$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: on+aA8OriiSqQqrudM5MfJPPHJFg2Ww/674c/zsxNHc= Subject key identifier: D1:86:7D:F4:D5:6D:32:2E:39:40:9B:8C:C8:0F:14:79:D4:45:CA:20 Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: E2 Signing time: Mon 27 Jul 2026 08:39:33 +0000 Manifest this update: Mon 27 Jul 2026 08:39:33 +0000 Manifest next update: Mon 03 Aug 2026 08:39:33 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: D+IdWyNOOQHrYrl6JaPxr+0zQe/hZ/0HSCIw5RXl/Bo=) 2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Jul 27 08:39:33 2026 GMT Not After : Aug 3 08:39:33 2026 GMT Subject: CN=6a671945-2bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:77:ca:af:f2:13:85:8a:5a:7c:4b:61:5a: db:9f:9e:5e:8f:54:94:5b:90:62:00:8d:3e:58:20: 94:cd:cf:62:09:ad:02:30:c4:eb:3b:dc:43:09:29: 8b:4e:67:bb:c7:a0:94:00:8c:f7:59:ef:65:ee:7d: 76:d1:01:e9:ef:ab:c3:f7:6c:74:99:c2:42:c5:6e: 26:d6:b8:be:19:5a:ac:11:43:e5:80:98:1d:a0:83: c9:01:dd:ef:0f:96:ab:97:06:4d:d3:5a:bf:be:dd: be:be:a7:9b:38:46:3c:97:ab:c0:8c:ca:be:52:85: 83:ea:50:21:8a:77:c6:38:14:d4:0c:60:9f:4b:1a: 7b:a5:97:60:78:2c:dc:96:d7:eb:fa:54:1d:2d:7d: 24:6e:9c:1a:7b:29:dc:dd:be:e6:25:8f:98:41:85: e8:9a:1b:6c:3f:86:d9:b6:1b:29:26:f7:54:e7:4e: b8:47:2c:14:62:4c:c7:9b:38:cb:b8:a3:0c:3c:6b: 06:c5:90:16:17:d8:80:dc:35:d3:4d:f5:c8:12:ae: 10:6c:8f:34:90:20:65:2b:42:cf:eb:26:b1:a3:a5: 53:45:b0:b0:65:8c:74:6c:58:c4:ad:ba:f3:ad:da: a6:cd:b3:56:c1:78:14:2b:25:53:06:17:8a:6f:3e: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:7D:F4:D5:6D:32:2E:39:40:9B:8C:C8:0F:14:79:D4:45:CA:20 X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3e:83:63:6b:91:7f:66:61:a1:1c:b6:cf:cb:1d:34:96:2f: 8d:d1:af:52:eb:74:33:ad:bd:75:16:49:7a:81:5c:ee:df:35: e5:ee:12:13:3d:33:b4:5b:c7:e2:3b:bf:de:a3:ed:ab:da:01: 39:ef:df:3a:c7:3f:45:af:c0:f1:a1:af:33:ba:e0:07:87:a5: be:6d:63:ae:c7:74:52:f4:72:22:1e:07:3b:58:ec:1f:03:5e: 2d:b1:60:ef:ee:15:68:4f:60:52:13:10:25:9a:cb:8a:12:12: 99:2e:01:ab:3b:32:52:64:09:f7:cc:ef:9b:ff:c0:4f:64:93: 3f:b7:60:93:c7:67:cf:3d:ed:b1:2e:e5:61:bd:9e:60:14:ba: 7b:a5:37:9f:9d:49:13:91:a5:82:20:ce:51:32:b8:1e:d0:77: db:a7:93:6d:91:1d:1d:6a:1c:36:5c:e3:95:f0:5e:0a:18:5e: 07:b4:f9:fd:eb:fd:52:d2:e7:e6:34:a1:2a:3f:ec:30:b9:46: c8:ab:96:3f:b9:4d:c0:d8:62:1d:d5:90:cf:3b:c2:11:2c:84: ec:31:c9:d9:74:db:28:8d:0d:5e:4d:a1:76:7e:61:cd:9a:fc: a8:bc:06:a2:7c:db:2b:b5:27:6e:da:eb:25:82:08:a9:5b:6f: b6:c2:36:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ1OUYxMTAvBgNVBAUTKDJGNzJEQzExMzkyREFBNTA1QTg1NjJFMjc2Mzg4NjA2 MDNDREJFQkYwHhcNMjYwNzI3MDgzOTMzWhcNMjYwODAzMDgzOTMzWjAYMRYwFAYD VQQDEw02YTY3MTk0NS0yYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK53yq/yE4WKWnxLYVrbn55ej1SUW5BiAI0+WCCUzc9iCa0CMMTrO9xDCSmL Tme7x6CUAIz3We9l7n120QHp76vD92x0mcJCxW4m1ri+GVqsEUPlgJgdoIPJAd3v D5arlwZN01q/vt2+vqebOEY8l6vAjMq+UoWD6lAhinfGOBTUDGCfSxp7pZdgeCzc ltfr+lQdLX0kbpwaeync3b7mJY+YQYXomhtsP4bZthspJvdU5064RywUYkzHmzjL uKMMPGsGxZAWF9iA3DXTTfXIEq4QbI80kCBlK0LP6yaxo6VTRbCwZYx0bFjErbrz rdqmzbNWwXgUKyVTBheKbz7VbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGGffTV bTIuOUCbjMgPFHnURcogMB8GA1UdIwQYMBaAFC9y3BE5LapQWoVi4nY4hgYDzb6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDU5Ri8wMTkwNDNGMDMz RjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFsQmFoV0xpZGppR0JnUE52 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDU5Ri8wMTkwNDNGMDMzRjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFs QmFoV0xpZGppR0JnUE52cjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlj6DY2uRf2ZhoRy2z8sdNJYvjdGvUut0M629dRZJeoFc7t815e4SEz0ztFvH 4ju/3qPtq9oBOe/fOsc/Ra/A8aGvM7rgB4elvm1jrsd0UvRyIh4HO1jsHwNeLbFg 7+4VaE9gUhMQJZrLihISmS4BqzsyUmQJ98zvm//AT2STP7dgk8dnzz3tsS7lYb2e YBS6e6U3n51JE5GlgiDOUTK4HtB326eTbZEdHWocNlzjlfBeChheB7T5/ev9UtLn 5jShKj/sMLlGyKuWP7lNwNhiHdWQzzvCESyE7DHJ2XTbKI0NXk2hdn5hzZr8qLwG onzbK7UnbtrrJYIIqVtvtsI2wQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:51:08 2026 by rpki-client