$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: A5FmwLMuTWy5PtEcwgV/FY8AXdUvjPbyUjoZsph2/5I= Subject key identifier: 1C:39:61:1F:20:4A:66:F5:E4:2F:20:34:3E:90:35:EF:08:65:B0:C2 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 0535 Signing time: Tue 12 May 2026 23:37:39 +0000 Manifest this update: Tue 12 May 2026 23:37:38 +0000 Manifest next update: Tue 19 May 2026 23:37:38 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: L+58G9/HK9kdzh9eBuqn8yA8xLI6iLw9hepxdtNha40=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: 2zZp2EZnjPU7rSqrkWIEvs8kVJLdfQr1KOxHb8prK6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: May 12 23:37:38 2026 GMT Not After : May 19 23:37:38 2026 GMT Subject: CN=6a03b9c2-27a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:ec:57:6f:76:7a:24:0d:5e:e7:00:a6:5d: d0:6e:fb:98:f2:d0:a1:c6:8b:be:a4:d9:61:11:c5: 27:2c:7d:48:37:b3:c7:32:06:c2:9d:11:0a:dd:5e: a3:8b:0a:33:0a:a9:c9:6c:04:ed:5f:7d:61:07:c4: 8c:aa:42:f3:11:63:cd:8d:0e:2f:60:ec:e0:f2:2f: 56:35:fa:d7:18:20:cc:3f:9d:bd:da:9f:c7:05:ba: 14:8b:d4:c3:84:94:70:ab:19:87:12:8a:44:28:4b: 9d:53:e5:76:ff:5a:78:a7:cf:42:c4:36:66:96:4c: 72:a3:0e:59:6d:36:12:81:f6:f3:9b:a8:70:b0:5a: 06:12:ef:37:8b:b8:0a:36:b0:14:f8:89:5b:bf:4b: 4b:01:0e:34:c5:0b:d7:69:5c:7a:d8:af:ab:04:af: 25:c6:d6:e1:fe:a5:bd:b7:a9:8d:e9:45:6a:57:ac: d6:b9:6b:e6:86:9f:d9:f0:1f:d7:37:cf:6a:5d:a3: b4:cc:48:6f:c1:28:30:17:3c:16:f4:02:31:c6:87: 1b:09:1b:80:3d:a2:b1:1f:60:44:34:6d:32:ad:46: 68:a3:a7:8c:4c:2d:3f:a9:54:11:cd:42:db:08:d9: 84:3f:1e:58:82:d8:45:8a:19:79:e5:17:64:82:c3: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:39:61:1F:20:4A:66:F5:E4:2F:20:34:3E:90:35:EF:08:65:B0:C2 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:59:81:8d:b6:f7:90:75:ed:35:fa:57:2a:6c:f3:f9:a6:ae: 49:aa:ea:1d:a2:e1:42:9b:54:aa:8f:d0:01:18:f2:7c:bd:74: ee:60:e5:30:76:5c:10:02:f8:ae:7b:e3:e4:ae:9d:33:a9:7f: 53:64:a1:08:d0:39:b7:21:d2:e1:f5:16:9e:25:cb:92:04:33: 70:65:06:93:42:04:63:cb:28:29:97:a4:52:a8:04:80:cf:1d: b4:09:3c:78:33:93:19:31:87:a5:01:19:56:74:3f:49:a6:17: b6:23:19:27:47:f0:cd:e1:1f:41:b9:5a:6c:67:9c:36:53:9e: 29:cd:19:c8:8a:cd:e6:3f:6f:25:74:d5:50:67:50:e4:64:b1: 67:c5:c0:99:d6:0c:6f:b0:ae:87:3a:58:f6:a4:bc:a8:31:3c: e3:a4:3a:5a:67:0b:cb:f9:11:3e:c7:17:4a:85:b2:33:43:45: 53:73:9c:1a:ba:95:86:ea:72:93:be:23:3d:4b:4c:1e:73:c5: f6:d2:fd:cd:84:e3:46:0f:41:66:8a:1b:ae:71:54:b5:f4:bd: c5:1a:90:9b:e3:07:29:76:cf:ea:a3:7e:4d:1c:0b:ac:e3:30: 3f:50:3c:92:14:ad:34:9d:87:84:2d:35:29:3a:b6:7b:98:8a: 37:8b:38:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjYwNTEyMjMzNzM4WhcNMjYwNTE5MjMzNzM4WjAYMRYwFAYD VQQDEw02YTAzYjljMi0yN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpXsV292eiQNXucApl3QbvuY8tChxou+pNlhEcUnLH1IN7PHMgbCnREK3V6j iwozCqnJbATtX31hB8SMqkLzEWPNjQ4vYOzg8i9WNfrXGCDMP5292p/HBboUi9TD hJRwqxmHEopEKEudU+V2/1p4p89CxDZmlkxyow5ZbTYSgfbzm6hwsFoGEu83i7gK NrAU+Ilbv0tLAQ40xQvXaVx62K+rBK8lxtbh/qW9t6mN6UVqV6zWuWvmhp/Z8B/X N89qXaO0zEhvwSgwFzwW9AIxxocbCRuAPaKxH2BENG0yrUZoo6eMTC0/qVQRzULb CNmEPx5YgthFihl55RdkgsMakwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBw5YR8g Smb15C8gND6QNe8IZbDCMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUlmBjbb3kHXtNfpXKmzz+aauSarqHaLhQptUqo/QARjyfL107mDlMHZcEAL4 rnvj5K6dM6l/U2ShCNA5tyHS4fUWniXLkgQzcGUGk0IEY8soKZekUqgEgM8dtAk8 eDOTGTGHpQEZVnQ/SaYXtiMZJ0fwzeEfQblabGecNlOeKc0ZyIrN5j9vJXTVUGdQ 5GSxZ8XAmdYMb7CuhzpY9qS8qDE846Q6WmcLy/kRPscXSoWyM0NFU3OcGrqVhupy k74jPUtMHnPF9tL9zYTjRg9BZoobrnFUtfS9xRqQm+MHKXbP6qN+TRwLrOMwP1A8 khStNJ2HhC01KTq2e5iKN4s4RA== -----END CERTIFICATE-----Generated at Wed May 13 12:20:10 2026 by rpki-client