$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: 9+7qKYIpoodF8QtWC8FT30bjpp652y+qzXMuqKSL0/A= Subject key identifier: 1B:D9:4B:67:E3:DD:9A:C8:A2:A8:5F:49:FA:32:32:B5:06:94:31:7F Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0BE6 Signing time: Mon 08 Jun 2026 18:58:30 +0000 Manifest this update: Mon 08 Jun 2026 18:58:29 +0000 Manifest next update: Mon 15 Jun 2026 18:58:29 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: YG0d6vCwB9pdL7IzN5vx67Q+GppoKQPygq4VDL7VFe4=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: 1HP1754dk+5RSjaQvu6ezyGMKjRnbLeUT9+IOmEICYw=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: MTYW3WZ5bmFwcXuZyuU6mJSaDv2kg390mgtMrX2qGao=) 4: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: bK4wK4ZW2AeyeEa2VWf/EBV02KYa6Sd38Fy+vGgwV2Q=) 5: F62847A2177911F18F01239F253D8C67.roa (hash: 2WCfGiDTIDu8+cnHkGMO0SBE3Ppp/vqnYU6M++BnmjU=) 6: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: D4VLFLoLda9iVGzy5j4mVaxWgRrpARPiO4/t3mX7N14=) 7: F6A7E804177911F18F01239F253D8C67.roa (hash: 94B4DzsJi2Ia0XMNp0IDkQKvwnPAbaf/PbW4VjRjqfk=) 8: 44AB1490608611F190EDABDB6E47A888.roa (hash: H6vMQ2t2D2rSoT2Sb3T5cU2Q7kcQetOPzezN9R6P68g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 18:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jun 8 18:58:29 2026 GMT Not After : Jun 15 18:58:29 2026 GMT Subject: CN=6a2710d5-68e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:10:e4:ea:2a:70:13:e9:5d:87:80:51:93: 72:19:8f:51:56:2d:a2:f1:56:74:c7:ad:f4:89:22: f1:93:ff:95:81:81:31:11:2e:d9:8b:31:68:b3:3a: 6b:a7:6d:a5:7f:f2:28:df:18:04:15:bd:d1:16:48: 46:b3:01:32:ad:ce:3c:f9:34:eb:07:ec:98:d1:52: a6:6f:ed:a4:a6:87:ba:17:05:12:af:0f:65:e2:1f: 48:11:6f:9f:c4:55:6a:f1:ce:f9:e3:32:1b:22:42: e5:5e:1a:15:37:83:01:4d:e8:00:63:84:61:15:ab: a0:f9:13:d5:bd:ec:bc:8f:ee:0d:b5:8a:b3:84:63: 52:a2:0a:0e:c6:a0:ef:eb:7c:46:d0:10:3d:ed:61: cb:3b:fe:1e:d3:0c:61:24:98:9a:a8:82:57:ef:4d: a8:da:23:cb:b5:50:65:93:a1:c7:90:94:81:9d:0d: 62:1f:eb:36:e2:82:b2:7f:6d:21:42:24:bf:d0:f7: fb:7f:fe:22:01:26:37:b2:5b:3c:15:20:47:4e:11: b4:12:49:10:27:d0:5b:88:5b:d1:71:06:b2:39:f4: 9c:19:fd:63:e5:4c:2c:b8:b9:3c:1a:1d:f6:61:13: 22:00:4e:a5:c1:71:49:5b:31:cf:4b:75:40:4a:9d: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:4B:67:E3:DD:9A:C8:A2:A8:5F:49:FA:32:32:B5:06:94:31:7F X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:21:72:35:2b:3e:8a:8c:9a:45:b2:53:80:e0:97:bb:d1:7c: d7:ce:14:02:96:64:9b:5b:41:7a:2e:bf:b8:eb:79:d5:d5:d0: a6:ad:ee:df:85:dd:4e:f3:32:ff:aa:91:e7:6e:de:fd:2c:c9: c2:85:19:51:0f:47:39:38:09:64:bc:fd:cb:92:ed:e0:a5:4f: d6:9b:e1:41:af:76:4f:16:c7:7b:ae:c1:93:72:1b:3c:c8:93: 3a:b8:dc:58:4c:06:06:80:65:01:17:7e:0e:b4:88:a5:27:f8: 37:b6:f4:ad:be:c7:f0:1a:30:ee:b2:92:0d:12:69:f6:6a:52: ad:90:9a:97:c3:a2:1a:ef:0c:c8:a8:44:f2:2d:9a:ff:88:78: e5:1d:59:8c:d7:dc:99:39:20:87:6d:51:37:e2:3e:14:66:58: 81:f2:0c:11:2c:23:e1:50:d4:57:d1:71:53:ad:6b:cc:65:f0: d5:71:40:65:86:a9:fb:65:ef:f6:10:08:8a:ef:1e:62:f0:6f: 58:51:97:9e:33:a2:f5:e7:e7:f6:62:33:19:42:7a:e7:46:92: 95:58:35:fd:43:b3:cb:6d:59:75:db:f5:23:50:2f:c7:2a:76: 16:ac:af:36:7e:5e:17:4a:96:db:77:86:3d:fa:02:13:fc:7a: 46:54:83:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwNjA4MTg1ODI5WhcNMjYwNjE1MTg1ODI5WjAYMRYwFAYD VQQDEw02YTI3MTBkNS02OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4oQ5OoqcBPpXYeAUZNyGY9RVi2i8VZ0x630iSLxk/+VgYExES7ZizFoszpr p22lf/Io3xgEFb3RFkhGswEyrc48+TTrB+yY0VKmb+2kpoe6FwUSrw9l4h9IEW+f xFVq8c754zIbIkLlXhoVN4MBTegAY4RhFaug+RPVvey8j+4NtYqzhGNSogoOxqDv 63xG0BA97WHLO/4e0wxhJJiaqIJX702o2iPLtVBlk6HHkJSBnQ1iH+s24oKyf20h QiS/0Pf7f/4iASY3sls8FSBHThG0EkkQJ9BbiFvRcQayOfScGf1j5UwsuLk8Gh32 YRMiAE6lwXFJWzHPS3VASp2bDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvZS2fj 3ZrIoqhfSfoyMrUGlDF/MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmCFyNSs+ioyaRbJTgOCXu9F8184UApZkm1tBei6/uOt51dXQpq3u34XdTvMy /6qR527e/SzJwoUZUQ9HOTgJZLz9y5Lt4KVP1pvhQa92TxbHe67Bk3IbPMiTOrjc WEwGBoBlARd+DrSIpSf4N7b0rb7H8Bow7rKSDRJp9mpSrZCal8OiGu8MyKhE8i2a /4h45R1ZjNfcmTkgh21RN+I+FGZYgfIMESwj4VDUV9FxU61rzGXw1XFAZYap+2Xv 9hAIiu8eYvBvWFGXnjOi9efn9mIzGUJ650aSlVg1/UOzy21Zddv1I1Avxyp2Fqyv Nn5eF0qW23eGPfoCE/x6RlSDxA== -----END CERTIFICATE-----Generated at Tue Jun 9 09:25:24 2026 by rpki-client