$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: NSrhuBviK12OQXUdhl7Z/RyzzPdQw7DJK0Foh/WjOoU= Subject key identifier: 20:16:B1:B0:E9:F2:DE:4B:76:8D:05:62:32:55:66:F4:42:0C:E3:40 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 0177 Signing time: Mon 11 May 2026 04:43:53 +0000 Manifest this update: Mon 11 May 2026 04:43:53 +0000 Manifest next update: Mon 18 May 2026 04:43:53 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: +wdfiV9Y8E99h6fSIhTy92aKMiWP83DDVF7jHxsmbtY=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: May 11 04:43:53 2026 GMT Not After : May 18 04:43:53 2026 GMT Subject: CN=6a015e89-bfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:1e:6f:6a:82:54:e7:c1:8a:9f:e2:a0:68: 6e:d2:4a:ff:43:4b:8e:5e:fb:45:64:1b:21:3a:15: db:e7:32:53:48:9f:09:dc:37:2b:23:10:89:19:8c: ea:20:fe:01:0b:21:c2:b5:d7:14:c2:18:12:b1:57: 85:83:36:9d:ba:3e:8d:17:49:0d:e3:d1:40:3f:44: ae:d9:e6:93:61:5f:d8:aa:9b:11:70:57:2c:8a:31: 5e:13:e5:ee:85:79:b8:36:91:61:38:99:87:5e:d2: 0b:4b:bb:e0:16:17:a2:7d:56:f4:ef:fa:a1:8b:03: 7c:38:dc:bf:af:d3:79:5e:0e:48:0f:4d:05:68:1b: 28:01:bb:33:15:c9:08:0a:88:52:41:b4:a0:69:ab: b0:b9:44:d0:a5:ed:88:e7:52:3f:34:27:aa:b1:37: 05:a6:6d:ae:53:6e:79:84:f9:a4:ca:84:6e:5b:60: d0:f5:46:fe:bd:d2:b6:71:33:15:3a:49:91:4d:8d: 2c:5e:9e:6c:b6:ff:0d:a3:6e:7e:84:4c:98:b0:bb: 7f:f6:de:9b:76:b4:4f:1e:be:61:6c:0b:d5:5d:49: 73:62:cf:5a:85:20:a4:da:33:05:21:6e:8e:9b:65: 64:52:38:f3:13:c6:d7:c1:de:48:65:38:8b:94:74: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:B1:B0:E9:F2:DE:4B:76:8D:05:62:32:55:66:F4:42:0C:E3:40 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cb:70:d8:3f:c3:e7:32:6f:d3:44:41:e6:8c:73:57:c6:54: 92:86:73:e2:69:0a:ad:66:07:f2:9b:92:32:54:34:70:7a:ee: 10:9f:28:bf:7a:cc:fd:75:77:0b:be:20:26:41:8d:10:db:bd: 73:f7:58:9b:3f:9c:f8:12:dc:c1:40:7b:2b:07:02:57:43:cc: 9a:b0:c6:cf:c6:11:da:8b:85:2e:17:a7:ce:95:37:08:53:aa: 77:09:c8:12:dc:48:cd:3f:ed:76:a8:68:22:9d:dd:8e:f5:a3: 4d:c6:3a:aa:bc:bc:a7:8e:45:ff:51:18:05:11:c4:3f:bb:1e: 84:84:39:c1:73:3a:33:4a:2d:98:c7:d9:58:af:f6:df:5b:00: 61:23:76:17:9c:36:20:bc:ad:85:b0:50:a0:88:f7:e8:13:30: 09:d3:7d:34:58:4c:12:87:ae:7b:1c:18:92:15:db:31:6a:83: 38:fc:25:cc:1d:03:5b:c5:66:0d:59:44:9d:95:1a:81:39:06: 14:70:9b:66:a5:a3:a7:e9:8c:c2:4c:fe:0e:5e:46:62:fb:ec: d0:2e:66:75:c8:13:81:3e:5b:9e:7d:94:01:99:c2:1a:ae:15: d9:5c:b3:55:46:78:a9:15:3a:ec:93:04:13:6f:0d:e9:d2:b8: 1b:e1:99:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjYwNTExMDQ0MzUzWhcNMjYwNTE4MDQ0MzUzWjAYMRYwFAYD VQQDEw02YTAxNWU4OS1iZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAgeb2qCVOfBip/ioGhu0kr/Q0uOXvtFZBshOhXb5zJTSJ8J3DcrIxCJGYzq IP4BCyHCtdcUwhgSsVeFgzaduj6NF0kN49FAP0Su2eaTYV/YqpsRcFcsijFeE+Xu hXm4NpFhOJmHXtILS7vgFheifVb07/qhiwN8ONy/r9N5Xg5ID00FaBsoAbszFckI CohSQbSgaauwuUTQpe2I51I/NCeqsTcFpm2uU255hPmkyoRuW2DQ9Ub+vdK2cTMV OkmRTY0sXp5stv8No25+hEyYsLt/9t6bdrRPHr5hbAvVXUlzYs9ahSCk2jMFIW6O m2VkUjjzE8bXwd5IZTiLlHRy2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAWsbDp 8t5Ldo0FYjJVZvRCDONAMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnstw2D/D5zJv00RB5oxzV8ZUkoZz4mkKrWYH8puSMlQ0cHruEJ8ov3rM/XV3 C74gJkGNENu9c/dYmz+c+BLcwUB7KwcCV0PMmrDGz8YR2ouFLhenzpU3CFOqdwnI EtxIzT/tdqhoIp3djvWjTcY6qry8p45F/1EYBRHEP7sehIQ5wXM6M0otmMfZWK/2 31sAYSN2F5w2ILythbBQoIj36BMwCdN9NFhMEoeuexwYkhXbMWqDOPwlzB0DW8Vm DVlEnZUagTkGFHCbZqWjp+mMwkz+Dl5GYvvs0C5mdcgTgT5bnn2UAZnCGq4V2Vyz VUZ4qRU67JMEE28N6dK4G+GZCA== -----END CERTIFICATE-----Generated at Wed May 13 00:42:51 2026 by rpki-client