$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: YqvPNKzFLk9EfzvfaoJdPp2RhFoyVpVLmTJ1Ep7kNDE= Subject key identifier: 7B:32:76:FD:2F:17:F6:E9:CB:6F:36:10:F3:3A:44:55:77:CA:B2:A5 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 0238 Signing time: Thu 21 May 2026 02:36:27 +0000 Manifest this update: Thu 21 May 2026 02:36:26 +0000 Manifest next update: Thu 28 May 2026 02:36:26 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: w4hyT74JV9Y2Rd+fWd+GAY5sqzHWROk5zjlHu7GilXw=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: TRCit7S/Vg6OV4lqP74PVauh5l5sCF/UMjkzMFmjRuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: May 21 02:36:26 2026 GMT Not After : May 28 02:36:26 2026 GMT Subject: CN=6a0e6fab-9c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:bb:90:01:73:b6:c5:db:53:b6:b5:50:3f: b2:5a:3a:fb:1c:16:c8:48:9c:72:5d:e2:a7:cc:55: 2b:07:36:e9:70:ac:be:09:82:4d:18:a7:c2:29:7a: 64:c0:64:07:05:49:09:a1:65:21:59:d7:f3:37:6e: d7:28:7c:8a:22:cd:4c:8b:72:d4:b3:cf:6b:23:37: 45:45:93:84:26:b7:eb:27:40:52:9d:5f:43:da:e2: af:21:73:d1:5d:23:f7:ad:ec:2a:4e:49:97:70:c6: b6:99:77:0d:fd:fc:8b:7b:96:2c:41:0c:9d:f5:e3: 74:7a:d2:8e:5a:01:1a:35:89:29:fb:ec:e9:58:b8: d0:9e:f8:34:e7:f0:56:a7:66:c5:d2:9e:be:b1:6b: 18:61:89:01:27:7c:11:6d:cb:e4:f6:ba:53:18:70: f7:6f:58:da:21:91:81:45:b2:09:be:ce:28:55:5a: 88:52:13:f5:cd:62:40:ca:0f:ad:00:1d:e3:86:32: 7d:fb:71:be:25:46:60:ce:2d:d9:61:54:69:2e:ef: f9:f2:2d:ee:99:6d:55:32:b4:0a:57:9a:6c:1a:39: 15:c1:20:6d:1f:41:d6:15:c4:b7:cb:2e:35:a5:01: c5:b7:af:2f:4d:92:2a:f1:bc:ac:74:38:4f:a1:0e: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:32:76:FD:2F:17:F6:E9:CB:6F:36:10:F3:3A:44:55:77:CA:B2:A5 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b2:85:7d:99:8b:20:17:5a:ee:97:6a:f7:f1:2c:7c:d1:06: 5f:d5:02:1f:42:f7:01:62:fa:86:fe:34:f1:ee:9a:d8:89:e5: e8:94:db:a6:89:49:a8:95:4d:e7:9d:9b:fb:f7:b4:a9:d7:87: ba:0f:05:14:fc:bb:66:00:c6:e2:76:32:cf:95:12:f5:77:e4: ba:00:04:68:3c:1c:f9:a6:78:fd:98:6f:79:0e:e2:e9:ad:fe: 34:15:ad:e6:70:32:d6:e9:9c:57:7d:0b:2d:c8:b9:5c:bc:48: 1d:27:cc:1c:df:2a:de:67:75:ac:b9:81:3d:91:13:48:d2:95: 8c:a5:fa:28:6a:ec:b1:0b:e0:63:b1:a8:48:2f:1f:65:92:c0: d1:36:4e:2d:d8:dd:e7:99:29:42:80:f2:52:4e:38:48:a8:b7: ed:2a:04:4e:4b:74:fe:4b:64:3b:f9:0f:19:f9:8f:31:22:94: 49:fc:5a:bd:ca:a8:75:9c:9a:cd:fe:2d:d2:6f:e2:74:df:d2: 58:44:60:18:b4:cb:7d:6e:7c:9d:1a:fa:10:83:95:2b:06:cc: 2c:79:b6:39:f0:87:49:37:41:4d:22:74:4f:bb:30:3f:ea:84: 74:90:69:36:2a:15:a7:6c:f3:84:ff:49:09:a6:53:8c:3c:ca: 88:93:05:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjYwNTIxMDIzNjI2WhcNMjYwNTI4MDIzNjI2WjAYMRYwFAYD VQQDEw02YTBlNmZhYi05YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IS7kAFztsXbU7a1UD+yWjr7HBbISJxyXeKnzFUrBzbpcKy+CYJNGKfCKXpk wGQHBUkJoWUhWdfzN27XKHyKIs1Mi3LUs89rIzdFRZOEJrfrJ0BSnV9D2uKvIXPR XSP3rewqTkmXcMa2mXcN/fyLe5YsQQyd9eN0etKOWgEaNYkp++zpWLjQnvg05/BW p2bF0p6+sWsYYYkBJ3wRbcvk9rpTGHD3b1jaIZGBRbIJvs4oVVqIUhP1zWJAyg+t AB3jhjJ9+3G+JUZgzi3ZYVRpLu/58i3umW1VMrQKV5psGjkVwSBtH0HWFcS3yy41 pQHFt68vTZIq8bysdDhPoQ6tvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsydv0v F/bpy282EPM6RFV3yrKlMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbKFfZmLIBda7pdq9/EsfNEGX9UCH0L3AWL6hv408e6a2Inl6JTbpolJqJVN 552b+/e0qdeHug8FFPy7ZgDG4nYyz5US9XfkugAEaDwc+aZ4/ZhveQ7i6a3+NBWt 5nAy1umcV30LLci5XLxIHSfMHN8q3md1rLmBPZETSNKVjKX6KGrssQvgY7GoSC8f ZZLA0TZOLdjd55kpQoDyUk44SKi37SoETkt0/ktkO/kPGfmPMSKUSfxavcqodZya zf4t0m/idN/SWERgGLTLfW58nRr6EIOVKwbMLHm2OfCHSTdBTSJ0T7swP+qEdJBp NioVp2zzhP9JCaZTjDzKiJMFyw== -----END CERTIFICATE-----Generated at Thu May 21 10:16:03 2026 by rpki-client