$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft File: lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json) Hash identifier: hr7uW7vMNvSLQk/sac0iTYWA082aHo8WzmCcOVpV1/k= Subject key identifier: 17:FA:87:AA:A7:47:E3:42:53:32:00:4B:2B:6B:6B:4E:80:13:CD:2E Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft Manifest number: DB Signing time: Thu 23 Jul 2026 08:22:08 +0000 Manifest this update: Thu 23 Jul 2026 08:22:07 +0000 Manifest next update: Thu 30 Jul 2026 08:22:07 +0000 Files and hashes: 1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: P9dT83ugLnqvQfNSWjhI/R3o8H9QYbsMqGjwPAnn2lk=) 2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: PYLDscz39D9VfGo8zcZSUWDhN0EWb8SMMJ0oBjb9APU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Validity Not Before: Jul 23 08:22:07 2026 GMT Not After : Jul 30 08:22:07 2026 GMT Subject: CN=6a61cf30-cc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:e5:8d:84:2e:37:48:7d:1f:a3:16:13:24: 6e:de:0e:4a:04:5d:2d:ad:91:fe:21:b3:6a:77:d9: 1d:b2:86:14:89:b6:13:d2:3f:4f:cb:c2:45:eb:75: d8:19:b2:0b:c2:bd:c4:83:fb:32:09:40:f4:db:2f: 60:8e:99:ea:2b:ad:96:33:74:db:a4:03:2b:9a:36: b6:64:09:b2:be:3b:f2:ec:92:05:79:9b:80:67:33: 39:9c:ab:52:f0:46:c9:75:2f:5d:92:9a:82:b5:84: ad:bb:e9:9f:be:2f:1f:37:e7:7c:b0:47:a9:e1:43: b9:ae:75:9e:95:06:60:bb:dd:fc:2c:64:fa:44:40: 0c:09:1b:e2:fd:22:2d:fb:bd:f0:38:f4:c4:ad:8f: bf:65:0d:8b:24:2a:26:02:68:5f:ec:0a:e5:61:27: a1:4b:7e:8f:d6:23:ba:5f:fb:5d:ba:75:e2:1a:55: 4d:fd:5e:f1:85:e6:a6:32:a1:a4:bd:fa:b9:4e:1b: e6:47:6f:6b:62:51:f4:fc:c6:b9:b4:fc:93:a1:ae: 43:40:db:2d:73:ad:31:ce:4c:0e:3e:bf:dc:19:5f: a6:c7:5c:bc:f1:4c:24:55:f0:f1:34:16:3d:13:f6: d2:19:b7:18:12:26:3c:eb:cf:d0:fe:d2:10:09:bd: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:87:AA:A7:47:E3:42:53:32:00:4B:2B:6B:6B:4E:80:13:CD:2E X509v3 Authority Key Identifier: keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:1d:43:3c:16:ca:c1:77:23:c5:09:34:e3:b5:49:03:6a:ea: d4:f5:ba:98:f4:38:88:7a:1f:6d:42:cb:84:28:20:6d:8d:7e: 2a:06:0b:f3:06:38:47:5e:97:f2:52:7f:f7:1d:9e:3a:da:b7: c1:a2:8d:e0:c6:0e:a5:37:3a:34:85:c6:2c:ac:12:f5:70:e0: 65:24:e6:c2:2a:8e:fd:40:56:5a:5a:9b:65:0e:85:2e:81:2d: ea:bd:61:8a:1c:d1:52:af:25:83:26:87:84:2a:e5:47:57:27: f2:43:80:45:4e:9e:5a:fa:a8:67:51:01:60:6d:5a:7b:26:27: ba:64:46:fe:7e:22:df:e5:26:a9:a8:5d:3e:7a:82:e9:b8:a3: 4d:ce:58:24:9d:0b:75:da:bd:9f:5d:5e:50:90:3f:f1:86:52: 16:25:b0:f1:96:fb:17:93:48:a7:4b:65:e9:21:10:5b:ff:4f: 32:b7:5c:b9:e6:4f:11:c2:8c:d3:b6:70:8a:13:bd:dc:53:ef: 33:f2:e6:2a:c4:c7:3c:c6:9d:2b:a3:b8:7b:27:0c:6c:17:ce: 79:8a:83:27:5e:35:09:04:02:fb:05:aa:13:9d:2c:50:8a:a6: ee:f2:c0:c6:db:e7:66:10:8e:41:91:9a:5f:e7:84:5f:c4:9f: 40:91:6a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MUQxMTAvBgNVBAUTKDk1MkE0REM3QzRENjEwOTU5OEJFRUU1QUMwQTIwNkQy N0I4NUM1NkEwHhcNMjYwNzIzMDgyMjA3WhcNMjYwNzMwMDgyMjA3WjAYMRYwFAYD VQQDEw02YTYxY2YzMC1jYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RDljYQuN0h9H6MWEyRu3g5KBF0trZH+IbNqd9kdsoYUibYT0j9Py8JF63XY GbILwr3Eg/syCUD02y9gjpnqK62WM3TbpAMrmja2ZAmyvjvy7JIFeZuAZzM5nKtS 8EbJdS9dkpqCtYStu+mfvi8fN+d8sEep4UO5rnWelQZgu938LGT6REAMCRvi/SIt +73wOPTErY+/ZQ2LJComAmhf7ArlYSehS36P1iO6X/tdunXiGlVN/V7xheamMqGk vfq5ThvmR29rYlH0/Ma5tPyToa5DQNstc60xzkwOPr/cGV+mx1y88UwkVfDxNBY9 E/bSGbcYEiY868/Q/tIQCb0/IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBf6h6qn R+NCUzIASytra06AE80uMB8GA1UdIwQYMBaAFJUqTcfE1hCVmL7uWsCiBtJ7hcVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcxRC8xRTBGOTkyRTM2 Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VKV1l2dTVhd0tJRzBudUZ4 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTcE54OFRXRUpXWXZ1NWF3S0lHMG51RnhXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcxRC8xRTBGOTkyRTM2Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VK V1l2dTVhd0tJRzBudUZ4V28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIB1DPBbKwXcjxQk047VJA2rq1PW6mPQ4iHofbULLhCggbY1+KgYL8wY4R16X 8lJ/9x2eOtq3waKN4MYOpTc6NIXGLKwS9XDgZSTmwiqO/UBWWlqbZQ6FLoEt6r1h ihzRUq8lgyaHhCrlR1cn8kOARU6eWvqoZ1EBYG1aeyYnumRG/n4i3+UmqahdPnqC 6bijTc5YJJ0Lddq9n11eUJA/8YZSFiWw8Zb7F5NIp0tl6SEQW/9PMrdcueZPEcKM 07ZwihO93FPvM/LmKsTHPMadK6O4eycMbBfOeYqDJ141CQQC+wWqE50sUIqm7vLA xtvnZhCOQZGaX+eEX8SfQJFqwg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:46:49 2026 by rpki-client