$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: ZJ9i28tBmSj+FHiIxDhh3COqZGleEGtqk9WJNKElPE0= Subject key identifier: D5:AB:B6:57:04:73:7D:7A:E4:41:B3:15:1D:39:50:B1:19:CD:77:78 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 0647 Signing time: Tue 12 May 2026 22:52:49 +0000 Manifest this update: Tue 12 May 2026 22:52:49 +0000 Manifest next update: Tue 19 May 2026 22:52:49 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: 9HN6CoK9bisIx9ckHBhVGSpk6SA5TD4d1qqaz+B/+DI=) 2: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 145MNVXkN1NCb/lHfvK7TOxcT8rHdAXVTu1hEwZJ0U4=) 3: 39CAB0884C7411F1AE12CE95C4833773.roa (hash: eo+kqTFakh01xeW7e72U4FIAXwks4DcaVTESVYep3Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: May 12 22:52:49 2026 GMT Not After : May 19 22:52:49 2026 GMT Subject: CN=6a03af41-e78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:1a:5b:20:c6:77:8a:ff:2b:7f:fe:45:2b: 45:8f:7b:e0:cd:7a:28:91:9b:57:cc:6d:1d:e7:4a: a3:03:31:79:ae:d2:68:43:22:7e:5f:9a:42:e3:2c: 83:c4:29:72:9e:91:b3:ba:5b:87:c6:b7:d1:7a:ad: 77:ab:71:74:77:c7:38:72:ea:73:f9:7c:82:75:3a: ad:8b:9a:fb:2f:62:b4:03:5c:29:61:26:25:02:70: d4:93:28:f5:55:8d:f5:ac:5e:3a:ae:04:95:8f:db: d8:d2:ea:fd:e1:40:f0:ea:7e:0f:28:b3:3b:43:2b: 58:84:11:65:74:b0:4b:b5:11:79:4d:35:31:d1:49: df:52:af:d5:3d:5d:3f:48:fe:24:d6:22:84:0c:f3: 6a:d2:77:62:18:4b:8c:9c:f9:9c:2c:2f:ec:dd:51: 8c:1f:71:3f:e4:80:0b:11:c2:ff:b2:72:59:4d:e2: a3:da:5f:f6:e9:17:8a:fb:ec:a9:6f:4e:87:10:ea: 0a:6f:7c:c3:79:5a:69:32:e1:d4:ab:e7:15:f0:12: 3b:29:e4:78:76:74:7f:8f:02:af:f6:61:9c:a1:90: 78:36:fe:14:9d:c7:48:40:a0:a5:1d:25:a3:43:a9: a3:98:4a:ff:97:31:79:d1:b2:3b:69:c5:e6:22:40: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:B6:57:04:73:7D:7A:E4:41:B3:15:1D:39:50:B1:19:CD:77:78 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b6:83:4a:8d:41:12:bf:be:41:6d:cc:4e:f1:55:67:70:1c: 9f:9a:16:be:9b:e7:bb:b0:0c:d2:2d:bd:78:5d:7f:82:15:ca: c3:d3:a7:c0:0c:19:b0:90:5f:f8:fa:e0:53:4a:b1:f9:3d:1a: 33:31:8f:69:47:15:08:2c:fa:6b:8f:5d:0d:11:e9:1d:17:2c: 85:b5:39:d2:c4:38:e7:4b:f8:74:da:8b:24:62:c4:1f:0b:21: 99:ca:58:18:00:c5:c5:5a:d0:be:84:16:e0:fa:8f:17:f3:e8: aa:97:82:f8:fc:06:99:2d:db:5e:05:dc:03:14:e0:c7:22:2e: 29:d7:f8:5b:db:5b:e7:93:dc:95:e4:ae:c0:c9:5b:58:6d:37: 68:6c:bd:0b:da:cc:0b:71:f4:fd:8a:d3:4f:b4:7d:aa:98:46: a4:b0:57:aa:60:27:9f:a4:d1:2a:a6:c8:81:cb:4f:8b:83:fc: 64:da:4c:f7:c4:2a:d9:34:ce:6a:68:e5:23:58:20:d3:31:53: 22:ee:47:39:ae:aa:87:aa:1b:3d:71:3d:09:cd:d4:89:0f:1f: 8e:7c:d6:21:77:02:e0:71:c6:c0:30:03:24:a1:e8:da:a8:3a: d3:55:4e:66:8f:d9:67:ee:8d:5a:8e:0b:d2:ea:31:65:ed:e7: 9b:3f:b0:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjYwNTEyMjI1MjQ5WhcNMjYwNTE5MjI1MjQ5WjAYMRYwFAYD VQQDEw02YTAzYWY0MS1lNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB4aWyDGd4r/K3/+RStFj3vgzXookZtXzG0d50qjAzF5rtJoQyJ+X5pC4yyD xClynpGzuluHxrfReq13q3F0d8c4cupz+XyCdTqti5r7L2K0A1wpYSYlAnDUkyj1 VY31rF46rgSVj9vY0ur94UDw6n4PKLM7QytYhBFldLBLtRF5TTUx0UnfUq/VPV0/ SP4k1iKEDPNq0ndiGEuMnPmcLC/s3VGMH3E/5IALEcL/snJZTeKj2l/26ReK++yp b06HEOoKb3zDeVppMuHUq+cV8BI7KeR4dnR/jwKv9mGcoZB4Nv4UncdIQKClHSWj Q6mjmEr/lzF50bI7acXmIkDXXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWrtlcE c3165EGzFR05ULEZzXd4MB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGLaDSo1BEr++QW3MTvFVZ3Acn5oWvpvnu7AM0i29eF1/ghXKw9OnwAwZsJBf +PrgU0qx+T0aMzGPaUcVCCz6a49dDRHpHRcshbU50sQ450v4dNqLJGLEHwshmcpY GADFxVrQvoQW4PqPF/PoqpeC+PwGmS3bXgXcAxTgxyIuKdf4W9tb55PcleSuwMlb WG03aGy9C9rMC3H0/YrTT7R9qphGpLBXqmAnn6TRKqbIgctPi4P8ZNpM98Qq2TTO amjlI1gg0zFTIu5HOa6qh6obPXE9Cc3UiQ8fjnzWIXcC4HHGwDADJKHo2qg601VO Zo/ZZ+6NWo4L0uoxZe3nmz+w4w== -----END CERTIFICATE-----Generated at Wed May 13 20:15:00 2026 by rpki-client