$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: jbgBrNUiHFOvqEDuh5no564neNGkf5MXKiyjNEOsEAg= Subject key identifier: 0B:8F:28:EC:89:83:90:25:10:C7:D0:77:51:84:CB:83:33:03:25:44 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 019D Signing time: Mon 27 Jul 2026 05:59:51 +0000 Manifest this update: Mon 27 Jul 2026 05:59:51 +0000 Manifest next update: Mon 03 Aug 2026 05:59:51 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: GM4i5FdztZUhkzkQWDQywtaAbohbzM6QDYsFDaXUDUM=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Jul 27 05:59:51 2026 GMT Not After : Aug 3 05:59:51 2026 GMT Subject: CN=6a66f3d7-e7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:b5:3b:ac:0e:c3:af:3e:38:4b:0e:0c:82: 6e:23:65:24:72:f5:23:88:09:2d:a5:4a:35:ce:c1: 92:17:eb:94:2b:aa:0f:0d:c0:8e:df:8b:fc:cd:8d: 61:ef:b8:c9:50:ef:4f:d0:49:23:1b:65:2f:b8:dc: 3e:e2:78:03:2c:c9:83:ec:98:25:fa:7f:f0:23:83: 39:3f:4b:f1:e0:96:6e:92:82:a9:cd:a6:1d:89:61: 19:ae:de:df:52:5f:51:9a:00:21:58:a3:d9:6a:bc: 66:04:81:9a:5d:30:00:33:75:90:9f:65:92:37:c3: d3:fe:fe:a4:9f:ba:8f:77:8d:25:5d:d1:37:cd:28: 24:75:88:c3:47:eb:c9:42:c9:8f:2e:d5:16:62:5f: 55:fb:a7:fc:53:e0:6a:d8:56:5e:df:f7:e3:ae:ce: 8c:8b:43:80:2d:5a:5a:ed:5d:12:af:fc:e8:9a:91: 9f:0a:f7:67:cc:28:6c:0a:c5:b5:21:1e:c9:6b:e1: 28:e8:1c:fe:17:1b:d1:50:0e:59:69:74:1f:46:05: 25:34:a2:4e:f5:6f:95:21:66:33:20:5a:c6:f3:c9: aa:fa:db:65:db:3f:6b:13:95:23:da:1d:f1:5c:45: e0:88:a7:f7:eb:9e:f6:f8:c3:69:cb:be:9a:75:4e: 4e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:28:EC:89:83:90:25:10:C7:D0:77:51:84:CB:83:33:03:25:44 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:59:98:46:e1:fa:df:e4:e1:bf:a2:e0:0a:30:b7:e3:3c:d6: cf:2a:28:95:c7:9f:cd:18:14:5b:43:16:a6:af:b2:87:d9:eb: 05:50:6d:9f:10:b1:8a:67:11:c4:23:69:f7:49:fe:b1:4b:7c: 03:43:e9:fe:91:f5:46:0b:8b:30:7f:4d:01:b2:5b:26:43:a6: 8c:f4:37:82:1f:1f:70:7a:6a:38:0d:c2:58:8a:c7:7c:c2:bb: b9:ec:af:66:78:ef:55:7a:3c:36:eb:de:71:7b:c3:c9:82:2a: d1:30:23:f6:a0:95:e6:1b:69:40:02:37:8e:cd:7b:22:bc:c0: 45:d1:19:0b:70:03:44:db:0e:70:bf:6e:a3:bb:5d:f8:19:12: 8e:7a:12:79:98:cd:f6:d0:6a:b4:a7:9c:03:3d:d2:79:65:7f: ff:19:a1:99:7c:6b:19:02:01:40:94:48:20:79:f7:e3:e5:8a: 9f:9e:46:0d:4c:8c:61:64:45:d0:bb:7e:82:9d:12:17:a3:53: aa:77:7f:6e:12:67:cd:84:3c:30:47:cb:66:27:82:c2:ce:85: 44:15:93:40:8d:c4:71:35:d9:3a:c1:26:cc:ef:8f:5f:6b:32: ef:e0:0f:ec:e8:23:8e:16:7d:c9:fd:3c:cf:68:c4:39:a5:29: 80:48:e9:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjYwNzI3MDU1OTUxWhcNMjYwODAzMDU1OTUxWjAYMRYwFAYD VQQDEw02YTY2ZjNkNy1lN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwW1O6wOw68+OEsODIJuI2UkcvUjiAktpUo1zsGSF+uUK6oPDcCO34v8zY1h 77jJUO9P0EkjG2UvuNw+4ngDLMmD7Jgl+n/wI4M5P0vx4JZukoKpzaYdiWEZrt7f Ul9RmgAhWKPZarxmBIGaXTAAM3WQn2WSN8PT/v6kn7qPd40lXdE3zSgkdYjDR+vJ QsmPLtUWYl9V+6f8U+Bq2FZe3/fjrs6Mi0OALVpa7V0Sr/zompGfCvdnzChsCsW1 IR7Ja+Eo6Bz+FxvRUA5ZaXQfRgUlNKJO9W+VIWYzIFrG88mq+ttl2z9rE5Uj2h3x XEXgiKf36572+MNpy76adU5OGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuPKOyJ g5AlEMfQd1GEy4MzAyVEMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMFmYRuH63+Thv6LgCjC34zzWzyoolcefzRgUW0MWpq+yh9nrBVBtnxCximcR xCNp90n+sUt8A0Pp/pH1RguLMH9NAbJbJkOmjPQ3gh8fcHpqOA3CWIrHfMK7ueyv ZnjvVXo8NuvecXvDyYIq0TAj9qCV5htpQAI3js17IrzARdEZC3ADRNsOcL9uo7td +BkSjnoSeZjN9tBqtKecAz3SeWV//xmhmXxrGQIBQJRIIHn34+WKn55GDUyMYWRF 0Lt+gp0SF6NTqnd/bhJnzYQ8MEfLZieCws6FRBWTQI3EcTXZOsEmzO+PX2sy7+AP 7OgjjhZ9yf08z2jEOaUpgEjp2w== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:53 2026 by rpki-client