$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft File: lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json) Hash identifier: rS9qWaEPWG1X31WOz6GgaZyzPUXu9j8vXhTFozLjZyQ= Subject key identifier: 8E:36:8B:AF:DF:18:42:7B:EC:0F:A3:9B:99:19:68:DC:23:0D:CA:C1 Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft Manifest number: 4A Signing time: Wed 29 Jul 2026 10:08:01 +0000 Manifest this update: Wed 29 Jul 2026 10:08:01 +0000 Manifest next update: Wed 05 Aug 2026 10:08:01 +0000 Files and hashes: 1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: GmHmXdtluZsh6uttemaaVfIBm/+MVidYH7heD3h/llQ=) 2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=) 3: F594A6063FA511F1B714D040BE833773.roa (hash: vpQZtX1yMfD38qzmAFhlXuV41BUehxqTr9ZL+NUr+4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 10:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Validity Not Before: Jul 29 10:08:01 2026 GMT Not After : Aug 5 10:08:01 2026 GMT Subject: CN=6a69d101-e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:fb:65:9c:c9:14:4e:25:6a:eb:c4:bb:cc: ca:4a:2d:fc:9c:22:1f:d2:c4:f1:92:6f:f5:c6:13: 38:f1:4c:66:82:2e:4e:87:63:80:8c:b2:67:28:c8: 62:42:71:39:fb:d0:8d:55:63:74:b1:a5:25:df:b2: 54:9c:34:8c:21:bb:ef:c8:91:ab:5a:9e:0a:46:78: e8:e4:62:3a:48:4d:8e:08:ed:da:21:12:1d:1a:fd: c0:05:26:bc:c1:c4:1f:12:b0:c8:d9:c2:32:ac:3f: aa:cc:ff:15:23:8e:d9:7d:e8:1b:58:a8:03:1e:56: f8:c5:c0:74:ab:df:c9:36:53:6f:9a:e9:e8:13:b8: c4:d4:af:b8:c4:d9:e1:0d:50:f3:bd:19:d3:95:37: a9:68:a5:0c:e0:3b:d2:d3:7d:1a:15:c4:e3:5d:27: 80:16:32:f7:be:cc:55:a8:e0:07:e6:7f:a6:ca:eb: d1:cc:f4:4a:1d:5c:00:b8:70:5e:e6:94:68:b0:67: fc:a7:7e:cc:ef:b0:7d:d4:37:1a:01:3c:d0:57:9a: 8f:0e:01:78:3e:58:29:b7:c4:2f:ab:3c:c1:f3:41: 79:59:8b:ad:43:0b:a3:9d:e8:6b:a9:b1:eb:f5:d1: a6:8b:f4:5b:99:58:5f:97:39:0b:3a:c3:55:91:33: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:36:8B:AF:DF:18:42:7B:EC:0F:A3:9B:99:19:68:DC:23:0D:CA:C1 X509v3 Authority Key Identifier: keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8e:9a:3b:8a:24:24:38:26:53:78:b5:64:b3:83:27:63:cb: e7:33:5f:08:be:24:b1:3d:bd:52:35:91:2a:06:1c:90:83:4e: 35:ce:74:3c:60:35:2e:2f:82:44:0e:ed:81:f0:56:f1:a6:3e: 57:54:57:a7:a2:bb:70:20:a7:b0:28:da:3c:52:3f:f5:0f:1b: 27:58:13:8b:ff:d3:47:4a:70:8f:5c:b0:e5:ec:cb:3a:8e:3b: 55:1c:95:96:7b:09:21:a6:54:97:4e:90:45:02:79:a7:fd:b5: 8a:3a:e6:87:ee:81:c8:42:09:11:f5:96:b3:4d:9d:05:ca:48: 90:56:07:c7:d4:5b:5c:58:10:20:b8:de:c7:45:b7:70:49:6b: fe:4b:5c:6f:33:b2:6b:ea:d8:9d:9b:65:a7:81:65:95:30:be: b0:7f:a9:d5:63:a3:0c:79:35:18:4b:81:da:25:ef:3a:1a:1b: 13:94:4c:38:1f:85:d6:bb:84:6b:ba:98:36:b9:22:4c:14:35: e0:17:cd:ab:29:c3:3a:ae:dc:43:9e:11:fb:e3:85:6a:31:3b: b2:9f:5a:2f:f6:04:b7:cd:0e:8f:08:b9:31:5c:07:b0:a9:e1: a8:34:7e:35:46:b7:0a:c0:d6:4b:57:38:da:a7:8c:37:a1:42: a1:af:e8:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz OUU5QUQwRjAeFw0yNjA3MjkxMDA4MDFaFw0yNjA4MDUxMDA4MDFaMBgxFjAUBgNV BAMTDTZhNjlkMTAxLWUyMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0yvtlnMkUTiVq68S7zMpKLfycIh/SxPGSb/XGEzjxTGaCLk6HY4CMsmcoyGJC cTn70I1VY3SxpSXfslScNIwhu+/IkatangpGeOjkYjpITY4I7dohEh0a/cAFJrzB xB8SsMjZwjKsP6rM/xUjjtl96BtYqAMeVvjFwHSr38k2U2+a6egTuMTUr7jE2eEN UPO9GdOVN6lopQzgO9LTfRoVxONdJ4AWMve+zFWo4Afmf6bK69HM9EodXAC4cF7m lGiwZ/ynfszvsH3UNxoBPNBXmo8OAXg+WCm3xC+rPMHzQXlZi61DC6Od6Gupsev1 0aaL9FuZWF+XOQs6w1WRM3cpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjjaLr98Y QnvsD6ObmRlo3CMNysEwHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NUMzLzJCQjJCQjI2MkNEQTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1f bzgxNW83Q1ZVR0RucHJROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWjpo7iiQkOCZTeLVks4MnY8vnM18IviSxPb1SNZEqBhyQg041znQ8YDUuL4JE Du2B8Fbxpj5XVFenortwIKewKNo8Uj/1DxsnWBOL/9NHSnCPXLDl7Ms6jjtVHJWW ewkhplSXTpBFAnmn/bWKOuaH7oHIQgkR9ZazTZ0FykiQVgfH1FtcWBAguN7HRbdw SWv+S1xvM7Jr6tidm2WngWWVML6wf6nVY6MMeTUYS4HaJe86GhsTlEw4H4XWu4Rr upg2uSJMFDXgF82rKcM6rtxDnhH744VqMTuyn1ov9gS3zQ6PCLkxXAewqeGoNH41 RrcKwNZLVzjap4w3oUKhr+jY -----END CERTIFICATE-----Generated at Wed Jul 29 13:57:33 2026 by rpki-client