$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json) Hash identifier: xODbq7BTFKB9PIbUpQil9WsHhsz7qAO1ud9I+3MLpf8= Subject key identifier: 40:A1:27:57:A5:35:7B:B8:9D:84:83:AB:91:D4:30:43:13:76:14:FC Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft Manifest number: 20 Signing time: Tue 19 May 2026 08:44:31 +0000 Manifest this update: Tue 19 May 2026 08:44:30 +0000 Manifest next update: Tue 26 May 2026 08:44:30 +0000 Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: 3yLsxn5ob7Cpd2mag0Pt0xQIgsiI6C07d7uHNmL7qa0=) 2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Validity Not Before: May 19 08:44:30 2026 GMT Not After : May 26 08:44:30 2026 GMT Subject: CN=6a0c22ee-28be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:c0:dc:5a:87:ff:98:c1:87:c6:60:e5:ad: d7:78:c9:80:85:95:05:2e:d9:f6:42:48:a7:a4:9d: cd:1b:91:bc:da:f9:fc:da:8f:c1:74:de:cf:a2:f5: 29:20:ff:8e:20:5a:cb:03:2c:d2:ad:54:1b:4c:5b: fb:e5:db:b8:57:20:1d:60:f3:5a:6d:c8:ee:87:a8: 8a:41:93:3a:af:16:ba:ed:9f:df:4e:88:c2:8b:76: ae:5d:b3:53:38:96:db:a4:b3:6f:af:88:3e:f6:98: 4c:1c:09:83:3a:66:ad:bb:be:64:01:b5:5a:da:46: 27:42:13:e3:56:1d:b5:14:b2:dc:13:c5:4a:4e:8c: 3a:95:3f:32:c8:f7:98:55:19:7a:ac:c9:c7:41:42: e8:04:88:87:d4:72:db:52:ce:0f:43:0d:cb:4e:c8: 9e:b1:9b:bf:a8:61:e1:e4:e1:5a:21:8a:97:1a:cb: 21:5d:e9:97:31:0c:3e:45:04:db:12:df:f5:10:bc: c7:53:e3:f6:6f:80:20:47:ed:3e:c1:a1:8f:d7:ec: 81:24:08:3f:7d:c5:03:40:85:3e:8f:7d:f0:df:95: e7:2e:62:2a:cf:58:46:cd:51:f6:31:75:bb:9e:9e: da:5c:01:9a:a0:78:ce:a2:98:72:cf:84:18:96:07: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:27:57:A5:35:7B:B8:9D:84:83:AB:91:D4:30:43:13:76:14:FC X509v3 Authority Key Identifier: keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:10:3e:b2:af:51:46:66:2d:d6:29:dc:87:12:cd:a4:3c:21: 72:66:5a:8c:69:f2:f7:73:50:d1:43:6d:f8:99:01:83:f3:9c: ca:f3:c2:12:69:40:07:26:9b:ac:90:6d:96:0a:b4:fc:9b:b7: 35:76:98:19:fb:18:90:47:d2:57:11:4d:dc:97:e8:f1:72:95: ac:fe:ff:ff:67:ce:fc:89:aa:6d:05:83:b1:9d:c4:7d:0e:9f: 41:24:07:7b:74:a1:86:08:e5:87:dc:ee:d1:e5:61:9d:3a:52: ee:29:a0:36:0a:93:5e:ec:bc:67:c9:3d:85:46:82:de:ca:b3: 75:a3:67:d0:93:ad:9e:76:cc:16:4f:74:eb:26:12:16:de:af: a7:85:35:32:a5:4a:21:5b:c0:c1:b8:b8:38:be:d3:ae:90:e0: 46:ab:52:0c:75:fa:99:75:ed:ce:ab:63:d4:6b:dd:4b:18:e2: a0:4f:41:68:ec:25:16:65:f5:d9:ae:60:77:d2:bc:e6:98:ba: 2e:b6:06:4e:f2:b3:7a:2d:5a:88:b4:1b:85:43:30:7e:0f:4e: a6:c4:c4:4e:31:49:19:ab:c6:f4:62:cd:3a:04:3a:52:7a:1a: 7d:4c:c3:8b:e0:2b:79:b9:7f:63:e4:ac:ba:35:f8:4b:37:ce: f6:5d:a4:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkE4NzExMC8GA1UEBRMoOTZDMUJDOTg3QUQ2NjQzOTEzRjY1RTA1RDFBNjYzRjY0 QzRBRTFCNjAeFw0yNjA1MTkwODQ0MzBaFw0yNjA1MjYwODQ0MzBaMBgxFjAUBgNV BAMTDTZhMGMyMmVlLTI4YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL1cDcWof/mMGHxmDlrdd4yYCFlQUu2fZCSKeknc0bkbza+fzaj8F03s+i9Skg /44gWssDLNKtVBtMW/vl27hXIB1g81ptyO6HqIpBkzqvFrrtn99OiMKLdq5ds1M4 ltuks2+viD72mEwcCYM6Zq27vmQBtVraRidCE+NWHbUUstwTxUpOjDqVPzLI95hV GXqsycdBQugEiIfUcttSzg9DDctOyJ6xm7+oYeHk4VohipcayyFd6ZcxDD5FBNsS 3/UQvMdT4/ZvgCBH7T7BoY/X7IEkCD99xQNAhT6PffDflecuYirPWEbNUfYxdbue ntpcAZqgeM6imHLPhBiWB557AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQKEnV6U1 e7idhIOrkdQwQxN2FPwwHwYDVR0jBBgwFoAUlsG8mHrWZDkT9l4F0aZj9kxK4bYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0JFMDYyOEMyMjRD NTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRrVDlsNEYwYVpqOWt4SzRi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHNHOG1IcldaRGtUOWw0RjBhWmo5a3hLNGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTg3L0JFMDYyOEMyMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRr VDlsNEYwYVpqOWt4SzRiWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2ED6yr1FGZi3WKdyHEs2kPCFyZlqMafL3c1DRQ234mQGD85zK88ISaUAHJpus kG2WCrT8m7c1dpgZ+xiQR9JXEU3cl+jxcpWs/v//Z878iaptBYOxncR9Dp9BJAd7 dKGGCOWH3O7R5WGdOlLuKaA2CpNe7LxnyT2FRoLeyrN1o2fQk62edswWT3TrJhIW 3q+nhTUypUohW8DBuLg4vtOukOBGq1IMdfqZde3Oq2PUa91LGOKgT0Fo7CUWZfXZ rmB30rzmmLoutgZO8rN6LVqItBuFQzB+D06mxMROMUkZq8b0Ys06BDpSehp9TMOL 4Ct5uX9j5Ky6NfhLN872XaTw -----END CERTIFICATE-----Generated at Thu May 21 10:37:44 2026 by rpki-client