$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: 6Tfxbgd+f2TqtCaAkSxlgw2R8e+A4c12AFEu1E1gn3I= Subject key identifier: B9:3C:E7:A1:F2:B3:64:69:71:C6:A4:36:D4:94:8E:93:C1:30:94:2C Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 09CA Signing time: Wed 22 Jul 2026 20:23:57 +0000 Manifest this update: Wed 22 Jul 2026 20:23:56 +0000 Manifest next update: Wed 29 Jul 2026 20:23:56 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: U3Zlp3vSX4FuHc/tHBhGnf/yYd0UPOhAjzD9ADwZxzk=) 2: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=) 3: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Jul 22 20:23:56 2026 GMT Not After : Jul 29 20:23:56 2026 GMT Subject: CN=6a6126dd-3a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:9b:18:90:c3:f7:c5:a6:b3:ae:ee:db:30: 69:4a:76:5f:5f:a7:f7:4a:e0:ed:72:49:ff:3d:2b: a1:76:f2:0a:45:dd:c9:5d:d3:65:2b:82:23:60:87: 82:20:8b:27:0b:c0:ef:0e:69:1e:23:5e:f3:8f:19: b2:9a:05:68:95:b6:95:15:22:c7:4d:e6:1f:8f:eb: 1a:bf:fb:e8:a6:ee:70:73:68:83:f1:c2:6f:88:e3: 45:fa:70:53:40:78:72:5c:d9:a2:b5:1f:b1:6e:c5: a1:f0:b9:02:22:6e:48:27:0c:6a:f9:94:fa:50:35: 29:96:c1:3a:0f:45:c4:58:4c:0c:3c:2a:44:4e:6c: ac:29:2c:b0:45:6d:ab:e1:a2:9a:83:68:d5:44:78: 97:e7:2e:29:1f:e6:30:ac:12:d2:fb:58:1f:59:22: b6:df:3f:0b:ba:8a:eb:54:c4:ae:9c:53:93:df:c9: 38:37:e0:df:31:a6:c3:0d:9a:52:e8:61:59:11:10: 81:7b:1c:59:59:a3:79:a2:c0:f6:79:de:a9:9b:10: 2c:52:1f:7a:1b:33:6f:7f:47:4a:a7:5b:c8:1f:f1: f0:3f:d8:76:02:5d:73:d3:51:fa:62:2b:ff:29:11: ce:24:2f:19:d7:a1:34:56:28:26:bf:68:d0:5a:5c: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:E7:A1:F2:B3:64:69:71:C6:A4:36:D4:94:8E:93:C1:30:94:2C X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:37:0e:82:6a:e9:5a:9c:9b:c5:18:28:1f:d7:1e:3e:61:d2: 13:68:15:50:4d:38:be:ac:43:c2:b8:b5:25:ef:77:9c:67:eb: b4:1a:04:ca:1d:f8:47:93:ca:09:18:ec:1d:21:f8:46:82:ae: a3:ae:8b:1c:e2:e2:ea:99:69:c3:d2:74:4d:08:c6:b5:ee:63: 21:9d:ab:46:b0:05:fa:b6:65:a8:c2:4e:d0:35:a2:75:70:e5: 07:6b:78:a8:21:bc:1d:56:55:44:2b:99:46:f5:a4:c6:11:ab: 2b:31:bc:81:23:74:cc:34:df:73:d6:d8:77:2e:72:f6:b1:63: 6e:b1:a6:ab:70:32:a6:94:11:20:cb:91:3a:b2:87:96:0f:e6: e6:d0:1d:16:67:ca:88:17:52:4c:61:9c:da:dd:bf:83:b3:2a: e3:a0:1b:ab:50:ad:eb:c6:e9:a6:54:ec:d8:3c:e5:58:24:08: 6f:1a:f5:07:d5:8f:fc:db:3a:34:a3:3a:63:55:b4:5d:20:c0: c8:7f:4a:78:75:89:45:93:3a:2a:9b:7e:2e:71:76:a7:43:71: 3e:ff:36:a2:2e:2a:f1:a1:68:44:d6:38:dd:fe:c7:b6:77:df: df:a1:0d:9d:9a:6f:69:38:c3:66:8a:75:44:a0:8f:a9:4b:ae: 8e:c7:a7:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwNzIyMjAyMzU2WhcNMjYwNzI5MjAyMzU2WjAYMRYwFAYD VQQDEw02YTYxMjZkZC0zYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhabGJDD98Wms67u2zBpSnZfX6f3SuDtckn/PSuhdvIKRd3JXdNlK4IjYIeC IIsnC8DvDmkeI17zjxmymgVolbaVFSLHTeYfj+sav/vopu5wc2iD8cJviONF+nBT QHhyXNmitR+xbsWh8LkCIm5IJwxq+ZT6UDUplsE6D0XEWEwMPCpETmysKSywRW2r 4aKag2jVRHiX5y4pH+YwrBLS+1gfWSK23z8LuorrVMSunFOT38k4N+DfMabDDZpS 6GFZERCBexxZWaN5osD2ed6pmxAsUh96GzNvf0dKp1vIH/HwP9h2Al1z01H6Yiv/ KRHOJC8Z16E0Vigmv2jQWlwNbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLk856Hy s2RpccakNtSUjpPBMJQsMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTcOgmrpWpybxRgoH9cePmHSE2gVUE04vqxDwri1Je93nGfrtBoEyh34R5PK CRjsHSH4RoKuo66LHOLi6plpw9J0TQjGte5jIZ2rRrAF+rZlqMJO0DWidXDlB2t4 qCG8HVZVRCuZRvWkxhGrKzG8gSN0zDTfc9bYdy5y9rFjbrGmq3AyppQRIMuROrKH lg/m5tAdFmfKiBdSTGGc2t2/g7Mq46Abq1Ct68bpplTs2DzlWCQIbxr1B9WP/Ns6 NKM6Y1W0XSDAyH9KeHWJRZM6Kpt+LnF2p0NxPv82oi4q8aFoRNY43f7Htnff36EN nZpvaTjDZop1RKCPqUuujsengQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:08:02 2026 by rpki-client