$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft File: leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json) Hash identifier: zrtqY0Wfw4xveX/I8/sa60IKLX2MbRZu+IW2ad5DuPk= Subject key identifier: 5A:E2:35:B8:EC:A0:43:0C:CF:15:B7:41:62:62:0D:BC:ED:DF:78:12 Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99 Certificate issuer: /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199 Certificate serial: 11F4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft Manifest number: 11E7 Signing time: Mon 20 Jul 2026 17:18:35 +0000 Manifest this update: Mon 20 Jul 2026 17:18:34 +0000 Manifest next update: Mon 27 Jul 2026 17:18:34 +0000 Files and hashes: 1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: r2Ex1zDVzlEfceD4C/keMs8NN47c6gY1qo1SVavkryA=) 2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4596 (0x11f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199 Validity Not Before: Jul 20 17:18:34 2026 GMT Not After : Jul 27 17:18:34 2026 GMT Subject: CN=6a5e586b-7eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:34:97:72:e6:d1:ee:fd:45:0e:21:61:53: 48:49:de:95:f7:ef:80:31:31:78:dc:7a:2e:c9:d7: 5a:9a:6d:d5:93:e5:24:fe:51:75:d3:3f:cd:ae:61: a6:eb:12:e3:2e:cc:c4:5c:9a:6d:f6:5f:df:ba:ea: 24:f2:81:9e:56:e7:c3:23:c7:ac:af:db:63:5f:0f: 16:9e:45:79:da:42:6f:e8:c5:66:0c:8b:64:08:6d: a1:32:8c:3c:b4:81:e9:00:6a:a2:fa:29:c6:c4:c2: a6:92:31:76:57:ee:bb:ed:e4:05:63:83:8d:65:8b: fa:62:f0:36:f8:88:61:9b:ab:bf:e2:5a:c3:0b:7f: 42:07:1b:52:99:d3:84:7d:74:bb:38:d9:86:f1:fb: d5:0a:b7:1c:e7:1b:db:87:bc:98:3e:ba:de:6d:3d: 1c:cb:a2:da:6e:2e:dd:62:88:84:fa:39:4f:11:a0: 36:f9:bc:af:20:37:4d:76:33:ae:1b:00:99:02:42: 9f:62:cb:d5:a3:0e:fb:96:6e:1b:b4:fb:82:f9:95: a4:d2:05:ae:7d:78:7c:34:ab:a1:09:77:d8:a5:34: 9a:c4:e6:e3:51:9a:28:1d:9f:03:d9:bf:22:c1:c4: 8c:03:48:19:58:23:b8:4d:f7:fd:1f:7f:75:2c:5c: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:35:B8:EC:A0:43:0C:CF:15:B7:41:62:62:0D:BC:ED:DF:78:12 X509v3 Authority Key Identifier: keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f8:cc:6c:7b:13:04:7e:f5:f4:c0:72:ba:85:a9:66:e8:e8: 52:28:3f:51:9c:02:32:1d:0d:51:3f:88:49:9d:c2:55:35:77: 02:30:3f:16:9e:59:4d:1c:94:9d:f5:c8:de:7a:e3:21:3e:d9: 38:33:dc:f9:7a:0e:46:28:01:0b:85:ba:bf:72:50:d0:71:aa: 8c:6e:66:87:56:72:31:b0:82:a5:e3:0a:83:c7:1c:6a:b8:43: 06:83:bf:b1:cf:77:7f:6c:f3:5a:38:6d:04:32:97:8a:b5:94: 34:2b:1d:24:ee:f6:5c:00:fd:2e:55:13:b6:45:bf:25:cc:c0: ed:13:e8:53:a5:0b:4c:23:d7:cf:b6:e0:99:d1:f8:83:92:87: de:c1:1f:6f:10:ea:7b:71:ce:78:e8:96:37:94:58:0f:b3:16: 63:1d:ce:f8:8d:b0:d4:33:0c:25:43:bd:ad:16:04:e7:34:3e: 4b:d5:22:2b:98:e1:0f:c2:50:f5:5e:e4:8e:76:1b:37:78:4d: 2d:bf:41:d1:0d:74:73:20:2f:9a:54:3a:95:a2:19:f9:87:d1: 72:92:49:72:cd:63:a0:4a:e2:15:ec:91:d0:b5:00:5d:d9:a6: 81:0b:4c:1d:2a:8e:05:1e:bf:aa:a5:1d:b5:43:b8:1e:41:81: d4:a8:34:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDk1RUFBRkMyNEI1QUY0QjE3MkI1OEJCMDFBNzAxQ0ZF MTk2REExOTkwHhcNMjYwNzIwMTcxODM0WhcNMjYwNzI3MTcxODM0WjAYMRYwFAYD VQQDEw02YTVlNTg2Yi03ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozk0l3Lm0e79RQ4hYVNISd6V9++AMTF43Houyddamm3Vk+Uk/lF10z/NrmGm 6xLjLszEXJpt9l/fuuok8oGeVufDI8esr9tjXw8WnkV52kJv6MVmDItkCG2hMow8 tIHpAGqi+inGxMKmkjF2V+677eQFY4ONZYv6YvA2+Ihhm6u/4lrDC39CBxtSmdOE fXS7ONmG8fvVCrcc5xvbh7yYPrrebT0cy6Labi7dYoiE+jlPEaA2+byvIDdNdjOu GwCZAkKfYsvVow77lm4btPuC+ZWk0gWufXh8NKuhCXfYpTSaxObjUZooHZ8D2b8i wcSMA0gZWCO4Tff9H391LFx5jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFriNbjs oEMMzxW3QWJiDbzt33gSMB8GA1UdIwQYMBaAFJXqr8JLWvSxcrWLsBpwHP4ZbaGZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi8wODI0M0M4QzEz MkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlMRnl0WXV3R25BY19obHRv WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xlcXZ3a3RhOUxGeXRZdXdHbkFjX2hsdG9aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi8wODI0M0M4QzEzMkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlM Rnl0WXV3R25BY19obHRvWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsfjMbHsTBH719MByuoWpZujoUig/UZwCMh0NUT+ISZ3CVTV3AjA/Fp5ZTRyU nfXI3nrjIT7ZODPc+XoORigBC4W6v3JQ0HGqjG5mh1ZyMbCCpeMKg8ccarhDBoO/ sc93f2zzWjhtBDKXirWUNCsdJO72XAD9LlUTtkW/JczA7RPoU6ULTCPXz7bgmdH4 g5KH3sEfbxDqe3HOeOiWN5RYD7MWYx3O+I2w1DMMJUO9rRYE5zQ+S9UiK5jhD8JQ 9V7kjnYbN3hNLb9B0Q10cyAvmlQ6laIZ+YfRcpJJcs1joEriFeyR0LUAXdmmgQtM HSqOBR6/qqUdtUO4HkGB1Kg0jg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:49:24 2026 by rpki-client