$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: vZSvSqCfDHN4SKgymtMkhRS1gUDXXsvwdZ6mjWbhLVI= Subject key identifier: 25:36:10:2C:FE:5C:03:E0:5A:69:90:7A:91:58:5E:63:33:C6:52:40 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0A53 Signing time: Wed 20 May 2026 19:41:49 +0000 Manifest this update: Wed 20 May 2026 19:41:49 +0000 Manifest next update: Wed 27 May 2026 19:41:49 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: ppxoRm0IJMfrXYymhxbhfZEAUgTKVMsAMiq47fTu63I=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: GNVMRmxpK7mVQconnlOE34cE3Vp+VynLXCF2Ha4Paq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: May 20 19:41:49 2026 GMT Not After : May 27 19:41:49 2026 GMT Subject: CN=6a0e0e7d-f9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:0d:9f:0e:d0:92:e7:14:92:ac:ed:e8:ad: b7:f3:d7:48:9b:7a:47:dc:5a:ad:aa:e1:93:f1:33: 3e:7d:f2:b7:ee:7b:c4:26:46:1b:7b:f4:b1:d0:4d: d2:29:95:6b:cd:18:8d:40:aa:51:a5:2d:d4:5a:4e: f9:e5:c1:00:7d:13:f9:24:56:ab:88:06:6f:b8:4a: ef:e5:fe:11:b8:e0:5c:08:6d:84:7d:1c:3c:b3:b8: 40:0e:fa:9d:f9:8b:45:17:4f:9a:4c:0b:fb:46:6a: 94:57:bb:9b:bb:15:f6:fb:e7:d0:8b:2c:a9:de:1c: fb:fa:26:68:08:21:6a:1b:9a:6c:55:b1:28:3a:22: a3:f8:62:8b:c7:54:68:76:4f:d1:90:4c:f9:18:0d: 95:65:9c:88:3f:dd:98:74:b9:06:c7:af:90:d6:c9: 02:17:a6:43:83:e3:ad:a8:88:23:b7:e2:aa:a1:bb: af:3d:ce:e3:f6:c3:ac:0e:b2:2c:e5:dd:da:32:b9: d4:a7:33:f2:cd:88:c7:a4:6b:3e:9a:4b:f0:66:ad: c3:b0:05:b3:96:23:81:f5:a4:dc:3e:ef:e5:93:70: 27:37:12:0c:33:ab:0d:58:b0:d3:03:e0:ce:0b:3b: 3a:46:cb:1e:19:b5:2d:28:72:97:03:29:a4:b8:ee: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:36:10:2C:FE:5C:03:E0:5A:69:90:7A:91:58:5E:63:33:C6:52:40 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4e:ce:98:58:7c:af:dd:cd:bd:e6:05:a3:3f:7e:c5:55:48: 6c:f5:26:ee:d3:f7:47:6b:33:c2:15:8c:40:ee:18:77:92:76: 7b:a1:8e:f2:28:f9:56:ee:0f:4d:53:a6:1d:8a:fa:49:36:a9: 58:15:55:76:d5:12:8b:d7:06:62:3e:81:33:d4:31:84:fd:65: d7:93:a6:d5:12:2a:77:5e:b3:ab:13:8e:4e:a9:9a:b1:1b:f7: 97:7b:77:55:1c:bb:41:09:3b:9a:d0:8c:92:91:14:62:ac:14: be:03:64:14:b2:33:b3:5c:b7:76:42:e2:c1:65:33:ae:5d:e5: 2e:d2:43:6e:a9:a0:04:fa:cd:6b:ad:63:cd:95:76:be:93:c9: 7c:2a:78:75:3c:6b:ff:a1:94:c0:87:55:88:02:4c:33:b8:58: 67:f3:b5:c3:0c:98:2b:47:03:c8:2b:78:1d:02:4b:e0:5e:59: 2f:7d:3a:40:f2:48:08:cc:bc:31:43:34:ba:1c:7b:43:70:ab: 43:b5:a7:ae:cd:5d:f4:06:43:47:35:b7:c4:fa:4d:89:a3:c4: f5:20:7f:41:30:4b:71:0c:be:70:c1:83:db:48:35:b1:a0:08: cc:bc:33:07:49:69:68:b1:1e:a7:2b:46:4b:56:f7:b9:64:83: 14:27:a6:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjYwNTIwMTk0MTQ5WhcNMjYwNTI3MTk0MTQ5WjAYMRYwFAYD VQQDEw02YTBlMGU3ZC1mOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xENnw7QkucUkqzt6K2389dIm3pH3FqtquGT8TM+ffK37nvEJkYbe/Sx0E3S KZVrzRiNQKpRpS3UWk755cEAfRP5JFariAZvuErv5f4RuOBcCG2EfRw8s7hADvqd +YtFF0+aTAv7RmqUV7ubuxX2++fQiyyp3hz7+iZoCCFqG5psVbEoOiKj+GKLx1Ro dk/RkEz5GA2VZZyIP92YdLkGx6+Q1skCF6ZDg+OtqIgjt+KqobuvPc7j9sOsDrIs 5d3aMrnUpzPyzYjHpGs+mkvwZq3DsAWzliOB9aTcPu/lk3AnNxIMM6sNWLDTA+DO Czs6RsseGbUtKHKXAymkuO6zOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCU2ECz+ XAPgWmmQepFYXmMzxlJAMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdk7OmFh8r93NveYFoz9+xVVIbPUm7tP3R2szwhWMQO4Yd5J2e6GO8ij5Vu4P TVOmHYr6STapWBVVdtUSi9cGYj6BM9QxhP1l15Om1RIqd16zqxOOTqmasRv3l3t3 VRy7QQk7mtCMkpEUYqwUvgNkFLIzs1y3dkLiwWUzrl3lLtJDbqmgBPrNa61jzZV2 vpPJfCp4dTxr/6GUwIdViAJMM7hYZ/O1wwyYK0cDyCt4HQJL4F5ZL306QPJICMy8 MUM0uhx7Q3CrQ7Wnrs1d9AZDRzW3xPpNiaPE9SB/QTBLcQy+cMGD20g1saAIzLwz B0lpaLEepytGS1b3uWSDFCemlw== -----END CERTIFICATE-----Generated at Thu May 21 10:16:21 2026 by rpki-client