$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json) Hash identifier: P/gXgPwmodibNatydANT7a3c1KxkvPhyQ4wiNNqBigU= Subject key identifier: 94:96:27:63:9A:82:4F:6D:4F:93:D2:19:D7:CC:A0:FF:9B:A1:89:51 Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft Manifest number: 42 Signing time: Mon 27 Jul 2026 10:46:41 +0000 Manifest this update: Mon 27 Jul 2026 10:46:40 +0000 Manifest next update: Mon 03 Aug 2026 10:46:40 +0000 Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: frCoJpAXxMgqgE0i+ximk7ocblnjUFUl6s4MO5t8Z40=) 2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Validity Not Before: Jul 27 10:46:40 2026 GMT Not After : Aug 3 10:46:40 2026 GMT Subject: CN=6a673711-7968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:7a:6b:0c:2e:3b:e3:e5:e5:f6:5b:19:99: 39:54:e0:bd:5a:67:53:c4:82:af:ef:10:43:de:b1: 12:31:52:e5:72:e8:52:b0:6d:d6:46:32:67:bd:58: dc:35:6d:39:26:7d:4f:0a:68:8d:02:bf:65:fe:7d: 28:d0:59:e9:09:6a:c1:85:5e:dd:bf:b8:32:89:77: f4:6e:64:4a:f7:ad:83:9c:3d:0d:6f:43:bf:3c:e5: a0:61:2d:25:02:6a:2c:a4:95:6c:76:92:d8:c4:6f: 88:68:60:95:4d:d0:bd:c7:c8:82:53:50:19:21:49: 71:d0:8c:7c:54:e4:99:53:84:6f:79:37:db:b6:70: f0:f5:f7:6d:9c:49:14:6d:4a:15:9d:8b:bd:38:ca: d9:03:a4:17:e0:89:cd:96:ac:e2:1c:1c:f6:b9:d9: 1b:5a:c0:9d:80:08:4a:70:bb:9b:e5:ca:c3:9d:9e: c9:72:78:b3:ac:b1:4d:9d:be:1d:39:7a:ec:f6:a6: 11:e4:12:d0:fc:e1:42:62:c4:a4:3e:ee:60:88:ca: 86:6a:ab:0a:6a:b2:fc:72:88:91:bd:5e:0c:23:28: 99:39:e9:9c:e3:7e:87:b9:96:09:50:26:84:8b:7f: 99:59:f1:9e:bf:cc:5b:7a:7c:9a:5a:32:7c:60:36: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:27:63:9A:82:4F:6D:4F:93:D2:19:D7:CC:A0:FF:9B:A1:89:51 X509v3 Authority Key Identifier: keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:fe:fd:d0:3e:fd:f8:0a:2a:6a:24:bd:ad:70:09:38:49:93: b6:a2:1e:a3:fe:60:db:12:37:cd:86:2a:97:d0:d1:a2:9f:ab: 61:d5:51:0e:9c:68:a3:06:56:f1:ce:8b:73:dc:b5:e0:0a:4e: 4e:a0:ac:df:11:bb:5c:8a:83:bd:c0:03:db:08:a0:1c:d3:24: 95:c2:e5:0b:d2:dd:38:d9:0d:cb:52:07:33:e7:b9:72:f7:8a: e8:24:be:d0:b7:5d:a7:32:4e:6b:76:e0:d9:7d:c3:34:9d:68: b7:1a:68:84:1d:8b:0b:e5:fb:3a:25:c3:76:da:68:42:63:23: f4:ff:81:05:b2:8a:48:cc:9c:eb:c4:fc:08:ac:9e:60:87:e4: 7e:1d:ad:5f:50:70:58:c6:ca:b9:f1:e8:47:ef:94:ea:ce:e6: 6e:f2:9d:08:61:ac:95:0c:64:92:e2:fc:7f:bb:1e:f0:20:9b: ef:30:6a:f2:1c:e4:1f:a1:67:5e:c2:5d:62:71:02:52:f8:d3: 0a:15:21:42:7c:fa:43:85:cc:53:7e:24:7b:96:f3:5a:f7:5f: 7b:7b:bf:52:b7:4f:ac:45:fc:2c:f1:5b:10:9f:74:97:94:07: 24:30:4a:a8:32:e2:2d:c0:33:48:25:17:c5:fc:c5:52:51:f4: b2:fc:b2:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkE4NzExMC8GA1UEBRMoOTZDMUJDOTg3QUQ2NjQzOTEzRjY1RTA1RDFBNjYzRjY0 QzRBRTFCNjAeFw0yNjA3MjcxMDQ2NDBaFw0yNjA4MDMxMDQ2NDBaMBgxFjAUBgNV BAMTDTZhNjczNzExLTc5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhXnprDC474+Xl9lsZmTlU4L1aZ1PEgq/vEEPesRIxUuVy6FKwbdZGMme9WNw1 bTkmfU8KaI0Cv2X+fSjQWekJasGFXt2/uDKJd/RuZEr3rYOcPQ1vQ7885aBhLSUC aiyklWx2ktjEb4hoYJVN0L3HyIJTUBkhSXHQjHxU5JlThG95N9u2cPD1922cSRRt ShWdi704ytkDpBfgic2WrOIcHPa52RtawJ2ACEpwu5vlysOdnslyeLOssU2dvh05 euz2phHkEtD84UJixKQ+7mCIyoZqqwpqsvxyiJG9XgwjKJk56Zzjfoe5lglQJoSL f5lZ8Z6/zFt6fJpaMnxgNopDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlJYnY5qC T21Pk9IZ18yg/5uhiVEwHwYDVR0jBBgwFoAUlsG8mHrWZDkT9l4F0aZj9kxK4bYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0JFMDYyOEMyMjRD NTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRrVDlsNEYwYVpqOWt4SzRi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHNHOG1IcldaRGtUOWw0RjBhWmo5a3hLNGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTg3L0JFMDYyOEMyMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRr VDlsNEYwYVpqOWt4SzRiWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCI/v3QPv34CipqJL2tcAk4SZO2oh6j/mDbEjfNhiqX0NGin6th1VEOnGijBlbx zotz3LXgCk5OoKzfEbtcioO9wAPbCKAc0ySVwuUL0t042Q3LUgcz57ly94roJL7Q t12nMk5rduDZfcM0nWi3GmiEHYsL5fs6JcN22mhCYyP0/4EFsopIzJzrxPwIrJ5g h+R+Ha1fUHBYxsq58ehH75TqzuZu8p0IYayVDGSS4vx/ux7wIJvvMGryHOQfoWde wl1icQJS+NMKFSFCfPpDhcxTfiR7lvNa9197e79St0+sRfws8VsQn3SXlAckMEqo MuItwDNIJRfF/MVSUfSy/LJn -----END CERTIFICATE-----Generated at Tue Jul 28 23:15:19 2026 by rpki-client