$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: lANhDc3bVbOrMneGhYSpE02jbuhdOKg6rCYHcxkPhSM= Subject key identifier: 9D:AF:F4:14:8F:C1:96:37:78:7A:15:20:E7:78:7E:1A:97:65:17:D4 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 03ED Signing time: Thu 23 Jul 2026 01:23:38 +0000 Manifest this update: Thu 23 Jul 2026 01:23:38 +0000 Manifest next update: Thu 30 Jul 2026 01:23:38 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: u3Amd/xRCfBfHnCBaymut9xvWgzKYfNNOsW51xQI3Ds=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=) 4: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=) 5: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=) 6: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=) 7: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Jul 23 01:23:38 2026 GMT Not After : Jul 30 01:23:38 2026 GMT Subject: CN=6a616d1a-4fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1f:2c:bd:2d:80:19:12:01:0a:52:32:75:b3: f3:d7:8e:d6:05:60:4c:be:53:3c:56:4e:ae:e2:6a: 24:a7:a5:81:0f:40:4c:d5:ad:e0:74:1b:f1:45:5a: b2:e8:66:b5:e9:dc:45:40:e5:c2:d1:fd:bd:29:7a: 2e:70:85:d8:b7:33:d8:95:ff:4f:bc:a6:c4:26:ce: 4c:dd:b0:93:10:b5:8c:a4:f8:ac:fb:60:5a:09:13: 42:93:8e:6a:8a:96:98:ba:86:f9:b3:4f:eb:64:fc: 61:e6:79:68:1d:0b:d3:dc:35:97:2e:03:12:52:a7: 31:bc:ae:8a:3a:ce:24:db:fc:67:a1:0d:d9:48:eb: 35:fe:c0:81:fc:d1:12:44:61:0a:7e:27:ce:89:be: f4:79:fa:d4:3c:cd:19:eb:bf:f4:9d:0a:41:48:e4: 76:11:8b:8e:38:e1:b2:73:57:2f:a3:b1:f5:48:09: f2:89:21:d8:37:15:53:be:16:65:51:12:c7:82:95: b0:ae:51:c5:88:b3:32:d4:e4:9d:43:f2:2a:44:c4: d8:19:64:e6:93:29:c5:42:1e:d5:f8:62:42:32:da: e0:c1:4b:9a:f0:03:dc:2c:8f:5e:a6:44:0b:a5:1f: 84:f8:72:8f:ed:e8:d6:ae:30:bc:7e:09:f8:c3:92: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:F4:14:8F:C1:96:37:78:7A:15:20:E7:78:7E:1A:97:65:17:D4 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5c:45:fc:f2:b7:c7:74:ac:b7:4a:86:e3:f1:57:d7:a5:f7: ed:05:1a:3a:cc:2f:c0:44:3e:76:5e:db:20:f3:f0:4f:de:a5: 82:c0:de:0e:cb:a4:cf:24:10:58:41:a5:c5:e4:26:f9:ff:8e: 8c:03:b1:8f:d8:78:3d:57:0c:ed:93:cf:07:14:17:6e:01:e9: 76:bf:1a:62:5a:e8:a4:75:c1:91:2a:12:42:91:86:c4:42:43: d0:ef:61:b7:2e:be:b4:9f:8b:02:82:d2:7b:4d:3c:af:29:c4: 2e:e9:6b:f7:a0:25:23:e8:63:d9:e3:e8:63:35:6d:6c:f4:63: 06:98:00:25:e8:94:bc:39:a2:8f:6e:48:0b:5d:42:df:0b:ca: 8a:0c:15:60:53:3f:99:43:c6:5f:3e:e5:ec:4c:9b:be:ce:d1: b1:b7:e8:cd:ef:bc:4c:31:ec:c5:3e:da:4d:3d:c9:c5:7d:29: 72:24:6b:64:e7:53:f5:b7:52:95:dd:57:ac:2c:90:4d:3c:e2: cb:df:5f:25:56:01:12:80:9d:3d:b9:7a:3d:ba:8d:d7:d9:1f: 58:07:88:4a:a1:31:6b:28:df:c2:62:fe:d0:50:45:58:42:79: d5:6c:d1:0d:0f:16:42:f7:ed:98:75:4d:ea:34:97:1f:a5:00: 92:0c:ae:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwNzIzMDEyMzM4WhcNMjYwNzMwMDEyMzM4WjAYMRYwFAYD VQQDEw02YTYxNmQxYS00ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0x8svS2AGRIBClIydbPz147WBWBMvlM8Vk6u4mokp6WBD0BM1a3gdBvxRVqy 6Ga16dxFQOXC0f29KXoucIXYtzPYlf9PvKbEJs5M3bCTELWMpPis+2BaCRNCk45q ipaYuob5s0/rZPxh5nloHQvT3DWXLgMSUqcxvK6KOs4k2/xnoQ3ZSOs1/sCB/NES RGEKfifOib70efrUPM0Z67/0nQpBSOR2EYuOOOGyc1cvo7H1SAnyiSHYNxVTvhZl URLHgpWwrlHFiLMy1OSdQ/IqRMTYGWTmkynFQh7V+GJCMtrgwUua8APcLI9epkQL pR+E+HKP7ejWrjC8fgn4w5IFSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2v9BSP wZY3eHoVIOd4fhqXZRfUMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACVxF/PK3x3Sst0qG4/FX16X37QUaOswvwEQ+dl7bIPPwT96lgsDeDsukzyQQ WEGlxeQm+f+OjAOxj9h4PVcM7ZPPBxQXbgHpdr8aYlropHXBkSoSQpGGxEJD0O9h ty6+tJ+LAoLSe008rynELulr96AlI+hj2ePoYzVtbPRjBpgAJeiUvDmij25IC11C 3wvKigwVYFM/mUPGXz7l7Eybvs7Rsbfoze+8TDHsxT7aTT3JxX0pciRrZOdT9bdS ld1XrCyQTTziy99fJVYBEoCdPbl6PbqN19kfWAeISqExayjfwmL+0FBFWEJ51WzR DQ8WQvftmHVN6jSXH6UAkgyuGQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:28:57 2026 by rpki-client