$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: dpb4YI099M4ra38sQX0t9H7Swy6+UhOQw8NXDP8fuD0= Subject key identifier: 13:18:C7:2E:3D:6E:E4:57:98:9B:1E:DA:F0:4D:C1:08:C4:71:1C:84 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 05E3 Signing time: Tue 28 Jul 2026 23:48:15 +0000 Manifest this update: Tue 28 Jul 2026 23:48:14 +0000 Manifest next update: Tue 04 Aug 2026 23:48:14 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: Ve8PTMTtImi7S92uFbLMFiE224UKgczJSdglUkpL/iY=) 2: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=) 3: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=) 4: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=) 5: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=) 6: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=) 7: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=) 8: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=) 9: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=) 10: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 23:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Jul 28 23:48:14 2026 GMT Not After : Aug 4 23:48:14 2026 GMT Subject: CN=6a693fbe-a5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:f4:9f:a7:3e:02:64:af:42:09:4d:26:2f: 1b:60:ca:84:55:d5:0f:13:fe:99:b2:64:4c:c2:87: ea:ca:c5:f3:90:81:f1:99:a8:9d:a7:84:87:db:9e: 40:a2:1e:fb:19:15:56:f2:8c:31:1b:89:f9:32:72: 6d:65:02:54:5c:d8:b3:2b:b2:e9:7b:af:93:0f:6f: 21:42:ef:b8:03:53:fc:85:58:0e:d0:ad:a2:2a:6d: 1a:43:64:2e:37:c3:83:59:28:35:c5:97:c4:7d:ab: d5:38:96:98:6b:64:e9:2e:be:bc:92:78:a9:58:42: 55:3b:e8:bc:e1:21:49:47:eb:30:be:cc:c8:62:33: f5:a9:a5:7d:1d:5b:d7:72:26:f0:f3:36:5c:5d:27: cd:a7:69:10:00:0b:2b:c8:b1:df:7f:d8:c1:ab:ea: e6:f9:ba:db:48:a3:52:d7:a0:fe:99:1f:c1:bd:3f: 14:3d:ed:b5:98:56:54:21:f5:65:ea:5d:db:37:e1: 99:67:d5:0e:a1:63:42:72:82:71:c3:5b:c4:f9:c3: 81:68:45:8f:76:ce:0e:83:9d:87:58:7e:cd:12:a6: 2c:6e:ca:6c:2d:96:69:85:93:ac:30:84:95:01:49: 91:61:90:80:d5:2a:d9:ee:95:d4:c6:41:77:70:43: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:18:C7:2E:3D:6E:E4:57:98:9B:1E:DA:F0:4D:C1:08:C4:71:1C:84 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8a:30:2f:f8:b9:37:79:ea:e5:88:a1:a0:d5:89:0e:64:a5: 19:9e:fb:23:10:37:c8:b1:54:3d:cb:6b:b5:92:73:eb:94:e8: d8:0c:6a:44:5e:f2:ed:27:93:79:65:cc:41:38:ea:17:b3:d2: f4:de:82:5d:ac:d0:cf:a2:e6:c6:02:df:ea:2d:4c:e6:e0:5c: 91:8f:57:77:7d:31:21:a1:49:39:36:d3:13:f9:9b:0f:39:df: 52:b5:db:81:cd:83:36:c3:d3:56:fc:69:1a:a6:e6:d4:6b:dd: 40:2d:5f:ae:b3:da:d5:58:5f:b6:d7:ef:69:b1:42:f9:91:ec: e0:67:ac:21:8d:de:e9:b1:13:d5:26:6c:36:da:8e:84:91:0a: 9a:cf:04:20:f3:0b:3a:aa:01:47:3e:98:10:13:b8:f0:35:f7: 9d:c1:aa:8c:b2:d9:fa:c5:b8:bf:fb:6f:75:dc:2e:f9:d5:5f: 4a:4f:fa:db:2b:6e:ac:02:f2:49:85:6b:93:c6:0c:f6:ab:94: d1:58:b7:8b:15:7b:f1:52:9a:6a:31:14:87:20:eb:4b:fe:95: 64:61:21:e6:e5:09:5a:a9:00:79:6c:91:64:13:0b:13:ea:02: ca:14:fd:f6:44:0c:ba:14:0c:f0:dc:5d:0f:3c:16:75:03:5a: 1f:c2:81:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjYwNzI4MjM0ODE0WhcNMjYwODA0MjM0ODE0WjAYMRYwFAYD VQQDEw02YTY5M2ZiZS1hNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LH0n6c+AmSvQglNJi8bYMqEVdUPE/6ZsmRMwofqysXzkIHxmaidp4SH255A oh77GRVW8owxG4n5MnJtZQJUXNizK7Lpe6+TD28hQu+4A1P8hVgO0K2iKm0aQ2Qu N8ODWSg1xZfEfavVOJaYa2TpLr68knipWEJVO+i84SFJR+swvszIYjP1qaV9HVvX cibw8zZcXSfNp2kQAAsryLHff9jBq+rm+brbSKNS16D+mR/BvT8UPe21mFZUIfVl 6l3bN+GZZ9UOoWNCcoJxw1vE+cOBaEWPds4Og52HWH7NEqYsbspsLZZphZOsMISV AUmRYZCA1SrZ7pXUxkF3cENeFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMYxy49 buRXmJse2vBNwQjEcRyEMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlIowL/i5N3nq5YihoNWJDmSlGZ77IxA3yLFUPctrtZJz65To2AxqRF7y7SeT eWXMQTjqF7PS9N6CXazQz6LmxgLf6i1M5uBckY9Xd30xIaFJOTbTE/mbDznfUrXb gc2DNsPTVvxpGqbm1GvdQC1frrPa1VhfttfvabFC+ZHs4GesIY3e6bET1SZsNtqO hJEKms8EIPMLOqoBRz6YEBO48DX3ncGqjLLZ+sW4v/tvddwu+dVfSk/62yturALy SYVrk8YM9quU0Vi3ixV78VKaajEUhyDrS/6VZGEh5uUJWqkAeWyRZBMLE+oCyhT9 9kQMuhQM8NxdDzwWdQNaH8KBOA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:04 2026 by rpki-client