$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: RYp8mitmPRzO0HpTmsGCANeO7xJjWANSLJjkqEaovhk= Subject key identifier: A7:8B:CE:EA:73:05:4C:86:37:A8:9D:F7:E7:D9:2C:95:10:F6:99:F2 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 0149 Signing time: Thu 23 Jul 2026 07:33:15 +0000 Manifest this update: Thu 23 Jul 2026 07:33:14 +0000 Manifest next update: Thu 30 Jul 2026 07:33:14 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: 6X3UXGQTQS+1uzJjgQzpx356IUegA2lQ2tB8eymLdcI=) 2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: rv9K2z3jLDHYayjuD/ofwi0jQtAT/5qT98rJ5cSCRIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Jul 23 07:33:14 2026 GMT Not After : Jul 30 07:33:14 2026 GMT Subject: CN=6a61c3bb-af7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:1f:fe:c1:2f:ea:94:e7:48:86:2f:f6:c4: ba:8f:74:52:d0:b7:56:a4:68:e2:dd:98:2a:91:9e: fe:10:16:b1:16:09:11:e8:9b:a4:e8:35:05:75:e1: 31:62:76:b8:e2:cf:67:9c:ca:8a:8d:50:ae:df:5e: df:fb:b4:9c:9a:1c:2b:48:6f:c8:8b:3e:d3:af:ed: 24:45:60:2d:b8:22:92:61:1a:5d:28:f7:6b:93:ae: dd:69:85:f4:13:f5:e8:ae:89:37:52:fe:14:4e:fc: ee:90:52:aa:17:e9:85:69:d9:0a:56:e1:53:c4:46: df:74:72:15:38:7c:9c:3a:32:e9:c6:49:84:ca:3a: 94:07:a3:8b:be:3e:02:5e:96:bd:4a:9f:47:9f:61: c6:91:79:c6:01:3a:b7:83:9e:b4:cd:c4:ee:b9:58: ab:3b:2e:72:fa:a3:e8:c7:cd:ed:a3:a5:9b:32:c3: d1:43:7b:bd:fc:bd:11:e1:62:b8:ef:29:9f:51:14: a2:57:78:d9:55:68:e9:14:90:8b:98:45:0c:97:66: 7f:7b:98:b3:b5:ac:82:58:77:64:b6:8c:cf:dd:1f: e7:04:b9:f8:34:54:c4:2e:73:8c:77:7f:7d:87:57: c2:21:20:a3:05:0a:f6:e3:46:05:b2:2c:98:aa:98: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:CE:EA:73:05:4C:86:37:A8:9D:F7:E7:D9:2C:95:10:F6:99:F2 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3c:43:3b:98:bc:f2:fa:87:ce:3e:9f:39:30:06:af:8d:77: b8:64:5d:44:4c:f9:6e:58:23:6a:b4:04:7e:43:6c:81:a5:73: 42:a2:fe:c1:e3:14:5c:67:2d:25:ea:8f:63:24:de:43:fc:d2: 22:8f:f9:8c:67:80:29:a1:78:b9:61:a0:f2:f3:ef:d5:c8:7e: 81:04:52:5d:50:2c:20:bb:a2:42:9d:94:d7:9b:9f:4f:dc:c3: 5e:8a:6d:cd:aa:04:f3:0c:3e:c3:2c:d5:10:9b:b6:27:21:df: ff:b1:16:f1:f3:28:cd:0b:ff:07:42:14:77:c6:9e:5b:95:1d: e2:77:93:30:f7:82:cf:c0:00:07:81:32:4f:1c:32:1a:53:91: ee:c3:e9:53:58:53:ae:76:37:64:21:4d:2a:a2:a8:16:d8:6e: 65:e4:ce:90:2e:fa:b0:84:c6:15:ae:ca:7b:89:96:73:b4:1f: 12:28:6e:dc:31:0d:da:36:ca:e0:23:b0:46:d0:f8:a4:9d:de: e2:bc:e3:d2:83:11:6c:55:a3:c0:68:8b:d5:03:55:5c:77:2b: e8:a9:e2:62:28:10:a0:0d:71:17:a3:16:41:44:a1:40:af:20: 60:8e:00:13:ba:8b:9b:3f:c3:84:11:8e:c3:f8:5d:8a:c6:36: eb:46:24:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjYwNzIzMDczMzE0WhcNMjYwNzMwMDczMzE0WjAYMRYwFAYD VQQDEw02YTYxYzNiYi1hZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfIf/sEv6pTnSIYv9sS6j3RS0LdWpGji3ZgqkZ7+EBaxFgkR6Juk6DUFdeEx Yna44s9nnMqKjVCu317f+7ScmhwrSG/Iiz7Tr+0kRWAtuCKSYRpdKPdrk67daYX0 E/Xorok3Uv4UTvzukFKqF+mFadkKVuFTxEbfdHIVOHycOjLpxkmEyjqUB6OLvj4C Xpa9Sp9Hn2HGkXnGATq3g560zcTuuVirOy5y+qPox83to6WbMsPRQ3u9/L0R4WK4 7ymfURSiV3jZVWjpFJCLmEUMl2Z/e5iztayCWHdktozP3R/nBLn4NFTELnOMd399 h1fCISCjBQr240YFsiyYqpi28QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKeLzupz BUyGN6id9+fZLJUQ9pnyMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDxDO5i88vqHzj6fOTAGr413uGRdREz5blgjarQEfkNsgaVzQqL+weMUXGct JeqPYyTeQ/zSIo/5jGeAKaF4uWGg8vPv1ch+gQRSXVAsILuiQp2U15ufT9zDXopt zaoE8ww+wyzVEJu2JyHf/7EW8fMozQv/B0IUd8aeW5Ud4neTMPeCz8AAB4EyTxwy GlOR7sPpU1hTrnY3ZCFNKqKoFthuZeTOkC76sITGFa7Ke4mWc7QfEihu3DEN2jbK 4COwRtD4pJ3e4rzj0oMRbFWjwGiL1QNVXHcr6KniYigQoA1xF6MWQUShQK8gYI4A E7qLmz/DhBGOw/hdisY260YkDg== -----END CERTIFICATE-----Generated at Fri Jul 24 11:40:44 2026 by rpki-client