$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft File: LThammVNvyfyEuUykzG0AdAlKDo.mft (raw, json) Hash identifier: 3JhZM/AAcb07vSoNIrb5BN3f0AKsrcGld7QKnWgrWGI= Subject key identifier: AA:0F:A1:5A:D3:65:D8:70:29:12:98:A9:6D:7B:A6:2E:F9:B9:45:67 Authority key identifier: 2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A Certificate issuer: /CN=A9178AFC/serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft Manifest number: 55 Signing time: Mon 27 Jul 2026 10:35:04 +0000 Manifest this update: Mon 27 Jul 2026 10:35:03 +0000 Manifest next update: Mon 03 Aug 2026 10:35:03 +0000 Files and hashes: 1: LThammVNvyfyEuUykzG0AdAlKDo.crl (hash: j6/+hasvoZ/trFlRuDdNlmnUHKaa+2lAWXHe+XJLUjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Validity Not Before: Jul 27 10:35:03 2026 GMT Not After : Aug 3 10:35:03 2026 GMT Subject: CN=6a673458-69de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:51:ee:f7:24:35:d2:23:d6:f2:52:b7:23: a7:a6:f4:6e:13:2c:c3:e7:69:fe:09:6a:12:8d:48: 80:9a:34:ef:f1:5a:cb:cf:47:25:9b:b9:ab:e0:04: c0:9a:76:75:50:91:14:ed:1e:68:6f:8d:57:91:e1: d8:88:9e:e7:8e:32:7f:67:4e:f8:47:9a:bf:b1:ee: 31:92:c7:fc:76:22:84:de:b5:cd:6c:75:ff:69:8c: 01:bf:cd:68:85:10:9b:15:8c:f8:f2:f3:3d:b2:f8: 36:51:aa:84:60:6a:d3:81:d0:bb:1d:13:ad:43:cc: 5d:2a:d2:d4:48:3c:d3:be:dd:c2:96:10:83:48:36: 15:95:4f:e0:fc:19:d4:cc:10:17:c9:86:bd:9b:75: ba:3b:d8:36:83:2a:61:70:5b:58:6a:1c:d7:33:56: f5:f8:8f:5f:90:64:36:cb:e8:30:d4:13:0a:e3:ba: 00:04:9e:38:62:0a:b2:ee:54:4b:e9:6f:a2:6b:d4: 7c:34:6d:68:2d:ec:5d:75:7d:d0:b7:a5:99:18:20: 54:22:98:63:af:f7:28:77:9b:56:c5:c3:8e:ab:e3: 8d:97:36:f5:cc:de:07:0b:55:a4:21:92:77:a3:62: 49:d3:73:fb:3c:ad:ba:a7:42:83:eb:61:1d:5d:2a: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0F:A1:5A:D3:65:D8:70:29:12:98:A9:6D:7B:A6:2E:F9:B9:45:67 X509v3 Authority Key Identifier: keyid:2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d7:be:b9:71:e8:cc:6a:53:42:2b:d5:2a:3f:13:c3:54:5a: a3:7b:e3:fe:5f:6f:96:c0:42:58:51:bd:52:46:69:3e:b5:08: 53:65:85:72:52:cb:5c:f0:e8:7a:8f:df:56:e5:33:2a:a2:de: 9c:68:93:63:f3:56:29:8e:35:e0:c9:a3:ac:3e:64:91:f2:46: c6:0c:ad:29:31:30:e7:a0:00:12:5e:51:66:f9:c6:4f:54:12: a3:78:28:38:97:e2:6e:31:40:48:6c:4c:ec:65:f3:f0:0d:78: bf:9d:3f:78:6e:89:d0:3e:c1:ee:3a:ac:6c:75:07:25:d5:7b: 73:db:6e:a2:a8:66:a6:3d:5d:39:dd:cc:f0:c5:91:2a:31:9f: 9f:93:f5:ed:97:fa:1c:4f:9a:1c:2b:2f:01:49:5c:28:6c:a5: 10:a3:5d:b5:db:08:9d:3f:7e:01:89:bd:62:27:bd:0a:70:6a: fe:14:b0:2a:ee:98:a5:10:88:65:05:10:63:cf:1f:3c:bc:cc: 99:f4:83:08:91:58:36:a4:b8:c5:da:9e:08:54:42:62:7d:cc: a2:eb:e4:de:e3:11:a6:b7:49:23:bf:05:d8:fe:6d:03:92:8a: 86:70:22:8d:d0:2d:f4:f8:64:57:8b:4c:40:3a:da:33:72:cc: 9d:bc:1f:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoMkQzODVBOUE2NTREQkYyN0YyMTJFNTMyOTMzMUI0MDFE MDI1MjgzQTAeFw0yNjA3MjcxMDM1MDNaFw0yNjA4MDMxMDM1MDNaMBgxFjAUBgNV BAMTDTZhNjczNDU4LTY5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+k1Hu9yQ10iPW8lK3I6em9G4TLMPnaf4JahKNSICaNO/xWsvPRyWbuavgBMCa dnVQkRTtHmhvjVeR4diInueOMn9nTvhHmr+x7jGSx/x2IoTetc1sdf9pjAG/zWiF EJsVjPjy8z2y+DZRqoRgatOB0LsdE61DzF0q0tRIPNO+3cKWEININhWVT+D8GdTM EBfJhr2bdbo72DaDKmFwW1hqHNczVvX4j1+QZDbL6DDUEwrjugAEnjhiCrLuVEvp b6Jr1Hw0bWgt7F11fdC3pZkYIFQimGOv9yh3m1bFw46r442XNvXM3gcLVaQhknej YknTc/s8rbqnQoPrYR1dKiC3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqg+hWtNl 2HApEpipbXumLvm5RWcwHwYDVR0jBBgwFoAULThammVNvyfyEuUykzG0AdAlKDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzI5MjFEMUQ0MEZE QTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlmeUV1VXlrekcwQWRBbEtE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFRoYW1tVk52eWZ5RXVVeWt6RzBBZEFsS0RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzI5MjFEMUQ0MEZEQTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlm eUV1VXlrekcwQWRBbEtEby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCw1765cejMalNCK9UqPxPDVFqje+P+X2+WwEJYUb1SRmk+tQhTZYVyUstc8Oh6 j99W5TMqot6caJNj81YpjjXgyaOsPmSR8kbGDK0pMTDnoAASXlFm+cZPVBKjeCg4 l+JuMUBIbEzsZfPwDXi/nT94bonQPsHuOqxsdQcl1Xtz226iqGamPV053czwxZEq MZ+fk/Xtl/ocT5ocKy8BSVwobKUQo1212widP34Bib1iJ70KcGr+FLAq7pilEIhl BRBjzx88vMyZ9IMIkVg2pLjF2p4IVEJifcyi6+Te4xGmt0kjvwXY/m0DkoqGcCKN 0C30+GRXi0xAOtozcsydvB+Y -----END CERTIFICATE-----Generated at Tue Jul 28 23:28:19 2026 by rpki-client