$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: aAP+G3mj9xtygJnHDIecWLFuqq0WRJ5wA1H7tpin/6M= Subject key identifier: 02:05:01:0C:16:00:D6:65:3D:0D:91:DE:CB:E5:CA:30:75:D2:53:FB Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0217 Signing time: Thu 21 May 2026 02:57:28 +0000 Manifest this update: Thu 21 May 2026 02:57:27 +0000 Manifest next update: Thu 28 May 2026 02:57:27 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: zrRn2KOM3hzVRP3LE84aYAs1lsWcRM8CEyBLk6IWAVg=) 2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=) 3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: May 21 02:57:27 2026 GMT Not After : May 28 02:57:27 2026 GMT Subject: CN=6a0e7498-ccbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:b6:5f:b4:b7:8f:fa:5f:19:0e:fd:88:b9: d8:51:c1:03:68:dd:83:76:cf:24:7f:c3:25:f0:a2: 37:eb:e7:3e:5e:33:33:d2:50:58:8f:55:71:92:09: cb:7d:6e:56:0f:eb:ed:7a:83:af:8d:9d:8a:4c:9a: 58:e8:18:80:c3:f2:41:9b:96:6c:a2:0d:29:78:99: 3d:ea:fa:51:f8:d5:88:10:32:35:64:dc:5e:3d:b2: 60:a4:1e:9b:44:a5:2a:37:e7:ad:3b:66:cd:da:9d: 9e:62:2a:f8:37:9e:d4:10:56:52:8a:cb:7e:17:d2: c7:3b:55:91:13:cd:d3:85:2c:07:d3:7e:e0:b9:ff: bc:db:e3:a0:a6:ec:ad:00:32:c8:e5:f4:0a:fe:b3: 7b:ce:34:bd:09:08:af:e8:d7:96:a8:8e:37:5e:15: 28:32:2d:83:f9:2c:b7:dd:9a:3e:79:81:f8:08:39: b4:76:72:8b:bb:fa:99:b2:07:a7:a1:f4:60:a7:75: 06:9d:47:a9:f5:75:7a:5f:58:7a:23:9f:f1:b1:f5: cb:aa:06:56:7d:71:b6:4a:15:71:8d:2a:38:42:ae: 26:e7:af:70:3f:3b:7d:ea:87:a4:23:2b:02:12:53: af:fc:37:58:e6:f1:8a:19:49:e1:76:2a:22:35:f6: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:05:01:0C:16:00:D6:65:3D:0D:91:DE:CB:E5:CA:30:75:D2:53:FB X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d8:51:64:be:38:ae:ac:e1:15:a1:45:2a:59:69:3c:1f:28: bb:4e:b8:ad:77:d8:0f:42:a3:ad:5c:56:22:5e:8a:17:30:cb: 39:5f:ae:50:41:ff:ee:b6:dc:42:8b:d0:86:b1:b4:08:35:da: dd:57:bd:5d:ce:15:fe:d6:0e:e7:5b:b2:e9:03:83:c8:79:34: c5:5c:6e:56:91:1f:56:88:44:df:6a:fd:9d:bc:47:dc:1a:e0: 07:d2:c8:bc:53:5c:6f:b2:c2:1d:a0:58:43:7b:21:c7:df:f5: 70:a5:8d:20:dc:41:33:1d:7f:a8:ba:b3:43:17:0f:37:0b:5f: ec:19:b6:31:e2:8f:54:e3:e9:84:78:5b:67:74:5b:99:52:c5: d8:ea:52:41:1a:d5:7a:23:34:aa:85:85:6a:7e:fd:b5:83:6f: 7d:54:68:4d:70:6f:fd:56:ca:81:bc:9f:c7:b8:2d:82:36:c5: 10:36:2a:66:10:1e:9a:4b:25:37:2e:71:39:40:b4:d7:f6:ef: 15:8a:fc:d8:99:66:24:9b:72:30:b4:e4:11:6f:c3:ca:46:f1: 7d:43:71:d5:fe:c8:ec:9d:10:60:c3:e5:20:1d:b1:d2:e4:68: ae:53:d8:21:ab:49:ab:fc:b1:d1:e5:20:d2:25:31:eb:fd:2d: c8:91:15:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjYwNTIxMDI1NzI3WhcNMjYwNTI4MDI1NzI3WjAYMRYwFAYD VQQDEw02YTBlNzQ5OC1jY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycO2X7S3j/pfGQ79iLnYUcEDaN2Dds8kf8Ml8KI36+c+XjMz0lBYj1VxkgnL fW5WD+vteoOvjZ2KTJpY6BiAw/JBm5Zsog0peJk96vpR+NWIEDI1ZNxePbJgpB6b RKUqN+etO2bN2p2eYir4N57UEFZSist+F9LHO1WRE83ThSwH037guf+82+Ogpuyt ADLI5fQK/rN7zjS9CQiv6NeWqI43XhUoMi2D+Sy33Zo+eYH4CDm0dnKLu/qZsgen ofRgp3UGnUep9XV6X1h6I5/xsfXLqgZWfXG2ShVxjSo4Qq4m569wPzt96oekIysC ElOv/DdY5vGKGUnhdioiNfZ/1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIFAQwW ANZlPQ2R3svlyjB10lP7MB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAothRZL44rqzhFaFFKllpPB8ou064rXfYD0KjrVxWIl6KFzDLOV+uUEH/7rbc QovQhrG0CDXa3Ve9Xc4V/tYO51uy6QODyHk0xVxuVpEfVohE32r9nbxH3BrgB9LI vFNcb7LCHaBYQ3shx9/1cKWNINxBMx1/qLqzQxcPNwtf7Bm2MeKPVOPphHhbZ3Rb mVLF2OpSQRrVeiM0qoWFan79tYNvfVRoTXBv/VbKgbyfx7gtgjbFEDYqZhAemksl Ny5xOUC01/bvFYr82JlmJJtyMLTkEW/DykbxfUNx1f7I7J0QYMPlIB2x0uRorlPY IatJq/yx0eUg0iUx6/0tyJEVmg== -----END CERTIFICATE-----Generated at Thu May 21 15:25:00 2026 by rpki-client