$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: kUVvH3GzlmUj24ScdS2o0j+ItPDdnFAHpqJ7obiPHlg= Subject key identifier: 20:03:DA:FD:DA:57:90:29:B5:1C:EF:C3:60:CB:63:51:CA:8C:86:2B Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 19A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 198A Signing time: Wed 20 May 2026 16:24:24 +0000 Manifest this update: Wed 20 May 2026 16:24:23 +0000 Manifest next update: Wed 27 May 2026 16:24:23 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: AsEywAVBgKrW6R8kvB4B3lPLnN5k5b+g2jByhcuft7U=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: DzKmtYCdBRynloESEDJ88OdtBxNoXDc9M+RZzPAZ8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6561 (0x19a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: May 20 16:24:23 2026 GMT Not After : May 27 16:24:23 2026 GMT Subject: CN=6a0de038-932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:76:8b:49:5f:c1:c5:4e:20:53:0e:92:33: 4b:87:a1:8d:8a:c8:b6:94:04:94:82:84:b3:88:a5: aa:35:ae:b8:23:3c:59:a0:be:ed:3c:d1:a0:5f:26: d2:5e:47:ea:f2:28:26:58:77:41:0f:4a:ab:5a:74: f2:84:4b:34:08:c7:7c:fe:81:ce:27:ea:e1:6b:97: c5:6b:18:ed:65:38:c8:82:26:63:94:8b:04:43:30: 61:2a:35:63:6f:fc:3f:34:53:1e:c8:db:96:c6:5a: af:28:94:a0:f6:41:83:12:e2:f6:8c:c8:d6:7d:7b: a0:ab:7a:07:ab:42:05:f8:8d:b0:bd:42:d4:de:91: d1:5d:ab:69:73:b6:94:f7:8b:69:4f:b2:aa:07:98: dd:b6:06:6b:02:13:9c:b5:44:0f:2e:55:f5:12:5a: 64:da:d8:69:98:a8:47:e0:14:0d:ee:00:a6:61:c4: 4b:03:b1:4d:a7:c2:93:98:a2:40:54:ed:0b:70:1f: 8d:22:55:a8:43:25:f6:9f:66:dd:21:02:b5:36:70: c0:5e:13:62:93:4a:ac:39:cf:16:1e:17:a2:90:34: 2c:8d:3a:2d:c7:5b:e4:75:96:72:51:d9:8e:08:a5: 4c:8e:26:7a:54:33:01:01:0b:32:42:d8:78:f8:d1: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:03:DA:FD:DA:57:90:29:B5:1C:EF:C3:60:CB:63:51:CA:8C:86:2B X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ba:b3:71:df:94:ba:34:25:63:21:ea:22:74:20:88:af:01: 54:e4:31:8d:85:61:9a:c1:a1:6c:bb:02:0b:17:85:e4:a1:27: 63:41:a4:a7:5f:ef:86:49:21:34:df:63:79:9f:cd:83:f9:fa: 09:55:f1:6d:18:63:83:19:bf:9e:f4:e7:76:5d:a0:c8:ea:b4: eb:66:eb:85:bc:bb:bb:d1:0f:ab:13:61:46:95:0a:96:c8:19: aa:99:4f:b3:31:49:43:b4:47:7c:cc:08:fc:b2:d2:c7:7b:d3: e3:ec:75:d7:4c:b0:c7:3c:77:a8:eb:05:80:37:02:0b:b8:cb: 38:6c:e4:a0:60:cf:be:c8:43:1f:06:55:2f:4c:82:89:a4:0a: b8:4c:e8:04:8a:04:e5:97:d1:10:a3:1b:54:7d:c3:0e:5f:8c: 78:c8:4f:70:b5:c1:a6:81:b0:d6:4b:9f:79:ba:1b:16:11:f9: b8:f0:cf:42:10:98:eb:9f:46:a7:93:71:0a:46:cf:5c:cb:bf: f0:bd:52:4b:dd:70:ea:19:16:08:0b:9d:bc:52:80:41:72:9b: 03:50:21:67:48:b2:05:cd:33:4a:76:67:c7:fe:41:23:1c:4a: 50:ea:5a:47:4a:ad:b4:26:28:ff:30:8e:bb:59:71:41:e6:7d: 22:07:19:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYwNTIwMTYyNDIzWhcNMjYwNTI3MTYyNDIzWjAYMRYwFAYD VQQDEw02YTBkZTAzOC05MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24d2i0lfwcVOIFMOkjNLh6GNisi2lASUgoSziKWqNa64IzxZoL7tPNGgXybS Xkfq8igmWHdBD0qrWnTyhEs0CMd8/oHOJ+rha5fFaxjtZTjIgiZjlIsEQzBhKjVj b/w/NFMeyNuWxlqvKJSg9kGDEuL2jMjWfXugq3oHq0IF+I2wvULU3pHRXatpc7aU 94tpT7KqB5jdtgZrAhOctUQPLlX1Elpk2thpmKhH4BQN7gCmYcRLA7FNp8KTmKJA VO0LcB+NIlWoQyX2n2bdIQK1NnDAXhNik0qsOc8WHheikDQsjTotx1vkdZZyUdmO CKVMjiZ6VDMBAQsyQth4+NHUBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAD2v3a V5AptRzvw2DLY1HKjIYrMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGrqzcd+UujQlYyHqInQgiK8BVOQxjYVhmsGhbLsCCxeF5KEnY0Gkp1/vhkkh NN9jeZ/Ng/n6CVXxbRhjgxm/nvTndl2gyOq062brhby7u9EPqxNhRpUKlsgZqplP szFJQ7RHfMwI/LLSx3vT4+x110ywxzx3qOsFgDcCC7jLOGzkoGDPvshDHwZVL0yC iaQKuEzoBIoE5ZfREKMbVH3DDl+MeMhPcLXBpoGw1kufebobFhH5uPDPQhCY659G p5NxCkbPXMu/8L1SS91w6hkWCAudvFKAQXKbA1AhZ0iyBc0zSnZnx/5BIxxKUOpa R0qttCYo/zCOu1lxQeZ9IgcZbA== -----END CERTIFICATE-----Generated at Thu May 21 09:36:37 2026 by rpki-client