$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: w+7MEnzjZ27W4jT9LYHK+XFPKrDBkQzQJQNZdke8m/c= Subject key identifier: 67:CF:A5:71:A8:7C:59:F9:89:E8:59:9D:BB:DE:1F:EB:79:04:AF:CF Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: CB Signing time: Thu 23 Jul 2026 08:49:41 +0000 Manifest this update: Thu 23 Jul 2026 08:49:40 +0000 Manifest next update: Thu 30 Jul 2026 08:49:40 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: V8Y/mQN5g4vcPMaTgMZf8ywVCPKElZY6NO4lBCRswHw=) 2: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) 3: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Jul 23 08:49:40 2026 GMT Not After : Jul 30 08:49:40 2026 GMT Subject: CN=6a61d5a5-85da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:28:4b:27:e0:1e:22:03:ed:03:64:04:74: cc:25:f6:4a:14:59:e6:0c:f3:df:31:cc:eb:6c:06: 89:00:90:e3:61:3d:f3:59:4e:20:94:ae:42:9d:31: fe:34:30:2d:3e:e0:ef:f7:19:b0:1f:33:e8:b1:cf: 3e:af:87:78:cf:56:ce:31:69:8a:74:46:a0:70:30: 86:c6:9b:88:60:cb:c8:8e:8f:24:d9:c4:06:a4:8e: 11:df:6f:7b:98:67:4f:ed:75:73:18:4b:ec:29:e7: 77:24:40:aa:4a:a2:ff:97:73:18:74:9b:ef:0f:00: 63:f4:99:ab:04:8f:2a:2a:a0:5f:02:8f:b2:af:b6: b3:0c:c1:50:58:2b:18:6e:31:03:fd:26:ed:f1:0c: 66:56:f5:4f:47:c9:96:6c:ed:9d:79:9c:44:f1:03: c8:5f:68:67:ba:a1:b6:03:d0:43:9c:47:4c:fd:1d: eb:93:26:3d:07:97:b0:15:b4:67:86:b1:23:6a:fd: 3f:0c:a4:90:92:8f:90:ec:17:3a:55:51:fb:7a:dc: a1:45:be:67:20:ab:27:09:bf:ca:90:5a:ea:ac:21: c5:b3:6d:b5:ec:4c:5a:cb:60:87:b7:1d:b3:b9:7e: 2a:a4:09:3d:6c:99:e5:28:a6:a0:2a:21:fd:40:8f: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CF:A5:71:A8:7C:59:F9:89:E8:59:9D:BB:DE:1F:EB:79:04:AF:CF X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:44:77:5f:b7:3f:79:cd:6c:fd:f4:c5:9c:3a:fc:2f:fc:fb: 72:25:6e:0b:0e:8e:03:61:28:96:ec:d5:e0:69:cd:1d:91:89: 0c:5c:31:02:02:56:02:a0:f3:fd:78:d7:11:a6:99:84:eb:3a: 46:92:a8:60:c6:86:53:f3:27:b1:0f:3e:0c:6b:02:09:a0:b8: 84:36:6a:33:c7:82:40:4c:b8:12:be:31:5f:c9:e3:29:ef:c7: 9a:47:8f:e0:2e:f3:43:15:71:da:c2:4a:65:e8:8a:6d:4f:fd: 11:36:2f:86:82:5b:d7:61:ed:5f:b7:b5:a9:57:07:aa:4d:a4: 1c:20:15:75:0a:34:8c:cb:c7:59:3e:eb:ae:8b:5d:d2:63:40: cd:b6:4f:28:9d:c4:09:09:47:5d:5a:5b:03:67:36:f0:51:b9: db:22:d7:97:eb:4d:77:b2:0b:24:40:ac:aa:90:e5:c2:2f:f4: 5b:eb:32:40:54:36:09:74:ea:e0:61:0e:11:19:b9:9c:7c:7f: 8a:e6:21:88:bf:d6:7f:3f:a8:9c:b5:59:b4:38:3a:0d:27:f1: 8b:68:55:97:ba:7e:43:d2:c5:4d:1b:34:7e:05:21:fa:94:50: 8e:0a:8d:84:c0:11:29:ab:c4:89:8d:4a:9e:a3:e4:cf:c3:4c: 73:c8:80:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYwNzIzMDg0OTQwWhcNMjYwNzMwMDg0OTQwWjAYMRYwFAYD VQQDEw02YTYxZDVhNS04NWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuowoSyfgHiID7QNkBHTMJfZKFFnmDPPfMczrbAaJAJDjYT3zWU4glK5CnTH+ NDAtPuDv9xmwHzPosc8+r4d4z1bOMWmKdEagcDCGxpuIYMvIjo8k2cQGpI4R3297 mGdP7XVzGEvsKed3JECqSqL/l3MYdJvvDwBj9JmrBI8qKqBfAo+yr7azDMFQWCsY bjED/Sbt8QxmVvVPR8mWbO2deZxE8QPIX2hnuqG2A9BDnEdM/R3rkyY9B5ewFbRn hrEjav0/DKSQko+Q7Bc6VVH7etyhRb5nIKsnCb/KkFrqrCHFs2217Exay2CHtx2z uX4qpAk9bJnlKKagKiH9QI+gyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfPpXGo fFn5iehZnbveH+t5BK/PMB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjkR3X7c/ec1s/fTFnDr8L/z7ciVuCw6OA2EoluzV4GnNHZGJDFwxAgJWAqDz /XjXEaaZhOs6RpKoYMaGU/MnsQ8+DGsCCaC4hDZqM8eCQEy4Er4xX8njKe/HmkeP 4C7zQxVx2sJKZeiKbU/9ETYvhoJb12HtX7e1qVcHqk2kHCAVdQo0jMvHWT7rrotd 0mNAzbZPKJ3ECQlHXVpbA2c28FG52yLXl+tNd7ILJECsqpDlwi/0W+syQFQ2CXTq 4GEOERm5nHx/iuYhiL/Wfz+onLVZtDg6DSfxi2hVl7p+Q9LFTRs0fgUh+pRQjgqN hMARKavEiY1KnqPkz8NMc8iADQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:32 2026 by rpki-client