$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: 1JuZOAwTgZ4LkAAJ4WHbQJgtWfWoFjIsg1K7bmxKFsA= Subject key identifier: 08:D9:8E:61:50:EE:DE:69:28:60:86:73:7D:E9:53:B3:10:18:86:E6 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0D4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0D2D Signing time: Sun 26 Jul 2026 18:33:01 +0000 Manifest this update: Sun 26 Jul 2026 18:33:01 +0000 Manifest next update: Sun 02 Aug 2026 18:33:01 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: BOT0BmMpL3dRGqsebT57tTCLxcp8R04CRr5k1PTjAJM=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Jul 26 18:33:01 2026 GMT Not After : Aug 2 18:33:01 2026 GMT Subject: CN=6a6652dd-62dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:29:dd:22:70:2a:10:d0:19:3d:79:25:f7: 87:b2:c3:c4:9d:2e:60:9b:d4:ce:b8:ea:9b:7d:42: 74:52:79:9d:07:6b:af:c0:2d:73:48:d5:66:63:ed: 8c:cf:e6:60:4a:25:46:eb:c0:6d:44:b4:91:ba:f0: e8:20:39:3a:48:73:0f:59:87:72:ce:03:6d:4f:11: 65:7e:55:4f:25:69:51:08:bb:f4:97:11:14:a1:2a: 5c:51:bd:ec:4d:23:2a:05:27:2b:b8:e7:e4:41:6e: 79:f4:f8:58:d8:1d:aa:43:b6:0d:25:0d:0a:72:bf: 4d:3b:db:a5:57:33:6f:d8:46:0a:c1:07:64:c2:a5: d5:96:2f:7c:20:b1:f0:02:84:41:79:5b:37:fb:24: 1f:67:86:a1:45:37:ab:f1:82:9f:17:fb:58:c5:14: 98:33:fa:70:24:b8:dd:36:bf:9a:27:af:bb:00:f5: 1a:36:21:94:e7:ab:f2:6e:fb:46:bf:b2:65:ba:d9: d0:49:1a:89:b0:c1:54:c4:b6:25:d8:ce:77:be:25: cf:1f:32:3e:c8:e6:4a:1a:b2:4e:b3:6e:43:d7:90: 6b:cf:98:2c:a7:ac:c5:6d:d2:14:25:a7:3d:b6:3b: 30:95:ab:4c:11:f4:27:d2:ce:17:06:42:58:e9:50: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D9:8E:61:50:EE:DE:69:28:60:86:73:7D:E9:53:B3:10:18:86:E6 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3d:d4:a6:e4:b1:7d:17:59:ba:05:7f:2a:70:ac:b1:11:f6: 18:bf:5a:ce:27:67:5a:3f:6d:b6:15:7b:be:8a:f1:54:65:16: bc:0f:7e:b4:d4:78:26:6d:0c:d9:2c:f9:c1:8b:20:d7:6d:9c: c7:41:d7:be:2f:a7:fc:a5:e8:ff:01:45:aa:6c:2c:67:0f:65: 8f:c2:e0:f5:6a:01:7b:b9:8c:4f:03:64:8c:f9:15:aa:d6:55: e2:5a:77:97:66:1c:3d:9f:a9:da:a3:83:ef:45:bc:1c:3a:05: 79:26:bc:00:ab:e3:81:9c:26:2b:b7:87:9c:3b:28:64:2b:63: d8:89:e7:6a:12:00:b7:ff:5b:6f:25:fd:6e:14:8e:fc:b4:5e: 47:01:b6:2c:8d:66:40:91:1b:d6:0e:5f:81:3a:40:41:4b:b1: 8b:22:cc:66:12:f1:dd:b6:74:d2:54:73:a4:92:0d:e8:f3:b1: 1f:95:e8:90:15:54:2f:b9:6c:6a:22:e9:e7:c6:49:75:ad:a1: 01:c4:b8:0a:e8:4e:19:4c:d7:84:75:dd:6f:49:51:a3:1c:35: fb:3f:eb:b0:ef:18:5b:c0:d1:e0:fd:a5:94:a8:f3:e7:77:06: ec:8f:1b:c1:2c:15:f9:d6:62:b7:c9:dd:33:71:59:68:be:5f: d7:bc:b4:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjYwNzI2MTgzMzAxWhcNMjYwODAyMTgzMzAxWjAYMRYwFAYD VQQDEw02YTY2NTJkZC02MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kop3SJwKhDQGT15JfeHssPEnS5gm9TOuOqbfUJ0UnmdB2uvwC1zSNVmY+2M z+ZgSiVG68BtRLSRuvDoIDk6SHMPWYdyzgNtTxFlflVPJWlRCLv0lxEUoSpcUb3s TSMqBScruOfkQW559PhY2B2qQ7YNJQ0Kcr9NO9ulVzNv2EYKwQdkwqXVli98ILHw AoRBeVs3+yQfZ4ahRTer8YKfF/tYxRSYM/pwJLjdNr+aJ6+7APUaNiGU56vybvtG v7JlutnQSRqJsMFUxLYl2M53viXPHzI+yOZKGrJOs25D15Brz5gsp6zFbdIUJac9 tjswlatMEfQn0s4XBkJY6VDeOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjZjmFQ 7t5pKGCGc33pU7MQGIbmMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHz3UpuSxfRdZugV/KnCssRH2GL9azidnWj9tthV7vorxVGUWvA9+tNR4Jm0M 2Sz5wYsg122cx0HXvi+n/KXo/wFFqmwsZw9lj8Lg9WoBe7mMTwNkjPkVqtZV4lp3 l2YcPZ+p2qOD70W8HDoFeSa8AKvjgZwmK7eHnDsoZCtj2InnahIAt/9bbyX9bhSO /LReRwG2LI1mQJEb1g5fgTpAQUuxiyLMZhLx3bZ00lRzpJIN6POxH5XokBVUL7ls aiLp58ZJda2hAcS4CuhOGUzXhHXdb0lRoxw1+z/rsO8YW8DR4P2llKjz53cG7I8b wSwV+dZit8ndM3FZaL5f17y07Q== -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:31 2026 by rpki-client