$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: AX9AnG/brGmYXBsUnCwwxKH7A3NwWepV9W8LNROV1ow= Subject key identifier: AE:C9:EA:00:4A:23:26:4C:A8:60:ED:A1:AB:74:08:9B:9E:AC:C8:BE Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 035F Signing time: Fri 29 May 2026 00:45:17 +0000 Manifest this update: Fri 29 May 2026 00:45:16 +0000 Manifest next update: Fri 05 Jun 2026 00:45:16 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: KboQp4We1KAjvPUjR+uLY6hW/L1s3fdOvp82rq/ZOiU=) 2: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: 8dpXRXimhjXqFq8UENKdvQMz2YmohstnkMIHLOtJCy4=) 3: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: EaaSXzGz05+ts4EkpTMhP55oUChU6Bk9DAG9srhRaSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 00:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: May 29 00:45:16 2026 GMT Not After : Jun 5 00:45:16 2026 GMT Subject: CN=6a18e19d-4103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:86:2b:8f:1b:d4:a8:ae:c3:c4:88:eb:20: 29:4e:0d:9d:e5:29:6e:56:4f:10:dc:67:66:de:80: 08:d8:3c:ec:a6:c2:f2:7e:f0:a5:68:8b:e3:fe:03: 19:a6:97:1c:d8:6a:47:da:b1:82:28:e9:79:cf:13: 0e:30:62:17:ee:ac:54:96:a5:6e:92:30:9f:eb:d7: 04:11:89:ce:c7:db:8b:58:10:b6:43:e0:37:ea:3d: 15:dc:5e:cb:ec:8d:e1:56:c0:e1:36:44:cd:3c:fc: 40:27:9c:19:4d:06:d4:78:5b:60:08:57:20:94:ee: 34:14:c0:6b:55:22:01:e0:1b:97:9a:52:2a:4a:6a: 43:ba:59:e8:8b:5b:4c:f1:cf:b9:90:aa:94:82:64: b2:8f:e3:19:b5:0e:0f:c9:fe:d0:57:9b:55:37:bd: 38:fd:f2:23:2d:e7:12:39:c4:25:e3:a6:52:b6:7f: 24:89:35:af:ce:d5:d7:fc:8e:42:25:cb:87:cf:fc: 13:2b:6b:67:ad:21:3b:a7:03:64:a2:cf:0e:c5:10: 44:0b:63:0f:32:a3:b4:78:16:e6:7c:93:f0:d2:2e: ed:1f:bf:24:f8:91:5d:e3:99:ac:da:d7:22:9a:19: a8:96:63:5c:f4:7b:84:d1:95:b8:94:27:51:8c:23: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C9:EA:00:4A:23:26:4C:A8:60:ED:A1:AB:74:08:9B:9E:AC:C8:BE X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:0d:7b:d8:b4:74:18:3b:d4:ab:d2:fe:91:59:54:11:a5:e5: 45:25:ba:af:7d:74:53:6c:cf:78:9c:28:04:88:20:ab:d1:a1: 74:9c:7a:74:0c:ee:af:82:59:86:d8:55:a2:9a:33:27:cf:a4: 3c:7d:72:a3:27:38:8a:0c:72:ab:68:d0:8b:d6:3e:0c:ee:0e: cb:20:07:bc:49:a4:20:e0:d0:97:cf:61:96:eb:e8:c7:dd:06: 7d:42:10:1e:66:09:56:54:f9:29:d4:a1:a0:de:91:15:fc:e9: 67:7b:62:d2:48:5b:b5:d2:6f:52:88:bb:9e:b9:30:e8:ac:13: 20:1b:93:2f:4c:d1:43:eb:3e:9d:52:c2:f1:03:be:67:dd:27: f3:80:8c:e0:44:76:25:9e:7c:84:5b:8e:c0:53:12:09:3b:92: db:a2:bd:df:18:c8:34:c2:98:5c:2b:f5:d1:06:a9:cb:68:6f: 70:ba:7f:0a:d1:00:bd:29:8f:67:c9:c4:1d:91:b1:bf:3e:d4: 0e:db:11:df:5b:3f:d5:98:9c:d8:d2:f9:ad:5b:0f:65:04:b2: b0:5b:41:40:b6:f6:ec:e6:92:0f:b6:67:4a:b6:fc:f3:3a:65: aa:3a:c2:3d:6b:9f:94:8d:12:0e:ee:c0:3e:7f:94:8b:d2:21: 57:b1:c5:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjYwNTI5MDA0NTE2WhcNMjYwNjA1MDA0NTE2WjAYMRYwFAYD VQQDEw02YTE4ZTE5ZC00MTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyyGK48b1Kiuw8SI6yApTg2d5SluVk8Q3Gdm3oAI2DzspsLyfvClaIvj/gMZ ppcc2GpH2rGCKOl5zxMOMGIX7qxUlqVukjCf69cEEYnOx9uLWBC2Q+A36j0V3F7L 7I3hVsDhNkTNPPxAJ5wZTQbUeFtgCFcglO40FMBrVSIB4BuXmlIqSmpDulnoi1tM 8c+5kKqUgmSyj+MZtQ4Pyf7QV5tVN704/fIjLecSOcQl46ZStn8kiTWvztXX/I5C JcuHz/wTK2tnrSE7pwNkos8OxRBEC2MPMqO0eBbmfJPw0i7tH78k+JFd45ms2tci mhmolmNc9HuE0ZW4lCdRjCNu4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7J6gBK IyZMqGDtoat0CJuerMi+MB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvA172LR0GDvUq9L+kVlUEaXlRSW6r310U2zPeJwoBIggq9GhdJx6dAzur4JZ hthVopozJ8+kPH1yoyc4igxyq2jQi9Y+DO4OyyAHvEmkIODQl89hluvox90GfUIQ HmYJVlT5KdShoN6RFfzpZ3ti0khbtdJvUoi7nrkw6KwTIBuTL0zRQ+s+nVLC8QO+ Z90n84CM4ER2JZ58hFuOwFMSCTuS26K93xjINMKYXCv10Qapy2hvcLp/CtEAvSmP Z8nEHZGxvz7UDtsR31s/1Zic2NL5rVsPZQSysFtBQLb27OaSD7ZnSrb88zplqjrC PWuflI0SDu7APn+Ui9IhV7HFhQ== -----END CERTIFICATE-----Generated at Fri May 29 17:04:45 2026 by rpki-client