$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: l6jGmT911BIH5A80ZPoDpBsnYoPBYCf+FdpJIGMSwrI= Subject key identifier: 60:73:CD:E0:E4:87:76:8E:43:F2:4C:00:A4:88:C4:5E:6D:95:6B:FA Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: CD Signing time: Mon 27 Jul 2026 09:06:13 +0000 Manifest this update: Mon 27 Jul 2026 09:06:13 +0000 Manifest next update: Mon 03 Aug 2026 09:06:13 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: yPOJZ3jZLEn/RgU/K+T6oPYz1eZDTfPucRnuWe2H8LY=) 2: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) 3: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Jul 27 09:06:13 2026 GMT Not After : Aug 3 09:06:13 2026 GMT Subject: CN=6a671f85-3316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:e4:a6:f1:65:d8:3c:8b:95:32:eb:0e:85: 46:34:66:dd:8f:2e:3c:d6:21:28:92:3d:ad:18:a3: d4:be:de:06:cd:a7:e3:74:c2:f0:95:f2:3a:5a:3a: ce:b3:ee:36:7a:96:33:c0:4c:b6:21:84:7b:52:d8: 33:24:4a:43:97:1c:cf:4f:4c:27:ad:04:e0:bb:a3: 9c:82:3f:7e:65:14:4a:41:2f:f7:db:23:3a:01:c4: e9:fb:59:be:b9:8d:73:45:e8:38:2b:06:2f:2c:46: 3e:8a:fc:85:f9:01:dc:44:e2:2d:49:e2:23:7a:4e: a8:87:38:9a:f7:06:7d:ea:99:6e:75:6b:b9:d8:8c: e1:c0:a5:56:0c:94:ef:44:58:84:8a:58:88:f5:9e: 8a:0c:8d:f3:49:7a:83:40:08:53:85:60:10:5c:ec: 71:a4:52:b2:2e:07:e7:b0:19:58:a5:c7:81:36:00: 4f:66:13:d5:7f:bb:5e:fb:fc:6b:3f:f1:22:f5:66: a2:e8:92:a9:fe:c8:1a:67:3d:90:ae:ce:00:f9:d6: a8:a1:bf:46:cf:f5:97:0f:e6:cd:47:61:e3:b6:a1: b8:03:27:be:0f:ee:7d:b6:b2:00:af:41:46:4d:4d: fa:bf:a8:e6:6d:ae:d9:a9:fa:c3:0e:cf:df:a0:98: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:CD:E0:E4:87:76:8E:43:F2:4C:00:A4:88:C4:5E:6D:95:6B:FA X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ac:6d:2a:91:5e:88:55:4b:36:1b:d7:14:41:13:68:ff:84: cd:91:35:6c:c0:5b:1e:e1:0d:61:51:92:70:6c:b6:5f:23:76: 59:db:68:f6:2e:72:4f:2c:7c:7c:85:ab:7e:85:91:0f:3c:78: ec:bf:92:21:99:56:08:f6:1e:b8:15:34:3c:2b:05:8c:d6:53: 82:53:85:32:00:fd:5f:0c:73:b0:35:83:54:e9:ee:02:5d:32: 59:6f:0e:26:7d:54:96:d9:9a:00:b4:07:77:c8:26:84:2b:0f: c1:4c:17:cd:4e:e3:3a:f9:54:1d:54:45:c0:fe:59:db:40:61: d7:1b:83:cd:f4:be:97:dc:00:c1:0a:1a:9c:a4:2b:c9:d0:31: b2:c4:62:d6:c2:d3:3f:90:6a:54:c5:3c:f8:5e:b8:61:b9:be: 05:83:e0:43:40:36:7b:55:82:18:e3:5d:f9:63:97:9f:c5:3e: 65:24:9a:44:a7:8c:53:6e:08:71:0d:11:1d:7b:2d:4b:be:fb: b5:c0:99:3a:73:5a:62:9b:3d:3e:12:a6:3b:55:67:a0:62:e0: f8:c9:c4:33:8d:c2:1e:04:c8:8c:41:c9:4f:e2:27:26:02:eb: 44:e1:2a:0b:d3:37:cf:44:9d:cc:84:d2:91:64:47:bf:f7:25: 66:58:c1:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYwNzI3MDkwNjEzWhcNMjYwODAzMDkwNjEzWjAYMRYwFAYD VQQDEw02YTY3MWY4NS0zMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqu7kpvFl2DyLlTLrDoVGNGbdjy481iEokj2tGKPUvt4GzafjdMLwlfI6WjrO s+42epYzwEy2IYR7UtgzJEpDlxzPT0wnrQTgu6Ocgj9+ZRRKQS/32yM6AcTp+1m+ uY1zReg4KwYvLEY+ivyF+QHcROItSeIjek6ohzia9wZ96pludWu52IzhwKVWDJTv RFiEiliI9Z6KDI3zSXqDQAhThWAQXOxxpFKyLgfnsBlYpceBNgBPZhPVf7te+/xr P/Ei9Wai6JKp/sgaZz2Qrs4A+daoob9Gz/WXD+bNR2HjtqG4Aye+D+59trIAr0FG TU36v6jmba7ZqfrDDs/foJjkLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBzzeDk h3aOQ/JMAKSIxF5tlWv6MB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6xtKpFeiFVLNhvXFEETaP+EzZE1bMBbHuENYVGScGy2XyN2Wdto9i5yTyx8 fIWrfoWRDzx47L+SIZlWCPYeuBU0PCsFjNZTglOFMgD9XwxzsDWDVOnuAl0yWW8O Jn1UltmaALQHd8gmhCsPwUwXzU7jOvlUHVRFwP5Z20Bh1xuDzfS+l9wAwQoanKQr ydAxssRi1sLTP5BqVMU8+F64Ybm+BYPgQ0A2e1WCGONd+WOXn8U+ZSSaRKeMU24I cQ0RHXstS777tcCZOnNaYps9PhKmO1VnoGLg+MnEM43CHgTIjEHJT+InJgLrROEq C9M3z0SdzITSkWRHv/clZljBmA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:46:52 2026 by rpki-client