$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: k0bGPrnX/asbjcULKk+kcmnveqoBKpM8wDnddW6LfNg= Subject key identifier: A9:EC:32:BD:92:AE:2D:96:D8:39:F2:0E:40:EC:7F:BB:06:40:A2:1F Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 0759 Signing time: Sun 26 Jul 2026 22:38:37 +0000 Manifest this update: Sun 26 Jul 2026 22:38:36 +0000 Manifest next update: Sun 02 Aug 2026 22:38:36 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: ZHm5tIxBv2CfR8Aonl3QOnfdtbEknCfogffPKHTpZSU=) 2: 1C9DA52E9BD011F0AE2D7868C4F9AE02.roa (hash: FJD5HahYGYldSP/+Nxp4VyhD4H6bs1q2QrljjpyN2Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Jul 26 22:38:36 2026 GMT Not After : Aug 2 22:38:36 2026 GMT Subject: CN=6a668c6d-3d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:09:5b:61:f8:6a:05:c4:56:ec:ad:be:82: 3c:89:cb:51:ce:68:2d:11:b5:cd:6b:2b:f7:d8:6b: 5b:65:7c:e0:5f:90:cb:df:4e:e9:99:c3:29:84:22: 1e:0b:22:8d:5b:0e:39:b1:8c:c3:78:13:e8:9c:cf: 28:4a:fa:09:ce:e3:ad:07:1d:68:f4:aa:33:72:28: 37:b7:df:e9:16:15:78:22:d9:7b:be:5b:62:6e:2b: f7:88:7d:d5:ca:37:52:21:42:80:2d:38:0b:28:f4: 36:19:5b:cf:af:4c:94:88:47:ef:13:3c:30:22:be: aa:29:6c:36:13:eb:3e:a5:74:85:5d:28:97:69:a5: 19:99:af:71:09:94:2e:34:d8:70:0a:5f:d6:b2:81: 0e:ed:78:6e:a5:05:73:7e:0f:e7:d7:68:17:12:8d: 2f:e1:fb:20:d0:ae:15:dc:1b:55:07:89:3a:09:3a: ee:48:15:32:94:78:89:29:e1:54:22:2c:fb:08:52: 8a:1a:18:a8:b3:69:3c:5c:0b:c1:ad:4b:b9:b6:6f: 65:60:0f:67:ab:86:a6:74:f4:a9:54:0b:2b:7e:b0: a5:b4:3f:f0:87:75:60:a2:05:23:70:18:5d:2f:8f: a6:a9:c2:8d:bb:25:cc:b9:1b:9b:1a:4c:9d:7f:1f: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EC:32:BD:92:AE:2D:96:D8:39:F2:0E:40:EC:7F:BB:06:40:A2:1F X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:94:b0:27:b7:50:74:86:ec:3a:8f:f1:d9:8c:55:d3:fa:69: bf:49:33:30:91:bd:01:a8:54:5c:16:77:2f:19:fd:82:d7:ea: 1f:7a:59:4e:2a:72:e3:e1:24:cb:cd:fd:a6:aa:a6:ef:da:3d: 14:5b:cb:22:8a:b1:83:44:fc:ad:44:2e:71:9f:ff:61:69:87: 77:c1:5b:71:71:24:d1:d1:27:ba:3f:9c:ca:51:c6:38:e3:e7: 37:c2:98:b0:77:5f:1c:96:cf:39:48:58:65:b5:4b:b7:43:26: 97:3b:ce:02:54:93:ec:ff:ff:ac:62:39:1a:b6:75:ad:72:a8: ce:cb:ab:b4:d9:b8:98:31:c2:44:c0:42:3a:f7:4b:fe:59:ab: bc:4e:b3:81:99:9e:aa:2b:d1:9b:28:5a:30:bd:93:48:58:dd: ab:38:e6:34:37:25:f4:f1:9f:db:6d:0a:e3:e3:25:3e:85:12: 77:70:98:16:2a:7e:e5:e0:23:ad:e4:03:12:0c:a1:43:af:ae: 14:2c:50:69:21:56:55:2d:3c:a3:30:a7:fb:09:b8:b5:84:cd: 7d:d3:9d:a0:2c:a8:30:9a:1d:12:69:1f:52:dc:9e:c7:66:09: fc:bb:0f:cb:38:5b:2c:5c:ea:fa:cb:3b:03:c7:62:59:59:8a: 57:a1:1d:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjYwNzI2MjIzODM2WhcNMjYwODAyMjIzODM2WjAYMRYwFAYD VQQDEw02YTY2OGM2ZC0zZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLIJW2H4agXEVuytvoI8ictRzmgtEbXNayv32GtbZXzgX5DL307pmcMphCIe CyKNWw45sYzDeBPonM8oSvoJzuOtBx1o9Kozcig3t9/pFhV4Itl7vltibiv3iH3V yjdSIUKALTgLKPQ2GVvPr0yUiEfvEzwwIr6qKWw2E+s+pXSFXSiXaaUZma9xCZQu NNhwCl/WsoEO7XhupQVzfg/n12gXEo0v4fsg0K4V3BtVB4k6CTruSBUylHiJKeFU Iiz7CFKKGhios2k8XAvBrUu5tm9lYA9nq4amdPSpVAsrfrCltD/wh3VgogUjcBhd L4+mqcKNuyXMuRubGkydfx/iqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnsMr2S ri2W2DnyDkDsf7sGQKIfMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuJSwJ7dQdIbsOo/x2YxV0/ppv0kzMJG9AahUXBZ3Lxn9gtfqH3pZTipy4+Ek y839pqqm79o9FFvLIoqxg0T8rUQucZ//YWmHd8FbcXEk0dEnuj+cylHGOOPnN8KY sHdfHJbPOUhYZbVLt0MmlzvOAlST7P//rGI5GrZ1rXKozsurtNm4mDHCRMBCOvdL /lmrvE6zgZmeqivRmyhaML2TSFjdqzjmNDcl9PGf220K4+MlPoUSd3CYFip+5eAj reQDEgyhQ6+uFCxQaSFWVS08ozCn+wm4tYTNfdOdoCyoMJodEmkfUtyex2YJ/LsP yzhbLFzq+ss7A8diWVmKV6Edow== -----END CERTIFICATE-----Generated at Tue Jul 28 22:20:06 2026 by rpki-client