$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: VC0DiufNfZ+OEJXpSSqgnAhTVKajEHbLUbFHk+BKsFY= Subject key identifier: 0A:D9:7F:FF:F8:E0:FD:BD:C2:8E:0D:88:6F:47:9B:27:AC:4D:B1:F6 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: FC Signing time: Fri 21 Aug 2026 06:18:35 +0000 Manifest this update: Fri 21 Aug 2026 06:18:34 +0000 Manifest next update: Fri 28 Aug 2026 06:18:34 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: RcVzG614F8ugSCI12xDU4L5Lp6G+8FNndAgU8fmFZUg=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: uwAj/+Du5C1qEvZtOUqf44R0VMo9+4/mthpipOHyiGw=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: 5NNtAQyFropb/Z6y0svtRqsWdy6ThB8osPzJl9uYO4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Aug 21 06:18:34 2026 GMT Not After : Aug 28 06:18:34 2026 GMT Subject: CN=6a87edbb-eaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:7a:95:34:9b:d3:cf:da:90:04:08:d3:c9: 78:69:54:81:2a:22:d8:e5:cb:97:9a:19:39:56:7c: 44:96:e1:21:a0:e9:56:62:0d:05:bd:0d:f2:20:c3: 88:a5:64:26:cb:4c:0e:27:e5:19:80:50:f3:89:a8: de:4c:20:00:dd:9d:58:c6:11:8c:16:56:42:22:f0: ce:33:db:00:9d:d6:7d:6b:54:ac:7c:86:36:bd:28: 43:bf:e1:f9:51:96:cf:29:34:ca:a6:5b:fd:09:25: 58:ac:ef:c5:38:b2:54:27:78:b2:28:27:a2:dd:d9: 74:7e:12:ff:0a:a7:1f:a5:34:7d:f0:42:7d:0e:9d: 84:cb:a9:57:5d:f9:1c:50:22:b0:d5:54:2e:44:76: e7:92:42:ab:86:5c:7d:94:af:60:b4:a7:ca:19:5b: be:c1:98:68:f4:d1:7d:a1:64:51:f9:af:69:d3:ab: 5d:07:1f:2d:4e:94:c2:52:5f:10:a0:de:a6:e5:99: f1:8c:ae:6e:ff:b5:22:79:7b:b8:2b:a9:59:6f:d6: d7:64:88:89:57:ca:ce:82:72:7a:31:b1:c5:e3:d8: d1:be:49:79:f0:af:d7:48:4e:8f:75:1f:e8:e8:0e: 79:d3:57:8e:a2:04:08:72:60:88:3c:3f:a0:19:2b: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:7F:FF:F8:E0:FD:BD:C2:8E:0D:88:6F:47:9B:27:AC:4D:B1:F6 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:26:03:65:0c:0c:a3:76:57:7c:0b:12:27:a3:2c:b4:ae:bb: 3c:43:07:0e:16:d0:fb:76:e3:72:7f:5d:75:b5:8a:66:ee:91: 9b:b1:82:55:00:ed:69:01:9d:0e:61:c9:22:c8:03:33:42:5a: 2d:c5:0c:4f:f3:fd:d4:59:a5:ae:ca:0c:47:d1:40:e7:e8:d5: 2e:12:ea:ef:4a:4f:8b:f4:fd:cb:47:e3:a1:21:96:d0:a2:fc: 74:4d:00:04:f2:be:41:bc:c3:1c:65:dd:58:7e:b2:de:12:5b: 1a:80:0b:13:ad:63:65:26:62:b0:b5:2d:64:b1:8e:0c:9c:ac: 5d:87:a1:2a:35:6a:73:ac:47:65:1c:df:13:5b:a4:6c:56:19: d9:6c:42:11:46:32:39:1f:7f:93:72:6c:f3:35:f6:79:0f:76: ae:6d:d9:e4:db:8e:90:24:d9:b6:db:3e:93:2f:ef:c8:83:e4: b7:42:54:30:9b:02:d9:91:ea:15:e9:48:70:4a:45:1c:c3:0c: a7:2b:5d:ed:f1:2a:8a:af:48:19:ad:01:b0:42:dd:be:8c:74: 48:0d:66:a3:39:31:05:6a:3c:e7:77:68:4d:87:e7:6e:79:18: 34:62:ed:b1:8f:11:8a:f2:2e:7e:0b:e2:17:58:18:46:4e:fa: 64:7b:f8:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0 NjZDQzRCMEEwHhcNMjYwODIxMDYxODM0WhcNMjYwODI4MDYxODM0WjAYMRYwFAYD VQQDEw02YTg3ZWRiYi1lYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQR6lTSb08/akAQI08l4aVSBKiLY5cuXmhk5VnxEluEhoOlWYg0FvQ3yIMOI pWQmy0wOJ+UZgFDziajeTCAA3Z1YxhGMFlZCIvDOM9sAndZ9a1SsfIY2vShDv+H5 UZbPKTTKplv9CSVYrO/FOLJUJ3iyKCei3dl0fhL/CqcfpTR98EJ9Dp2Ey6lXXfkc UCKw1VQuRHbnkkKrhlx9lK9gtKfKGVu+wZho9NF9oWRR+a9p06tdBx8tTpTCUl8Q oN6m5ZnxjK5u/7UieXu4K6lZb9bXZIiJV8rOgnJ6MbHF49jRvkl58K/XSE6PdR/o 6A5501eOogQIcmCIPD+gGSvKnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArZf//4 4P29wo4NiG9HmyesTbH2MB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1 RkVxbThMWmtOc3BHYk1Td28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALSYDZQwMo3ZXfAsSJ6MstK67PEMHDhbQ+3bjcn9ddbWKZu6Rm7GCVQDtaQGd DmHJIsgDM0JaLcUMT/P91FmlrsoMR9FA5+jVLhLq70pPi/T9y0fjoSGW0KL8dE0A BPK+QbzDHGXdWH6y3hJbGoALE61jZSZisLUtZLGODJysXYehKjVqc6xHZRzfE1uk bFYZ2WxCEUYyOR9/k3Js8zX2eQ92rm3Z5NuOkCTZtts+ky/vyIPkt0JUMJsC2ZHq FelIcEpFHMMMpytd7fEqiq9IGa0BsELdvox0SA1mozkxBWo853doTYfnbnkYNGLt sY8RivIufgviF1gYRk76ZHv4dA== -----END CERTIFICATE-----Generated at Sat Aug 22 20:20:37 2026 by rpki-client