$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json) Hash identifier: Z/2Dww8uDFLC4s6f95eRK3gPsBrh7U9SIMNh1uI2SE4= Subject key identifier: E8:70:44:1D:42:A7:CC:B5:62:88:03:72:53:13:07:1A:F7:08:39:25 Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79 Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft Manifest number: 18 Signing time: Mon 01 Jun 2026 09:45:11 +0000 Manifest this update: Mon 01 Jun 2026 09:45:10 +0000 Manifest next update: Mon 08 Jun 2026 09:45:10 +0000 Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: Zubn7vp+GatHHcKau87zTQKmGc6vVdGCnfZSAYrD65c=) 2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879 Validity Not Before: Jun 1 09:45:10 2026 GMT Not After : Jun 8 09:45:10 2026 GMT Subject: CN=6a1d54a7-ed7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:d6:2c:fa:c7:38:d6:3e:a3:12:0a:10:b7: bd:09:d7:e6:28:cb:8c:16:3a:52:54:88:63:bb:6c: 3d:c0:e1:17:16:23:31:7d:f2:8c:00:51:bf:bb:d8: da:3b:50:c1:da:50:a2:26:db:51:0f:db:f8:b8:18: 71:f6:b0:2b:ed:0a:3b:81:78:ad:d5:ba:d7:a6:f5: e7:2a:31:76:eb:9a:b6:2f:01:07:a6:93:aa:f9:02: 12:34:75:9c:a3:d1:36:cf:9a:f9:2e:e0:54:b7:be: 7f:b0:26:11:e9:c1:15:a1:7c:bb:eb:de:8c:4d:03: fe:a8:e1:e0:77:3f:76:74:38:04:c9:43:49:fc:81: 8b:a0:d2:7e:f2:bc:4e:68:98:58:11:8e:50:00:ed: 64:25:23:01:f2:17:e6:a6:7e:db:3c:2f:8c:65:17: 05:48:25:86:fa:c3:97:d4:3e:2b:b5:6e:38:43:db: dc:7b:79:74:e5:25:14:4b:f1:c4:98:35:3b:4c:6f: 20:b0:e2:2f:25:41:30:ba:7d:a7:80:c3:0a:ed:ee: fe:95:eb:53:ee:e4:95:4f:bd:ce:a5:ea:d9:24:cc: 04:6c:3f:7b:3f:1e:2e:ee:c3:54:bb:53:5e:bc:42: 62:9c:5a:21:5d:a6:f6:6a:e5:d1:d8:93:7b:d2:4f: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:44:1D:42:A7:CC:B5:62:88:03:72:53:13:07:1A:F7:08:39:25 X509v3 Authority Key Identifier: keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ab:42:c2:31:82:e8:df:35:b5:11:f6:2e:82:b1:83:f8:40: c1:9c:a3:f3:13:aa:26:91:99:1d:68:49:59:7e:f2:2f:c2:88: da:c1:b7:5a:b4:72:74:38:e1:1f:21:8e:e9:00:a6:e7:fe:a1: 35:4b:70:b8:50:51:7c:5c:8f:6f:df:ea:ac:3a:87:83:f1:a7: 09:50:53:28:79:98:33:0e:c1:58:21:b4:64:4a:1c:9d:eb:61: d3:fe:ab:19:0c:7b:23:16:13:07:f1:a6:17:76:ac:a9:bc:5c: 78:e6:02:9d:37:90:67:34:c8:4a:8c:0f:0f:09:59:94:d2:56: eb:43:fd:67:df:9d:a9:5b:9f:63:9f:dd:4e:7a:f9:d1:46:f6: a3:23:fa:43:2f:83:16:79:8f:52:bb:cc:9c:39:2b:a1:a5:40: d7:1f:36:4c:7b:d8:37:4c:76:08:63:b6:ad:84:c1:d2:a6:2d: dc:da:eb:48:81:6f:5a:b7:d4:63:f6:37:67:97:f9:06:25:7a: 64:86:db:15:e4:2f:e5:7f:68:86:a7:73:97:d3:ac:35:64:b6: f5:c7:7a:db:e8:2c:05:dc:c5:38:6f:24:01:2a:d8:af:a4:e0: 6a:79:71:9a:e7:1d:f3:c0:a8:25:15:6f:4e:c6:2d:7f:60:ca: 75:2f:94:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDg4MzExMC8GA1UEBRMoMkQ5QUEzQjBEODVEOEFDRDk2MzUyODA1NUM3NDg3QTY2 OTA0Qzg3OTAeFw0yNjA2MDEwOTQ1MTBaFw0yNjA2MDgwOTQ1MTBaMBgxFjAUBgNV BAMTDTZhMWQ1NGE3LWVkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVTtYs+sc41j6jEgoQt70J1+Yoy4wWOlJUiGO7bD3A4RcWIzF98owAUb+72No7 UMHaUKIm21EP2/i4GHH2sCvtCjuBeK3Vutem9ecqMXbrmrYvAQemk6r5AhI0dZyj 0TbPmvku4FS3vn+wJhHpwRWhfLvr3oxNA/6o4eB3P3Z0OATJQ0n8gYug0n7yvE5o mFgRjlAA7WQlIwHyF+amfts8L4xlFwVIJYb6w5fUPiu1bjhD29x7eXTlJRRL8cSY NTtMbyCw4i8lQTC6faeAwwrt7v6V61Pu5JVPvc6l6tkkzARsP3s/Hi7uw1S7U168 QmKcWiFdpvZq5dHYk3vST9iLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6HBEHUKn zLViiANyUxMHGvcIOSUwHwYDVR0jBBgwFoAULZqjsNhdis2WNSgFXHSHpmkEyHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEODgzLzdBRTQxNDBDM0Q1 QTExRjFBOEM4OThDOEE4ODMzNzczL0xacWpzTmhkaXMyV05TZ0ZYSFNIcG1rRXlI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFpxanNOaGRpczJXTlNnRlhIU0hwbWtFeUhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE ODgzLzdBRTQxNDBDM0Q1QTExRjFBOEM4OThDOEE4ODMzNzczL0xacWpzTmhkaXMy V05TZ0ZYSFNIcG1rRXlIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBq0LCMYLo3zW1EfYugrGD+EDBnKPzE6omkZkdaElZfvIvwojawbdatHJ0OOEf IY7pAKbn/qE1S3C4UFF8XI9v3+qsOoeD8acJUFMoeZgzDsFYIbRkShyd62HT/qsZ DHsjFhMH8aYXdqypvFx45gKdN5BnNMhKjA8PCVmU0lbrQ/1n352pW59jn91OevnR RvajI/pDL4MWeY9Su8ycOSuhpUDXHzZMe9g3THYIY7athMHSpi3c2utIgW9at9Rj 9jdnl/kGJXpkhtsV5C/lf2iGp3OX06w1ZLb1x3rb6CwF3MU4byQBKtivpOBqeXGa 5x3zwKglFW9Oxi1/YMp1L5Sk -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:44 2026 by rpki-client