$ rpki-client -vvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft File: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft (raw, json) Hash identifier: 29ije4GnLHM2fFTPMn6Sf/s2u82u0BgMFwHgghLkBqY= Subject key identifier: 91:D3:E6:03:9E:A1:A3:CA:E1:B9:59:BE:C9:48:FD:95:B3:34:8F:D0 Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft Manifest number: 44 Signing time: Wed 20 May 2026 03:28:54 +0000 Manifest this update: Wed 20 May 2026 03:28:53 +0000 Manifest next update: Wed 27 May 2026 03:28:53 +0000 Files and hashes: 1: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl (hash: vZGMqpcM0qaFcyjjLvkxLG1z5Bs9yXHnXxbxoAa95OM=) 2: 0452EB4853FC11F1A50C3A68CD833773.roa (hash: Dwbq6wOkLhWt6mifV43tjYsX+dptJ/PFCJBmbhW6+7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 03:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Validity Not Before: May 20 03:28:53 2026 GMT Not After : May 27 03:28:53 2026 GMT Subject: CN=6a0d2a75-b8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:c7:72:98:d3:0d:07:97:31:52:5f:93:6c: 23:4b:00:57:2b:49:69:25:05:c5:53:2d:70:d1:11: 39:ec:3b:1d:b0:ec:05:0c:89:38:36:c1:73:67:14: 43:bd:a7:ff:dc:21:15:ce:f4:f6:03:a4:d7:05:2e: 25:47:0f:e2:3f:bc:82:7e:9e:49:b7:91:78:9a:0c: 60:7b:15:1b:d7:7e:ff:3e:db:41:29:59:41:e5:6f: fa:6d:5b:01:62:6f:71:2f:6b:d4:2c:94:0a:78:4d: e7:be:a1:78:74:6b:1c:4e:f6:56:93:bb:f5:ad:6a: 34:20:79:d1:2c:8f:4a:f1:a1:bd:46:44:74:fb:a9: ec:4c:ba:9e:04:dc:74:6a:04:ec:de:2d:1f:cc:ce: dc:80:75:3f:2f:51:b9:0a:85:c2:43:0f:39:f8:e1: 16:9a:e2:54:86:33:df:6b:7b:f3:4a:38:92:b1:96: a1:53:5e:c9:45:d9:75:e0:a7:58:dd:b6:1a:0c:3c: ce:07:b1:0a:a4:7e:24:3b:b2:4a:5b:6e:0d:ad:9b: 97:c7:db:0a:05:0c:e7:28:f6:d5:0a:da:94:8e:ca: eb:e6:a4:5c:87:a7:da:50:91:06:cc:7d:4f:3a:55: 5e:5d:91:a8:0a:a9:be:41:f2:50:e4:1b:d6:b1:eb: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:E6:03:9E:A1:A3:CA:E1:B9:59:BE:C9:48:FD:95:B3:34:8F:D0 X509v3 Authority Key Identifier: keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:cb:8c:e9:ec:f6:78:a3:26:c0:dc:59:d7:a6:e6:26:80:b4: bb:42:e0:83:4d:b8:f3:d6:64:44:c6:8d:d9:a2:39:64:4b:f1: 34:d0:a4:5f:ab:a9:4d:46:3d:1a:92:79:92:2e:b4:f4:51:e5: 80:6a:13:28:d9:eb:7f:a0:56:2f:4a:a4:83:d5:ed:73:fb:7a: 08:5d:b1:1c:4a:81:76:2f:4e:fc:1b:54:8b:a4:92:cc:d3:54: 5e:aa:b4:f5:70:8c:85:ec:6d:dd:01:53:63:da:7a:20:e1:ab: 89:c9:46:38:c7:ad:5b:b7:b3:39:51:09:ac:35:ce:36:57:c2: 5c:ff:fd:5a:59:37:ae:3e:6e:35:5d:2e:d1:a6:25:8d:3b:cf: 90:4e:2c:ac:53:f8:57:5d:47:05:0a:80:af:82:0b:bf:4c:00: 00:19:8d:1b:6f:7e:7d:19:92:0b:88:ce:73:30:f3:eb:b5:e4: 1a:e4:49:b7:ff:6b:94:69:80:b6:2b:14:bd:18:9a:99:eb:73: 44:50:ba:5a:22:66:c7:d1:42:3a:18:a3:3c:3a:16:ce:68:3e: 45:91:ce:91:36:78:86:05:e7:a5:5c:c3:df:26:d2:e7:d2:b9: 78:6c:b2:3b:e9:80:60:03:00:bd:0c:29:26:1e:a4:3e:34:32: 61:5a:5d:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDI3RjExMC8GA1UEBRMoOTU2MEJDQTlBQjZDNjhCRDkwOUYzMDRDNUIyMkJBNjM2 MzlDRjAxQzAeFw0yNjA1MjAwMzI4NTNaFw0yNjA1MjcwMzI4NTNaMBgxFjAUBgNV BAMTDTZhMGQyYTc1LWI4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTZMdymNMNB5cxUl+TbCNLAFcrSWklBcVTLXDRETnsOx2w7AUMiTg2wXNnFEO9 p//cIRXO9PYDpNcFLiVHD+I/vIJ+nkm3kXiaDGB7FRvXfv8+20EpWUHlb/ptWwFi b3Eva9QslAp4Tee+oXh0axxO9laTu/WtajQgedEsj0rxob1GRHT7qexMup4E3HRq BOzeLR/MztyAdT8vUbkKhcJDDzn44Raa4lSGM99re/NKOJKxlqFTXslF2XXgp1jd thoMPM4HsQqkfiQ7skpbbg2tm5fH2woFDOco9tUK2pSOyuvmpFyHp9pQkQbMfU86 VV5dkagKqb5B8lDkG9ax6/upAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkdPmA56h o8rhuVm+yUj9lbM0j9AwHwYDVR0jBBgwFoAUlWC8qatsaL2QnzBMWyK6Y2Oc8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjdGLzNCQkRBQ0UyRkMw NjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwyUW56Qk1XeUs2WTJPYzhC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFdDOHFhdHNhTDJRbnpCTVd5SzZZMk9jOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MjdGLzNCQkRBQ0UyRkMwNjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwy UW56Qk1XeUs2WTJPYzhCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZy4zp7PZ4oybA3FnXpuYmgLS7QuCDTbjz1mRExo3ZojlkS/E00KRfq6lNRj0a knmSLrT0UeWAahMo2et/oFYvSqSD1e1z+3oIXbEcSoF2L078G1SLpJLM01ReqrT1 cIyF7G3dAVNj2nog4auJyUY4x61bt7M5UQmsNc42V8Jc//1aWTeuPm41XS7RpiWN O8+QTiysU/hXXUcFCoCvggu/TAAAGY0bb359GZILiM5zMPPrteQa5Em3/2uUaYC2 KxS9GJqZ63NEULpaImbH0UI6GKM8OhbOaD5Fkc6RNniGBeelXMPfJtLn0rl4bLI7 6YBgAwC9DCkmHqQ+NDJhWl1v -----END CERTIFICATE-----Generated at Thu May 21 09:39:11 2026 by rpki-client