$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: lCmHZYTbWQ19s9QtePf4f8QkeCqYJlshBTxb3AABIuw= Subject key identifier: 4B:97:67:78:3D:5B:42:6C:C5:B2:47:0F:5B:BE:38:06:EB:05:FA:E8 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0F1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0F06 Signing time: Wed 20 May 2026 17:37:48 +0000 Manifest this update: Wed 20 May 2026 17:37:48 +0000 Manifest next update: Wed 27 May 2026 17:37:48 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: vi9VHzMcrm0KRGtW62cNtMt711KnmhZ9xkjmwM7b//c=) 2: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: idv/2IXVQV4s0FcPaBXiyKtcotl1AiWEqCu1Wl2Gwy8=) 3: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: JoDyF1+0/uHXUe4b6JwZuFvOHh5ZoEWfFz+rLvuX/DE=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: iGmNhe2U/JgHU115UXZMlUMKdd/xk6VCuDolUguecP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3869 (0xf1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: May 20 17:37:48 2026 GMT Not After : May 27 17:37:48 2026 GMT Subject: CN=6a0df16c-2f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:a5:a8:c4:5b:0c:ed:35:51:cf:9d:54:38: 0b:b7:a5:d0:ce:f1:71:b2:3b:a4:71:5b:2d:a4:f4: 55:2a:f9:c4:05:20:c1:d8:43:02:b4:6a:b6:87:44: 15:0c:56:77:fb:2a:dc:fa:98:14:b4:51:8a:08:db: 85:e4:66:53:ff:a1:8d:44:58:f3:5c:1e:32:fb:ce: 41:d6:73:61:ac:de:66:72:88:ff:ac:c9:d1:df:1b: 8e:ce:e1:87:a9:86:d3:48:c1:f2:e5:31:e2:59:4d: 83:e3:a1:ad:76:ad:fc:5a:f6:f5:b3:a5:55:fa:c4: e9:05:10:5c:fc:ac:79:fa:63:60:95:0b:63:e4:75: 39:dd:5d:c7:9e:cc:61:3f:3e:44:5b:9f:83:ad:4c: 21:72:6f:f0:3d:18:4a:fb:69:4b:64:8a:99:52:6c: bc:21:75:94:ff:21:58:e7:63:0e:0c:23:f7:82:0a: a0:b3:57:1a:f0:ab:60:01:e1:83:b6:93:c5:ee:bf: d8:70:75:98:81:de:c4:eb:4a:d5:b4:3a:8a:76:ce: b9:64:06:ec:9e:ce:b8:ec:e7:2a:69:e2:5c:36:2a: 4e:21:3f:5a:45:21:9f:ae:f0:38:e6:72:be:c6:7b: da:94:13:12:eb:16:a3:1d:c9:6b:68:50:fd:b8:a1: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:97:67:78:3D:5B:42:6C:C5:B2:47:0F:5B:BE:38:06:EB:05:FA:E8 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:79:11:7e:e9:e3:fe:79:e4:a7:bf:40:4e:50:19:e9:47:ee: 64:56:8c:e0:72:ec:82:17:ea:c0:d2:ae:16:a9:f4:8d:f9:93: 13:7a:75:cc:e6:fe:73:5c:e9:85:65:4a:7f:f4:53:9a:13:bb: 7d:a6:0c:28:e1:2b:4e:78:2f:06:8a:02:ac:59:06:ea:4d:d4: fe:f4:53:e4:c6:5b:f5:ed:0a:f2:ad:29:e7:20:1a:e8:05:57: c0:bf:a0:d1:e9:80:e6:fe:cf:58:54:85:af:20:82:b3:fc:77: d5:49:d3:c5:5e:1e:3a:73:a2:ac:78:c1:7b:8b:97:c7:54:63: 99:80:23:11:31:54:06:ba:89:8f:b0:ec:d1:78:88:e8:54:15: f0:6d:81:bd:90:eb:fc:6a:f9:2f:27:fe:be:9f:98:7a:8e:4d: 79:96:19:7e:95:08:e7:d7:aa:b4:0d:31:dc:c2:b3:22:26:bd: 28:ff:fe:05:85:16:e3:ac:6b:1f:29:6f:b8:5f:e6:88:23:21: b8:26:74:19:0b:7d:f0:dd:26:16:19:a9:29:cc:03:bf:2b:e4: c1:50:ab:c0:24:8b:a0:13:ff:6d:75:eb:5d:ac:82:9f:b9:f2: d6:e2:5a:cd:66:1a:3e:e9:8a:51:31:04:df:27:62:57:be:e3: d8:94:e8:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjYwNTIwMTczNzQ4WhcNMjYwNTI3MTczNzQ4WjAYMRYwFAYD VQQDEw02YTBkZjE2Yy0yZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwumlqMRbDO01Uc+dVDgLt6XQzvFxsjukcVstpPRVKvnEBSDB2EMCtGq2h0QV DFZ3+yrc+pgUtFGKCNuF5GZT/6GNRFjzXB4y+85B1nNhrN5mcoj/rMnR3xuOzuGH qYbTSMHy5THiWU2D46Gtdq38Wvb1s6VV+sTpBRBc/Kx5+mNglQtj5HU53V3Hnsxh Pz5EW5+DrUwhcm/wPRhK+2lLZIqZUmy8IXWU/yFY52MODCP3ggqgs1ca8KtgAeGD tpPF7r/YcHWYgd7E60rVtDqKds65ZAbsns647OcqaeJcNipOIT9aRSGfrvA45nK+ xnvalBMS6xajHclraFD9uKFNBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuXZ3g9 W0JsxbJHD1u+OAbrBfroMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq3kRfunj/nnkp79ATlAZ6UfuZFaM4HLsghfqwNKuFqn0jfmTE3p1zOb+c1zp hWVKf/RTmhO7faYMKOErTngvBooCrFkG6k3U/vRT5MZb9e0K8q0p5yAa6AVXwL+g 0emA5v7PWFSFryCCs/x31UnTxV4eOnOirHjBe4uXx1RjmYAjETFUBrqJj7Ds0XiI 6FQV8G2BvZDr/Gr5Lyf+vp+Yeo5NeZYZfpUI59eqtA0x3MKzIia9KP/+BYUW46xr HylvuF/miCMhuCZ0GQt98N0mFhmpKcwDvyvkwVCrwCSLoBP/bXXrXayCn7ny1uJa zWYaPumKUTEE3ydiV77j2JTojA== -----END CERTIFICATE-----Generated at Thu May 21 10:27:44 2026 by rpki-client