$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: HiB3pCBAIBnsqICYTfnWQWiOGhYPXuHXosVRYUksYZA= Subject key identifier: A9:46:51:20:DA:3D:A6:9D:F8:E9:D7:41:DE:16:EC:12:5B:C8:09:87 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 29 Signing time: Thu 21 May 2026 08:56:17 +0000 Manifest this update: Thu 21 May 2026 08:56:16 +0000 Manifest next update: Thu 28 May 2026 08:56:16 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: LSV8pazxMtp5EVQADzbsNDegGS4MPwMqEPyPSezsAzc=) 2: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4=) 3: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: YICsi1o5Z1QCNa3raABk0vbNZqKDNF4/heN9D5mwTtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: May 21 08:56:16 2026 GMT Not After : May 28 08:56:16 2026 GMT Subject: CN=6a0ec8b1-0537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ae:43:74:c0:d0:d3:c4:9b:b1:51:67:8d:cd: d7:3d:bb:61:a3:38:37:e6:b7:5e:0c:96:8d:da:0f: 01:ef:b0:44:25:f5:f6:c7:bd:aa:0e:80:c8:0a:10: cc:de:7a:4f:98:ae:f1:1f:e6:80:18:ec:7d:82:18: cc:8a:b5:0c:00:96:bb:49:e0:51:3e:95:04:92:85: a5:90:ed:36:03:0d:7e:3a:ea:09:a3:5c:3f:e7:e6: f9:fc:59:41:bf:ae:77:86:9c:43:08:36:30:10:95: ba:13:68:57:e0:97:71:03:b9:59:d6:3e:6d:ea:d0: 75:9c:5b:8f:84:2b:60:9e:df:bc:ed:79:81:42:52: 43:02:49:50:42:42:85:64:ba:40:2f:60:57:91:c3: a3:f5:b4:9a:21:78:ba:22:54:19:d4:62:a8:01:73: 84:a4:4f:ee:b7:e0:e8:5a:40:5d:a9:5e:20:4b:ee: 21:1e:62:06:a6:76:ef:d1:29:a6:37:17:a9:c0:b0: e9:95:d1:c3:27:c6:6e:68:ee:21:72:38:aa:54:30: ee:4a:e1:ce:21:a3:9e:ff:79:c6:10:70:d6:30:e9: 0c:6a:22:31:7c:47:68:68:9f:d8:f5:7f:00:c3:48: 04:ae:50:78:80:a7:e6:75:a8:dd:f8:1f:ea:fd:32: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:51:20:DA:3D:A6:9D:F8:E9:D7:41:DE:16:EC:12:5B:C8:09:87 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9d:db:6e:34:c6:02:06:09:d0:87:39:1e:98:4d:1f:16:2a: 87:22:33:a5:fd:0e:69:f1:7c:eb:21:22:6d:98:f8:b2:e4:dc: 95:44:cd:2b:ce:46:54:27:c9:1b:b9:24:9e:3b:4c:9f:de:25: 6f:8d:14:e6:90:5e:6b:eb:27:d7:f9:15:c1:a8:31:50:93:47: b3:c5:3e:f9:fe:41:a0:b7:84:14:ee:c4:9b:b9:6d:2c:cd:8d: 19:c4:bb:70:1e:00:83:a6:1f:f3:fe:11:c0:3d:ae:e5:4b:7e: 0c:23:73:5c:05:0f:bd:d9:f9:c6:d7:7e:9f:57:15:fa:9a:7f: 07:9b:85:a0:1d:41:b7:e6:8d:68:39:cc:57:97:05:07:d3:41: 8f:5e:50:91:a1:15:76:eb:29:6a:78:c0:1b:91:44:2b:03:e4: b6:23:c3:e7:69:ca:b3:a8:6d:68:46:e8:be:42:1a:6f:5c:5e: cc:fa:18:12:b8:4d:17:8d:59:bf:5d:74:82:f9:86:06:5a:c2: 90:a9:99:bd:5b:62:d7:e6:15:35:ec:2b:be:3d:5e:c3:b6:84: bf:27:09:00:25:4c:02:11:fd:11:4b:cd:cc:b2:4d:e2:15:99: e1:0a:53:de:cb:90:7a:82:ee:ac:41:a4:a0:7e:f6:01:b7:15: 7d:c0:52:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA1MjEwODU2MTZaFw0yNjA1MjgwODU2MTZaMBgxFjAUBgNV BAMTDTZhMGVjOGIxLTA1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDirkN0wNDTxJuxUWeNzdc9u2GjODfmt14Mlo3aDwHvsEQl9fbHvaoOgMgKEMze ek+YrvEf5oAY7H2CGMyKtQwAlrtJ4FE+lQSShaWQ7TYDDX466gmjXD/n5vn8WUG/ rneGnEMINjAQlboTaFfgl3EDuVnWPm3q0HWcW4+EK2Ce37zteYFCUkMCSVBCQoVk ukAvYFeRw6P1tJoheLoiVBnUYqgBc4SkT+634OhaQF2pXiBL7iEeYgamdu/RKaY3 F6nAsOmV0cMnxm5o7iFyOKpUMO5K4c4ho57/ecYQcNYw6QxqIjF8R2hon9j1fwDD SASuUHiAp+Z1qN34H+r9MtH9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqUZRINo9 pp346ddB3hbsElvICYcwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxndtuNMYCBgnQhzkemE0fFiqHIjOl/Q5p8XzrISJtmPiy5NyVRM0rzkZUJ8kb uSSeO0yf3iVvjRTmkF5r6yfX+RXBqDFQk0ezxT75/kGgt4QU7sSbuW0szY0ZxLtw HgCDph/z/hHAPa7lS34MI3NcBQ+92fnG136fVxX6mn8Hm4WgHUG35o1oOcxXlwUH 00GPXlCRoRV26ylqeMAbkUQrA+S2I8PnacqzqG1oRui+QhpvXF7M+hgSuE0XjVm/ XXSC+YYGWsKQqZm9W2LX5hU17Cu+PV7DtoS/JwkAJUwCEf0RS83Msk3iFZnhClPe y5B6gu6sQaSgfvYBtxV9wFKD -----END CERTIFICATE-----Generated at Thu May 21 15:40:14 2026 by rpki-client