$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: 0gT3Dqt9PP1JsysPv0YKf9r4h2lqKxmwChqCn712ofc= Subject key identifier: 9C:ED:77:42:F4:73:39:D6:60:3A:6F:BD:CB:27:2F:C3:FE:7D:A0:22 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 01EA Signing time: Mon 27 Jul 2026 05:04:11 +0000 Manifest this update: Mon 27 Jul 2026 05:04:10 +0000 Manifest next update: Mon 03 Aug 2026 05:04:10 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: /V3CC6hkynQx5j3A/CDk9UdHY21KRu6jStgrzEnyvK0=) 2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Jul 27 05:04:10 2026 GMT Not After : Aug 3 05:04:10 2026 GMT Subject: CN=6a66e6cb-9ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:96:08:39:87:d2:61:63:66:7a:aa:18:c8: 55:8b:3d:12:94:3d:49:e2:06:ba:d1:90:0c:04:a7: 66:c6:5e:f6:3e:20:a8:8b:b7:f7:6e:0f:a8:79:04: 5a:5e:9c:e4:f9:60:1a:b4:3d:c3:5f:7f:ad:61:59: 15:6b:5e:24:da:f0:c0:21:fc:b5:c4:ee:32:33:49: 9f:e1:93:37:40:a7:19:38:29:51:82:20:bd:8b:64: b5:9d:a4:04:c9:18:19:b3:5a:f1:21:85:78:09:91: cf:dc:3f:e4:02:7f:7e:df:e2:79:30:2a:8c:69:a9: 08:7e:b7:de:ec:1c:02:2a:39:2f:87:42:24:7f:96: 2f:69:ea:bc:f9:0a:fd:66:8f:c6:73:11:8b:50:b8: 37:ba:36:05:f4:c4:a6:1e:c9:5a:ec:8a:4a:41:5a: 60:e7:54:9f:76:87:f0:76:7c:72:0f:9c:2e:59:6f: 01:22:a1:a0:f7:12:c1:95:6a:97:da:ce:9a:85:26: f2:e1:a1:49:cf:d3:1b:f2:2d:00:e5:00:25:c2:a8: fb:90:95:95:da:7b:ae:87:40:80:ac:1a:3f:25:14: d3:40:b3:db:5f:68:2e:0d:59:82:6d:39:57:a6:1b: 1a:8f:eb:4e:3e:d2:80:a6:d6:ff:2a:99:74:25:12: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:ED:77:42:F4:73:39:D6:60:3A:6F:BD:CB:27:2F:C3:FE:7D:A0:22 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c4:d6:0c:95:3f:84:07:06:67:b9:20:b8:5e:7b:ab:62:95: 33:5d:42:f6:a7:09:95:41:e0:94:59:d9:9f:9d:05:20:c8:45: 13:5a:94:55:dd:ed:66:29:c3:fa:13:b0:3b:46:d5:80:75:2d: f3:7e:7b:26:d0:72:a9:f8:26:fe:9d:ac:8d:a8:10:28:f0:2c: f1:a3:3a:68:d0:e1:8f:38:08:f6:e9:c7:ca:b5:50:4b:dd:64: 96:ad:b7:ef:8f:2c:0c:b5:c4:18:04:ab:76:c9:4b:05:c8:07: 01:b2:68:da:5e:e7:b7:ae:83:78:6e:60:47:5c:32:a8:29:67: ec:77:6d:3c:05:f2:61:b8:29:3a:59:cd:e9:64:d3:05:40:9f: 3b:81:73:4a:c2:42:f8:c3:8e:d6:9b:a7:37:ce:92:e3:e6:36: 4a:d8:4a:4a:58:82:59:d2:07:a1:6f:8e:6d:82:58:db:a2:7c: 22:cd:61:31:00:4d:e6:ee:0d:2c:a5:2f:19:2f:12:4f:79:56: 79:f0:a4:4a:47:4b:55:6f:a9:93:fa:0e:f6:4f:2b:c5:df:ea: 9f:92:14:ca:21:a6:d0:eb:9a:bf:5b:b7:bf:e5:9a:78:6d:83: cc:7b:5f:62:86:5a:5c:73:b4:48:dd:fb:ed:2a:a7:47:ff:6c: fe:88:64:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjYwNzI3MDUwNDEwWhcNMjYwODAzMDUwNDEwWjAYMRYwFAYD VQQDEw02YTY2ZTZjYi05ZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYuWCDmH0mFjZnqqGMhViz0SlD1J4ga60ZAMBKdmxl72PiCoi7f3bg+oeQRa Xpzk+WAatD3DX3+tYVkVa14k2vDAIfy1xO4yM0mf4ZM3QKcZOClRgiC9i2S1naQE yRgZs1rxIYV4CZHP3D/kAn9+3+J5MCqMaakIfrfe7BwCKjkvh0Ikf5Yvaeq8+Qr9 Zo/GcxGLULg3ujYF9MSmHsla7IpKQVpg51SfdofwdnxyD5wuWW8BIqGg9xLBlWqX 2s6ahSby4aFJz9Mb8i0A5QAlwqj7kJWV2nuuh0CArBo/JRTTQLPbX2guDVmCbTlX phsaj+tOPtKAptb/Kpl0JRLoGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJztd0L0 cznWYDpvvcsnL8P+faAiMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGMTWDJU/hAcGZ7kguF57q2KVM11C9qcJlUHglFnZn50FIMhFE1qUVd3tZinD +hOwO0bVgHUt8357JtByqfgm/p2sjagQKPAs8aM6aNDhjzgI9unHyrVQS91klq23 748sDLXEGASrdslLBcgHAbJo2l7nt66DeG5gR1wyqCln7HdtPAXyYbgpOlnN6WTT BUCfO4FzSsJC+MOO1punN86S4+Y2SthKSliCWdIHoW+ObYJY26J8Is1hMQBN5u4N LKUvGS8ST3lWefCkSkdLVW+pk/oO9k8rxd/qn5IUyiGm0Ouav1u3v+WaeG2DzHtf YoZaXHO0SN377SqnR/9s/ohkpQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:42 2026 by rpki-client