$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json) Hash identifier: pcNFOtJmpCjNKtZpfLKW62ka/okBYdt0Zl9P4jdv9DE= Subject key identifier: E5:4B:B7:83:BB:0C:E7:46:5E:2B:67:C0:1A:46:12:30:0D:06:7C:76 Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft Manifest number: 019F Signing time: Mon 11 May 2026 04:19:38 +0000 Manifest this update: Mon 11 May 2026 04:19:38 +0000 Manifest next update: Mon 18 May 2026 04:19:38 +0000 Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: WNolygab4JRtzmuhtVMsXeXy3ytKN+m7JAa9Rl66q1k=) 2: C659227E3D9611F1B3BD8648C4833773.roa (hash: URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: May 11 04:19:38 2026 GMT Not After : May 18 04:19:38 2026 GMT Subject: CN=6a0158da-e4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:6f:ff:0b:45:7a:61:7d:a7:cd:30:aa:4e: 2f:39:e4:da:88:26:ef:75:37:11:1b:13:4a:2b:48: 5e:4e:4b:f8:a9:c6:62:98:15:a8:c6:06:d1:5b:02: 5f:7d:07:18:12:f6:7f:83:8d:8b:05:b5:6a:68:99: 6e:37:15:c7:70:d1:12:8c:6f:45:78:2c:bf:3f:5e: 59:30:ff:78:34:8d:ba:9a:dc:3a:67:16:66:8c:74: 33:07:60:eb:3f:a4:5c:5e:25:ab:a3:fe:d0:93:17: e4:f8:82:3f:76:17:f9:e9:29:35:46:64:8b:5d:98: d2:26:73:20:5e:34:fe:61:26:06:b3:a8:63:8c:b6: c4:b2:a4:bf:60:32:dd:d2:76:53:74:70:d3:77:07: 1b:19:07:bd:ec:d1:6a:82:20:e3:da:91:d9:12:5a: 08:1b:72:34:e9:70:71:5a:20:d0:7b:c6:ee:4e:ff: 50:c1:ec:c8:35:9a:cf:87:30:8e:24:09:37:93:2b: 69:4b:21:87:07:fb:41:f6:52:a7:8e:9a:db:ae:74: 9b:9f:bf:54:56:fe:53:05:29:05:d6:aa:df:cc:59: 62:85:48:64:82:89:28:2e:43:a1:44:56:ee:54:75: 70:74:d2:af:2e:8e:c2:e3:60:18:b3:ca:18:98:df: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:B7:83:BB:0C:E7:46:5E:2B:67:C0:1A:46:12:30:0D:06:7C:76 X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:68:8f:69:b6:42:a7:a6:fb:2b:00:c0:1f:6e:2b:9a:cd:a2: 8b:01:5a:b6:e7:70:8f:58:0e:b2:37:8f:2c:7b:22:da:c2:92: 31:f0:94:26:1d:54:12:df:5c:6a:19:9d:43:6e:9a:06:77:20: ed:4d:61:9c:ad:14:c7:1b:cb:8a:65:14:3d:82:8d:0b:a4:36: bd:3f:f6:48:68:f8:67:fa:68:a7:9b:0d:be:ce:69:d5:3a:6e: 31:d0:ce:c1:55:3c:ff:a4:1e:4d:a4:d6:fd:a5:fe:93:45:8f: e7:4e:04:2d:39:47:52:57:32:45:34:13:3f:bf:2a:3f:78:d8: 34:4f:60:1e:a7:b4:0b:28:74:95:42:c8:fe:f3:22:4b:9f:d5: 99:8a:3b:49:a2:c5:06:bf:c4:17:20:39:5d:8d:20:87:46:71: 4f:5a:ef:01:3c:3e:2f:da:0c:49:0c:dc:f7:cd:f5:3e:3e:ab: 0f:41:f0:b0:d1:16:ae:e2:96:07:c0:4c:90:4e:0b:90:d5:76: de:27:ed:bd:f1:68:5c:ab:b9:c4:81:e8:11:da:95:05:e8:b5: 75:df:9e:0c:05:c0:15:49:c7:ae:d4:44:da:9f:85:3b:43:2b: 53:20:d9:69:8e:4e:22:44:ac:1e:91:ef:eb:04:8f:b0:86:e9: bb:0d:42:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE QTNCMjAwQjUwHhcNMjYwNTExMDQxOTM4WhcNMjYwNTE4MDQxOTM4WjAYMRYwFAYD VQQDEw02YTAxNThkYS1lNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwRv/wtFemF9p80wqk4vOeTaiCbvdTcRGxNKK0heTkv4qcZimBWoxgbRWwJf fQcYEvZ/g42LBbVqaJluNxXHcNESjG9FeCy/P15ZMP94NI26mtw6ZxZmjHQzB2Dr P6RcXiWro/7Qkxfk+II/dhf56Sk1RmSLXZjSJnMgXjT+YSYGs6hjjLbEsqS/YDLd 0nZTdHDTdwcbGQe97NFqgiDj2pHZEloIG3I06XBxWiDQe8buTv9QwezINZrPhzCO JAk3kytpSyGHB/tB9lKnjprbrnSbn79UVv5TBSkF1qrfzFlihUhkgokoLkOhRFbu VHVwdNKvLo7C42AYs8oYmN/MRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVLt4O7 DOdGXitnwBpGEjANBnx2MB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAumiPabZCp6b7KwDAH24rms2iiwFatudwj1gOsjePLHsi2sKSMfCUJh1UEt9c ahmdQ26aBncg7U1hnK0UxxvLimUUPYKNC6Q2vT/2SGj4Z/pop5sNvs5p1TpuMdDO wVU8/6QeTaTW/aX+k0WP504ELTlHUlcyRTQTP78qP3jYNE9gHqe0Cyh0lULI/vMi S5/VmYo7SaLFBr/EFyA5XY0gh0ZxT1rvATw+L9oMSQzc9831Pj6rD0HwsNEWruKW B8BMkE4LkNV23iftvfFoXKu5xIHoEdqVBei1dd+eDAXAFUnHrtRE2p+FO0MrUyDZ aY5OIkSsHpHv6wSPsIbpuw1CKQ== -----END CERTIFICATE-----Generated at Wed May 13 05:15:20 2026 by rpki-client