$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: qoScfDqxNzcNhOZVOfiN9TOr9LNZFTv62t3DSiJ0m6o= Subject key identifier: 30:E7:0C:9E:03:92:E7:BA:49:8C:D2:45:64:0D:AC:21:43:7A:F6:2E Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 44 Signing time: Mon 27 Jul 2026 10:52:45 +0000 Manifest this update: Mon 27 Jul 2026 10:52:45 +0000 Manifest next update: Mon 03 Aug 2026 10:52:45 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: 4bwynKcojCNjXtDm/UHx6AVYlCJ8d0gucMP6WrkNVIc=) 2: 3987426E53AC11F1A96C853AB4833773.roa (hash: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=) 3: 0A1C4E5C53AC11F19DB1C139B4833773.roa (hash: u+mOL6p14fYJ42VLhe7ZTS6oNzz6YUYqHu2z8DUWqD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Jul 27 10:52:45 2026 GMT Not After : Aug 3 10:52:45 2026 GMT Subject: CN=6a67387d-6c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:4e:e9:03:b5:5f:b6:3e:0d:85:77:5b:cd: a2:15:2b:99:c2:3b:c3:a5:f9:2a:86:b3:2b:d4:32: be:08:b4:5a:6f:bf:9e:d5:52:b9:60:6e:68:ac:88: 57:ad:5b:4e:78:f9:6c:96:44:40:dc:62:67:6e:de: 9c:44:dc:8c:7e:68:be:7c:99:13:d6:37:db:34:7b: 43:02:96:0d:58:fd:06:d5:83:d8:9a:6c:ac:ea:c9: d7:d1:81:61:c4:29:8a:ea:84:fe:ff:8f:b6:be:af: 46:ff:ad:75:4e:b2:c3:3d:cb:20:73:7a:21:63:53: 66:54:10:5a:85:17:7a:00:3e:6e:bd:84:54:9e:e6: 00:db:0d:40:8c:5b:39:63:0d:fe:cf:d2:f5:a8:35: 20:56:6c:f5:0d:71:92:7e:a4:e6:d1:a2:1d:57:34: 43:ba:c4:66:fe:0c:16:f0:e1:d6:4c:95:ae:c2:2c: 67:2f:1b:f7:5b:49:90:49:12:27:3f:92:85:0b:bc: fb:95:da:7f:23:14:56:a0:a7:2e:4c:cd:2d:f0:d4: ba:36:e0:53:4c:86:40:38:e1:55:b7:2c:ab:2a:b2: c2:83:40:46:15:f0:a4:d7:b7:73:b2:9c:e0:6d:5c: bf:98:d4:ad:23:dd:74:61:8b:9c:8b:62:f3:a2:63: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E7:0C:9E:03:92:E7:BA:49:8C:D2:45:64:0D:AC:21:43:7A:F6:2E X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ae:f4:5e:d7:9c:e9:8d:f6:dd:ec:a1:33:b0:8f:6f:d2:cb: f6:f2:0d:46:c8:8f:2a:6d:e9:f4:35:55:2d:1a:5b:d6:47:3a: 36:a4:1b:ae:d0:b2:b3:e1:cb:25:94:49:42:9b:1c:4f:88:5a: b5:fb:f4:cc:62:f1:47:ca:e7:44:9f:2b:28:e2:1f:c6:3a:bc: 76:40:42:6e:7d:be:d3:50:18:52:cc:ff:1f:28:39:56:34:71: a0:f6:bb:3b:f7:93:3d:b7:ff:cf:62:5f:91:c6:65:37:f0:0d: eb:8e:c4:9a:27:99:e5:13:3f:2a:b0:2e:9f:9f:5a:9c:d9:29: 6d:23:e2:5a:cc:e9:9a:35:a2:c8:79:2a:a0:33:aa:42:0b:c8: 09:ce:df:f4:17:aa:df:4b:1c:8d:a3:fa:a3:b8:a0:69:6a:48: 0b:e1:c4:53:8b:40:bb:b7:06:bb:47:e8:2f:91:34:cc:4f:86: 5d:9f:da:60:b0:42:54:da:de:9c:fa:d8:17:91:bf:2e:58:69: 6d:40:a4:1d:87:f6:90:47:53:ab:12:f4:cc:54:be:c1:aa:64: c7:6f:01:fe:83:68:e5:5f:56:9b:fc:34:61:6e:63:06:a4:17: 0b:92:0a:15:18:80:44:81:74:59:72:53:57:e2:68:77:bf:1c: 49:8e:8c:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjA3MjcxMDUyNDVaFw0yNjA4MDMxMDUyNDVaMBgxFjAUBgNV BAMTDTZhNjczODdkLTZjMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVak7pA7Vftj4NhXdbzaIVK5nCO8Ol+SqGsyvUMr4ItFpvv57VUrlgbmisiFet W054+WyWREDcYmdu3pxE3Ix+aL58mRPWN9s0e0MClg1Y/QbVg9iabKzqydfRgWHE KYrqhP7/j7a+r0b/rXVOssM9yyBzeiFjU2ZUEFqFF3oAPm69hFSe5gDbDUCMWzlj Df7P0vWoNSBWbPUNcZJ+pObRoh1XNEO6xGb+DBbw4dZMla7CLGcvG/dbSZBJEic/ koULvPuV2n8jFFagpy5MzS3w1Lo24FNMhkA44VW3LKsqssKDQEYV8KTXt3OynOBt XL+Y1K0j3XRhi5yLYvOiYwF5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMOcMngOS 57pJjNJFZA2sIUN69i4wHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSrvRe15zpjfbd7KEzsI9v0sv28g1GyI8qben0NVUtGlvWRzo2pBuu0LKz4csl lElCmxxPiFq1+/TMYvFHyudEnyso4h/GOrx2QEJufb7TUBhSzP8fKDlWNHGg9rs7 95M9t//PYl+RxmU38A3rjsSaJ5nlEz8qsC6fn1qc2SltI+JazOmaNaLIeSqgM6pC C8gJzt/0F6rfSxyNo/qjuKBpakgL4cRTi0C7twa7R+gvkTTMT4Zdn9pgsEJU2t6c +tgXkb8uWGltQKQdh/aQR1OrEvTMVL7BqmTHbwH+g2jlX1ab/DRhbmMGpBcLkgoV GIBEgXRZclNX4mh3vxxJjoyh -----END CERTIFICATE-----Generated at Wed Jul 29 09:53:46 2026 by rpki-client