$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: N3QPSOW44T4fGvNVD2q/XTfvLoMMH4ZjPzxITMCTniI= Subject key identifier: A7:FF:DE:26:E6:09:A6:02:16:21:57:82:31:02:63:9F:09:ED:0A:5B Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0BFF Signing time: Tue 28 Jul 2026 19:09:12 +0000 Manifest this update: Tue 28 Jul 2026 19:09:12 +0000 Manifest next update: Tue 04 Aug 2026 19:09:12 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: wQ/0rCbu+OPFBKKl8WWdS5o4KosOE3wSLalCRdt0woE=) 2: 44AB1490608611F190EDABDB6E47A888.roa (hash: H6vMQ2t2D2rSoT2Sb3T5cU2Q7kcQetOPzezN9R6P68g=) 3: F6A7E804177911F18F01239F253D8C67.roa (hash: 94B4DzsJi2Ia0XMNp0IDkQKvwnPAbaf/PbW4VjRjqfk=) 4: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: bK4wK4ZW2AeyeEa2VWf/EBV02KYa6Sd38Fy+vGgwV2Q=) 5: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: D4VLFLoLda9iVGzy5j4mVaxWgRrpARPiO4/t3mX7N14=) 6: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: 1HP1754dk+5RSjaQvu6ezyGMKjRnbLeUT9+IOmEICYw=) 7: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: MTYW3WZ5bmFwcXuZyuU6mJSaDv2kg390mgtMrX2qGao=) 8: F62847A2177911F18F01239F253D8C67.roa (hash: 2WCfGiDTIDu8+cnHkGMO0SBE3Ppp/vqnYU6M++BnmjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jul 28 19:09:12 2026 GMT Not After : Aug 4 19:09:12 2026 GMT Subject: CN=6a68fe58-45f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:b5:2f:d7:6a:55:49:bd:ee:40:61:b0:24: 4f:2e:32:87:1d:28:2e:57:37:90:21:38:61:3c:fb: 2f:9d:ec:ce:4b:9c:21:01:d3:ca:54:30:ac:fa:32: bf:b6:30:d4:d9:19:c0:22:e9:a0:af:55:8e:8e:1c: 5b:23:b9:2a:9c:5c:7b:15:33:2c:37:4b:83:d7:c1: 0c:2f:12:e7:d6:61:7a:3a:38:71:d7:a2:e4:dc:a8: c2:d4:c7:95:54:19:fb:88:f0:7a:a7:38:42:fc:71: 58:65:8c:db:57:86:28:a8:2e:db:ef:41:f8:3e:dc: f6:19:4c:79:fd:4b:fd:29:e8:08:5c:07:ab:3b:d3: ba:df:c2:2e:92:e5:a3:5c:57:8f:85:57:f7:94:35: 5a:39:44:04:52:d8:79:e1:89:10:64:0c:d5:0a:83: a4:25:8d:97:02:84:82:f4:98:46:9c:f5:75:de:ea: 8d:52:25:f5:c5:f2:83:32:e9:26:58:f6:4c:13:97: 94:f6:0b:86:ad:d9:4f:f2:05:0a:26:f4:50:2a:05: db:5f:0d:23:7c:64:62:6b:f9:73:9d:ec:bb:c7:11: de:78:3e:ba:f9:1a:e1:19:e1:04:1c:72:b6:aa:b7: 01:d2:30:eb:e3:82:ff:ad:29:7b:6f:0a:b7:c8:79: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:DE:26:E6:09:A6:02:16:21:57:82:31:02:63:9F:09:ED:0A:5B X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:44:fd:d5:b5:be:48:65:13:23:cd:8d:9c:0a:c8:85:de:d4: df:e0:02:a9:ae:f1:19:cc:8a:61:20:fc:1c:4a:88:82:94:8f: 7d:b8:69:50:cc:18:e4:e2:77:21:0a:cd:e9:94:06:22:ac:d4: e7:9b:36:f0:b7:ab:43:90:5a:0f:0e:8a:55:cf:ad:48:7c:ab: f7:40:31:4c:b7:bd:bb:3f:05:4e:71:dd:15:a9:ea:13:41:61: 45:d1:ad:27:2f:b8:2e:ec:d9:dd:0a:e8:05:4c:09:37:b9:b2: 05:d6:36:0b:a6:e7:86:8f:8a:4e:9d:ec:d8:d9:e8:18:8f:b8: e3:39:56:31:ff:0a:65:8c:64:82:4b:65:2d:bd:d2:2d:24:a8: 45:be:73:3a:28:49:31:6d:bf:97:e3:66:1e:f3:3d:1e:3b:bf: b5:f0:39:74:41:af:7f:3f:bc:f5:b2:23:38:32:f3:52:74:89: c2:be:f8:9e:a4:13:8b:8d:57:6c:46:4b:bf:1c:c7:fc:5c:76: c6:28:87:cc:1a:a1:a1:6b:a1:7d:5e:a4:36:2c:19:d5:74:9e: d2:53:d7:ed:91:d7:8d:c7:2d:23:09:2c:02:65:fe:49:02:ce: d8:d5:e8:f8:38:21:5b:2c:33:4f:14:7f:93:e0:f3:e5:63:33: 91:8c:cf:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwNzI4MTkwOTEyWhcNMjYwODA0MTkwOTEyWjAYMRYwFAYD VQQDEw02YTY4ZmU1OC00NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRq1L9dqVUm97kBhsCRPLjKHHSguVzeQIThhPPsvnezOS5whAdPKVDCs+jK/ tjDU2RnAIumgr1WOjhxbI7kqnFx7FTMsN0uD18EMLxLn1mF6Ojhx16Lk3KjC1MeV VBn7iPB6pzhC/HFYZYzbV4YoqC7b70H4Ptz2GUx5/Uv9KegIXAerO9O638IukuWj XFePhVf3lDVaOUQEUth54YkQZAzVCoOkJY2XAoSC9JhGnPV13uqNUiX1xfKDMukm WPZME5eU9guGrdlP8gUKJvRQKgXbXw0jfGRia/lzney7xxHeeD66+RrhGeEEHHK2 qrcB0jDr44L/rSl7bwq3yHlLzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKf/3ibm CaYCFiFXgjECY58J7QpbMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADET91bW+SGUTI82NnArIhd7U3+ACqa7xGcyKYSD8HEqIgpSPfbhpUMwY5OJ3 IQrN6ZQGIqzU55s28LerQ5BaDw6KVc+tSHyr90AxTLe9uz8FTnHdFanqE0FhRdGt Jy+4LuzZ3QroBUwJN7myBdY2C6bnho+KTp3s2NnoGI+44zlWMf8KZYxkgktlLb3S LSSoRb5zOihJMW2/l+NmHvM9Hju/tfA5dEGvfz+89bIjODLzUnSJwr74nqQTi41X bEZLvxzH/Fx2xiiHzBqhoWuhfV6kNiwZ1XSe0lPX7ZHXjcctIwksAmX+SQLO2NXo +DghWywzTxR/k+Dz5WMzkYzPQA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:30 2026 by rpki-client