$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json) Hash identifier: lGIrq7Wty6H/DXi+HDBpZYe+1mCIHxK3O481pfhHMJI= Subject key identifier: 30:5A:31:37:15:74:0D:4A:90:F7:66:7C:C1:EA:A2:CC:25:41:28:8F Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft Manifest number: 01C5 Signing time: Mon 27 Jul 2026 05:33:11 +0000 Manifest this update: Mon 27 Jul 2026 05:33:10 +0000 Manifest next update: Mon 03 Aug 2026 05:33:10 +0000 Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: hk3TTWEPeu8J96uSSfhnuAxComk25HhaggIoEL53piA=) 2: C659227E3D9611F1B3BD8648C4833773.roa (hash: URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: Jul 27 05:33:10 2026 GMT Not After : Aug 3 05:33:10 2026 GMT Subject: CN=6a66ed97-8d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:0a:e1:81:3d:e0:b8:69:1b:d8:6c:59:df: 2c:6f:0f:48:cd:0f:71:8e:b4:f0:2c:1e:92:fb:fe: bc:7e:3c:08:a2:5b:f0:9f:ef:6e:6d:ed:8e:3e:93: ff:bc:f0:3d:82:ee:02:a8:fb:cc:2b:b1:48:3c:e9: b8:c4:40:07:38:9a:d1:aa:ab:27:2a:2d:25:18:57: 69:d8:ba:59:b5:ed:7f:75:87:c6:d9:57:c0:17:3a: e9:5b:19:50:6e:cf:af:77:03:f2:1e:ba:82:f3:d8: c3:08:e2:1c:43:6c:0e:ef:84:ee:d7:c5:49:14:74: 9a:c1:d4:a0:43:4f:d6:c9:33:1c:3f:93:0f:6a:b7: 70:78:4e:e3:3c:69:f0:7f:b0:91:bd:05:26:85:28: bd:19:22:94:53:09:a3:7f:a0:35:b1:14:86:ad:ec: 0e:14:95:c1:4e:67:0d:68:d1:5a:af:a9:51:63:f1: b4:2d:10:2a:cc:5e:2c:89:cc:d6:55:bd:5a:6f:2a: 48:b9:e9:eb:ef:c9:76:6f:c2:34:13:75:7c:47:8e: 9d:c7:6c:01:f4:40:ec:0f:5a:59:e9:10:77:9b:89: 33:5d:c0:fb:22:75:72:63:bb:71:fd:7e:a0:6a:be: d6:eb:f2:c1:68:a8:4b:de:51:69:22:76:75:e4:df: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5A:31:37:15:74:0D:4A:90:F7:66:7C:C1:EA:A2:CC:25:41:28:8F X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:55:35:54:83:2d:b1:a0:75:93:8f:41:89:4d:3e:35:5a:af: 30:28:b6:31:86:c1:0b:b4:e4:48:93:f4:44:5c:ca:e1:0d:5a: a3:a3:02:21:4a:d4:7a:a4:43:87:69:74:73:25:34:17:12:ed: eb:d4:70:24:8a:8c:82:29:c3:4f:bc:60:8a:f7:38:1d:75:09: e0:53:69:e4:77:ef:e9:90:00:c5:ea:2a:d1:de:bc:7b:67:37: 8b:b5:af:be:a0:28:45:88:75:d8:44:8e:5c:21:de:57:a1:c9: 7a:0e:84:9f:5d:4e:7c:dd:81:6a:6d:e3:a3:d9:d1:8d:a8:cd: 08:48:47:d1:e1:1b:36:40:fc:57:3a:df:de:91:79:34:69:8d: d1:86:3c:31:bf:54:68:13:dc:0b:dd:17:0a:d3:8d:d1:bb:f2: 67:82:26:eb:46:42:bf:6f:dd:44:54:25:22:fa:9a:2a:90:e9: 8d:e1:d7:95:82:56:e7:49:23:6a:6b:7e:cc:ef:2c:28:24:66: d3:6f:cd:7d:00:eb:2d:c5:06:99:3c:79:d7:df:f1:d4:46:b4: 1c:88:57:42:3f:82:ea:64:13:84:a2:6b:1f:30:3b:03:9c:37: 88:49:a4:67:13:68:74:65:ad:bd:2b:d9:cf:9d:52:c0:22:b1: 93:37:83:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE QTNCMjAwQjUwHhcNMjYwNzI3MDUzMzEwWhcNMjYwODAzMDUzMzEwWjAYMRYwFAYD VQQDEw02YTY2ZWQ5Ny04ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBwK4YE94LhpG9hsWd8sbw9IzQ9xjrTwLB6S+/68fjwIolvwn+9ube2OPpP/ vPA9gu4CqPvMK7FIPOm4xEAHOJrRqqsnKi0lGFdp2LpZte1/dYfG2VfAFzrpWxlQ bs+vdwPyHrqC89jDCOIcQ2wO74Tu18VJFHSawdSgQ0/WyTMcP5MPardweE7jPGnw f7CRvQUmhSi9GSKUUwmjf6A1sRSGrewOFJXBTmcNaNFar6lRY/G0LRAqzF4siczW Vb1abypIuenr78l2b8I0E3V8R46dx2wB9EDsD1pZ6RB3m4kzXcD7InVyY7tx/X6g ar7W6/LBaKhL3lFpInZ15N+r6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBaMTcV dA1KkPdmfMHqoswlQSiPMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnFU1VIMtsaB1k49BiU0+NVqvMCi2MYbBC7TkSJP0RFzK4Q1ao6MCIUrUeqRD h2l0cyU0FxLt69RwJIqMginDT7xgivc4HXUJ4FNp5Hfv6ZAAxeoq0d68e2c3i7Wv vqAoRYh12ESOXCHeV6HJeg6En11OfN2Bam3jo9nRjajNCEhH0eEbNkD8Vzrf3pF5 NGmN0YY8Mb9UaBPcC90XCtON0bvyZ4Im60ZCv2/dRFQlIvqaKpDpjeHXlYJW50kj amt+zO8sKCRm02/NfQDrLcUGmTx519/x1Ea0HIhXQj+C6mQThKJrHzA7A5w3iEmk ZxNodGWtvSvZz51SwCKxkzeD8Q== -----END CERTIFICATE-----Generated at Tue Jul 28 20:52:56 2026 by rpki-client