$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: mnNZKWyfCh7DhJyDNXFupttLm3benTQDxhS3S2TOziQ= Subject key identifier: 21:64:F4:82:DF:EA:4F:CF:3C:64:EF:03:1F:80:A2:67:15:69:DF:3F Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: CD Signing time: Mon 01 Jun 2026 07:33:31 +0000 Manifest this update: Mon 01 Jun 2026 07:33:30 +0000 Manifest next update: Mon 08 Jun 2026 07:33:30 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: J/Oa9E1GIlKAGSF7vyHJU1/IDQUvp+w4uII27Uq+oi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Jun 1 07:33:30 2026 GMT Not After : Jun 8 07:33:30 2026 GMT Subject: CN=6a1d35cb-bd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:94:fc:9f:7e:71:2c:42:5c:49:ca:75:3d: fc:f9:65:e0:81:85:53:ad:f8:3a:b4:c3:da:64:85: 94:56:7b:4a:90:74:8f:db:36:44:3b:8c:42:71:d3: cd:c9:f5:08:b0:2d:60:c0:c3:f2:50:a7:aa:cb:93: 57:5d:dd:1e:e7:1b:07:91:ea:e1:99:85:f7:b9:58: b7:9f:41:21:13:53:8f:14:ad:40:33:2e:8d:e3:a3: 92:02:37:3a:0f:22:04:7c:e5:4e:5c:ec:cc:b7:06: a6:06:d7:2c:39:a7:09:29:4b:d1:6a:3f:6a:7b:fc: 14:23:f7:2c:e5:e9:d0:f8:55:20:0e:22:16:d3:51: 91:b3:80:4f:10:69:8b:12:75:89:63:91:04:0d:9f: 02:42:f6:c7:87:df:39:75:da:66:0f:57:ff:5f:f1: c4:0b:34:35:aa:c8:21:da:a4:a4:62:34:1b:c6:ee: a3:81:c0:92:d8:69:92:40:99:83:ab:20:3b:b9:75: 90:8b:26:2e:a2:c6:e0:50:5b:c3:50:d6:d7:11:c1: ca:65:23:cb:3b:95:51:fa:cd:1d:1d:1c:fe:ff:cd: 71:77:b3:45:5e:8f:96:4c:a4:bb:d5:e3:4e:35:2f: 22:cd:a6:0f:97:b2:43:0a:7d:94:22:50:16:e1:9c: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:F4:82:DF:EA:4F:CF:3C:64:EF:03:1F:80:A2:67:15:69:DF:3F X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:54:13:05:11:3b:70:e4:cc:d9:e7:f7:f9:bb:5e:e1:fb:19: 26:ec:9a:2c:e6:a0:d1:fb:00:72:6a:52:12:10:92:26:19:30: 19:8a:4b:23:be:9f:cc:c1:53:33:84:2a:46:16:8e:90:06:0b: 40:ac:32:fe:ce:cc:a1:68:49:0c:6b:02:3b:18:07:98:35:82: 58:d8:ea:cc:4f:c2:63:5c:d8:56:54:34:46:e6:d6:45:a1:31: c7:17:d3:df:db:f8:4d:8a:95:aa:17:7b:e5:e3:ec:fb:71:d8: 4f:a6:9b:99:fa:3d:c3:43:6e:ed:20:8a:f8:ea:c8:ac:ef:9b: cf:d2:c4:fd:1e:cc:ed:9b:ce:5d:9e:6a:98:ce:c0:8f:d5:ea: 63:d2:5e:a3:cf:04:f8:69:bf:19:23:41:50:75:b3:44:82:e7: 2d:60:39:62:5f:11:da:b1:4d:b9:8c:d7:1c:19:33:ef:c8:19: d2:28:aa:30:a7:c7:80:de:01:ff:0c:1c:6b:86:da:7a:79:8e: fd:73:4a:fc:c4:d9:48:f4:e0:34:f2:a4:fa:34:b0:c1:80:34: b4:b7:a9:81:c0:7f:3c:e0:60:c3:b5:7b:fe:3b:94:d1:31:e2: 73:9e:b0:de:96:a6:03:60:64:5e:10:0d:5e:d6:d6:28:0d:20: 3d:2e:0c:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0NzYzMTFGMzc1 Q0Q4M0MwRDIwHhcNMjYwNjAxMDczMzMwWhcNMjYwNjA4MDczMzMwWjAYMRYwFAYD VQQDEw02YTFkMzVjYi1iZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhSU/J9+cSxCXEnKdT38+WXggYVTrfg6tMPaZIWUVntKkHSP2zZEO4xCcdPN yfUIsC1gwMPyUKeqy5NXXd0e5xsHkerhmYX3uVi3n0EhE1OPFK1AMy6N46OSAjc6 DyIEfOVOXOzMtwamBtcsOacJKUvRaj9qe/wUI/cs5enQ+FUgDiIW01GRs4BPEGmL EnWJY5EEDZ8CQvbHh985ddpmD1f/X/HECzQ1qsgh2qSkYjQbxu6jgcCS2GmSQJmD qyA7uXWQiyYuosbgUFvDUNbXEcHKZSPLO5VR+s0dHRz+/81xd7NFXo+WTKS71eNO NS8izaYPl7JDCn2UIlAW4ZyXhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFk9ILf 6k/PPGTvAx+AomcVad8/MB8GA1UdIwQYMBaAFJZztczwqOpc5BouR2MR83XNg8DS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DMTkzOUNFNjI0 MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZsemtHaTVIWXhIemRjMkR3 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZs emtHaTVIWXhIemRjMkR3TkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFQTBRE7cOTM2ef3+bte4fsZJuyaLOag0fsAcmpSEhCSJhkwGYpLI76fzMFT M4QqRhaOkAYLQKwy/s7MoWhJDGsCOxgHmDWCWNjqzE/CY1zYVlQ0RubWRaExxxfT 39v4TYqVqhd75ePs+3HYT6abmfo9w0Nu7SCK+OrIrO+bz9LE/R7M7ZvOXZ5qmM7A j9XqY9Jeo88E+Gm/GSNBUHWzRILnLWA5Yl8R2rFNuYzXHBkz78gZ0iiqMKfHgN4B /wwca4baenmO/XNK/MTZSPTgNPKk+jSwwYA0tLepgcB/POBgw7V7/juU0THic56w 3pamA2BkXhANXtbWKA0gPS4M6A== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:42 2026 by rpki-client