$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: SyjKD4XYSPG8l9b9MNj4h29me5Pf9966liTiwnTKv8U= Subject key identifier: 04:C9:2A:3E:1E:A4:09:3F:12:9D:13:F9:9C:7A:58:FD:68:0B:19:25 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 12B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 128E Signing time: Thu 28 May 2026 16:59:12 +0000 Manifest this update: Thu 28 May 2026 16:59:11 +0000 Manifest next update: Thu 04 Jun 2026 16:59:11 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: QXcE3kOCbv2Yx7GQr/m6eNuMkQ2P4ixjOray6vtUa68=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: xwp+vsBFySucNW4Yhnh8sJi71zn8ZQofjYnVbPZEHro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 16:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4785 (0x12b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: May 28 16:59:11 2026 GMT Not After : Jun 4 16:59:11 2026 GMT Subject: CN=6a187460-9f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:05:6c:ac:21:84:d3:ef:6b:5c:42:2e:d4: 65:f9:74:38:bb:3b:a7:89:b2:6d:9f:36:e2:3a:fa: de:c6:1b:ac:9e:5e:a4:b0:48:80:1d:c8:52:3a:46: 60:de:e0:15:38:71:ea:44:16:42:63:3b:1c:f3:dd: 69:88:23:c6:4a:2f:04:e7:f8:82:3d:d6:1c:f3:df: 8a:a7:10:fc:7e:23:ab:4c:f2:b9:fb:9d:54:5c:25: d3:0e:1a:34:ae:44:95:2d:7e:cb:e2:96:ba:e9:3d: ef:8e:37:7e:ec:01:fa:d5:37:1f:63:d7:9d:e8:c2: 57:f2:be:be:d4:67:18:6d:63:02:ab:3b:c1:a3:01: 51:65:c1:20:d5:4d:6c:0d:e0:9a:60:5c:2b:eb:33: e6:0f:b3:5b:ae:7b:06:ad:03:70:48:3e:6c:03:90: 6c:90:5d:87:c1:a3:ce:ca:52:8d:bd:91:46:0b:18: 7c:bd:53:51:72:14:aa:d4:94:e6:a8:08:38:fa:b5: c1:86:fa:c9:0e:ab:55:48:1d:1c:09:e6:0e:44:2a: dd:8b:9a:e7:a9:f7:56:41:54:79:09:36:bc:e3:cd: 6b:61:52:4b:03:f0:bd:33:ac:75:25:50:66:b1:df: 67:f7:67:93:bc:54:38:d2:54:f9:59:f8:25:c8:f2: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:2A:3E:1E:A4:09:3F:12:9D:13:F9:9C:7A:58:FD:68:0B:19:25 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2b:39:3d:ee:db:41:97:25:a6:ad:34:6a:d2:7f:8d:2a:24: f8:38:fb:6e:cf:4a:9e:c5:77:43:5b:60:45:d0:a5:d2:74:ae: 5e:99:6e:b8:3b:ca:b4:01:77:e9:f7:0a:e5:4e:ef:16:3d:4d: 2f:58:60:f2:1f:cd:50:16:c6:99:59:21:09:0c:1f:7b:d2:ca: 18:4c:48:31:af:77:25:2b:c5:b0:e8:f6:b0:56:f0:f7:c6:58: 57:19:c6:b2:28:4d:a0:c4:74:ef:df:87:2e:6f:45:55:7a:2a: 3d:21:c3:fb:8f:5c:5b:fd:bb:76:68:72:1d:f2:29:8e:19:5e: 47:66:be:5f:34:07:47:2a:09:90:ce:a3:3a:7c:0d:7f:54:8e: 96:57:05:7f:27:53:5c:cb:d7:3f:e8:6f:5c:fb:e2:38:3e:41: 3a:d5:71:4e:63:ad:08:be:08:7e:75:38:8b:78:72:d7:6f:53: 67:ae:01:fc:7b:13:9e:c2:da:bb:71:3d:d2:6a:f8:a7:aa:62: a3:89:19:91:f1:49:64:40:f9:c3:49:4f:41:01:38:1f:3f:59: 6e:e7:c4:8a:39:b8:c4:38:e5:92:3b:0c:17:bf:77:64:f7:19: 10:00:34:b2:9b:51:a9:17:d1:38:03:6b:ff:e5:b7:eb:6e:6c: 7f:d8:cf:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICErEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjYwNTI4MTY1OTExWhcNMjYwNjA0MTY1OTExWjAYMRYwFAYD VQQDEw02YTE4NzQ2MC05ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmEFbKwhhNPva1xCLtRl+XQ4uzunibJtnzbiOvrexhusnl6ksEiAHchSOkZg 3uAVOHHqRBZCYzsc891piCPGSi8E5/iCPdYc89+KpxD8fiOrTPK5+51UXCXTDho0 rkSVLX7L4pa66T3vjjd+7AH61TcfY9ed6MJX8r6+1GcYbWMCqzvBowFRZcEg1U1s DeCaYFwr6zPmD7NbrnsGrQNwSD5sA5BskF2HwaPOylKNvZFGCxh8vVNRchSq1JTm qAg4+rXBhvrJDqtVSB0cCeYORCrdi5rnqfdWQVR5CTa8481rYVJLA/C9M6x1JVBm sd9n92eTvFQ40lT5WfglyPIgFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATJKj4e pAk/Ep0T+Zx6WP1oCxklMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSs5Pe7bQZclpq00atJ/jSok+Dj7bs9KnsV3Q1tgRdCl0nSuXpluuDvKtAF3 6fcK5U7vFj1NL1hg8h/NUBbGmVkhCQwfe9LKGExIMa93JSvFsOj2sFbw98ZYVxnG sihNoMR079+HLm9FVXoqPSHD+49cW/27dmhyHfIpjhleR2a+XzQHRyoJkM6jOnwN f1SOllcFfydTXMvXP+hvXPviOD5BOtVxTmOtCL4IfnU4i3hy129TZ64B/HsTnsLa u3E90mr4p6pio4kZkfFJZED5w0lPQQE4Hz9ZbufEijm4xDjlkjsMF793ZPcZEAA0 sptRqRfROANr/+W3625sf9jPaw== -----END CERTIFICATE-----Generated at Sat May 30 01:38:11 2026 by rpki-client