$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json) Hash identifier: csw5J/I/O7YV3hNohvYjW6lt1m25qK0VrYbYlTKBwQk= Subject key identifier: 88:A9:74:A7:8D:1C:03:BE:2A:D3:44:BA:59:3D:1C:5B:19:81:B3:51 Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft Manifest number: E1 Signing time: Mon 27 Jul 2026 08:38:34 +0000 Manifest this update: Mon 27 Jul 2026 08:38:34 +0000 Manifest next update: Mon 03 Aug 2026 08:38:34 +0000 Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: zbcU/WNqhaA0ug7meE5eBsqiG9DxzfGuoAtLS2Gp46o=) 2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Validity Not Before: Jul 27 08:38:34 2026 GMT Not After : Aug 3 08:38:34 2026 GMT Subject: CN=6a67190a-9283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:ae:5d:e4:ea:b4:12:4b:af:34:20:c6:1a: d6:2f:38:95:42:3b:13:6e:51:ea:8a:e7:5a:02:58: 08:70:9c:03:33:d4:ed:98:2b:77:0b:4f:fd:de:ee: 71:bd:a9:cd:22:61:27:87:01:fb:ab:cb:82:b8:ea: dc:c4:9a:19:5b:b1:e9:1f:7d:31:ff:51:6c:f4:f5: d7:7e:9c:11:ff:66:c9:55:71:c9:35:7b:70:94:91: b1:aa:37:4f:d1:55:d4:af:cb:27:64:c2:b8:c4:a6: 80:c4:f4:c6:8d:49:24:85:cc:88:7f:79:2f:7f:af: 37:08:c3:43:a0:29:ea:11:cd:12:ba:07:cb:36:a4: f3:16:27:30:ae:a0:52:28:04:ca:3b:3d:73:60:b4: ca:21:d2:ff:c3:1c:2d:94:3b:24:65:3c:cc:d8:38: 30:4a:03:46:49:14:b5:c2:4c:0b:32:ea:99:bd:bc: 67:2f:91:30:ee:7e:07:c7:26:3d:b1:2b:6b:e5:8a: 12:16:58:dc:96:6a:47:3e:dd:dc:48:66:dd:5c:1f: 6d:1e:0f:35:ee:2d:4a:cc:90:87:5f:00:7d:2a:63: cd:46:99:2a:b5:1c:17:72:59:fd:50:80:5b:bb:91: 92:2f:bb:a0:ad:2b:6d:5b:72:90:c5:ed:59:cb:cd: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:74:A7:8D:1C:03:BE:2A:D3:44:BA:59:3D:1C:5B:19:81:B3:51 X509v3 Authority Key Identifier: keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:da:4d:73:57:85:8c:49:c7:61:34:4d:2d:e0:0b:7d:f3:cc: fd:e7:0a:39:03:4a:65:e4:61:1a:24:6f:dd:22:67:68:e1:6a: 88:49:01:03:c7:59:ee:88:93:5b:57:ba:a5:3d:a9:9e:15:a1: 78:2c:9b:95:1c:eb:63:a7:71:97:e5:a4:d6:d1:7d:84:b6:d4: 81:28:f3:70:f4:81:b1:e1:e1:f8:51:f9:a2:a0:ec:5f:01:fe: c5:f8:9e:d8:64:1c:d4:3f:da:a2:41:2c:58:96:bc:dd:cf:5b: bc:d8:e4:79:3c:c6:19:23:1a:6a:00:e0:c7:bc:d7:d1:e9:6b: ae:3e:de:ae:46:2a:15:1a:bd:42:84:77:9c:03:03:5b:f3:05: ac:42:8b:34:41:ff:66:c6:0e:c5:31:cd:ae:c3:cc:0a:63:02: df:37:5a:31:43:5f:4f:47:ff:54:38:8a:95:b3:90:33:0c:f9: 53:f5:b9:47:00:6a:7f:af:e1:01:dd:b5:90:4e:5b:0a:a1:6a: e9:82:3b:8b:38:d9:c2:1f:95:c3:e4:15:a1:72:19:ed:30:90: e0:f0:1d:52:2f:3a:8d:18:dd:f0:58:67:d9:43:a0:07:56:c4: 19:ed:ad:c5:b5:f5:3f:70:77:d0:bc:d5:f8:6c:80:08:02:80: d5:da:33:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU1QjMxMTAvBgNVBAUTKDJEMDFBMTk0MkJBRkQ5RDNCMzFEREJGRTc1MzI0QkFE NjJCNjA5NTgwHhcNMjYwNzI3MDgzODM0WhcNMjYwODAzMDgzODM0WjAYMRYwFAYD VQQDEw02YTY3MTkwYS05MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8quXeTqtBJLrzQgxhrWLziVQjsTblHqiudaAlgIcJwDM9TtmCt3C0/93u5x vanNImEnhwH7q8uCuOrcxJoZW7HpH30x/1Fs9PXXfpwR/2bJVXHJNXtwlJGxqjdP 0VXUr8snZMK4xKaAxPTGjUkkhcyIf3kvf683CMNDoCnqEc0SugfLNqTzFicwrqBS KATKOz1zYLTKIdL/wxwtlDskZTzM2DgwSgNGSRS1wkwLMuqZvbxnL5Ew7n4HxyY9 sStr5YoSFljclmpHPt3cSGbdXB9tHg817i1KzJCHXwB9KmPNRpkqtRwXcln9UIBb u5GSL7ugrSttW3KQxe1Zy819YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIipdKeN HAO+KtNEulk9HFsZgbNRMB8GA1UdIwQYMBaAFC0BoZQrr9nTsx3b/nUyS61itglY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTVCMy8yNkIxRTE4QTMx RUQxMUYwODlEQzc3M0JDNEY5QUUwMi9MUUdobEN1djJkT3pIZHYtZFRKTHJXSzJD VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTVCMy8yNkIxRTE4QTMxRUQxMUYwODlEQzc3M0JDNEY5QUUwMi9MUUdobEN1djJk T3pIZHYtZFRKTHJXSzJDVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH9pNc1eFjEnHYTRNLeALffPM/ecKOQNKZeRhGiRv3SJnaOFqiEkBA8dZ7oiT W1e6pT2pnhWheCyblRzrY6dxl+Wk1tF9hLbUgSjzcPSBseHh+FH5oqDsXwH+xfie 2GQc1D/aokEsWJa83c9bvNjkeTzGGSMaagDgx7zX0elrrj7erkYqFRq9QoR3nAMD W/MFrEKLNEH/ZsYOxTHNrsPMCmMC3zdaMUNfT0f/VDiKlbOQMwz5U/W5RwBqf6/h Ad21kE5bCqFq6YI7izjZwh+Vw+QVoXIZ7TCQ4PAdUi86jRjd8Fhn2UOgB1bEGe2t xbX1P3B30LzV+GyACAKA1dozpQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:44 2026 by rpki-client