$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: aVwdTiROFTBwKIcPwvdtjBOfwkjwh8D/kviEQksstG0= Subject key identifier: 3D:AD:C7:A0:AA:79:FD:5B:DC:0A:AD:12:9A:33:AF:0B:C2:DF:62:9A Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1F62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1F4C Signing time: Wed 22 Jul 2026 16:05:25 +0000 Manifest this update: Wed 22 Jul 2026 16:05:24 +0000 Manifest next update: Wed 29 Jul 2026 16:05:24 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: P7yqGb4029FaiXxYHiaT+uUrMQh8PCbJur4DYxN5Z0Q=) 2: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: 3MKooCBU61wIsuGXSmqPXw064htJ8PtkFCtnxTlqkOw=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: rr7iOLl9TUyzkrsjzgFR/+q8JCXOgUaSGUX032fYyyE=) 4: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8034 (0x1f62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Jul 22 16:05:24 2026 GMT Not After : Jul 29 16:05:24 2026 GMT Subject: CN=6a60ea44-9ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:1a:ba:a7:6a:cf:ba:3e:28:7b:ce:d9:b6: dc:c9:7f:5b:ca:5e:a6:f1:d0:36:52:6a:8a:05:84: 99:40:84:8a:26:cd:c6:ee:7b:d0:ef:6c:e7:62:59: aa:8c:54:56:79:91:e4:aa:cf:21:6e:c4:21:95:cc: bf:00:a2:67:d1:bd:26:12:9a:ec:fd:2b:4d:a7:1e: 4a:16:0c:3e:f1:60:7c:8b:aa:b0:e2:73:04:8a:99: bf:d1:aa:25:9d:dd:e0:3a:e8:04:4b:a5:7a:68:34: d3:bb:5c:02:13:d0:1d:86:ce:c2:53:14:cd:3f:13: 20:3a:c7:74:ae:c5:f5:8a:66:3e:ed:d6:1b:cb:e6: 99:ad:b1:e1:fa:44:1b:ea:9b:28:0e:c6:d5:3f:ba: e2:f1:cd:47:21:5a:d7:f4:86:f3:15:b7:03:83:a8: 4d:82:c9:72:f8:77:76:52:51:b1:51:3c:ba:55:9b: 95:50:df:d1:d2:3c:65:d3:46:ea:b5:a4:b1:7e:70: 2e:3e:08:08:57:05:30:51:b0:80:ac:67:a6:4d:13: 93:e1:59:bb:e5:2e:dd:04:6f:3f:f4:26:06:e5:9b: 88:8e:38:2d:dd:41:76:bb:53:eb:24:be:72:8b:69: a2:9f:9a:6d:81:ea:f8:1d:c8:4d:49:f7:13:a3:c5: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AD:C7:A0:AA:79:FD:5B:DC:0A:AD:12:9A:33:AF:0B:C2:DF:62:9A X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e0:e4:2f:65:fb:ba:64:b7:1f:71:3e:03:ff:60:c8:0e:f6: 5d:ae:4d:ae:8f:93:57:29:38:ff:fe:66:ba:ca:9d:d8:56:08: 1e:3d:8a:3c:58:1b:b1:cf:cc:b5:c4:2b:21:24:e6:f9:f2:5f: 48:80:c1:15:f8:11:51:3e:e8:db:56:8a:c4:cb:9a:3d:7a:c2: fd:82:33:cb:55:ca:4b:11:c6:3c:e2:8c:17:ee:1a:98:2d:1b: 71:61:12:36:f6:a5:3d:a4:ce:51:4a:e6:b7:ef:93:70:f0:7d: 88:b3:4e:bf:11:6e:5c:49:b6:2a:29:45:44:ad:1a:48:4d:71: 72:94:96:f0:43:c8:5f:f8:c5:b0:8d:5a:9c:3a:23:98:0e:05: 2c:11:d6:fc:07:dd:de:82:5c:3a:ba:79:ba:ed:47:e4:7b:46: a8:b0:30:89:dd:5d:48:0d:d9:26:63:1e:16:2f:20:73:95:a6: bd:43:d4:a9:d8:65:9e:ee:73:cf:c7:5c:68:03:f9:ed:16:d8: da:8a:6a:d3:bf:86:6a:d6:4c:65:6c:2a:ef:9f:0d:51:08:76: 09:2c:3f:50:88:ca:32:34:00:af:d2:23:bb:f9:a2:e2:02:59: b9:0a:7a:dc:0a:61:a0:0f:86:45:04:38:66:e9:e1:60:dd:19: 99:67:95:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjYwNzIyMTYwNTI0WhcNMjYwNzI5MTYwNTI0WjAYMRYwFAYD VQQDEw02YTYwZWE0NC05YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVQauqdqz7o+KHvO2bbcyX9byl6m8dA2UmqKBYSZQISKJs3G7nvQ72znYlmq jFRWeZHkqs8hbsQhlcy/AKJn0b0mEprs/StNpx5KFgw+8WB8i6qw4nMEipm/0aol nd3gOugES6V6aDTTu1wCE9Adhs7CUxTNPxMgOsd0rsX1imY+7dYby+aZrbHh+kQb 6psoDsbVP7ri8c1HIVrX9IbzFbcDg6hNgsly+Hd2UlGxUTy6VZuVUN/R0jxl00bq taSxfnAuPggIVwUwUbCArGemTROT4Vm75S7dBG8/9CYG5ZuIjjgt3UF2u1PrJL5y i2min5ptger4HchNSfcTo8VOJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2tx6Cq ef1b3AqtEpozrwvC32KaMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMuDkL2X7umS3H3E+A/9gyA72Xa5Nro+TVyk4//5musqd2FYIHj2KPFgbsc/M tcQrISTm+fJfSIDBFfgRUT7o21aKxMuaPXrC/YIzy1XKSxHGPOKMF+4amC0bcWES NvalPaTOUUrmt++TcPB9iLNOvxFuXEm2KilFRK0aSE1xcpSW8EPIX/jFsI1anDoj mA4FLBHW/Afd3oJcOrp5uu1H5HtGqLAwid1dSA3ZJmMeFi8gc5WmvUPUqdhlnu5z z8dcaAP57RbY2opq07+GatZMZWwq758NUQh2CSw/UIjKMjQAr9Iju/mi4gJZuQp6 3AphoA+GRQQ4ZunhYN0ZmWeVXQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:22:32 2026 by rpki-client