$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: OJhPs+7y2sQA5ZkdsGSxuSRYMyNTjAFvgm/QFgbg+Mw= Subject key identifier: 78:69:17:DC:B8:E8:B0:A7:77:5B:A7:A3:95:21:9D:8D:78:54:C5:B8 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 023E Signing time: Mon 27 Jul 2026 04:00:14 +0000 Manifest this update: Mon 27 Jul 2026 04:00:13 +0000 Manifest next update: Mon 03 Aug 2026 04:00:13 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: mGfu+L3+97Gl2fJj6+VFAa5K3FWnvkNhbdDntJUpxwU=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 3n/gOl41dGfCJb55lZ2KYu72EfPcwMUIMD9hW1bv1H4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Jul 27 04:00:13 2026 GMT Not After : Aug 3 04:00:13 2026 GMT Subject: CN=6a66d7ce-df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:ab:a9:9b:c9:4f:e3:6b:e0:1f:82:43:15: 69:e0:10:bc:42:2a:ac:9c:91:94:f6:07:5c:74:54: 94:40:f3:87:b9:c4:8f:d3:58:6e:c9:ae:0b:f7:3d: e8:27:23:23:2c:eb:81:cb:a1:47:fe:21:00:1d:f0: a3:58:66:0e:cd:71:5d:a8:22:97:62:22:45:f8:22: 5b:6d:a3:51:10:5e:d7:3f:da:c2:9f:b7:d9:3d:0f: e3:a4:09:58:c2:86:3a:0e:4c:43:ab:33:44:d0:27: 7d:42:db:3d:4f:3f:38:80:8d:0c:d4:2e:e1:06:4a: ac:83:c9:4f:ea:9e:c4:15:e6:ea:2e:21:85:57:70: 1a:4d:21:6a:f6:86:e3:e4:db:97:e2:bb:a3:5e:69: a7:76:2a:4d:17:71:db:c2:5c:4b:ca:fb:53:70:37: c4:9c:1b:79:6f:ac:c5:db:85:0f:72:5f:c1:f2:23: a5:58:68:b7:77:aa:56:16:e1:7f:a5:34:11:e7:93: e6:8b:87:78:fc:b1:ec:82:99:23:bd:bd:ec:10:ad: 19:2b:66:79:8e:6c:4d:4b:85:79:bc:8a:32:1a:71: 77:31:c6:f7:81:43:dc:92:ca:6c:f1:53:69:29:c9: c5:4f:ce:d1:7a:66:66:c2:f5:e5:79:33:7c:c5:83: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:69:17:DC:B8:E8:B0:A7:77:5B:A7:A3:95:21:9D:8D:78:54:C5:B8 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:23:5b:27:6e:78:01:6f:6d:63:4b:77:ae:87:df:7b:f9:8c: 19:17:e6:d3:5e:f0:3d:c8:94:9f:20:af:9d:8d:fc:51:64:37: de:77:54:d5:22:f5:08:17:2b:30:22:fb:9f:c3:73:98:ab:22: 27:bb:e8:13:e9:98:71:96:2c:59:ef:22:a2:e6:a1:80:e4:1b: 89:09:cb:75:5e:2d:54:00:e8:3e:3b:7d:51:54:b2:2b:2f:c4: b3:7d:ef:b3:6a:4c:30:ea:be:ed:4a:3b:3c:86:77:81:50:8f: 9e:a2:ec:a8:0e:0e:82:c4:39:c4:43:0a:0c:e4:9e:46:dd:98: 2e:eb:00:13:9c:02:5f:97:40:7a:08:b3:09:78:c9:71:8f:5d: 4c:e9:fc:31:63:23:b6:31:09:6e:bb:72:47:f7:ae:bb:22:fb: c7:70:db:65:f9:63:fd:dc:b5:40:ff:15:d5:20:85:0d:ae:5a: be:c1:22:b9:ab:3c:32:cc:95:5a:b9:a8:8f:bc:f4:30:af:7d: 1b:9a:b0:ed:0b:7a:44:c9:0c:c1:fa:65:fd:e0:0e:78:4f:fc: 9f:b4:c7:7f:6b:da:74:2a:b9:0f:65:c4:6f:28:bf:54:24:ca: 5e:cc:91:6e:5b:ec:a6:17:34:a8:4d:da:06:30:e9:a3:f4:c0: ff:e3:4b:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjYwNzI3MDQwMDEzWhcNMjYwODAzMDQwMDEzWjAYMRYwFAYD VQQDEw02YTY2ZDdjZS1kZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhymrqZvJT+Nr4B+CQxVp4BC8QiqsnJGU9gdcdFSUQPOHucSP01huya4L9z3o JyMjLOuBy6FH/iEAHfCjWGYOzXFdqCKXYiJF+CJbbaNREF7XP9rCn7fZPQ/jpAlY woY6DkxDqzNE0Cd9Qts9Tz84gI0M1C7hBkqsg8lP6p7EFebqLiGFV3AaTSFq9obj 5NuX4rujXmmndipNF3HbwlxLyvtTcDfEnBt5b6zF24UPcl/B8iOlWGi3d6pWFuF/ pTQR55Pmi4d4/LHsgpkjvb3sEK0ZK2Z5jmxNS4V5vIoyGnF3Mcb3gUPcksps8VNp KcnFT87RemZmwvXleTN8xYN5nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhpF9y4 6LCnd1uno5UhnY14VMW4MB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiiNbJ254AW9tY0t3roffe/mMGRfm017wPciUnyCvnY38UWQ33ndU1SL1CBcr MCL7n8NzmKsiJ7voE+mYcZYsWe8iouahgOQbiQnLdV4tVADoPjt9UVSyKy/Es33v s2pMMOq+7Uo7PIZ3gVCPnqLsqA4OgsQ5xEMKDOSeRt2YLusAE5wCX5dAegizCXjJ cY9dTOn8MWMjtjEJbrtyR/euuyL7x3DbZflj/dy1QP8V1SCFDa5avsEiuas8MsyV Wrmoj7z0MK99G5qw7Qt6RMkMwfpl/eAOeE/8n7THf2vadCq5D2XEbyi/VCTKXsyR blvsphc0qE3aBjDpo/TA/+NLhg== -----END CERTIFICATE-----Generated at Wed Jul 29 05:26:21 2026 by rpki-client