$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: hDvQuyRLR73fv62Y89yxjRMF//holOW+9q7tR/rDrXY= Subject key identifier: 47:5B:D0:A6:60:AE:A6:0F:1A:5E:BB:5D:F7:3D:B9:E6:8E:87:A7:C7 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 0141 Signing time: Mon 27 Jul 2026 07:26:26 +0000 Manifest this update: Mon 27 Jul 2026 07:26:25 +0000 Manifest next update: Mon 03 Aug 2026 07:26:25 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: cAa/NAWwFh+c4GYxDswJcOtTfjTXdAnM5OnISlSOzps=) 2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) 3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) 4: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Jul 27 07:26:25 2026 GMT Not After : Aug 3 07:26:25 2026 GMT Subject: CN=6a670822-ccfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d0:10:7d:bc:fa:68:d3:39:21:7e:5e:a3:86: a8:c1:79:fd:d9:11:2d:56:d9:c7:b7:39:b0:0c:e7: 58:85:5e:e8:92:37:66:91:66:93:9e:5b:79:75:89: b7:8c:63:5f:a3:32:19:c1:19:72:fa:ab:ec:ae:48: 1e:5b:d6:41:b2:68:4b:f8:7c:7b:d5:40:ab:d2:4b: 2a:6c:17:5e:62:cd:e4:5e:9d:20:4e:0d:3b:22:70: 2d:71:b6:94:23:8d:a3:77:1b:3b:ce:13:84:2f:39: eb:5c:af:06:2a:46:82:20:86:4b:8f:3e:3e:2d:1e: 07:5b:6d:02:53:94:f2:c0:54:d7:af:3f:db:b1:e6: ee:0c:62:87:cb:55:24:d3:fd:36:70:4d:db:49:86: a0:89:9b:89:5a:ec:6d:b0:7d:f9:c5:94:a3:19:70: 28:84:25:d4:a0:0b:be:ad:a3:33:72:a7:f0:df:68: 9d:d3:42:7f:81:18:1c:25:dc:2e:4d:50:02:11:5e: 15:18:33:52:47:01:b4:70:28:9b:84:fd:0c:03:3d: 4b:41:7d:f9:f4:65:80:8b:5e:ff:73:12:28:fd:84: e7:c9:53:84:c2:86:1b:d8:f3:01:c9:be:5f:f1:3f: 99:ab:ae:42:68:8f:71:9f:a1:22:10:cf:20:4c:5f: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:D0:A6:60:AE:A6:0F:1A:5E:BB:5D:F7:3D:B9:E6:8E:87:A7:C7 X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:68:41:59:5c:ea:bb:1c:5a:f5:65:d7:60:39:c1:a6:5e:49: 77:b1:02:af:5b:1b:f5:36:cc:f4:8e:13:e3:27:7f:f4:7f:c2: 0f:56:20:4c:60:09:94:5b:64:a3:d6:44:b9:04:62:99:36:54: eb:3f:52:d5:ad:9f:f6:0f:fe:36:96:ad:40:64:f1:b2:df:fa: f0:fd:e7:c1:31:1f:5d:c2:99:85:9d:e7:66:a2:8a:2c:7b:bb: 2b:5e:3b:5b:45:97:b7:18:e5:ba:96:32:91:7b:df:34:64:29: dd:b3:02:47:39:74:a6:58:7e:65:a7:1a:4a:7e:6e:d6:0a:a8: 05:be:1f:67:2e:c7:c8:4f:b5:49:d0:1e:3e:00:31:d2:88:01: 1e:16:81:ee:83:33:c3:4f:15:8f:72:26:6c:a2:3c:6a:06:64: d6:ba:c4:d3:e9:85:bb:99:ed:3b:46:25:de:7f:27:55:54:d1: 25:21:b0:1a:27:cf:f4:25:35:d9:bc:ef:cf:8a:e1:21:53:9e: 3c:39:06:af:b2:09:f8:a3:da:e5:bf:a5:c8:a8:ad:41:ec:df: 7c:e5:b3:2b:8c:a2:d8:9a:3c:dd:e1:f1:74:6c:c8:7c:4b:d7: 3e:b1:09:fe:58:00:30:cd:06:12:e5:d6:54:0b:e5:14:2f:98: a8:e9:4f:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYwNzI3MDcyNjI1WhcNMjYwODAzMDcyNjI1WjAYMRYwFAYD VQQDEw02YTY3MDgyMi1jY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49AQfbz6aNM5IX5eo4aowXn92REtVtnHtzmwDOdYhV7okjdmkWaTnlt5dYm3 jGNfozIZwRly+qvsrkgeW9ZBsmhL+Hx71UCr0ksqbBdeYs3kXp0gTg07InAtcbaU I42jdxs7zhOELznrXK8GKkaCIIZLjz4+LR4HW20CU5TywFTXrz/bsebuDGKHy1Uk 0/02cE3bSYagiZuJWuxtsH35xZSjGXAohCXUoAu+raMzcqfw32id00J/gRgcJdwu TVACEV4VGDNSRwG0cCibhP0MAz1LQX359GWAi17/cxIo/YTnyVOEwoYb2PMByb5f 8T+Zq65CaI9xn6EiEM8gTF+y/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdb0KZg rqYPGl67Xfc9ueaOh6fHMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUWhBWVzquxxa9WXXYDnBpl5Jd7ECr1sb9TbM9I4T4yd/9H/CD1YgTGAJlFtk o9ZEuQRimTZU6z9S1a2f9g/+NpatQGTxst/68P3nwTEfXcKZhZ3nZqKKLHu7K147 W0WXtxjlupYykXvfNGQp3bMCRzl0plh+ZacaSn5u1gqoBb4fZy7HyE+1SdAePgAx 0ogBHhaB7oMzw08Vj3ImbKI8agZk1rrE0+mFu5ntO0Yl3n8nVVTRJSGwGifP9CU1 2bzvz4rhIVOePDkGr7IJ+KPa5b+lyKitQezffOWzK4yi2Jo83eHxdGzIfEvXPrEJ /lgAMM0GEuXWVAvlFC+YqOlPTQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:55:58 2026 by rpki-client