$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft File: lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json) Hash identifier: Otg7zL1rmWi+JVF1ajL5yZXYryrBMh3Jw+ChGgNW43o= Subject key identifier: 28:F0:FE:67:B5:0E:20:05:EA:52:A8:93:8D:B2:5C:C3:42:A9:C4:62 Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft Manifest number: 26 Signing time: Tue 19 May 2026 08:49:59 +0000 Manifest this update: Tue 19 May 2026 08:49:59 +0000 Manifest next update: Tue 26 May 2026 08:49:59 +0000 Files and hashes: 1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: xU1+HbPNd+Uqu3+fW8F6/8ebrBtRmYTSa/PoPqQZ798=) 2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=) 3: F594A6063FA511F1B714D040BE833773.roa (hash: vpQZtX1yMfD38qzmAFhlXuV41BUehxqTr9ZL+NUr+4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Validity Not Before: May 19 08:49:59 2026 GMT Not After : May 26 08:49:59 2026 GMT Subject: CN=6a0c2437-e387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:41:b7:6b:6a:35:96:54:80:29:bb:2c:5f: a5:b9:2a:64:70:45:6c:11:00:fd:ee:37:80:fe:89: 8b:b8:03:3f:37:c8:16:a1:b8:15:24:e7:a9:50:2f: e0:d5:42:5b:5d:90:c9:a8:42:83:8d:31:fb:fe:52: f0:1e:59:0c:7b:4c:d8:75:1a:71:ea:a8:6c:01:7b: e8:70:df:53:14:69:d5:e4:e3:e8:55:a9:0a:61:1d: 5c:ea:63:93:57:57:8d:10:65:df:aa:3b:38:6d:14: fe:a1:9c:fd:a9:ea:45:7e:71:7f:1c:3e:fa:3e:f8: 89:b1:74:5d:d9:5c:28:e9:2c:5d:81:f4:54:e7:5b: 03:5d:ad:f6:0a:9f:e3:db:17:4f:b8:88:2b:9b:49: 4e:8d:ea:94:31:7c:5a:b0:04:a9:e8:ba:5e:70:49: 81:24:7d:a1:2e:eb:3a:1f:d7:86:47:1b:b8:5b:96: 2b:a7:a9:5f:1f:51:cb:27:0e:46:36:41:c0:ac:f1: 6c:77:64:4a:cf:b9:7d:ec:25:3c:76:9c:7e:df:aa: 5e:e8:40:e0:9d:dc:dc:0a:40:d3:18:02:f1:56:15: 1e:7b:47:7a:0b:e9:e7:4a:ae:f9:10:f2:86:49:1a: 80:d6:3e:dd:9e:ea:d6:dd:68:6d:cf:00:5d:6d:d5: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:FE:67:B5:0E:20:05:EA:52:A8:93:8D:B2:5C:C3:42:A9:C4:62 X509v3 Authority Key Identifier: keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:99:ab:b3:42:33:50:0c:b1:33:19:34:81:67:2a:50:c4:d8: cc:04:36:c1:4f:58:ca:f0:06:fe:2e:da:26:e4:f2:69:01:7f: 61:3f:70:83:32:e2:84:af:a6:f6:fd:87:c4:2a:13:37:aa:2a: 8e:1a:af:98:32:63:cf:b1:e0:64:a4:2c:02:d5:4e:12:46:92: e5:70:09:78:b1:7e:d6:da:bd:18:b7:a9:7f:75:50:74:72:43: 26:66:df:33:28:30:69:02:7b:c5:e3:ad:ee:af:8c:01:64:65: fb:1b:f0:59:8d:42:8d:11:3d:0d:5d:fc:ef:46:91:b9:d5:ea: 5c:12:f0:02:5a:77:a5:fd:9a:a1:4e:20:e6:dc:a4:b7:5f:02: f2:1a:27:94:68:49:ca:ec:3f:9a:21:de:d7:2a:0e:af:8f:4e: 76:d2:83:87:f7:9a:6d:9c:71:84:0a:16:d4:6b:4e:1d:60:24: aa:f2:a4:fc:13:30:71:9b:ab:08:11:cc:47:0b:8f:92:9b:bd: 9b:8d:8a:97:91:db:db:34:e7:01:0e:88:46:e8:d2:17:e7:c8: 00:62:ed:e0:4f:e1:7c:39:24:40:cd:91:2f:51:61:d1:fc:2c: 4d:e7:72:6f:4b:a1:cb:d9:03:27:93:91:8f:a1:8c:cb:c3:a1: 80:c7:7d:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz OUU5QUQwRjAeFw0yNjA1MTkwODQ5NTlaFw0yNjA1MjYwODQ5NTlaMBgxFjAUBgNV BAMTDTZhMGMyNDM3LWUzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHTkG3a2o1llSAKbssX6W5KmRwRWwRAP3uN4D+iYu4Az83yBahuBUk56lQL+DV QltdkMmoQoONMfv+UvAeWQx7TNh1GnHqqGwBe+hw31MUadXk4+hVqQphHVzqY5NX V40QZd+qOzhtFP6hnP2p6kV+cX8cPvo++ImxdF3ZXCjpLF2B9FTnWwNdrfYKn+Pb F0+4iCubSU6N6pQxfFqwBKnoul5wSYEkfaEu6zof14ZHG7hbliunqV8fUcsnDkY2 QcCs8Wx3ZErPuX3sJTx2nH7fql7oQOCd3NwKQNMYAvFWFR57R3oL6edKrvkQ8oZJ GoDWPt2e6tbdaG3PAF1t1W/3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKPD+Z7UO IAXqUqiTjbJcw0KpxGIwHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NUMzLzJCQjJCQjI2MkNEQTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1f bzgxNW83Q1ZVR0RucHJROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcmauzQjNQDLEzGTSBZypQxNjMBDbBT1jK8Ab+Ltom5PJpAX9hP3CDMuKEr6b2 /YfEKhM3qiqOGq+YMmPPseBkpCwC1U4SRpLlcAl4sX7W2r0Yt6l/dVB0ckMmZt8z KDBpAnvF463ur4wBZGX7G/BZjUKNET0NXfzvRpG51epcEvACWnel/ZqhTiDm3KS3 XwLyGieUaEnK7D+aId7XKg6vj0520oOH95ptnHGEChbUa04dYCSq8qT8EzBxm6sI EcxHC4+Sm72bjYqXkdvbNOcBDohG6NIX58gAYu3gT+F8OSRAzZEvUWHR/CxN53Jv S6HL2QMnk5GPoYzLw6GAx32E -----END CERTIFICATE-----Generated at Thu May 21 09:35:58 2026 by rpki-client