$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: nCTmGsIEwCzR0LVichA0Fly9127pqLdRH7ccD3MUYjk= Subject key identifier: C6:99:A6:43:CD:68:84:25:9E:DF:1D:95:18:75:20:E1:C7:99:15:70 Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: F2 Signing time: Mon 11 May 2026 06:26:59 +0000 Manifest this update: Mon 11 May 2026 06:26:59 +0000 Manifest next update: Mon 18 May 2026 06:26:59 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: qMzUAPwKvLI1q60IwojfeAGyz6RTwxK+3dGAavsjxMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: May 11 06:26:59 2026 GMT Not After : May 18 06:26:59 2026 GMT Subject: CN=6a0176b3-3e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:6c:63:3a:2b:af:5d:05:57:a7:e3:06:7b: 89:48:52:f6:5e:8f:19:ee:2f:13:f0:df:9d:ed:bc: 29:e0:cb:37:fb:03:0a:78:4f:e1:40:fc:04:23:ff: c8:ca:c2:91:cf:40:e7:fd:3a:eb:53:41:84:82:c3: 34:8c:2b:0f:be:93:cc:6e:cb:1e:14:0d:ca:68:f1: 1f:99:4b:35:67:e7:d1:2c:ee:46:99:73:4a:fb:04: 2f:68:30:c6:ff:a4:a7:7a:d0:14:fb:3e:8b:f1:6c: d9:a2:28:e9:38:9c:96:72:4d:38:2e:37:41:b3:5f: c8:e4:6f:a3:ad:d9:ee:cf:43:58:5a:8b:9b:e8:d2: 42:f0:3a:75:94:9a:0f:11:e5:7b:60:3d:73:85:6d: cd:58:10:0d:e9:1f:15:e2:d1:43:90:b2:6a:f8:b3: df:2b:ca:1c:2a:20:11:72:37:3f:92:fb:0a:ec:78: f0:f8:81:6a:43:22:a2:fe:02:7a:fa:70:19:b5:4a: ed:6e:ba:ef:db:6c:d2:bc:44:c4:30:53:63:8b:15: 23:14:23:e7:6f:1c:e5:80:8b:87:b6:e7:76:2e:61: 34:c6:b1:06:35:9a:fb:55:10:fa:31:43:08:11:c0: 54:af:75:a8:43:00:9e:a3:95:06:64:d1:03:f9:ba: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:A6:43:CD:68:84:25:9E:DF:1D:95:18:75:20:E1:C7:99:15:70 X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:65:e8:03:a3:26:08:0f:3a:9b:30:da:5a:28:64:31:49:4f: 41:94:72:bf:de:e7:d9:48:24:58:f3:11:98:3b:19:ec:8f:b8: c4:c2:1e:55:6f:58:53:1d:36:99:e6:b3:f8:a1:c9:0c:04:ba: f2:0a:60:7a:f2:f5:ce:b9:6d:89:aa:f6:e7:ae:e6:13:80:aa: 98:fb:a3:4c:6e:00:7c:a2:2a:a0:fd:a6:f9:2b:0b:47:36:cf: 0b:f2:5a:a7:ab:54:f9:f1:5e:65:df:36:29:75:fd:c1:a3:1f: 31:41:15:43:63:ca:ce:bf:76:d6:34:0e:a8:92:2c:7a:7c:cf: bd:a9:61:92:51:02:37:ee:33:5a:68:2a:91:a5:7a:9c:cd:ae: 5f:58:41:68:e1:96:a7:58:4f:43:a5:09:2a:19:7f:1d:06:70: 8c:26:92:1e:d9:10:90:04:f5:2e:c1:3a:63:32:47:e6:2c:13: 20:99:72:38:ee:fb:34:fe:de:50:f2:d5:aa:8f:03:85:2b:a0: e8:32:b9:4f:eb:75:52:d7:64:ef:91:1a:e6:c0:93:94:01:87: 7b:15:1e:ce:2f:e5:d6:a4:e5:39:e0:95:25:36:e4:75:98:d3: ff:1d:cc:c1:a8:e5:94:18:b7:28:24:09:fe:7a:8f:9c:fa:31: 96:93:21:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC QUVGNzc3OTUwHhcNMjYwNTExMDYyNjU5WhcNMjYwNTE4MDYyNjU5WjAYMRYwFAYD VQQDEw02YTAxNzZiMy0zZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZhsYzorr10FV6fjBnuJSFL2Xo8Z7i8T8N+d7bwp4Ms3+wMKeE/hQPwEI//I ysKRz0Dn/TrrU0GEgsM0jCsPvpPMbsseFA3KaPEfmUs1Z+fRLO5GmXNK+wQvaDDG /6SnetAU+z6L8WzZoijpOJyWck04LjdBs1/I5G+jrdnuz0NYWoub6NJC8Dp1lJoP EeV7YD1zhW3NWBAN6R8V4tFDkLJq+LPfK8ocKiARcjc/kvsK7Hjw+IFqQyKi/gJ6 +nAZtUrtbrrv22zSvETEMFNjixUjFCPnbxzlgIuHtud2LmE0xrEGNZr7VRD6MUMI EcBUr3WoQwCeo5UGZNED+brEkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaZpkPN aIQlnt8dlRh1IOHHmRVwMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0WXoA6MmCA86mzDaWihkMUlPQZRyv97n2UgkWPMRmDsZ7I+4xMIeVW9YUx02 meaz+KHJDAS68gpgevL1zrltiar2567mE4CqmPujTG4AfKIqoP2m+SsLRzbPC/Ja p6tU+fFeZd82KXX9waMfMUEVQ2PKzr921jQOqJIsenzPvalhklECN+4zWmgqkaV6 nM2uX1hBaOGWp1hPQ6UJKhl/HQZwjCaSHtkQkAT1LsE6YzJH5iwTIJlyOO77NP7e UPLVqo8DhSug6DK5T+t1Utdk75Ea5sCTlAGHexUezi/l1qTlOeCVJTbkdZjT/x3M wajllBi3KCQJ/nqPnPoxlpMhxQ== -----END CERTIFICATE-----Generated at Tue May 12 23:52:21 2026 by rpki-client