$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: UMjquvgLaKO6fb3g2b9Z8YGHydfu1GwIy9A38Eyy5aA= Subject key identifier: 26:C1:A6:50:D8:E4:C1:6B:DE:FD:C8:E8:F4:36:05:95:AE:93:36:BB Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 21F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 21EA Signing time: Tue 28 Jul 2026 15:59:08 +0000 Manifest this update: Tue 28 Jul 2026 15:59:07 +0000 Manifest next update: Tue 04 Aug 2026 15:59:07 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: 2fSNdWg2wdDj9aHcJEduTYQ1H0mUoeL7kSVCCxGVGbg=) 2: 3607DBA8687E11F1B56F8D616747A888.roa (hash: WO/scCKxLdc7YDN982DAvWLVxjSTIhP/jPPfp19RJno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8689 (0x21f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: Jul 28 15:59:07 2026 GMT Not After : Aug 4 15:59:07 2026 GMT Subject: CN=6a68d1cb-a1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:af:53:af:21:3a:40:52:e5:81:3e:cc:82: 5c:1a:c4:b9:4d:2a:9e:bc:d9:f4:93:3c:aa:a8:8c: 59:66:b0:c7:f0:cd:d8:06:46:3d:fe:55:43:89:3a: 0d:e4:43:3a:e9:28:f0:af:7c:40:af:26:fe:53:c8: 24:eb:d3:13:ed:c2:f3:e9:46:b9:b9:c7:a2:52:48: eb:cd:8a:a2:cb:dc:7c:14:66:cf:24:83:17:06:e7: 88:9f:ff:69:75:33:69:ca:84:ea:24:58:f3:3c:38: 7d:e0:23:a8:ef:df:7d:d1:fc:b4:2a:cf:eb:96:ec: 92:85:4c:ba:66:ce:cc:42:02:b8:be:07:8b:e4:5a: da:0a:9e:de:0e:8a:a5:7c:24:0d:e5:84:74:78:5e: 1a:7a:bb:70:12:3b:4c:c8:74:3e:98:28:98:60:ac: e6:8b:4d:f0:91:af:b9:cb:43:aa:46:73:4a:ec:3c: 70:4d:cc:3b:5a:40:cc:3d:da:1b:66:9d:ba:50:aa: 99:ff:9f:32:67:55:2d:5b:97:2c:86:76:ea:32:bf: 71:7f:ce:a7:ea:bc:37:fc:20:2c:8d:ec:2f:92:59: e6:0b:fc:1b:fe:08:05:98:53:75:58:1a:ff:26:85: 4a:05:c5:93:ac:c8:63:2a:66:b2:5a:c8:7f:ed:22: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C1:A6:50:D8:E4:C1:6B:DE:FD:C8:E8:F4:36:05:95:AE:93:36:BB X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:59:c8:16:1a:21:ea:3b:b8:5b:0b:52:e3:63:14:93:5a:b0: 7d:17:7e:45:d9:2d:43:d8:8b:ae:2f:56:b0:1f:43:63:6e:d7: 5c:23:e9:b7:f7:95:d8:01:d0:17:9f:2f:6c:b7:63:db:8f:73: f8:55:b8:27:87:73:0b:53:cb:4a:ec:5c:91:23:19:23:b8:23: 02:97:bb:f4:5d:df:05:ae:12:78:f1:da:f0:eb:f7:33:1d:94: 80:8e:a4:b3:14:99:fb:d2:b7:1a:51:20:04:7f:42:62:0f:60: d3:09:f4:73:09:05:37:c3:a7:9c:ad:8f:60:e4:9a:c2:9e:26: 06:f7:62:b5:44:cf:4a:3b:10:4b:44:5c:fc:04:0c:23:54:94: 89:5b:e9:c1:7f:50:ef:80:12:ef:0a:5a:77:cf:cc:a2:69:c2: d8:97:7b:52:d8:68:dc:41:e1:c6:ce:40:e1:90:32:b5:ba:43: 68:03:68:bf:01:66:f2:42:64:65:8e:49:db:34:87:03:80:52: c7:35:8b:fb:ff:a4:d5:41:6b:6b:d3:c7:b8:d8:b3:ba:e9:6c: 2f:b1:7c:81:85:ce:7e:9b:75:03:f7:9d:7c:bc:d0:db:dd:4a: ff:f7:34:e2:48:3a:2c:2a:e1:20:0e:a1:a2:0d:8a:0f:66:61: 3f:c5:d3:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjYwNzI4MTU1OTA3WhcNMjYwODA0MTU1OTA3WjAYMRYwFAYD VQQDEw02YTY4ZDFjYi1hMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3yvU68hOkBS5YE+zIJcGsS5TSqevNn0kzyqqIxZZrDH8M3YBkY9/lVDiToN 5EM66Sjwr3xAryb+U8gk69MT7cLz6Ua5uceiUkjrzYqiy9x8FGbPJIMXBueIn/9p dTNpyoTqJFjzPDh94COo79990fy0Ks/rluyShUy6Zs7MQgK4vgeL5FraCp7eDoql fCQN5YR0eF4aertwEjtMyHQ+mCiYYKzmi03wka+5y0OqRnNK7DxwTcw7WkDMPdob Zp26UKqZ/58yZ1UtW5cshnbqMr9xf86n6rw3/CAsjewvklnmC/wb/ggFmFN1WBr/ JoVKBcWTrMhjKmayWsh/7SJYCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbBplDY 5MFr3v3I6PQ2BZWukza7MB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAflnIFhoh6ju4WwtS42MUk1qwfRd+RdktQ9iLri9WsB9DY27XXCPpt/eV2AHQ F58vbLdj249z+FW4J4dzC1PLSuxckSMZI7gjApe79F3fBa4SePHa8Ov3Mx2UgI6k sxSZ+9K3GlEgBH9CYg9g0wn0cwkFN8OnnK2PYOSawp4mBvditUTPSjsQS0Rc/AQM I1SUiVvpwX9Q74AS7wpad8/MomnC2Jd7Utho3EHhxs5A4ZAytbpDaANovwFm8kJk ZY5J2zSHA4BSxzWL+/+k1UFra9PHuNizuulsL7F8gYXOfpt1A/edfLzQ291K//c0 4kg6LCrhIA6hog2KD2ZhP8XTkg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:50:26 2026 by rpki-client