$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: Qp6XDkC7wi6rP/AU78i3SwOwRlVSW0JQZty0ovKqyLw= Subject key identifier: ED:45:B8:EC:D1:75:0D:05:EE:4F:E0:8D:E6:2D:E7:B9:25:D3:B3:90 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 360A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 3592 Signing time: Sun 26 Jul 2026 14:25:35 +0000 Manifest this update: Sun 26 Jul 2026 14:25:34 +0000 Manifest next update: Sun 02 Aug 2026 14:25:34 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: WOF9lDKnZrNG636YhlqI2prnkRfDkyh+M/nWPftIe4E=) 2: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=) 4: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=) 7: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=) 8: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=) 9: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 14:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13834 (0x360a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Jul 26 14:25:34 2026 GMT Not After : Aug 2 14:25:34 2026 GMT Subject: CN=6a6618df-fd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5d:27:c8:0a:f9:37:60:b3:21:fb:dd:fa:4a: d7:d3:17:1f:1c:67:d1:d4:96:01:2d:3f:89:72:b8: 03:d4:11:01:55:78:b0:3a:00:45:5f:18:e4:ae:51: 54:c5:ad:57:11:6c:8d:b0:4f:63:13:17:98:a1:30: be:7b:83:3b:f4:5c:fe:5f:70:ea:82:b1:71:c7:c8: ab:96:fc:3f:58:69:d9:20:9e:d1:bb:ea:7f:ee:16: b8:50:09:be:93:7d:17:2c:25:62:58:a9:f9:60:8a: 2c:6e:32:e0:61:57:3b:8b:44:7d:58:75:81:17:12: 3b:61:67:61:9f:52:44:8c:60:08:7c:58:ae:77:4b: 8e:5b:af:ee:f8:65:63:2f:fa:76:3f:b4:8f:0a:b5: 85:71:ea:0e:21:6a:da:d6:9e:3d:62:3c:36:6a:63: 4e:7b:5b:50:67:13:3f:fb:7c:b3:b7:f7:ab:d3:5e: 35:cf:85:f6:95:18:6b:92:cb:59:89:d8:e5:1c:dc: 21:91:a6:d9:7b:7f:6d:c2:19:ea:5b:95:5d:42:da: 33:09:57:c8:dd:7f:37:cc:1e:cb:2a:d3:60:eb:27: cd:24:45:35:ff:07:77:d4:19:bb:7b:62:28:1b:8f: 3d:8d:71:b3:37:ff:27:11:49:df:3e:a4:81:c5:b1: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:45:B8:EC:D1:75:0D:05:EE:4F:E0:8D:E6:2D:E7:B9:25:D3:B3:90 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:3a:d1:67:63:4f:7a:03:c3:3f:2d:62:1e:3b:7b:0b:e6: 28:8a:44:f2:78:eb:c6:66:c4:64:84:0b:0f:88:eb:8b:a5:2a: 6b:4b:26:1e:e8:62:9b:80:ca:6e:4e:34:0d:f2:2a:eb:85:c2: e6:8f:6c:56:8c:cf:44:0f:09:0b:14:09:a4:80:ad:b6:87:14: 13:36:0b:ce:0c:c8:68:1a:5b:94:9a:9d:07:59:78:f2:b7:00: 00:0f:5d:27:44:61:55:81:ca:2f:55:1c:9a:22:48:c1:b2:cc: 7e:68:a2:27:30:f6:12:22:a7:d0:1b:52:e8:7a:f2:41:bf:0f: 4e:1f:37:61:a7:fa:8a:fd:4c:a3:8b:79:d3:23:49:ea:0f:12: 10:b4:46:79:d9:15:49:85:51:2b:88:06:fc:12:c4:88:85:df: 61:1a:49:36:55:e5:b5:8e:b1:53:1c:e8:0a:20:46:c9:0d:cb: 61:4e:5b:e6:28:05:7d:12:81:4b:b4:7f:d7:71:b7:74:80:b2: e1:e5:ed:b7:02:de:31:1a:f6:b8:7e:63:6f:2f:a1:a3:6d:d1: b0:cb:3c:88:39:f3:92:38:28:6c:0b:e4:87:7f:21:13:e4:8b: 4e:47:e1:60:68:4c:3d:85:90:7a:ed:36:82:c3:d8:cc:d2:c6: 4a:1d:ff:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjYwNzI2MTQyNTM0WhcNMjYwODAyMTQyNTM0WjAYMRYwFAYD VQQDEw02YTY2MThkZi1mZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6l0nyAr5N2CzIfvd+krX0xcfHGfR1JYBLT+JcrgD1BEBVXiwOgBFXxjkrlFU xa1XEWyNsE9jExeYoTC+e4M79Fz+X3DqgrFxx8irlvw/WGnZIJ7Ru+p/7ha4UAm+ k30XLCViWKn5YIosbjLgYVc7i0R9WHWBFxI7YWdhn1JEjGAIfFiud0uOW6/u+GVj L/p2P7SPCrWFceoOIWra1p49Yjw2amNOe1tQZxM/+3yzt/er0141z4X2lRhrkstZ idjlHNwhkabZe39twhnqW5VdQtozCVfI3X83zB7LKtNg6yfNJEU1/wd31Bm7e2Io G489jXGzN/8nEUnfPqSBxbFX8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1FuOzR dQ0F7k/gjeYt57kl07OQMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEnQ60WdjT3oDwz8tYh47ewvmKIpE8njrxmbEZIQLD4jri6Uqa0smHuhim4DK bk40DfIq64XC5o9sVozPRA8JCxQJpICttocUEzYLzgzIaBpblJqdB1l48rcAAA9d J0RhVYHKL1UcmiJIwbLMfmiiJzD2EiKn0BtS6HryQb8PTh83Yaf6iv1Mo4t50yNJ 6g8SELRGedkVSYVRK4gG/BLEiIXfYRpJNlXltY6xUxzoCiBGyQ3LYU5b5igFfRKB S7R/13G3dICy4eXttwLeMRr2uH5jby+ho23RsMs8iDnzkjgobAvkh38hE+SLTkfh YGhMPYWQeu02gsPYzNLGSh3/8g== -----END CERTIFICATE-----Generated at Tue Jul 28 02:49:38 2026 by rpki-client