$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft File: LThammVNvyfyEuUykzG0AdAlKDo.mft (raw, json) Hash identifier: GN95VJAuyVDS2/emtmozkif3bT6LCuuFRHPVxGQai40= Subject key identifier: ED:C8:28:58:83:D4:6A:5F:B2:6A:A6:B1:A9:58:48:EA:55:F0:5F:6F Authority key identifier: 2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A Certificate issuer: /CN=A9178AFC/serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft Manifest number: 33 Signing time: Tue 19 May 2026 08:33:57 +0000 Manifest this update: Tue 19 May 2026 08:33:57 +0000 Manifest next update: Tue 26 May 2026 08:33:57 +0000 Files and hashes: 1: LThammVNvyfyEuUykzG0AdAlKDo.crl (hash: go3IQyd3lVWEqAmUJwtQbu2VyN2R26aDHWP5+VtZ9r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Validity Not Before: May 19 08:33:57 2026 GMT Not After : May 26 08:33:57 2026 GMT Subject: CN=6a0c2075-d3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:22:d5:ec:d4:6b:62:f0:03:bf:75:83:92: d6:45:2a:1f:3f:4e:cc:79:d7:c2:3e:3b:41:14:80: 3f:4f:5f:13:95:ec:e4:33:4a:40:19:14:6d:ed:33: e2:63:88:86:05:bf:28:e2:75:04:e5:e0:46:9b:9c: f6:ed:2c:3f:7f:a7:6a:b0:73:39:a5:02:04:38:c4: 78:b9:59:3d:37:2f:97:46:32:68:cd:2f:cb:58:b0: 4f:1e:ff:4a:2d:a2:80:d9:17:6c:96:61:b4:09:72: e4:71:fa:e8:9b:a1:3b:ec:8f:e3:c5:50:ec:5c:83: f3:1e:59:5c:d9:6b:6c:92:22:d1:14:0b:60:24:2b: 6c:66:24:b5:d9:09:cf:94:0b:4a:4c:61:ef:e0:bc: d5:06:be:2f:10:a2:a4:fa:50:aa:b4:d6:bb:65:b9: 26:02:04:f7:3c:cc:85:4f:f7:7a:7c:6d:ef:99:76: 63:a8:24:21:1f:34:cc:d3:60:81:7c:e6:f6:7b:6c: 9e:cf:02:0f:56:35:5f:57:49:fa:56:29:8c:c3:06: e8:7d:ed:dd:65:a2:a3:90:fd:19:da:b8:17:cd:05: a0:36:a5:11:8d:1e:34:1d:ec:a7:8d:2b:32:d1:2d: 97:6d:bd:3a:d1:f3:43:86:ac:2f:24:3f:68:0a:42: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C8:28:58:83:D4:6A:5F:B2:6A:A6:B1:A9:58:48:EA:55:F0:5F:6F X509v3 Authority Key Identifier: keyid:2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:59:9d:e5:ca:02:02:59:44:b8:d9:24:aa:56:4d:c3:0b:6f: 8c:86:79:d0:e3:76:b4:e4:29:fb:bc:c9:1f:51:50:ee:63:a3: 51:b5:1a:3c:6d:eb:6f:85:54:3e:6e:1c:d5:2c:7a:2b:6e:53: 8c:a5:25:b3:ad:1c:23:28:a5:ef:90:6a:5b:ea:c1:a4:2a:3d: 6e:b4:7c:1f:96:63:00:ed:ea:72:e9:2f:a4:cf:f5:a5:59:04: 5b:f7:06:a3:c0:c8:57:b7:c9:7f:56:92:52:32:e9:2b:24:ae: f4:49:89:51:b6:31:2c:d2:cc:11:b0:25:91:d6:df:3c:e4:db: 6e:30:ee:12:0f:8c:42:d4:67:66:79:bc:80:c8:3b:e8:f4:ff: 1f:e6:97:bd:f3:6d:94:f1:29:fe:14:51:52:c2:1a:3d:cb:b4: 91:ce:ce:07:c1:2e:ce:3a:89:81:e0:ea:33:6d:f6:78:df:20: 3c:1f:c1:55:47:e9:eb:c1:08:6c:52:47:8c:13:6f:a1:6c:a0: af:d6:5c:c3:86:c1:c9:52:82:fc:a2:34:86:a9:b2:53:15:e2: df:97:1a:8b:a1:5a:53:5f:a1:53:51:9a:d7:7d:d2:70:02:14: 3f:8d:c3:a9:cb:22:16:ea:40:d6:04:bc:28:6b:31:5e:bc:16: 56:54:06:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoMkQzODVBOUE2NTREQkYyN0YyMTJFNTMyOTMzMUI0MDFE MDI1MjgzQTAeFw0yNjA1MTkwODMzNTdaFw0yNjA1MjYwODMzNTdaMBgxFjAUBgNV BAMTDTZhMGMyMDc1LWQzYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsDCLV7NRrYvADv3WDktZFKh8/Tsx518I+O0EUgD9PXxOV7OQzSkAZFG3tM+Jj iIYFvyjidQTl4EabnPbtLD9/p2qwczmlAgQ4xHi5WT03L5dGMmjNL8tYsE8e/0ot ooDZF2yWYbQJcuRx+uiboTvsj+PFUOxcg/MeWVzZa2ySItEUC2AkK2xmJLXZCc+U C0pMYe/gvNUGvi8QoqT6UKq01rtluSYCBPc8zIVP93p8be+ZdmOoJCEfNMzTYIF8 5vZ7bJ7PAg9WNV9XSfpWKYzDBuh97d1loqOQ/RnauBfNBaA2pRGNHjQd7KeNKzLR LZdtvTrR80OGrC8kP2gKQvoDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7cgoWIPU al+yaqaxqVhI6lXwX28wHwYDVR0jBBgwFoAULThammVNvyfyEuUykzG0AdAlKDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzI5MjFEMUQ0MEZE QTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlmeUV1VXlrekcwQWRBbEtE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFRoYW1tVk52eWZ5RXVVeWt6RzBBZEFsS0RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzI5MjFEMUQ0MEZEQTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlm eUV1VXlrekcwQWRBbEtEby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCvWZ3lygICWUS42SSqVk3DC2+MhnnQ43a05Cn7vMkfUVDuY6NRtRo8betvhVQ+ bhzVLHorblOMpSWzrRwjKKXvkGpb6sGkKj1utHwflmMA7epy6S+kz/WlWQRb9waj wMhXt8l/VpJSMukrJK70SYlRtjEs0swRsCWR1t885NtuMO4SD4xC1GdmebyAyDvo 9P8f5pe9822U8Sn+FFFSwho9y7SRzs4HwS7OOomB4OozbfZ43yA8H8FVR+nrwQhs UkeME2+hbKCv1lzDhsHJUoL8ojSGqbJTFeLflxqLoVpTX6FTUZrXfdJwAhQ/jcOp yyIW6kDWBLwoazFevBZWVAbw -----END CERTIFICATE-----Generated at Thu May 21 10:18:05 2026 by rpki-client