$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: vGX32nO0sHHi+M7mtj+SYglKH8824ML5z/w61CAW/Fc= Subject key identifier: 4A:A4:A9:BE:15:2B:C0:45:FF:D0:5A:51:19:A2:D9:06:40:96:82:8D Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 0535 Signing time: Tue 12 May 2026 23:38:13 +0000 Manifest this update: Tue 12 May 2026 23:38:13 +0000 Manifest next update: Tue 19 May 2026 23:38:13 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: Dn4Rqg0iwTXOwznd39XpTmy7VOhKOcnHRxqmUYzad+k=) 2: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: I3gaSJbRtBej3m7ESAqqUXRIOkfko3scyKuyIisZUvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: May 12 23:38:13 2026 GMT Not After : May 19 23:38:13 2026 GMT Subject: CN=6a03b9e5-35e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:e0:29:79:fe:7c:c6:5b:ec:da:7c:3c:82: 78:c4:05:f9:e4:25:ff:c8:bb:17:a6:83:db:a8:9d: eb:01:d9:63:13:2b:53:04:94:d7:15:2f:4a:59:85: 6b:64:03:1d:cd:a1:e9:d2:5d:83:a1:03:0e:d0:25: 50:2f:61:f4:0a:4c:97:4a:17:16:e8:7b:bb:e2:f2: fb:63:34:b9:18:b9:07:9e:8c:bf:81:e9:66:0a:6c: 93:49:57:a6:a2:54:6d:6e:f8:02:07:21:3c:18:01: aa:c8:cb:c7:15:8f:9a:b1:f1:62:1f:ca:b4:71:2c: 76:d4:e8:8b:ed:8c:b9:7c:d7:23:45:cb:2c:6d:b5: 8e:cc:fd:d4:06:ca:4b:b2:26:72:14:4d:c7:63:0a: 68:b8:f2:48:24:0d:4b:86:86:b3:24:13:d5:11:75: bd:3e:6b:5e:a4:0a:83:e2:f3:df:c6:7c:5a:a1:e2: 71:ac:a3:17:d0:51:23:79:b9:16:22:0a:e8:55:cb: 17:30:a4:36:99:8d:c4:1a:03:d2:63:84:35:7d:bd: ff:2d:41:9c:36:cf:01:ac:bd:a2:c2:ca:6f:64:ec: 2b:fb:d6:b1:b4:e6:de:df:28:ac:1e:cd:d8:cd:60: 46:22:4a:78:ac:9c:2d:ac:fe:5e:99:13:2d:15:4b: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A4:A9:BE:15:2B:C0:45:FF:D0:5A:51:19:A2:D9:06:40:96:82:8D X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0d:a8:f9:fd:ab:1e:a7:c3:cb:a7:0c:a1:ac:e7:61:94:8b: ee:73:65:78:3d:16:e5:82:55:31:47:48:d2:4b:44:aa:a3:40: b4:90:b8:59:86:bc:f2:89:c5:7a:a0:8a:29:39:58:ea:0d:05: 71:bf:9a:17:4b:9e:14:9c:13:b8:f8:6b:fa:aa:e6:64:b3:dd: 7d:5b:f8:d9:ad:53:c9:25:62:7a:3f:63:8c:e9:84:31:95:9b: 3f:ca:67:36:26:91:b7:6a:5e:13:22:ee:dd:a9:31:e3:dd:75: 85:b3:90:96:5f:2f:8a:3b:6e:c8:85:2f:b1:9f:87:9b:84:8c: 57:6e:8c:05:58:8b:65:a1:f8:c5:85:ee:7c:77:a0:63:60:56: a0:1a:56:93:9c:74:68:ae:64:21:6f:0a:4e:2a:30:f1:2a:52: fc:e2:1e:0e:8a:9f:1f:fa:15:85:f4:0b:09:06:f3:b5:12:1e: 34:85:92:d4:d8:2f:d2:47:77:f1:39:19:0f:80:70:8a:b0:69: 8e:00:cc:02:6f:59:d2:fa:52:52:f3:75:5d:47:b8:2d:df:2d: 43:f7:6c:d3:88:76:ee:79:de:d7:a7:59:d6:9f:5b:a9:c4:96: ae:5a:c9:79:dc:ab:b9:66:c1:68:5f:c3:d8:ff:82:d3:5c:57: 66:3e:72:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjYwNTEyMjMzODEzWhcNMjYwNTE5MjMzODEzWjAYMRYwFAYD VQQDEw02YTAzYjllNS0zNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8jgKXn+fMZb7Np8PIJ4xAX55CX/yLsXpoPbqJ3rAdljEytTBJTXFS9KWYVr ZAMdzaHp0l2DoQMO0CVQL2H0CkyXShcW6Hu74vL7YzS5GLkHnoy/gelmCmyTSVem olRtbvgCByE8GAGqyMvHFY+asfFiH8q0cSx21OiL7Yy5fNcjRcssbbWOzP3UBspL siZyFE3HYwpouPJIJA1LhoazJBPVEXW9PmtepAqD4vPfxnxaoeJxrKMX0FEjebkW IgroVcsXMKQ2mY3EGgPSY4Q1fb3/LUGcNs8BrL2iwspvZOwr+9axtObe3yisHs3Y zWBGIkp4rJwtrP5emRMtFUso7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqkqb4V K8BF/9BaURmi2QZAloKNMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJg2o+f2rHqfDy6cMoaznYZSL7nNleD0W5YJVMUdI0ktEqqNAtJC4WYa88onF eqCKKTlY6g0Fcb+aF0ueFJwTuPhr+qrmZLPdfVv42a1TySViej9jjOmEMZWbP8pn NiaRt2peEyLu3akx4911hbOQll8vijtuyIUvsZ+Hm4SMV26MBViLZaH4xYXufHeg Y2BWoBpWk5x0aK5kIW8KTiow8SpS/OIeDoqfH/oVhfQLCQbztRIeNIWS1Ngv0kd3 8TkZD4BwirBpjgDMAm9Z0vpSUvN1XUe4Ld8tQ/ds04h27nne16dZ1p9bqcSWrlrJ edyruWbBaF/D2P+C01xXZj5yLQ== -----END CERTIFICATE-----Generated at Wed May 13 16:04:26 2026 by rpki-client