d3: 1b:cf:68:f5:39:86:e4:87:54:62:fa:8d:be:58:ea:1c:90:32: bc:de:35:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwNTIxMDA0MjI4WhcNMjYwNTI4MDA0MjI4WjAYMRYwFAYD VQQDEw02YTBlNTRmNC1mZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/VV0R58h3LTOcrTmcRTqukQMdc4L7xiNz7pjGjvYKF9JcJQe9Fo0bI5PABm XzjtfVMolhoT7Y4vchJg7Q5sRrpN+9RhLKVcvwgy642klNzdnI2M7lcCe9iyGpJc pXVi+olTVacWRKrI0U/aP978MGqJPak0k0ngtT8gzKXJktHjLJYiEl/QSCU5nNdp +a0sFSEjuoakOF2cP1xpiP94PzgLtr5IMpMcSHonD0/VpSmLaSVZJ4Xxrvc4/JOw 8X+bT4pZJEQdgNvkmFPMWq8gEZhyjDWaEUbBknIJDW1X1HIZ7g+VfuNQ01lWy96B F4TxYrrbbs83GjLA9PdBd4e49QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBnSK1i 4JyNb6xnT3h3uZcsgyzoMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl0Hxx2oaL3cXTbG6cF9mQaqzytqQubx6iuJrVjG1omknR/Bmq+wjg8wKpu7O FH8q1liCZv1RtaQLu2SneG0VWdtJfBdvgY+yTPBlBFoRrpvGpKbnXGFkSgBQqiKX mON01ubjoGXX8Yc9NS7KS70MTa7bId6vjS1AR35vtBILnMbUW7VJ2dYy95w4CHsv vLO4evM6FZl1DWAew29+8DS+pLmlfFq+oRvbPiWEzvtnP+j9uL8KLHCzor9wlUP7 Ll9oGYtx7D3wIdOAjN9+9mxZox3cXheZAVNTIzZyr0oyuLFK2R9CF3EstTnTG89o 9TmG5IdUYvqNvljqHJAyvN41LA== -----END CERTIFICATE-----Generated at Thu May 21 10:52:05 2026 by rpki-client