$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: LuQM6JWeSHiGtE8YH2+FA7VPnw6xDQnkGRhw1bdskuk= Subject key identifier: E4:89:C9:B2:BE:95:0C:43:B8:80:2D:F6:8E:04:C5:31:3D:BF:F2:83 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 0172 Signing time: Mon 27 Jul 2026 06:42:59 +0000 Manifest this update: Mon 27 Jul 2026 06:42:59 +0000 Manifest next update: Mon 03 Aug 2026 06:42:59 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: eu+s1JNyi1ntrQEoWk4v3ljB8fFU3hsc1fJprBUU0oQ=) 2: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) 4: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Jul 27 06:42:59 2026 GMT Not After : Aug 3 06:42:59 2026 GMT Subject: CN=6a66fdf3-6c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:13:fa:9d:2e:c8:02:f0:c6:6b:c4:9d:fc: 10:45:d6:30:91:76:ac:50:4e:0e:c0:b0:cb:01:25: 7e:2c:e7:0b:3c:8e:53:86:1f:b5:76:bc:2c:ec:14: cd:83:5c:1b:36:59:af:6d:98:ae:06:c2:dd:df:02: 0c:8e:64:3a:48:bc:ee:77:b6:41:7f:d9:cb:57:55: 8c:a8:a6:e7:32:ef:7f:1e:f0:92:bd:89:57:76:15: 2e:6b:c5:8b:f4:25:89:c9:0d:00:13:18:13:20:07: 86:b4:33:7d:1f:f5:d6:fa:4f:c5:79:e9:75:cf:cb: b6:8a:df:10:bd:a6:6b:1d:73:af:18:35:ab:31:46: a3:f0:5f:a1:fe:59:3c:2c:c0:8c:b3:81:9e:81:ad: e0:01:16:27:4c:37:5a:d4:aa:00:59:b4:4f:1e:55: ae:2e:c5:2b:73:0a:bb:da:53:8d:3f:98:4d:ff:b9: 3e:d8:92:7d:57:c3:47:72:57:8e:5e:0a:85:ef:0e: 60:4b:65:5b:f3:10:0a:61:13:89:41:65:4a:9a:05: 54:45:34:28:81:5d:56:0c:db:e2:ac:e7:13:0f:ed: b5:57:85:84:76:d4:8b:7c:1c:ec:2b:3a:43:f9:77: e0:95:21:62:e2:ee:01:fc:23:9f:66:b4:37:64:2f: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:C9:B2:BE:95:0C:43:B8:80:2D:F6:8E:04:C5:31:3D:BF:F2:83 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2c:b4:6d:2c:8b:d6:48:ab:65:29:71:64:ea:38:26:77:ef: dd:8d:16:f6:93:18:64:a4:d3:03:8e:47:21:c8:7a:b4:56:cb: e0:f4:3b:8c:1e:b9:32:73:be:f1:10:d6:a1:14:81:77:08:53: 94:9c:8b:df:a8:a6:2f:2c:ff:28:aa:af:c4:86:7c:36:84:89: 3d:91:4c:f3:cd:75:96:84:f7:fa:a8:03:a9:05:63:7c:80:3a: 97:a1:ac:da:d3:ac:09:00:ce:3f:22:61:9e:13:bd:f3:d5:78: 10:05:b8:7f:a1:50:c5:78:fa:c2:96:5f:c0:3c:a4:16:ec:9f: d9:7d:6c:43:35:be:b1:84:ad:56:b9:8f:52:89:50:21:f3:32: 7e:0b:9e:e9:05:6f:79:b1:73:9e:f6:ac:f0:d7:86:5a:b8:aa: 17:74:ca:4a:ee:0b:1a:dc:f6:1e:b9:59:56:f4:51:d7:0c:ed: 8e:7a:3f:5b:cd:5a:46:b3:b1:98:f2:e5:e7:03:09:c0:14:52: c5:8e:67:4d:3d:07:3c:34:58:c7:e6:2f:90:59:b4:f7:35:fa: 84:a7:bb:9f:c0:4a:14:ca:84:b0:81:c9:97:e6:d2:51:08:ec: 17:c2:34:c9:cc:52:1c:d8:51:1d:1a:1d:80:ac:61:b8:b9:c3: 7a:bf:92:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwNzI3MDY0MjU5WhcNMjYwODAzMDY0MjU5WjAYMRYwFAYD VQQDEw02YTY2ZmRmMy02YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyMT+p0uyALwxmvEnfwQRdYwkXasUE4OwLDLASV+LOcLPI5Thh+1drws7BTN g1wbNlmvbZiuBsLd3wIMjmQ6SLzud7ZBf9nLV1WMqKbnMu9/HvCSvYlXdhUua8WL 9CWJyQ0AExgTIAeGtDN9H/XW+k/Feel1z8u2it8QvaZrHXOvGDWrMUaj8F+h/lk8 LMCMs4Gega3gARYnTDda1KoAWbRPHlWuLsUrcwq72lONP5hN/7k+2JJ9V8NHcleO XgqF7w5gS2Vb8xAKYROJQWVKmgVURTQogV1WDNvirOcTD+21V4WEdtSLfBzsKzpD +XfglSFi4u4B/COfZrQ3ZC/3TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSJybK+ lQxDuIAt9o4ExTE9v/KDMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACCy0bSyL1kirZSlxZOo4Jnfv3Y0W9pMYZKTTA45HIch6tFbL4PQ7jB65MnO+ 8RDWoRSBdwhTlJyL36imLyz/KKqvxIZ8NoSJPZFM8811loT3+qgDqQVjfIA6l6Gs 2tOsCQDOPyJhnhO989V4EAW4f6FQxXj6wpZfwDykFuyf2X1sQzW+sYStVrmPUolQ IfMyfgue6QVvebFznvas8NeGWriqF3TKSu4LGtz2HrlZVvRR1wztjno/W81aRrOx mPLl5wMJwBRSxY5nTT0HPDRYx+YvkFm09zX6hKe7n8BKFMqEsIHJl+bSUQjsF8I0 ycxSHNhRHRodgKxhuLnDer+S1A== -----END CERTIFICATE-----Generated at Tue Jul 28 02:40:31 2026 by rpki-client