$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: HDKny0bHQV+uU9j3rdNxR2gSaJWS53o4shmrWJO7WtM= Subject key identifier: AA:F4:B6:3C:C2:2D:99:8B:0D:0E:92:8B:08:6F:86:CC:6A:37:DC:15 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 0240 Signing time: Sun 05 Jul 2026 03:00:40 +0000 Manifest this update: Sun 05 Jul 2026 03:00:40 +0000 Manifest next update: Sun 12 Jul 2026 03:00:40 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: wkV9n5W5GifatWofPRstdWPwA9BSWA5EcZndcUuIf7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Jul 5 03:00:40 2026 GMT Not After : Jul 12 03:00:40 2026 GMT Subject: CN=6a49c8d8-ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:9f:4d:fe:46:e9:64:00:91:09:cc:72:ff: b9:1b:b8:d9:74:90:52:49:b1:0d:07:68:99:6f:f6: c2:c2:63:c8:9b:dd:5a:22:2c:8c:cf:ef:5e:74:ea: 1d:47:f9:85:7f:85:31:67:5c:37:d3:7e:da:04:c5: 9e:b1:b7:87:16:c7:be:06:c0:1a:af:f3:d0:49:10: ba:06:03:b7:95:df:ae:08:a4:a5:66:c4:45:48:87: f9:d1:39:2e:5e:bb:dc:09:95:00:00:f9:bc:77:e4: 29:a0:82:d0:53:75:09:54:bc:86:a5:2e:94:a1:5b: 97:08:42:d3:79:a8:c7:6e:db:f3:d9:f9:57:ae:ca: 50:57:8a:2f:95:ab:93:18:d2:f8:a0:3d:88:69:b3: 42:bd:28:b0:50:fd:33:7b:5a:a8:c6:30:c4:8a:ee: 6f:cb:94:b6:c1:42:41:60:bb:28:2c:5e:da:1f:c3: 1b:c2:8e:40:39:21:86:6e:fe:09:9e:98:eb:9b:45: e4:3d:7c:db:0a:4e:8c:ea:51:d8:1a:f3:34:75:0b: e1:24:92:ee:bf:86:34:77:e8:d9:14:f3:1e:1f:cc: c8:e7:09:24:2a:86:d5:4f:4d:2f:9b:e8:1a:6c:57: 14:79:2e:0c:49:11:28:4d:d3:87:88:8f:5a:0b:f9: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F4:B6:3C:C2:2D:99:8B:0D:0E:92:8B:08:6F:86:CC:6A:37:DC:15 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f7:ae:80:5d:28:dd:87:c8:74:d5:5a:4c:93:3b:ce:f3:5c: d0:63:3d:69:a1:27:82:85:36:b2:b7:17:91:1a:f2:d6:87:b9: 9b:5f:da:d4:10:65:15:81:bc:82:71:cd:3b:c2:b5:4d:d3:1a: c0:71:8d:01:09:46:9a:26:a0:99:65:85:c7:7a:c8:23:20:f9: 9c:24:28:d5:9e:93:ea:80:82:2b:c1:b5:c6:b0:cc:a1:f4:e6: c9:aa:e5:76:9c:2c:64:f5:7b:ed:ed:73:a5:8c:a9:d8:95:50: bb:ad:ab:33:ca:3f:dd:4d:91:9e:f1:d4:2f:a7:74:0a:60:11: f0:c0:fd:03:ff:15:14:61:83:42:71:d3:f1:74:5f:b8:27:a3: 83:c4:62:e7:b2:11:48:7b:7f:1c:57:4e:7f:e0:e3:83:81:20: cc:97:a0:3e:31:36:90:14:86:bc:58:37:71:a5:3d:d2:ac:d3: 88:ff:b6:fd:17:36:c3:23:41:fc:81:da:63:6c:36:71:02:19: 6b:2c:fe:eb:d0:bf:cb:49:46:4a:ad:b6:65:3d:4f:c1:5d:fb: 73:46:be:cf:0b:b1:61:3d:6d:81:88:3c:5b:23:c5:aa:00:e4: 0a:5d:ce:50:29:7d:91:b8:a5:02:45:9c:ff:32:a7:5a:ce:2c: c6:d2:fc:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjYwNzA1MDMwMDQwWhcNMjYwNzEyMDMwMDQwWjAYMRYwFAYD VQQDEw02YTQ5YzhkOC1hZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4mfTf5G6WQAkQnMcv+5G7jZdJBSSbENB2iZb/bCwmPIm91aIiyMz+9edOod R/mFf4UxZ1w3037aBMWesbeHFse+BsAar/PQSRC6BgO3ld+uCKSlZsRFSIf50Tku XrvcCZUAAPm8d+QpoILQU3UJVLyGpS6UoVuXCELTeajHbtvz2flXrspQV4ovlauT GNL4oD2IabNCvSiwUP0ze1qoxjDEiu5vy5S2wUJBYLsoLF7aH8Mbwo5AOSGGbv4J npjrm0XkPXzbCk6M6lHYGvM0dQvhJJLuv4Y0d+jZFPMeH8zI5wkkKobVT00vm+ga bFcUeS4MSREoTdOHiI9aC/k+hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKr0tjzC LZmLDQ6SiwhvhsxqN9wVMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsveugF0o3YfIdNVaTJM7zvNc0GM9aaEngoU2srcXkRry1oe5m1/a1BBlFYG8 gnHNO8K1TdMawHGNAQlGmiagmWWFx3rIIyD5nCQo1Z6T6oCCK8G1xrDMofTmyarl dpwsZPV77e1zpYyp2JVQu62rM8o/3U2RnvHUL6d0CmAR8MD9A/8VFGGDQnHT8XRf uCejg8Ri57IRSHt/HFdOf+Djg4EgzJegPjE2kBSGvFg3caU90qzTiP+2/Rc2wyNB /IHaY2w2cQIZayz+69C/y0lGSq22ZT1PwV37c0a+zwuxYT1tgYg8WyPFqgDkCl3O UCl9kbilAkWc/zKnWs4sxtL8uw== -----END CERTIFICATE-----Generated at Mon Jul 6 09:01:22 2026 by rpki-client