$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json) Hash identifier: mIWt65x/cu0u0fyGHEmAqyAHJ+JBMOcR7RaL/WOHR0A= Subject key identifier: A1:51:CB:74:E8:CA:46:FD:C4:6E:B2:E7:60:61:92:24:4C:86:35:61 Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Certificate serial: 4B18 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft Manifest number: 4AF8 Signing time: Mon 27 Jul 2026 02:50:26 +0000 Manifest this update: Mon 27 Jul 2026 02:50:25 +0000 Manifest next update: Mon 03 Aug 2026 02:50:25 +0000 Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: Cr4Lr1L54oosXspPDk0coR0yFA0+WuBWsD5HkT8Dd14=) 2: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=) 3: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: Bd/goy5yGEAJSuUTpPjEEoTLLlOno7n/yKKnsLU9Ymo=) 4: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=) 5: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=) 6: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: VxzHTIWHWE5e1kkdmrFBypeeSBudraax6wjaIcwT32Y=) 7: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: 1+Rzv17HOJVmhyptKkOz5vmBbVoA02iCHrgaS/bnCHE=) 8: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=) 9: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Cy51FJsOgmK/E7wlpy0E5rXUKLSOTbCvLcmr1LlMA0c=) 10: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=) 11: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=) 12: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: kRE596OuuyWoxbv8T1vR2OaR4I4quaciUDwMti2Nlmk=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19224 (0x4b18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Validity Not Before: Jul 27 02:50:25 2026 GMT Not After : Aug 3 02:50:25 2026 GMT Subject: CN=6a66c772-6ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:a5:1e:f6:e9:6f:3b:a9:aa:89:e0:1a:f5: 60:60:22:0a:fc:e9:dd:2c:1e:56:35:af:9e:4a:d0: 26:36:02:f0:ba:9a:11:53:c6:69:2a:eb:cc:23:79: 5e:a5:8f:d1:6d:e0:7d:db:13:6e:81:3a:3c:5d:d7: 30:44:02:bd:0c:c9:a0:84:5b:f8:3c:28:db:6e:0c: af:c1:e6:cf:c4:bf:72:e4:21:80:45:e0:e4:09:7a: b8:b6:26:da:c7:45:5a:da:34:1f:72:ee:26:1e:2b: 21:ad:10:e8:48:62:ab:cc:e3:8f:d9:1b:b3:15:ca: dc:c4:bd:c6:b3:6c:10:27:42:33:1a:ed:8b:c8:6e: be:64:51:d4:cb:ae:33:a9:6b:78:d7:fb:f7:37:0a: 73:8e:30:18:8c:e2:5e:cd:e4:0a:db:48:d6:40:04: a7:b7:0d:ab:81:c7:de:1c:9f:20:8b:f9:f5:e1:b9: 72:a5:b5:13:2f:63:4c:14:9e:17:41:d2:26:36:de: b1:5d:50:63:5c:bd:3b:97:27:ea:b2:16:4d:a7:87: 94:b6:9a:8b:24:71:e7:7b:11:36:2b:86:a1:1d:48: d0:29:f8:c6:1f:68:b7:c3:ce:5c:15:76:5c:d8:94: 65:3b:3f:ee:14:d8:f8:13:99:28:a7:ad:5c:a9:05: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:51:CB:74:E8:CA:46:FD:C4:6E:B2:E7:60:61:92:24:4C:86:35:61 X509v3 Authority Key Identifier: keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5e:61:a4:e5:f1:d7:cb:26:48:22:a1:d8:a7:72:32:02:f4: d1:aa:f7:71:69:9d:0f:39:7b:2c:91:35:9d:4e:98:b5:8d:9a: 00:53:56:a6:40:3e:b3:4d:43:73:25:d2:ac:02:10:ab:e8:d3: fc:4d:dd:5b:c0:5f:c5:4d:f3:5d:24:4b:3c:5b:40:55:f3:eb: d1:1b:83:25:df:c3:4c:5a:92:e1:22:70:a5:de:d8:2e:b0:7d: b7:eb:03:93:19:fe:e6:5a:b0:99:99:4e:d5:df:ab:a0:85:86: 29:1c:5d:f7:57:29:b8:8f:40:ed:f4:fb:61:44:60:c7:5b:07: 00:a7:1d:80:c3:9c:a8:78:52:91:7b:54:90:e5:12:9a:92:04: d7:7f:73:b4:af:7c:6d:68:0b:9d:14:01:04:1c:6d:37:9a:97: ab:23:7a:1e:5a:68:96:f9:52:68:3e:24:f1:75:1f:6a:c2:b3: 63:dc:9e:19:8e:c5:5a:9e:9f:ab:cb:0d:05:07:6f:fa:79:60: 61:50:60:6b:b5:cf:9b:73:ba:86:e3:ff:d7:d0:17:fd:de:1f: e0:9d:3d:15:25:51:46:55:f0:6f:93:22:de:7d:b9:15:f1:96: 07:0c:b8:bf:50:e6:6e:4d:0b:90:e2:f5:96:f0:00:89:da:5f: e6:76:49:17 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICSxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0 OTRCQUY5MzkwHhcNMjYwNzI3MDI1MDI1WhcNMjYwODAzMDI1MDI1WjAYMRYwFAYD VQQDEw02YTY2Yzc3Mi02YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIWlHvbpbzupqongGvVgYCIK/OndLB5WNa+eStAmNgLwupoRU8ZpKuvMI3le pY/RbeB92xNugTo8XdcwRAK9DMmghFv4PCjbbgyvwebPxL9y5CGAReDkCXq4tiba x0Va2jQfcu4mHishrRDoSGKrzOOP2RuzFcrcxL3Gs2wQJ0IzGu2LyG6+ZFHUy64z qWt41/v3NwpzjjAYjOJezeQK20jWQASntw2rgcfeHJ8gi/n14blypbUTL2NMFJ4X QdImNt6xXVBjXL07lyfqshZNp4eUtpqLJHHnexE2K4ahHUjQKfjGH2i3w85cFXZc 2JRlOz/uFNj4E5kop61cqQXeYwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFKFRy3To ykb9xG6y52BhkiRMhjVhMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5 MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZG Mi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAF15hpOXx18smSCKh2KdyMgL00ar3cWmdDzl7LJE1nU6Y tY2aAFNWpkA+s01DcyXSrAIQq+jT/E3dW8BfxU3zXSRLPFtAVfPr0RuDJd/DTFqS 4SJwpd7YLrB9t+sDkxn+5lqwmZlO1d+roIWGKRxd91cpuI9A7fT7YURgx1sHAKcd gMOcqHhSkXtUkOUSmpIE139ztK98bWgLnRQBBBxtN5qXqyN6HlpolvlSaD4k8XUf asKzY9yeGY7FWp6fq8sNBQdv+nlgYVBga7XPm3O6huP/19AX/d4f4J09FSVRRlXw b5Mi3n25FfGWBwy4v1Dmbk0LkOL1lvAAidpf5nZJFw== -----END CERTIFICATE-----Generated at Mon Jul 27 04:20:49 2026 by rpki-client