$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json) Hash identifier: 1MskVfCWjFVcs+/CHdQ3TRankoJ34f6lOIER+tNCGr8= Subject key identifier: 5E:8B:48:1D:D3:CB:95:E9:B1:1E:FD:39:9B:46:D7:EE:09:5C:63:84 Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft Manifest number: 04B4 Signing time: Wed 29 Jul 2026 00:36:57 +0000 Manifest this update: Wed 29 Jul 2026 00:36:57 +0000 Manifest next update: Wed 05 Aug 2026 00:36:57 +0000 Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: bHJ5F9Y01QoHBBW0EpI8XNafDdNZXsJQ5oIQVS54ofI=) 2: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=) 3: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: 1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Validity Not Before: Jul 29 00:36:57 2026 GMT Not After : Aug 5 00:36:57 2026 GMT Subject: CN=6a694b29-5830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:67:40:b5:d9:a5:f8:a3:52:52:54:2f:9f:48: 86:ef:81:48:be:d8:1f:01:55:e7:d1:0d:3c:9c:91: 27:09:c1:8b:2d:b1:4c:c7:e0:37:8c:29:74:8f:56: 22:cd:17:10:df:65:07:7d:28:d4:5b:8e:be:9b:9b: 3f:12:3f:16:f9:45:75:75:bb:19:a1:da:33:8b:9a: e3:c4:11:65:22:62:ee:d3:0e:a0:19:2c:06:40:b4: 63:d7:8d:4d:d3:d5:93:27:ab:59:38:84:03:db:70: a2:16:ec:fb:f9:e6:c2:fd:c1:a3:15:6c:83:16:7a: 34:c1:da:01:84:f2:23:1e:79:d2:d0:f7:0c:10:1f: 67:53:81:34:2a:03:11:ed:98:1e:af:05:e0:58:9d: e6:f3:97:d1:0d:5b:36:e4:1a:78:5c:b2:18:ae:8f: 65:0f:ed:0e:c5:bc:be:87:75:76:5c:0b:31:ee:29: fa:31:93:78:1f:be:70:c0:b6:93:ab:c4:09:bf:fc: 00:bd:e6:8c:62:c6:27:ab:ad:ef:80:21:c9:46:37: 51:31:dd:99:05:b9:00:23:54:af:54:51:e8:37:15: 07:8e:9a:59:cc:31:8a:99:13:63:15:70:c6:2b:19: 0e:0e:7d:43:ec:0b:02:ea:22:a4:18:2c:4c:d8:dd: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:48:1D:D3:CB:95:E9:B1:1E:FD:39:9B:46:D7:EE:09:5C:63:84 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c3:14:64:f7:28:46:ae:14:81:c7:3f:22:4b:f9:de:13:9c: 60:1b:f5:a9:e3:25:fc:91:ed:9a:92:52:42:79:32:63:c8:96: cd:91:21:ef:1f:e9:e0:8f:ba:56:66:21:bd:72:14:47:7f:26: fd:01:d7:7f:67:1d:15:39:ea:ba:01:e9:93:80:ac:46:f6:6d: 6b:12:72:d5:90:7a:e0:28:6d:e0:53:3f:12:f4:60:5f:87:da: c9:74:62:97:70:2a:55:bc:66:20:6d:19:e0:ab:ab:dc:10:4f: 50:eb:84:3d:0e:3b:5d:32:6e:6f:58:d6:fc:fb:38:77:16:54: 30:fe:3b:52:97:44:4d:ed:4b:20:0e:66:5f:9e:eb:50:5a:9f: b2:8f:39:58:eb:4a:25:f6:74:4f:1c:31:80:02:75:7d:4b:d8: 07:18:e3:ca:69:7e:65:08:f0:09:c8:64:d2:dd:ef:be:f1:46: e5:96:bc:b3:84:8f:4f:b8:cb:d6:c9:73:8c:b4:f0:aa:e5:89: fb:00:9d:7a:56:41:e2:39:e5:d7:29:c9:c2:cb:0a:0a:0f:80: 05:67:fb:6c:d5:86:26:ab:8b:33:ca:45:1f:b4:fd:d1:de:f7: e6:f4:6b:ce:9f:e6:5f:89:bb:2d:9d:e4:84:92:96:61:3b:16: 64:e7:d4:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjYwNzI5MDAzNjU3WhcNMjYwODA1MDAzNjU3WjAYMRYwFAYD VQQDEw02YTY5NGIyOS01ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92dAtdml+KNSUlQvn0iG74FIvtgfAVXn0Q08nJEnCcGLLbFMx+A3jCl0j1Yi zRcQ32UHfSjUW46+m5s/Ej8W+UV1dbsZodozi5rjxBFlImLu0w6gGSwGQLRj141N 09WTJ6tZOIQD23CiFuz7+ebC/cGjFWyDFno0wdoBhPIjHnnS0PcMEB9nU4E0KgMR 7ZgerwXgWJ3m85fRDVs25Bp4XLIYro9lD+0Oxby+h3V2XAsx7in6MZN4H75wwLaT q8QJv/wAveaMYsYnq63vgCHJRjdRMd2ZBbkAI1SvVFHoNxUHjppZzDGKmRNjFXDG KxkODn1D7AsC6iKkGCxM2N2V7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6LSB3T y5XpsR79OZtG1+4JXGOEMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkMzMC8xMTJBRjFBQzg1QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpa R3VwVkpybzJhS0VlU2V5NU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALsMUZPcoRq4Ugcc/Ikv53hOcYBv1qeMl/JHtmpJSQnkyY8iWzZEh7x/p4I+6 VmYhvXIUR38m/QHXf2cdFTnqugHpk4CsRvZtaxJy1ZB64Cht4FM/EvRgX4fayXRi l3AqVbxmIG0Z4Kur3BBPUOuEPQ47XTJub1jW/Ps4dxZUMP47UpdETe1LIA5mX57r UFqfso85WOtKJfZ0TxwxgAJ1fUvYBxjjyml+ZQjwCchk0t3vvvFG5Za8s4SPT7jL 1slzjLTwquWJ+wCdelZB4jnl1ynJwssKCg+ABWf7bNWGJquLM8pFH7T90d735vRr zp/mX4m7LZ3khJKWYTsWZOfUCw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:35:22 2026 by rpki-client