$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft File: lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft (raw, json) Hash identifier: 2XxrNL9IsoAV0nEVxU0U1oUayGLGiCzhR/EfJZgM5P0= Subject key identifier: 67:87:FC:F0:5D:15:84:1E:C9:65:68:3E:70:2B:C2:8A:02:13:76:DC Authority key identifier: 94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D Certificate issuer: /CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft Manifest number: 09F0 Signing time: Sun 26 Jul 2026 20:40:36 +0000 Manifest this update: Sun 26 Jul 2026 20:40:35 +0000 Manifest next update: Sun 02 Aug 2026 20:40:35 +0000 Files and hashes: 1: lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl (hash: D4KsP0S5Lqr0G9KNl1qJhK+juk/9EOEUk3915+S3QNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Validity Not Before: Jul 26 20:40:35 2026 GMT Not After : Aug 2 20:40:35 2026 GMT Subject: CN=6a6670c3-5513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6a:4e:59:ac:57:87:a5:2c:4c:bf:66:87:d0: 82:9b:a4:e7:80:9a:a9:fb:34:bf:00:44:3e:4f:dd: 9c:cd:cf:01:12:bd:3c:63:e9:9b:33:9d:87:86:bf: 93:e1:17:16:39:d5:61:c7:af:5d:00:6b:67:b8:06: d1:60:fe:9d:80:a8:5c:89:90:e3:62:f3:21:50:30: e4:ee:12:98:b1:0d:90:06:c0:b9:43:ab:e9:ef:f2: d7:d9:bb:eb:b5:5d:8c:20:11:36:eb:92:f7:e9:74: 4f:c4:54:6f:ab:3e:8c:2c:7f:13:46:28:c2:f4:d1: 48:95:46:31:8e:2a:b4:17:46:df:2c:00:28:c9:9f: a6:9a:07:bd:1f:46:1b:c5:34:bd:1e:e1:f5:7d:32: b8:6d:92:b5:0b:62:b0:5b:86:d8:d6:76:53:34:3e: 90:79:35:a4:e4:4c:a0:3e:e0:cf:1e:80:b0:58:66: 41:db:55:59:5d:23:b9:ec:0b:05:1f:f8:43:6f:b0: cd:88:76:ac:d4:43:9a:40:4e:68:2d:ec:42:22:c6: 5e:8c:9c:57:37:72:d4:3a:60:d4:1d:69:d4:99:3b: 1a:b7:10:81:46:fa:1f:0b:45:e4:10:f1:32:93:1e: 4f:9f:11:6d:b3:03:2f:b9:6f:1d:3d:d3:5e:c1:37: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:87:FC:F0:5D:15:84:1E:C9:65:68:3E:70:2B:C2:8A:02:13:76:DC X509v3 Authority Key Identifier: keyid:94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1b:55:3b:f8:31:46:b5:40:f7:b8:3c:5e:ed:e8:48:1b:5b: 8f:f8:b3:db:4c:d6:73:93:bd:68:91:d1:fb:46:89:73:0d:21: a9:24:33:c8:7a:77:66:9d:0a:4b:51:13:00:1e:b0:91:64:ff: 91:78:5b:28:77:a6:78:bc:b7:3b:4d:89:02:9f:13:c0:c8:f3: ec:14:28:58:e4:0a:f3:52:82:52:9a:e0:5a:71:07:86:ce:8a: 97:ae:4f:a1:30:9a:e1:ea:e6:15:67:bc:ec:0b:6a:69:bf:9a: ee:42:44:6d:dc:69:ce:5d:fd:75:a7:00:21:95:1f:12:55:eb: aa:a2:9e:77:90:8c:79:32:52:c3:1b:9e:ac:17:40:f9:d4:a5: f1:f2:1a:aa:56:44:0f:b6:e8:76:62:b6:5c:30:80:04:25:5f: d3:b5:a2:9a:05:0f:13:3f:dc:5c:e4:0a:98:c6:4b:23:68:73: cf:77:f5:47:c9:00:ca:8e:ea:e8:f9:34:d2:6e:29:32:cf:f0: 29:a4:aa:0a:12:44:d6:cd:cd:47:b6:df:2a:0a:c7:3e:79:f9: a1:12:69:b3:f1:74:c3:f8:ab:b6:dc:5d:ae:26:16:39:fb:d8: 2f:fd:32:da:bd:fa:93:1e:9b:c3:a5:78:e9:4c:91:f9:62:80: ac:b0:42:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQxQzkxMTAvBgNVBAUTKDk0NzBFNzYxMDgwNjNFNEY3QzY0QUQ0M0QwNzZCQzEx QUUxRkRCNUQwHhcNMjYwNzI2MjA0MDM1WhcNMjYwODAyMjA0MDM1WjAYMRYwFAYD VQQDEw02YTY2NzBjMy01NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GpOWaxXh6UsTL9mh9CCm6TngJqp+zS/AEQ+T92czc8BEr08Y+mbM52Hhr+T 4RcWOdVhx69dAGtnuAbRYP6dgKhciZDjYvMhUDDk7hKYsQ2QBsC5Q6vp7/LX2bvr tV2MIBE265L36XRPxFRvqz6MLH8TRijC9NFIlUYxjiq0F0bfLAAoyZ+mmge9H0Yb xTS9HuH1fTK4bZK1C2KwW4bY1nZTND6QeTWk5EygPuDPHoCwWGZB21VZXSO57AsF H/hDb7DNiHas1EOaQE5oLexCIsZejJxXN3LUOmDUHWnUmTsatxCBRvofC0XkEPEy kx5PnxFtswMvuW8dPdNewTfoJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeH/PBd FYQeyWVoPnArwooCE3bcMB8GA1UdIwQYMBaAFJRw52EIBj5PfGStQ9B2vBGuH9td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1BrOThaSzFEMEhhOEVhNGYy MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIRG5ZUWdHUGs5OFpLMUQwSGE4RWE0ZjIxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1Br OThaSzFEMEhhOEVhNGYyMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEBtVO/gxRrVA97g8Xu3oSBtbj/iz20zWc5O9aJHR+0aJcw0hqSQzyHp3Zp0K S1ETAB6wkWT/kXhbKHemeLy3O02JAp8TwMjz7BQoWOQK81KCUprgWnEHhs6Kl65P oTCa4ermFWe87Atqab+a7kJEbdxpzl39dacAIZUfElXrqqKed5CMeTJSwxuerBdA +dSl8fIaqlZED7bodmK2XDCABCVf07WimgUPEz/cXOQKmMZLI2hzz3f1R8kAyo7q 6Pk00m4pMs/wKaSqChJE1s3NR7bfKgrHPnn5oRJps/F0w/irttxdriYWOfvYL/0y 2r36kx6bw6V46UyR+WKArLBC4Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:46:34 2026 by rpki-client