$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: mh3RHsK1zgbcLaVQ8zHFykM1ufa3nr/jfJ7cPtmQo0I= Subject key identifier: E2:C4:16:A2:41:08:D9:51:D7:03:B1:26:BB:B4:AA:55:7D:A7:19:D3 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 03C8 Signing time: Mon 11 May 2026 00:41:56 +0000 Manifest this update: Mon 11 May 2026 00:41:56 +0000 Manifest next update: Mon 18 May 2026 00:41:56 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: tECrUQao17JK3RvjeA1XbGQUW1yAbweTeZMSTd4cljg=) 2: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=) 3: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=) 5: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=) 6: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=) 7: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: May 11 00:41:56 2026 GMT Not After : May 18 00:41:56 2026 GMT Subject: CN=6a0125d4-0cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:ab:bc:79:71:19:24:ca:d8:d7:95:aa:78: 52:70:37:1f:58:ab:13:88:a0:81:78:94:47:01:c0: db:d1:38:1f:19:f5:cf:cb:cb:bd:9c:0d:9a:cf:ff: e6:57:6f:b9:2c:01:c9:2f:c8:35:42:a2:f5:c1:d0: 8f:79:f5:c2:5b:54:c7:a3:a8:3b:d0:70:40:89:5b: 43:8b:df:77:9e:72:bf:7d:5f:10:92:81:95:84:8d: f9:55:a5:e5:01:6e:0a:73:db:90:63:0f:c7:03:99: f9:f4:66:d4:57:59:e0:6c:f0:e6:09:26:5c:9d:7a: be:bc:67:44:73:bc:f7:f0:71:ff:85:9d:64:27:fd: e5:a3:df:36:eb:5f:5b:61:e8:a6:eb:ca:65:49:fe: 55:06:e8:c8:cb:ee:a7:57:87:4c:6d:7e:29:e9:ea: 9e:d5:f0:df:30:0c:1e:7a:3a:ad:6c:f4:d1:b3:98: ac:4c:1b:06:97:ba:17:1b:29:20:f8:61:3a:20:bc: b7:d1:49:64:50:8e:15:29:30:00:ba:d8:2c:a7:2d: 03:00:b4:ef:37:aa:de:12:8a:27:70:04:c6:28:38: 4e:f4:7f:0f:6e:fc:5c:ff:07:91:cd:3d:5e:0a:f5: 7b:0f:67:2e:b9:30:54:4d:cf:11:a6:d3:4b:fd:c7: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:16:A2:41:08:D9:51:D7:03:B1:26:BB:B4:AA:55:7D:A7:19:D3 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1c:b4:ba:47:00:eb:ce:cf:e1:60:54:47:0b:6b:28:cf:27: 8f:f4:32:f4:49:7a:51:cc:20:8f:22:5e:20:1b:f2:b8:2c:d1: 05:a4:07:99:ca:a0:b7:ac:3d:49:b8:c2:6d:21:c5:44:6e:e0: 15:71:65:c7:db:d0:fb:39:91:b7:f3:54:41:fc:6e:ca:85:de: 7a:a7:fc:42:d2:8f:e4:62:b9:6d:55:b4:de:e4:27:d6:16:68: a5:ad:d7:9d:2d:dc:6d:b1:2c:1c:5b:15:34:42:83:1f:20:29: 14:7e:bf:9d:b9:a5:94:87:3f:ab:73:d1:80:63:e0:3d:3a:8a: be:4b:e6:d9:aa:34:f8:80:28:bc:cc:04:e6:09:d3:18:cc:30: 08:85:19:ba:dd:eb:09:be:93:f5:4c:a1:a4:67:d4:c7:55:0e: 4d:d7:61:96:1a:d5:9c:0c:73:10:43:25:8b:16:75:4c:d5:eb: 6a:e6:71:d5:28:f5:34:80:47:f6:f2:f9:95:b1:c2:de:61:79: 9f:ff:8a:d6:e3:63:71:d2:f6:84:48:ef:e7:0b:d9:cf:ef:aa: 50:96:73:d2:13:ba:8c:ae:52:41:30:6e:01:97:0e:95:87:22: f9:fd:2c:45:0e:d3:62:60:a3:64:1f:eb:fd:cd:6a:c0:71:15: 99:25:eb:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwNTExMDA0MTU2WhcNMjYwNTE4MDA0MTU2WjAYMRYwFAYD VQQDEw02YTAxMjVkNC0wY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroarvHlxGSTK2NeVqnhScDcfWKsTiKCBeJRHAcDb0TgfGfXPy8u9nA2az//m V2+5LAHJL8g1QqL1wdCPefXCW1THo6g70HBAiVtDi993nnK/fV8QkoGVhI35VaXl AW4Kc9uQYw/HA5n59GbUV1ngbPDmCSZcnXq+vGdEc7z38HH/hZ1kJ/3lo982619b Yeim68plSf5VBujIy+6nV4dMbX4p6eqe1fDfMAweejqtbPTRs5isTBsGl7oXGykg +GE6ILy30UlkUI4VKTAAutgspy0DALTvN6reEooncATGKDhO9H8Pbvxc/weRzT1e CvV7D2cuuTBUTc8RptNL/ceyVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLEFqJB CNlR1wOxJru0qlV9pxnTMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARRy0ukcA687P4WBURwtrKM8nj/Qy9El6UcwgjyJeIBvyuCzRBaQHmcqgt6w9 SbjCbSHFRG7gFXFlx9vQ+zmRt/NUQfxuyoXeeqf8QtKP5GK5bVW03uQn1hZopa3X nS3cbbEsHFsVNEKDHyApFH6/nbmllIc/q3PRgGPgPTqKvkvm2ao0+IAovMwE5gnT GMwwCIUZut3rCb6T9UyhpGfUx1UOTddhlhrVnAxzEEMlixZ1TNXrauZx1Sj1NIBH 9vL5lbHC3mF5n/+K1uNjcdL2hEjv5wvZz++qUJZz0hO6jK5SQTBuAZcOlYci+f0s RQ7TYmCjZB/r/c1qwHEVmSXrxw== -----END CERTIFICATE-----Generated at Wed May 13 00:41:33 2026 by rpki-client