$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: nNLhJil6HKvxIXGceJn4+tIxiMuFTZmk0bQmo3y8OyE= Subject key identifier: 7D:86:FF:3F:DD:12:98:4F:EC:86:85:9D:49:34:BE:C8:B7:03:E9:49 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 19C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 19AA Signing time: Wed 22 Jul 2026 16:29:21 +0000 Manifest this update: Wed 22 Jul 2026 16:29:21 +0000 Manifest next update: Wed 29 Jul 2026 16:29:21 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: Ln/URYg178VIeErxn98CoHbYdHRZgXMQkFM8Ybc9IXo=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: DzKmtYCdBRynloESEDJ88OdtBxNoXDc9M+RZzPAZ8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6593 (0x19c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Jul 22 16:29:21 2026 GMT Not After : Jul 29 16:29:21 2026 GMT Subject: CN=6a60efe1-addc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:9f:39:f7:a9:76:3b:af:0e:e2:69:5d:2d: bd:11:cb:01:38:11:26:21:c1:59:bd:e8:15:cc:68: 2d:1a:e4:37:19:a2:11:43:5b:79:b2:fc:f6:fb:c3: a3:ad:f4:a3:31:37:11:59:83:29:a3:31:6b:8a:ea: 0d:8c:31:a0:21:96:dc:9c:49:35:fb:02:a5:07:bc: 3a:6e:0c:d0:ca:c4:d4:9c:7f:bc:e3:fa:59:18:1e: 92:53:c7:e6:71:2b:b3:9b:c4:11:a1:c8:bd:9d:34: 31:47:da:fa:66:3c:5a:37:8d:83:12:0d:0f:00:e0: aa:4d:8f:52:5a:9a:9f:b1:8a:f8:ce:28:bb:e5:72: 2f:5f:50:df:1f:37:02:42:05:3b:ce:fb:6c:4a:40: ab:5e:bf:53:2e:8e:69:19:16:cd:f3:7c:a5:7e:f2: ba:d0:c8:06:ae:84:e3:c3:8c:8a:9c:18:3c:75:b0: 6c:93:8c:08:73:69:db:5f:1f:c6:af:ed:40:e9:79: 01:6e:02:40:a3:99:6d:d8:e5:d6:a9:9a:d0:0b:ca: b3:97:1a:6e:6f:50:be:a0:a5:e7:a9:2d:8c:8e:58: 70:8e:b3:e2:21:8a:79:8e:c7:bb:30:f1:be:7b:23: a6:fc:72:f9:b1:e7:4e:7c:57:01:89:fa:18:bc:f3: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:86:FF:3F:DD:12:98:4F:EC:86:85:9D:49:34:BE:C8:B7:03:E9:49 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5f:ac:c3:9f:a0:66:8d:2e:a3:5f:05:ef:41:cc:b4:37:0f: 1f:14:8c:1c:24:7f:ab:84:41:24:ef:18:2a:85:48:14:f7:37: 75:9c:16:29:b5:cc:3b:aa:8d:55:6e:85:87:da:57:49:be:71: 60:87:f5:dd:1d:2e:c9:db:67:2a:51:9d:85:5b:b2:6d:34:08: 5a:88:11:03:c9:ed:52:8a:96:ec:b0:7a:7e:e7:57:22:fa:7a: 04:7d:d5:5c:75:6f:69:11:81:8c:8a:58:fb:96:31:c9:38:c2: 3b:ae:91:f9:34:c2:57:bf:a1:13:a2:1a:51:3c:77:64:8e:76: 83:21:f0:df:1d:e1:8b:3f:db:d5:7a:7c:66:74:c1:b5:e8:9e: 91:9f:61:6b:bf:81:2c:39:6f:75:e6:cf:1f:32:9d:5e:f5:c0: 28:a9:ca:f2:21:cc:1d:38:2a:0d:df:db:5b:15:40:ef:a2:88: 7f:85:5b:2f:c8:d1:09:b2:08:ca:fc:4d:7e:cc:3d:fd:50:be: 33:4c:00:be:05:e4:4c:94:2b:e7:c2:06:7d:79:1f:ad:e2:bd: 81:82:30:58:9d:22:55:3d:73:e1:09:6e:e9:4e:c2:cd:04:d9: 94:83:85:44:73:0c:ce:5d:15:94:4c:61:44:fc:46:70:ab:f6: 50:da:ed:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYwNzIyMTYyOTIxWhcNMjYwNzI5MTYyOTIxWjAYMRYwFAYD VQQDEw02YTYwZWZlMS1hZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhc+fOfepdjuvDuJpXS29EcsBOBEmIcFZvegVzGgtGuQ3GaIRQ1t5svz2+8Oj rfSjMTcRWYMpozFriuoNjDGgIZbcnEk1+wKlB7w6bgzQysTUnH+84/pZGB6SU8fm cSuzm8QRoci9nTQxR9r6ZjxaN42DEg0PAOCqTY9SWpqfsYr4zii75XIvX1DfHzcC QgU7zvtsSkCrXr9TLo5pGRbN83ylfvK60MgGroTjw4yKnBg8dbBsk4wIc2nbXx/G r+1A6XkBbgJAo5lt2OXWqZrQC8qzlxpub1C+oKXnqS2MjlhwjrPiIYp5jse7MPG+ eyOm/HL5sedOfFcBifoYvPPXOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2G/z/d EphP7IaFnUk0vsi3A+lJMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASF+sw5+gZo0uo18F70HMtDcPHxSMHCR/q4RBJO8YKoVIFPc3dZwWKbXMO6qN VW6Fh9pXSb5xYIf13R0uydtnKlGdhVuybTQIWogRA8ntUoqW7LB6fudXIvp6BH3V XHVvaRGBjIpY+5YxyTjCO66R+TTCV7+hE6IaUTx3ZI52gyHw3x3hiz/b1Xp8ZnTB teiekZ9ha7+BLDlvdebPHzKdXvXAKKnK8iHMHTgqDd/bWxVA76KIf4VbL8jRCbII yvxNfsw9/VC+M0wAvgXkTJQr58IGfXkfreK9gYIwWJ0iVT1z4Qlu6U7CzQTZlIOF RHMMzl0VlExhRPxGcKv2UNrtSA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:27 2026 by rpki-client