$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: 3io0rNtxRCXtRQtWZOSA6JSloCoEpEj3mWipE1nkCPY= Subject key identifier: CC:2A:C2:8E:59:BE:E1:94:36:97:BD:23:CC:50:78:CB:84:D4:6C:58 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 05C0 Signing time: Wed 20 May 2026 23:19:54 +0000 Manifest this update: Wed 20 May 2026 23:19:54 +0000 Manifest next update: Wed 27 May 2026 23:19:54 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: ah5AsSrfq+eku26RTcrmG2H/UaMSqvfpamYz/zotnK0=) 2: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=) 4: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=) 5: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=) 6: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=) 7: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=) 8: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=) 9: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=) 10: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: May 20 23:19:54 2026 GMT Not After : May 27 23:19:54 2026 GMT Subject: CN=6a0e419a-e2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0b:3a:97:93:62:d5:99:03:b1:aa:75:b1:bb: af:7f:aa:a5:ac:d1:fb:11:c0:97:21:f0:e3:b5:ac: e4:7f:04:61:ee:7f:d8:e4:54:34:99:eb:3f:ab:e6: 59:db:f3:0e:ea:a2:aa:37:ee:e9:67:de:5e:03:53: e4:97:c9:f3:a8:a7:c2:03:4e:13:b6:ed:f3:ef:a4: d8:b2:0d:08:ea:22:0e:74:b0:10:75:6d:04:96:20: 39:d0:8f:28:7f:06:37:17:3d:86:e7:3a:60:6a:ca: 5f:4b:8c:3e:4b:ed:ec:0e:5d:0e:6d:2d:7e:be:01: 92:af:af:15:7d:8b:4c:a2:76:0a:30:48:b1:0c:ce: fc:e4:20:f8:89:bf:77:71:4f:30:ba:fd:27:dc:01: 15:78:cf:04:33:42:fb:d2:4e:95:a6:62:7d:13:8e: f4:c6:6e:2f:9b:a6:22:c0:d1:a3:16:bc:84:30:e0: bf:fb:06:8b:9d:7a:64:85:0c:88:86:dc:59:de:b0: 0c:1f:61:5c:5e:f2:16:12:a5:9c:22:3f:a4:3b:b0: 3e:96:ac:2e:52:9a:6e:21:c9:f3:5e:01:a0:a8:25: 8e:dc:7b:9e:9c:a1:1c:0a:ec:e0:90:5f:3b:45:4c: 26:48:c7:3f:98:a2:d9:bf:b5:73:db:0a:32:0b:70: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2A:C2:8E:59:BE:E1:94:36:97:BD:23:CC:50:78:CB:84:D4:6C:58 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ae:02:64:e0:f7:92:87:25:93:a9:11:63:87:59:e2:a4:64: da:1d:7b:b9:7f:55:49:eb:3e:e7:86:d8:5d:08:eb:cf:09:b4: 61:80:bc:2d:03:1f:3b:2d:82:2a:1d:eb:73:ad:cf:1f:d3:b3: ca:3d:66:23:27:0a:24:5e:a9:f9:f5:0a:53:00:50:29:06:63: 44:2d:c8:b8:53:0f:b7:0e:8c:5c:75:f0:3a:cd:2d:96:93:9c: 7d:2f:fc:af:40:bc:24:29:26:46:b8:79:08:1b:b2:f7:5f:1f: cd:8c:50:02:7b:5b:87:dc:cc:d0:af:65:be:2b:e4:6d:cb:c4: 63:c5:59:0b:4c:f3:43:b5:1d:c9:3d:d7:b8:5c:98:e3:cd:37: 5d:bc:1b:0b:03:fc:fb:1e:fb:3d:ef:69:0b:0c:d8:9b:18:d0: 0e:a7:b0:4d:0d:e9:53:76:86:38:61:85:79:b6:5e:c5:5f:3a: fe:2d:97:a1:75:f2:8f:f5:3f:07:32:e3:40:ac:ad:92:50:f0: 17:39:05:d1:c2:e4:01:0e:6a:82:ba:70:fc:7c:92:13:b4:24: f8:c9:8e:27:7b:a3:2d:27:16:3b:10:2c:4b:f3:bc:01:79:7f: 86:44:d9:9c:03:1a:6b:db:dd:69:84:1f:e4:73:2f:fc:13:28: f8:16:b8:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjYwNTIwMjMxOTU0WhcNMjYwNTI3MjMxOTU0WjAYMRYwFAYD VQQDEw02YTBlNDE5YS1lMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gs6l5Ni1ZkDsap1sbuvf6qlrNH7EcCXIfDjtazkfwRh7n/Y5FQ0mes/q+ZZ 2/MO6qKqN+7pZ95eA1Pkl8nzqKfCA04Ttu3z76TYsg0I6iIOdLAQdW0EliA50I8o fwY3Fz2G5zpgaspfS4w+S+3sDl0ObS1+vgGSr68VfYtMonYKMEixDM785CD4ib93 cU8wuv0n3AEVeM8EM0L70k6VpmJ9E470xm4vm6YiwNGjFryEMOC/+waLnXpkhQyI htxZ3rAMH2FcXvIWEqWcIj+kO7A+lqwuUppuIcnzXgGgqCWO3HuenKEcCuzgkF87 RUwmSMc/mKLZv7Vz2woyC3BReQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwqwo5Z vuGUNpe9I8xQeMuE1GxYMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPK4CZOD3koclk6kRY4dZ4qRk2h17uX9VSes+54bYXQjrzwm0YYC8LQMfOy2C Kh3rc63PH9Ozyj1mIycKJF6p+fUKUwBQKQZjRC3IuFMPtw6MXHXwOs0tlpOcfS/8 r0C8JCkmRrh5CBuy918fzYxQAntbh9zM0K9lvivkbcvEY8VZC0zzQ7UdyT3XuFyY 4803XbwbCwP8+x77Pe9pCwzYmxjQDqewTQ3pU3aGOGGFebZexV86/i2XoXXyj/U/ BzLjQKytklDwFzkF0cLkAQ5qgrpw/HySE7Qk+MmOJ3ujLScWOxAsS/O8AXl/hkTZ nAMaa9vdaYQf5HMv/BMo+Ba4fA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:41 2026 by rpki-client