$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: Xmo/GU9A2RrmUVjnIuYoZb2JOrBlycOlKRapkldZUGY= Subject key identifier: 2F:B6:A5:FA:18:9A:75:05:3C:D1:31:B3:E3:FA:D7:CD:6D:6E:6C:A4 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 19C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 19A9 Signing time: Mon 20 Jul 2026 16:30:31 +0000 Manifest this update: Mon 20 Jul 2026 16:30:31 +0000 Manifest next update: Mon 27 Jul 2026 16:30:31 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: EQEbOsc8PGyRr0vKwYctxdgFSRUkXht57jtY8mR02uo=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: DzKmtYCdBRynloESEDJ88OdtBxNoXDc9M+RZzPAZ8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6592 (0x19c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Jul 20 16:30:31 2026 GMT Not After : Jul 27 16:30:31 2026 GMT Subject: CN=6a5e4d27-c068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:c6:b3:da:ac:43:d1:06:b8:fd:31:d3:84: 49:67:32:7b:26:5b:0d:02:b7:1a:95:a8:c3:c6:7d: c4:2f:f2:af:f4:40:e7:6d:11:56:ea:31:c0:a3:83: 53:53:f2:a3:55:fc:4b:c1:7d:b8:8c:d3:c9:fd:74: 59:9b:47:ee:25:e1:12:53:df:10:3a:b7:4f:03:7e: f3:fe:30:9a:88:bc:60:48:f9:35:29:64:8e:ad:c2: 6a:fc:7b:d3:b2:a4:62:23:ce:ab:2e:08:82:35:12: 68:71:40:d9:d6:3a:2c:cf:c5:05:93:38:66:be:1a: 6c:6d:2b:60:c7:85:ca:ba:7e:8f:d0:ec:c7:c7:79: 31:3f:f2:9f:03:da:58:37:25:d5:09:90:0e:25:ea: dc:d7:58:ae:d9:08:c6:7d:f7:0c:19:e8:fc:6a:28: c4:06:73:11:d1:65:65:e5:be:b5:ff:e5:b1:a9:06: 48:4c:98:90:92:7e:92:ac:32:dc:83:da:2f:2e:b9: fc:bc:b6:90:ac:17:f5:7a:78:ec:9a:e5:69:8d:57: 18:a6:70:8e:e1:4b:86:3e:e8:58:89:48:9e:d4:c9: 27:a5:33:e0:92:11:65:87:57:8e:e7:56:d9:a3:bc: d2:22:b0:2c:8e:ac:45:4b:26:c6:c8:2b:d5:5a:3e: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B6:A5:FA:18:9A:75:05:3C:D1:31:B3:E3:FA:D7:CD:6D:6E:6C:A4 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b6:73:5d:25:a9:25:7b:ed:a3:8c:75:33:94:f3:ae:ee:95: 09:71:24:af:89:7e:68:a2:37:18:45:e0:66:6e:d8:67:f2:45: c1:8a:e3:50:f3:3c:5c:19:e9:7e:1d:5c:c9:d3:fa:bf:5d:2f: e1:58:b4:ca:64:15:4a:e2:44:31:c6:73:91:9f:e7:b1:7d:86: f7:fe:39:d7:5d:fd:1f:1d:bf:d3:e5:9a:7e:02:47:6c:b5:4a: cc:a2:e1:91:1d:51:30:17:65:6b:38:62:cc:0f:37:42:ec:ed: 19:89:e1:cf:65:6e:25:f6:1d:5d:4b:63:e0:52:dd:cb:08:cb: e5:5d:d0:a8:84:83:c3:e8:bb:b6:8b:a0:1c:8f:ae:12:5d:94: 1a:02:ca:7c:ef:c6:49:8e:42:f3:e0:ea:cc:e7:97:a7:62:c1: 71:84:62:1a:50:13:71:49:a7:cc:bc:75:0e:87:7c:00:65:54: 59:f1:40:79:e5:86:1a:dc:8e:56:d6:82:3e:06:7a:e7:ce:3f: cf:5a:b1:3b:33:62:cd:23:2b:f0:95:ff:bb:2e:b5:b1:ed:ad: 5a:73:e8:13:85:7c:8d:66:de:e3:aa:29:e8:88:6c:37:96:4c: 3f:c4:6c:6e:fd:df:46:9c:09:fc:db:12:ae:c5:d1:12:35:ce: 05:08:14:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYwNzIwMTYzMDMxWhcNMjYwNzI3MTYzMDMxWjAYMRYwFAYD VQQDEw02YTVlNGQyNy1jMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquXGs9qsQ9EGuP0x04RJZzJ7JlsNArcalajDxn3EL/Kv9EDnbRFW6jHAo4NT U/KjVfxLwX24jNPJ/XRZm0fuJeESU98QOrdPA37z/jCaiLxgSPk1KWSOrcJq/HvT sqRiI86rLgiCNRJocUDZ1josz8UFkzhmvhpsbStgx4XKun6P0OzHx3kxP/KfA9pY NyXVCZAOJerc11iu2QjGffcMGej8aijEBnMR0WVl5b61/+WxqQZITJiQkn6SrDLc g9ovLrn8vLaQrBf1enjsmuVpjVcYpnCO4UuGPuhYiUie1MknpTPgkhFlh1eO51bZ o7zSIrAsjqxFSybGyCvVWj5RuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+2pfoY mnUFPNExs+P6181tbmykMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADLZzXSWpJXvto4x1M5Tzru6VCXEkr4l+aKI3GEXgZm7YZ/JFwYrjUPM8XBnp fh1cydP6v10v4Vi0ymQVSuJEMcZzkZ/nsX2G9/451139Hx2/0+WafgJHbLVKzKLh kR1RMBdlazhizA83QuztGYnhz2VuJfYdXUtj4FLdywjL5V3QqISDw+i7tougHI+u El2UGgLKfO/GSY5C8+DqzOeXp2LBcYRiGlATcUmnzLx1Dod8AGVUWfFAeeWGGtyO VtaCPgZ6584/z1qxOzNizSMr8JX/uy61se2tWnPoE4V8jWbe46op6IhsN5ZMP8Rs bv3fRpwJ/NsSrsXREjXOBQgUBg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:24 2026 by rpki-client