$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json) Hash identifier: kvcuezGaIKK/NEC8uZoCZl6gtF7Trmn65miju0nU3Ew= Subject key identifier: 61:01:4D:F2:B4:51:94:AA:B3:8E:4F:31:FB:83:0C:29:E6:63:EB:BA Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft Manifest number: 6B Signing time: Mon 27 Jul 2026 10:14:37 +0000 Manifest this update: Mon 27 Jul 2026 10:14:36 +0000 Manifest next update: Mon 03 Aug 2026 10:14:36 +0000 Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: GGkOaDJHUQqBTSELMOub9w+bBtCHGUW9MZbpDnZ+Y6Q=) 2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=) 3: 6233066868B411F1A7FCE07D7E47A888.roa (hash: cLHTOzBDSvX2r1cQexaW7fZ273SuMXzR4+rLK7jUiPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Validity Not Before: Jul 27 10:14:36 2026 GMT Not After : Aug 3 10:14:36 2026 GMT Subject: CN=6a672f8d-9e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:ff:af:af:9a:59:f0:ee:db:8d:80:22:de: aa:06:10:c2:5f:ed:6c:94:39:42:39:ea:14:71:c8: d9:58:1e:c6:17:ef:40:c2:23:1c:e5:f8:72:8f:10: a2:53:46:02:c8:5f:dd:50:37:fc:4d:2b:b5:90:bc: ee:5a:b6:43:1a:3c:c0:09:6f:3b:09:e0:88:d2:6f: e7:c3:1a:f3:95:28:fd:4d:2b:3d:9f:50:32:73:3e: 75:e0:c7:a9:77:ee:9b:98:8b:fa:6f:e2:99:33:81: ce:19:04:c1:8b:54:6a:cb:c3:67:cd:17:f3:7d:15: e2:82:13:b9:0e:95:4d:fd:03:1a:5b:5b:78:dd:15: bb:07:e8:72:0b:f0:7e:ed:db:fd:07:22:f5:59:17: a8:99:5f:9b:59:8a:f4:5a:b5:f9:6f:77:4f:58:c3: ac:9e:f5:e0:d6:a0:e2:fd:09:a9:71:b4:bd:df:ae: 19:c7:92:3d:d7:35:34:d4:c1:13:50:f2:62:17:d4: de:ac:bc:9d:f8:2c:aa:10:58:a2:98:e0:1e:e5:06: 42:b5:bb:29:14:ca:50:5b:52:41:40:0f:96:7c:61: 20:47:a4:3a:78:18:cd:be:69:4f:77:71:18:fc:7b: dd:d6:54:89:4c:6f:5b:9f:20:f3:68:54:9c:25:ed: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:01:4D:F2:B4:51:94:AA:B3:8E:4F:31:FB:83:0C:29:E6:63:EB:BA X509v3 Authority Key Identifier: keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:e3:70:d5:e0:37:1e:02:e7:c7:11:f9:08:ac:54:01:81: cb:c5:5e:9d:a7:4d:12:e8:5d:c1:9c:23:27:2e:b1:36:ca:81: d4:9e:f1:0c:25:d6:22:7b:28:c8:6f:22:af:5d:f5:b9:ec:23: b8:c7:2c:24:f3:46:78:d1:e3:b5:79:31:40:5f:45:22:04:b2: 6c:5b:3e:da:c4:a3:53:d6:df:7c:c4:72:0a:1a:58:df:59:bf: 03:80:56:a3:c4:2b:08:e7:7f:f4:ef:a9:da:6a:a3:cb:08:01: 3e:0c:d3:c9:72:ac:ee:1e:0c:b8:2b:47:85:25:f1:36:5f:0d: 9b:a1:65:09:7b:60:09:10:48:30:e3:b5:5b:9f:49:76:69:04: 41:f1:74:42:bb:d5:bd:40:d8:00:6b:f7:83:bc:33:6a:c1:ec: 89:e9:ec:3e:4c:a8:db:5c:66:d7:40:38:0f:91:62:55:44:38: 31:ef:1e:41:a1:5a:9f:b3:d1:be:d8:e0:87:80:72:11:d9:6b: 65:b8:0a:af:59:2a:28:0b:ad:8f:b4:01:80:32:57:5c:65:95: d6:57:9e:21:f5:27:73:9b:e9:87:30:97:b7:1a:09:35:5f:a1: 37:97:e6:f0:ce:a6:23:3e:67:52:25:00:b7:d4:26:ef:ca:51: 53:80:e1:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjQ2MDExMC8GA1UEBRMoOTQwRDI3QUUxNDRBQURDQTlFMzQ1MkNCMzhDMzIzNkFD QkY3MDI1QjAeFw0yNjA3MjcxMDE0MzZaFw0yNjA4MDMxMDE0MzZaMBgxFjAUBgNV BAMTDTZhNjcyZjhkLTllNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqC/+vr5pZ8O7bjYAi3qoGEMJf7WyUOUI56hRxyNlYHsYX70DCIxzl+HKPEKJT RgLIX91QN/xNK7WQvO5atkMaPMAJbzsJ4IjSb+fDGvOVKP1NKz2fUDJzPnXgx6l3 7puYi/pv4pkzgc4ZBMGLVGrLw2fNF/N9FeKCE7kOlU39AxpbW3jdFbsH6HIL8H7t 2/0HIvVZF6iZX5tZivRatflvd09Yw6ye9eDWoOL9CalxtL3frhnHkj3XNTTUwRNQ 8mIX1N6svJ34LKoQWKKY4B7lBkK1uykUylBbUkFAD5Z8YSBHpDp4GM2+aU93cRj8 e93WVIlMb1ufIPNoVJwl7TBZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYQFN8rRR lKqzjk8x+4MMKeZj67owHwYDVR0jBBgwFoAUlA0nrhRKrcqeNFLLOMMjasv3Alsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCNDYwLzAyQUU0NjcyRUQy QTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fs cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEEwbnJoUktyY3FlTkZMTE9NTWphc3YzQWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC NDYwLzAyQUU0NjcyRUQyQTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNx ZU5GTExPTU1qYXN2M0Fscy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBAKuNw1eA3HgLnxxH5CKxUAYHLxV6dp00S6F3BnCMnLrE2yoHUnvEMJdYieyjI byKvXfW57CO4xywk80Z40eO1eTFAX0UiBLJsWz7axKNT1t98xHIKGljfWb8DgFaj xCsI53/076naaqPLCAE+DNPJcqzuHgy4K0eFJfE2Xw2boWUJe2AJEEgw47Vbn0l2 aQRB8XRCu9W9QNgAa/eDvDNqweyJ6ew+TKjbXGbXQDgPkWJVRDgx7x5BoVqfs9G+ 2OCHgHIR2WtluAqvWSooC62PtAGAMldcZZXWV54h9Sdzm+mHMJe3Ggk1X6E3l+bw zqYjPmdSJQC31CbvylFTgOHy -----END CERTIFICATE-----Generated at Tue Jul 28 20:56:17 2026 by rpki-client