$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: VuvXDJzGEh5kXywTu0c2yvFWD7OlhZyQcavRT8FjekI= Subject key identifier: 24:B4:D4:C8:BB:FC:99:DA:0D:80:96:FE:8E:A4:02:B7:BE:A9:2F:AC Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1F3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1F28 Signing time: Tue 12 May 2026 16:01:33 +0000 Manifest this update: Tue 12 May 2026 16:01:33 +0000 Manifest next update: Tue 19 May 2026 16:01:33 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: 9i0sWqnSriVRPeZsShA2AFZIXNHpPnQ/azhIVlq+LQ8=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: rr7iOLl9TUyzkrsjzgFR/+q8JCXOgUaSGUX032fYyyE=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: 3MKooCBU61wIsuGXSmqPXw064htJ8PtkFCtnxTlqkOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7998 (0x1f3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: May 12 16:01:33 2026 GMT Not After : May 19 16:01:33 2026 GMT Subject: CN=6a034edd-5bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:13:ec:1e:19:de:f5:ce:79:80:db:8b:07: 78:f5:8d:0e:ca:50:0b:4a:2f:c7:b2:50:b2:b2:fe: a6:d3:d5:7d:34:10:fd:99:93:16:89:5b:a0:a6:72: d9:7b:e7:bb:5d:5c:2e:88:e4:8c:9e:c5:7f:ad:9a: 21:54:53:e9:03:3a:b6:2e:23:fa:c2:90:8d:0a:4e: 78:58:93:27:f1:ee:55:c0:8e:06:9f:d0:4b:39:da: 9e:47:13:d9:d6:73:4f:12:f3:c9:c5:aa:c3:b3:2b: 4f:ea:23:b5:87:7a:11:12:52:78:01:1a:ab:7f:3b: f8:26:80:6e:91:21:92:a8:29:58:49:76:b7:7f:a9: aa:af:e7:2d:59:8a:dd:c1:cf:d0:57:74:39:b4:b9: 33:64:5e:16:f0:a9:df:5d:d4:b8:da:f0:c3:4e:05: f5:f9:2c:dc:88:f1:3a:52:ff:39:6b:c6:56:15:d8: 2a:19:de:66:7b:72:b6:50:8d:16:19:f9:90:25:21: 69:50:9c:28:14:4f:42:63:2e:19:1f:e3:51:36:f8: 92:d7:c4:f0:c5:72:db:c2:4a:98:5d:cd:f0:52:75: ce:f4:3a:fe:27:8f:e4:c5:bd:e4:a1:c2:77:a0:ac: 74:f8:24:ac:3f:bc:6f:20:37:33:87:a7:c2:4c:83: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B4:D4:C8:BB:FC:99:DA:0D:80:96:FE:8E:A4:02:B7:BE:A9:2F:AC X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2f:3c:6a:fd:f7:43:2b:73:33:a3:66:c2:92:7d:64:d2:d7: 63:79:be:77:c8:b1:ab:63:65:d7:3f:47:44:76:62:1b:a1:bd: 79:d4:7b:ec:a3:e4:8d:97:b2:74:cb:a5:56:43:c9:53:dd:55: 56:f0:14:5b:57:40:92:71:af:ca:f0:be:31:31:7d:9d:06:3b: ef:40:00:8a:f9:ce:16:65:bc:56:6c:de:34:32:f8:92:c2:28: 71:8b:bc:67:bb:3c:51:2b:05:e3:78:28:1a:1e:36:ea:b5:30: ba:aa:e0:31:8d:d6:1e:c8:72:e2:cd:cf:0f:eb:94:90:cc:06: 4b:88:e6:ed:5c:24:99:d2:7c:a9:66:9a:af:11:31:08:3a:f4: 6f:23:30:1c:1a:c8:1c:16:ef:fa:87:18:72:01:49:55:2b:1c: a5:7b:7f:e9:28:15:0b:d7:48:c1:57:8c:ec:7d:cb:cf:cd:a0: f5:f5:5e:95:1b:a0:9e:05:9b:16:2b:28:83:07:25:d9:fc:3c: 78:ca:c4:ea:6a:49:7d:c2:77:6a:32:7f:71:19:f7:b9:5e:85: c8:07:15:dd:c7:16:a0:94:08:3a:6d:53:ed:3d:4f:88:10:bd: fe:a9:7f:aa:cf:1d:b5:5a:ae:20:1d:86:7f:4b:c4:74:cb:eb: af:ce:f5:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjYwNTEyMTYwMTMzWhcNMjYwNTE5MTYwMTMzWjAYMRYwFAYD VQQDEw02YTAzNGVkZC01YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W0T7B4Z3vXOeYDbiwd49Y0OylALSi/HslCysv6m09V9NBD9mZMWiVugpnLZ e+e7XVwuiOSMnsV/rZohVFPpAzq2LiP6wpCNCk54WJMn8e5VwI4Gn9BLOdqeRxPZ 1nNPEvPJxarDsytP6iO1h3oRElJ4ARqrfzv4JoBukSGSqClYSXa3f6mqr+ctWYrd wc/QV3Q5tLkzZF4W8KnfXdS42vDDTgX1+SzciPE6Uv85a8ZWFdgqGd5me3K2UI0W GfmQJSFpUJwoFE9CYy4ZH+NRNviS18TwxXLbwkqYXc3wUnXO9Dr+J4/kxb3kocJ3 oKx0+CSsP7xvIDczh6fCTIPDlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCS01Mi7 /JnaDYCW/o6kAre+qS+sMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJy88av33QytzM6NmwpJ9ZNLXY3m+d8ixq2Nl1z9HRHZiG6G9edR77KPkjZey dMulVkPJU91VVvAUW1dAknGvyvC+MTF9nQY770AAivnOFmW8VmzeNDL4ksIocYu8 Z7s8USsF43goGh426rUwuqrgMY3WHshy4s3PD+uUkMwGS4jm7VwkmdJ8qWaarxEx CDr0byMwHBrIHBbv+ocYcgFJVSscpXt/6SgVC9dIwVeM7H3Lz82g9fVelRugngWb Fisogwcl2fw8eMrE6mpJfcJ3ajJ/cRn3uV6FyAcV3ccWoJQIOm1T7T1PiBC9/ql/ qs8dtVquIB2Gf0vEdMvrr871/Q== -----END CERTIFICATE-----Generated at Wed May 13 15:34:58 2026 by rpki-client