$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: V/Wi0IR3aLzQaDKXk0L/ALhHtTQ4qCBk8dxLJVHubcs= Subject key identifier: D4:2E:CB:8E:2F:36:17:82:7B:C4:43:10:4E:59:C0:5B:D3:4C:CA:33 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0238 Signing time: Mon 27 Jul 2026 04:06:02 +0000 Manifest this update: Mon 27 Jul 2026 04:06:02 +0000 Manifest next update: Mon 03 Aug 2026 04:06:02 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: oQc4GqSeDlwmErTzIg2/7McKHygQ5ZfYPb/gPn/FmEM=) 2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=) 3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Jul 27 04:06:02 2026 GMT Not After : Aug 3 04:06:02 2026 GMT Subject: CN=6a66d92a-1cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:97:79:a4:68:f4:11:2c:cb:14:b8:9f:45: 78:39:ee:d3:d5:c7:e9:20:b7:a6:19:65:f4:9c:91: 2f:93:3e:7e:73:9d:cd:c6:57:48:c5:b3:15:35:4e: 0e:59:e6:41:62:d0:bd:ad:65:27:86:2c:3f:95:3a: c1:86:9c:85:2f:e7:75:58:79:9d:07:a3:95:42:63: 7e:24:65:a3:98:a6:98:5f:27:68:ec:70:98:ee:9c: cc:e0:93:56:05:36:80:21:1b:53:b3:b7:79:89:c3: d3:7d:42:36:ac:fb:13:0f:4d:ea:f5:fd:f8:94:13: 2d:7c:1b:e2:77:55:2d:9f:aa:89:c2:70:15:ad:7e: eb:da:83:19:98:9a:49:a7:f0:58:48:87:95:ea:87: ac:2c:42:55:4e:8c:e1:ee:5c:44:fa:cb:cb:d9:bb: 4e:76:5d:ae:f2:dd:47:c9:7c:12:d6:2d:cb:a0:3c: 9a:72:ee:6a:4e:fd:ae:05:b7:48:97:10:2f:30:26: bd:c3:fe:2a:74:89:58:d4:f6:93:4d:05:aa:b8:cd: bc:a0:5b:9b:70:85:cf:d6:a9:fa:fc:c3:a6:72:b0: aa:36:c8:1f:99:78:bf:74:72:98:a6:09:62:49:1c: 9c:d8:e2:7a:be:07:06:b1:50:4a:87:25:07:71:21: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2E:CB:8E:2F:36:17:82:7B:C4:43:10:4E:59:C0:5B:D3:4C:CA:33 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2c:46:cb:a6:7c:d9:61:cb:d8:f0:21:3c:03:2e:7c:80:5e: 65:cd:e4:f8:53:d0:18:01:58:be:59:85:14:1e:ec:68:2e:23: 66:01:f3:ab:79:ce:1c:b7:4f:33:ce:ff:38:ab:7f:40:aa:44: 37:86:98:95:2b:29:2d:8f:5e:63:22:b9:ab:90:00:57:e8:9a: da:56:01:7b:6a:93:87:c8:f1:42:76:78:1a:22:95:ff:dc:9f: 78:06:b9:53:bb:e5:8c:b4:bf:64:55:55:31:12:f0:06:1e:7b: 0a:d0:9f:da:2c:4e:09:79:e5:d3:3c:f3:e0:26:49:6e:5b:c4: 53:6a:78:8e:ff:eb:06:80:b5:5d:40:43:55:85:9b:b0:a1:18: a9:4d:6f:c8:6f:1e:d8:54:f0:31:5d:87:be:6b:ae:f1:4f:01: c6:be:b2:d3:91:14:68:50:ed:57:82:a4:ab:44:c4:c1:67:ea: e0:4e:a9:62:50:36:70:d6:ef:bc:db:c8:50:6a:ac:4b:52:da: dd:e6:54:a9:6c:52:89:39:9f:63:05:dd:59:1e:c6:78:6a:4a: 61:7d:03:10:0e:8f:f6:4a:40:11:17:da:28:dc:02:95:6a:9e: 8c:96:1e:dc:06:6a:85:9b:07:fa:31:7d:f2:79:e0:9c:fd:d1: 1c:3e:98:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjYwNzI3MDQwNjAyWhcNMjYwODAzMDQwNjAyWjAYMRYwFAYD VQQDEw02YTY2ZDkyYS0xY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoiXeaRo9BEsyxS4n0V4Oe7T1cfpILemGWX0nJEvkz5+c53NxldIxbMVNU4O WeZBYtC9rWUnhiw/lTrBhpyFL+d1WHmdB6OVQmN+JGWjmKaYXydo7HCY7pzM4JNW BTaAIRtTs7d5icPTfUI2rPsTD03q9f34lBMtfBvid1Utn6qJwnAVrX7r2oMZmJpJ p/BYSIeV6oesLEJVTozh7lxE+svL2btOdl2u8t1HyXwS1i3LoDyacu5qTv2uBbdI lxAvMCa9w/4qdIlY1PaTTQWquM28oFubcIXP1qn6/MOmcrCqNsgfmXi/dHKYpgli SRyc2OJ6vgcGsVBKhyUHcSEW/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQuy44v NheCe8RDEE5ZwFvTTMozMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuixGy6Z82WHL2PAhPAMufIBeZc3k+FPQGAFYvlmFFB7saC4jZgHzq3nOHLdP M87/OKt/QKpEN4aYlSspLY9eYyK5q5AAV+ia2lYBe2qTh8jxQnZ4GiKV/9yfeAa5 U7vljLS/ZFVVMRLwBh57CtCf2ixOCXnl0zzz4CZJblvEU2p4jv/rBoC1XUBDVYWb sKEYqU1vyG8e2FTwMV2Hvmuu8U8Bxr6y05EUaFDtV4Kkq0TEwWfq4E6pYlA2cNbv vNvIUGqsS1La3eZUqWxSiTmfYwXdWR7GeGpKYX0DEA6P9kpAERfaKNwClWqejJYe 3AZqhZsH+jF98nngnP3RHD6Y1w== -----END CERTIFICATE-----Generated at Wed Jul 29 04:29:49 2026 by rpki-client