$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: pbpEV5jpxGs5zr479EsFGBZBG+v3WVIvQhV/jWxqDXU= Subject key identifier: 88:D2:93:25:3F:34:37:4C:B5:29:CD:F7:F9:FD:1A:90:83:C9:A0:41 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 03EF Signing time: Mon 27 Jul 2026 01:34:10 +0000 Manifest this update: Mon 27 Jul 2026 01:34:09 +0000 Manifest next update: Mon 03 Aug 2026 01:34:09 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: ir9dhV8DOOG74Bl+WBi898a7iX7T9CfxNkpIlJ7rmjA=) 2: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=) 3: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=) 4: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=) 5: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=) 6: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=) 7: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Jul 27 01:34:09 2026 GMT Not After : Aug 3 01:34:09 2026 GMT Subject: CN=6a66b591-db83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:47:b4:e4:8b:bd:29:16:12:ce:a7:1f:3a: 4e:de:b6:2b:86:50:f3:c1:bc:f6:9d:f3:0a:95:82: d1:d6:3e:08:d2:7d:dc:bd:74:c8:90:b5:a6:9c:13: 63:78:09:99:0a:96:71:eb:83:1c:5c:14:44:0a:6e: 33:76:39:d4:f0:e4:6a:24:12:cd:44:20:0b:28:fa: 04:2b:26:b7:6a:c6:9b:ea:df:ba:31:64:c1:21:55: 89:95:1d:1b:f7:9e:58:3b:a4:7e:56:b7:7c:15:2c: 5f:4d:a7:bb:36:fa:e2:53:cd:b5:a2:e5:2e:42:57: 41:77:1e:3e:8c:e9:4f:7a:c6:95:64:d5:d3:75:50: 3b:3f:f1:63:98:5c:e2:58:6c:a3:e1:32:24:53:7e: 44:3f:85:9b:a7:2b:36:0e:65:7e:43:5e:0e:43:a9: 5c:27:7a:8d:23:e8:a1:73:a1:b0:10:5b:89:2d:5f: 26:05:95:a1:08:12:96:87:42:a7:f0:e3:28:7c:3c: a5:2f:e2:e3:3c:24:41:99:cd:26:39:b4:e5:d0:47: 5e:04:e1:dd:bc:a1:93:02:31:a8:e7:aa:72:48:5c: 20:25:ba:96:4e:62:11:34:0e:05:94:d4:0d:ae:5a: 73:05:5d:7a:6d:27:c5:36:bf:b8:57:63:79:70:23: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:93:25:3F:34:37:4C:B5:29:CD:F7:F9:FD:1A:90:83:C9:A0:41 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:06:0a:bc:f4:bc:c9:0b:4c:71:00:d0:8f:bd:fb:64:28:9d: c5:3a:65:de:31:f6:b5:1c:43:12:41:fa:9d:5d:d1:aa:a0:8b: ee:57:e0:a9:a2:c0:e1:20:ea:92:cb:fa:18:a2:35:63:eb:84: ff:69:22:95:40:e2:30:0a:df:a6:1c:b4:00:34:2b:5c:02:3a: b5:a8:14:1d:c2:22:88:2b:08:85:22:f4:af:73:97:49:73:d6: a3:0e:26:bb:bd:3a:b1:30:8b:1a:52:ec:9e:c2:8e:e8:ea:00: 8d:59:65:ae:ec:0b:84:34:f4:21:94:fd:88:e6:4a:f8:af:98: 70:35:21:2c:3a:ad:0f:86:fe:03:f4:3f:c0:9a:37:88:65:6f: 91:8f:2a:5a:ba:d3:ab:43:92:2e:08:fa:a3:59:fe:3d:54:41: 4f:cd:27:71:69:f3:9a:55:09:fd:3d:2b:a6:82:51:ba:a3:0e: 41:c3:49:f2:f3:d9:8f:3a:35:91:67:9d:da:9c:b4:e6:59:7e: d6:f9:55:25:3a:c5:8d:bf:c7:05:c6:c9:b4:83:0d:31:7e:10: c9:b9:f0:e4:e5:82:62:15:90:9a:01:4b:bf:d7:c8:3f:f7:ac: 52:14:b4:34:30:da:f1:37:df:d0:f7:37:77:0c:db:36:3c:8b: cc:ba:96:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwNzI3MDEzNDA5WhcNMjYwODAzMDEzNDA5WjAYMRYwFAYD VQQDEw02YTY2YjU5MS1kYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8pHtOSLvSkWEs6nHzpO3rYrhlDzwbz2nfMKlYLR1j4I0n3cvXTIkLWmnBNj eAmZCpZx64McXBRECm4zdjnU8ORqJBLNRCALKPoEKya3asab6t+6MWTBIVWJlR0b 955YO6R+Vrd8FSxfTae7NvriU821ouUuQldBdx4+jOlPesaVZNXTdVA7P/FjmFzi WGyj4TIkU35EP4Wbpys2DmV+Q14OQ6lcJ3qNI+ihc6GwEFuJLV8mBZWhCBKWh0Kn 8OMofDylL+LjPCRBmc0mObTl0EdeBOHdvKGTAjGo56pySFwgJbqWTmIRNA4FlNQN rlpzBV16bSfFNr+4V2N5cCPcGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjSkyU/ NDdMtSnN9/n9GpCDyaBBMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyAYKvPS8yQtMcQDQj737ZCidxTpl3jH2tRxDEkH6nV3RqqCL7lfgqaLA4SDq ksv6GKI1Y+uE/2kilUDiMArfphy0ADQrXAI6tagUHcIiiCsIhSL0r3OXSXPWow4m u706sTCLGlLsnsKO6OoAjVllruwLhDT0IZT9iOZK+K+YcDUhLDqtD4b+A/Q/wJo3 iGVvkY8qWrrTq0OSLgj6o1n+PVRBT80ncWnzmlUJ/T0rpoJRuqMOQcNJ8vPZjzo1 kWed2py05ll+1vlVJTrFjb/HBcbJtIMNMX4Qybnw5OWCYhWQmgFLv9fIP/esUhS0 NDDa8Tff0Pc3dwzbNjyLzLqW/Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:48:55 2026 by rpki-client