$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft File: LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft (raw, json) Hash identifier: Grei6MlQoVFwk1sGgrN/cyGusnUiS3IYRgbq8tXZ3j8= Subject key identifier: 1D:17:8D:2E:A4:50:7C:B2:7F:8F:4A:4B:B5:5F:32:3A:F8:19:DF:E5 Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 Certificate issuer: /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft Manifest number: 030B Signing time: Thu 23 Jul 2026 02:07:45 +0000 Manifest this update: Thu 23 Jul 2026 02:07:44 +0000 Manifest next update: Thu 30 Jul 2026 02:07:44 +0000 Files and hashes: 1: LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl (hash: h2JlrbsEpJaTpUelrp1t5HmWx3XWm05Ivc7wv8V5IKs=) 2: 49CEB44A28D111EDB364C870C4F9AE02.roa (hash: jgvcwXfR1ytNtZnPkE0NS8oNTgn4AVeJN86S8AIpa0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Validity Not Before: Jul 23 02:07:44 2026 GMT Not After : Jul 30 02:07:44 2026 GMT Subject: CN=6a617771-f778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:fc:23:12:ef:5e:d4:48:ad:0c:b7:4a:c6: d7:b1:45:f7:4a:c8:5f:72:1f:23:01:65:06:b2:b6: 1a:a8:a2:fe:dc:51:8e:40:e4:91:13:ac:30:1a:74: 17:de:68:9b:74:2a:d5:ea:d5:88:eb:aa:a7:16:02: 51:84:b6:44:2b:18:3f:93:8e:65:82:44:93:27:71: 47:95:67:64:60:b9:9e:07:d4:d5:5b:b0:53:bd:c1: 59:57:c3:08:b2:29:14:2f:27:05:ba:c1:18:60:91: e3:93:44:54:70:44:e2:6e:5d:8c:f8:91:3d:ba:19: cb:94:71:e0:4c:e9:81:e5:a4:28:be:4a:04:62:c3: a3:85:d5:f6:fa:be:2e:04:d7:fd:c9:c7:df:51:96: bb:d1:21:d0:b4:be:e5:dd:91:9d:cd:ca:76:a2:22: db:2a:32:d3:2d:b5:b9:f9:63:3c:db:aa:b9:77:e6: cd:6b:79:40:e5:5c:d5:12:69:35:c3:7b:9f:e6:ba: d4:55:50:35:3f:7b:43:0b:3d:50:41:f9:24:65:13: e6:cb:5f:3c:88:2d:f0:56:e0:a8:cf:41:a8:0c:90: 7c:92:00:dc:bc:bb:da:e3:bc:37:1c:fd:6c:66:29: 0a:d1:bd:c8:79:d1:af:bd:87:02:4a:a7:4e:34:4d: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:8D:2E:A4:50:7C:B2:7F:8F:4A:4B:B5:5F:32:3A:F8:19:DF:E5 X509v3 Authority Key Identifier: keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e7:09:bf:8b:08:26:a7:d1:5e:10:e0:b4:0f:97:e3:83:dc: bc:cd:49:e0:1b:e6:45:8e:c1:40:a9:8c:af:5a:5a:91:54:eb: 63:15:78:45:f1:04:2d:bb:9b:fa:1f:ed:69:55:d3:97:b3:b5: f6:a7:dd:b8:26:e8:b4:44:e7:fc:46:3a:68:b6:ac:a3:87:2a: 26:f5:6a:81:b1:60:b3:f4:51:0a:d5:5b:72:8f:8d:f4:a1:9e: 21:d6:e5:48:6f:62:93:54:fc:7f:ed:23:3a:44:bc:10:f0:67: 87:3a:06:7c:ef:09:73:9b:c0:4b:cc:b3:ed:82:52:3b:19:75: 45:4c:ba:92:36:5b:b1:a1:ff:dd:c2:16:e9:ee:f0:26:3f:dc: 0e:cf:93:dc:22:4a:7e:b3:a2:06:39:f8:84:08:53:0f:6e:fb: 40:a4:e0:d7:e9:f6:ae:f5:e0:d7:b9:2c:62:a5:2e:8c:85:36: 03:1e:71:43:48:a4:ec:4d:29:e6:25:af:fc:41:a3:9c:06:26: 13:fa:53:d0:29:73:22:ec:34:d5:a3:8c:97:9c:f0:62:e0:4f: c8:d4:50:a2:15:73:4f:83:3a:22:73:22:39:8e:9c:72:fd:33: a1:e8:66:f1:3f:8c:59:27:d2:7f:4f:31:8e:c2:2f:11:03:2a: 8b:31:9b:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMjgxMTAvBgNVBAUTKDJFMDZGMzA5MUFENThFRDA2MzNGRjk4OUIxRkQzMjk3 NzNFQzNBQTcwHhcNMjYwNzIzMDIwNzQ0WhcNMjYwNzMwMDIwNzQ0WjAYMRYwFAYD VQQDEw02YTYxNzc3MS1mNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a38IxLvXtRIrQy3SsbXsUX3Sshfch8jAWUGsrYaqKL+3FGOQOSRE6wwGnQX 3mibdCrV6tWI66qnFgJRhLZEKxg/k45lgkSTJ3FHlWdkYLmeB9TVW7BTvcFZV8MI sikULycFusEYYJHjk0RUcETibl2M+JE9uhnLlHHgTOmB5aQovkoEYsOjhdX2+r4u BNf9ycffUZa70SHQtL7l3ZGdzcp2oiLbKjLTLbW5+WM826q5d+bNa3lA5VzVEmk1 w3uf5rrUVVA1P3tDCz1QQfkkZRPmy188iC3wVuCoz0GoDJB8kgDcvLva47w3HP1s ZikK0b3IedGvvYcCSqdONE2plQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0XjS6k UHyyf49KS7VfMjr4Gd/lMB8GA1UdIwQYMBaAFC4G8wka1Y7QYz/5ibH9Mpdz7Dqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QyOC80QkRBRUVEQzI4 Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0QmpQX21Kc2YweWwzUHNP cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnYnpDUnJWanRCalBfbUpzZjB5bDNQc09xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QyOC80QkRBRUVEQzI4Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0 QmpQX21Kc2YweWwzUHNPcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfOcJv4sIJqfRXhDgtA+X44PcvM1J4BvmRY7BQKmMr1pakVTrYxV4RfEELbub +h/taVXTl7O19qfduCbotETn/EY6aLaso4cqJvVqgbFgs/RRCtVbco+N9KGeIdbl SG9ik1T8f+0jOkS8EPBnhzoGfO8Jc5vAS8yz7YJSOxl1RUy6kjZbsaH/3cIW6e7w Jj/cDs+T3CJKfrOiBjn4hAhTD277QKTg1+n2rvXg17ksYqUujIU2Ax5xQ0ik7E0p 5iWv/EGjnAYmE/pT0ClzIuw01aOMl5zwYuBPyNRQohVzT4M6InMiOY6ccv0zoehm 8T+MWSfSf08xjsIvEQMqizGbMg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:49:07 2026 by rpki-client