$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: UUe+0EkYn/qoaw0z41AbLG+A5Z+mSez6DkKuX85gHOc= Subject key identifier: C1:24:2A:15:41:72:C6:E2:E4:2E:83:F5:A9:7E:90:31:41:96:CF:B4 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 1D Signing time: Wed 13 May 2026 09:08:45 +0000 Manifest this update: Wed 13 May 2026 09:08:45 +0000 Manifest next update: Wed 20 May 2026 09:08:45 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: Nd+9z6qvqOl4dAq4G7IKKUDKjOjXSxV2vLeV10LpQbI=) 2: 9A5A24842DB011F1BFD489B0A5833773.roa (hash: 58kzjcpaON2IaduXKZ7xEWTKfohemWaysTA4FTeLLc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: May 13 09:08:45 2026 GMT Not After : May 20 09:08:45 2026 GMT Subject: CN=6a043f9d-3e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:57:2c:b8:5d:cd:e3:14:bd:f8:0c:a2:47: 33:2c:92:3c:17:9a:e5:41:21:8c:47:a5:03:5e:76: d0:92:1e:47:34:4e:e3:60:85:35:d7:42:94:75:91: c7:85:19:3d:a1:6e:6f:6a:b5:1e:60:4b:30:60:d2: 4d:d7:a2:50:e9:d1:74:df:2b:f8:bc:45:bd:2d:04: 58:7e:c6:23:7c:b3:b2:5c:da:46:a4:a1:4a:c6:0b: a8:f7:31:a0:fc:2c:ca:d0:9c:80:8d:1e:28:da:4a: df:55:8e:d7:64:02:e2:54:00:33:bb:be:91:96:de: e5:62:08:58:c6:f3:78:3b:e5:9b:ba:90:c9:14:90: ff:00:63:00:aa:86:e6:07:0a:13:a6:37:41:71:88: 94:70:9c:e3:8c:b4:48:70:f5:4f:a1:34:02:9a:94: 51:96:7a:c3:d5:b0:4f:e0:5c:ad:6d:6b:e6:b0:87: 8a:4b:b0:f7:03:c2:2a:6a:65:a1:5b:65:0e:59:7b: 9e:1d:80:14:5f:83:e2:b8:66:77:05:fb:4e:1c:1d: c3:64:3e:50:c0:4a:16:fa:dd:c8:88:22:c9:ae:90: 39:7c:9b:2e:66:51:27:74:7c:a3:da:ba:22:99:5c: 80:f2:ba:7d:08:d7:63:98:7d:cf:42:c1:a8:b7:e3: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:2A:15:41:72:C6:E2:E4:2E:83:F5:A9:7E:90:31:41:96:CF:B4 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:6c:48:08:9a:aa:a0:6c:2b:7c:3c:bf:72:71:5c:7e:dc:e1: 1f:74:78:b6:73:39:88:b2:c4:0e:01:82:eb:de:3c:04:ed:c1: 45:0c:14:3c:23:48:d5:77:c2:22:b9:41:a0:76:ea:57:20:87: f8:44:5f:b7:e6:5b:fb:4e:3d:b1:fe:30:0c:8f:8b:60:cf:cc: e6:8e:b4:8c:4f:72:1a:b8:4b:db:03:63:07:f7:93:2b:c1:b2: 57:59:bf:1b:33:2c:7f:0a:84:0a:fd:44:e6:3c:9c:d0:cf:ad: 3c:8e:c0:23:f7:89:f2:4d:24:fb:a3:a8:c3:46:97:4a:21:34: 90:0d:af:80:d0:4c:ab:92:04:28:ad:1e:1d:42:72:65:20:80: 47:2b:c5:6f:8f:88:9e:2f:b3:df:56:8f:6b:f2:52:08:27:00: 19:c5:1d:a1:68:1a:0c:8a:56:8a:87:53:16:c0:0a:9c:e3:2a: 39:27:e8:b8:a0:e0:83:8a:ba:64:c4:6e:ee:77:0c:3f:1f:ff: 2a:ca:4d:d6:67:4d:71:bd:7b:6f:c9:55:1c:97:f4:78:2a:ce: 39:68:b4:70:a3:f0:d7:d0:60:72:c9:7c:4c:fe:25:f4:00:0e: 72:fa:3d:c2:5e:b8:ce:7b:52:22:76:8b:e7:ce:3b:b7:c0:20: 7d:cb:6c:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjA1MTMwOTA4NDVaFw0yNjA1MjAwOTA4NDVaMBgxFjAUBgNV BAMTDTZhMDQzZjlkLTNlMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8OFcsuF3N4xS9+AyiRzMskjwXmuVBIYxHpQNedtCSHkc0TuNghTXXQpR1kceF GT2hbm9qtR5gSzBg0k3XolDp0XTfK/i8Rb0tBFh+xiN8s7Jc2kakoUrGC6j3MaD8 LMrQnICNHijaSt9VjtdkAuJUADO7vpGW3uViCFjG83g75Zu6kMkUkP8AYwCqhuYH ChOmN0FxiJRwnOOMtEhw9U+hNAKalFGWesPVsE/gXK1ta+awh4pLsPcDwipqZaFb ZQ5Ze54dgBRfg+K4ZncF+04cHcNkPlDAShb63ciIIsmukDl8my5mUSd0fKPauiKZ XIDyun0I12OYfc9Cwai340udAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwSQqFUFy xuLkLoP1qX6QMUGWz7QwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATbEgImqqgbCt8PL9ycVx+3OEfdHi2czmIssQOAYLr3jwE7cFFDBQ8I0jVd8Ii uUGgdupXIIf4RF+35lv7Tj2x/jAMj4tgz8zmjrSMT3IauEvbA2MH95MrwbJXWb8b Myx/CoQK/UTmPJzQz608jsAj94nyTST7o6jDRpdKITSQDa+A0EyrkgQorR4dQnJl IIBHK8Vvj4ieL7PfVo9r8lIIJwAZxR2haBoMilaKh1MWwAqc4yo5J+i4oOCDirpk xG7udww/H/8qyk3WZ01xvXtvyVUcl/R4Ks45aLRwo/DX0GByyXxM/iX0AA5y+j3C XrjOe1Iidovnzju3wCB9y2wn -----END CERTIFICATE-----Generated at Wed May 13 13:08:28 2026 by rpki-client