$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: g4h/RGoywv6pto+7j/GeTNabu9QDY0igzMXI7N3qjVM= Subject key identifier: 19:2C:EA:4E:DA:B1:D2:D6:6F:B3:50:F7:F2:68:63:7A:0D:FF:B0:3D Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 09CC Signing time: Sun 26 Jul 2026 20:29:13 +0000 Manifest this update: Sun 26 Jul 2026 20:29:12 +0000 Manifest next update: Sun 02 Aug 2026 20:29:12 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: DXddLzAjrB7Fozs9Daaa8j5XG12I3z0ain6JPfaevLY=) 2: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=) 3: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Jul 26 20:29:12 2026 GMT Not After : Aug 2 20:29:12 2026 GMT Subject: CN=6a666e19-3d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:a8:64:40:08:26:71:41:23:82:2c:22:60: 40:e8:a5:44:cb:66:08:b6:43:cb:3c:c9:59:2c:25: dc:5d:5a:be:e7:5f:05:2d:73:de:1f:b9:28:d6:a6: 39:69:44:92:18:ba:97:00:e1:24:44:7d:ee:21:84: 59:b2:ec:9f:f7:ca:89:96:17:d7:f2:49:80:1f:b1: df:85:60:f3:4d:29:f3:56:34:90:23:cc:84:b0:d2: fc:1d:12:50:ba:98:c9:96:1b:7f:00:5c:77:e6:91: 07:70:ef:c1:22:2c:2f:5f:93:84:42:a5:0b:0a:3a: e1:02:23:fa:7e:96:4e:3a:87:51:28:57:f8:b0:84: e1:4a:7d:f3:26:47:80:41:ac:f2:59:41:75:5d:e0: b4:42:7a:34:ef:ba:76:d4:6f:d1:b9:77:79:a5:9d: 46:14:8e:75:f3:14:a9:62:75:03:05:50:a6:dd:27: 3d:a0:3c:ff:f9:4a:c8:4c:80:ca:d0:48:4b:4b:c8: dc:b8:8d:28:a7:cc:59:0b:6c:01:eb:0e:ce:b0:eb: b3:9d:f5:2f:7d:f1:f6:4d:23:31:e8:5a:6c:0b:9c: 63:1d:8e:78:87:9f:a6:47:ac:e6:e0:05:84:c2:08: a3:99:b8:f9:33:a3:4c:1b:ea:cd:cc:85:14:44:89: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2C:EA:4E:DA:B1:D2:D6:6F:B3:50:F7:F2:68:63:7A:0D:FF:B0:3D X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a0:8e:5e:2d:31:ec:80:b0:14:49:79:5f:30:6f:1d:b7:7b: 63:a0:1e:7d:f3:8f:07:0f:dd:3d:cc:50:5e:a0:aa:50:c4:48: c7:93:46:b8:35:0d:6d:ae:02:24:ce:6b:ea:06:ed:84:94:12: 86:a8:d8:d1:df:61:bc:75:56:da:2c:d2:ef:f5:d1:a8:9e:a5: 33:03:a8:d4:ee:a3:cf:d7:94:0f:73:3e:5d:5e:8e:32:d2:f3: 81:9e:4e:d0:e2:88:b9:c5:6f:c0:d9:0b:0e:76:29:b8:bd:55: b7:13:3d:f9:8a:3e:44:e3:1a:da:e9:09:56:02:71:ad:b3:56: 0e:7d:51:00:a5:89:ee:7b:42:18:6e:27:b5:b1:ba:f7:de:2c: 8d:bf:bc:74:cb:dc:e6:9d:f1:23:a9:11:a2:b1:39:28:83:6f: 55:1a:31:92:99:17:b3:fd:9c:98:d6:77:e2:0a:60:17:5a:07: e2:94:89:0b:be:a1:26:57:82:83:36:8a:cf:a0:a9:53:5c:76: 34:63:dd:ff:40:c4:0d:19:18:f3:ab:47:23:4d:6d:20:52:ac: 85:32:d0:ee:e8:5c:80:d6:5a:4c:cc:9c:3d:24:c7:e1:aa:a3: 22:e7:0f:81:5a:7c:25:15:3f:1b:64:e7:4b:9d:d7:a1:39:bf: cc:ec:a9:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwNzI2MjAyOTEyWhcNMjYwODAyMjAyOTEyWjAYMRYwFAYD VQQDEw02YTY2NmUxOS0zZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtECoZEAIJnFBI4IsImBA6KVEy2YItkPLPMlZLCXcXVq+518FLXPeH7ko1qY5 aUSSGLqXAOEkRH3uIYRZsuyf98qJlhfX8kmAH7HfhWDzTSnzVjSQI8yEsNL8HRJQ upjJlht/AFx35pEHcO/BIiwvX5OEQqULCjrhAiP6fpZOOodRKFf4sIThSn3zJkeA QazyWUF1XeC0Qno077p21G/RuXd5pZ1GFI518xSpYnUDBVCm3Sc9oDz/+UrITIDK 0EhLS8jcuI0op8xZC2wB6w7OsOuznfUvffH2TSMx6FpsC5xjHY54h5+mR6zm4AWE wgijmbj5M6NMG+rNzIUURIl4MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBks6k7a sdLWb7NQ9/JoY3oN/7A9MB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFaCOXi0x7ICwFEl5XzBvHbd7Y6AeffOPBw/dPcxQXqCqUMRIx5NGuDUNba4C JM5r6gbthJQShqjY0d9hvHVW2izS7/XRqJ6lMwOo1O6jz9eUD3M+XV6OMtLzgZ5O 0OKIucVvwNkLDnYpuL1VtxM9+Yo+ROMa2ukJVgJxrbNWDn1RAKWJ7ntCGG4ntbG6 994sjb+8dMvc5p3xI6kRorE5KINvVRoxkpkXs/2cmNZ34gpgF1oH4pSJC76hJleC gzaKz6CpU1x2NGPd/0DEDRkY86tHI01tIFKshTLQ7uhcgNZaTMycPSTH4aqjIucP gVp8JRU/G2TnS53XoTm/zOypdQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:12 2026 by rpki-client