$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: iuU90IkSONP7t6+kaAGxzSocpKSXH0uZUTwflw1UE3k= Subject key identifier: 35:AD:76:46:25:23:18:9E:E3:22:0C:A8:0C:E5:60:1E:57:CD:0E:14 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 199D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 1986 Signing time: Tue 12 May 2026 16:25:05 +0000 Manifest this update: Tue 12 May 2026 16:25:04 +0000 Manifest next update: Tue 19 May 2026 16:25:04 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: ujWd5y7/uaQbfnssIb00vDq0EJPlgl/nrOSVLOgqFQc=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: DzKmtYCdBRynloESEDJ88OdtBxNoXDc9M+RZzPAZ8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6557 (0x199d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: May 12 16:25:04 2026 GMT Not After : May 19 16:25:04 2026 GMT Subject: CN=6a035461-aa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:d6:77:a5:af:17:73:af:71:25:30:fa:73: a4:4d:9d:3c:5e:a6:d3:9a:1b:40:9e:31:03:3a:68: 6e:a0:f0:de:0d:78:a4:da:a3:cf:66:8f:02:92:c5: 42:59:ea:dc:9b:e9:3f:3b:e4:c6:e5:38:4f:3f:a0: a1:68:60:dc:0e:e5:20:92:e1:1e:3d:71:be:6a:e2: 0a:11:4d:f5:d1:fc:9b:8b:5d:a5:3d:97:d8:2d:1e: 91:d9:37:42:e7:e9:70:6e:b5:eb:36:80:57:60:90: 21:b0:4c:fe:41:a0:dc:30:82:3f:ae:9a:74:8c:c8: 22:ea:93:45:ef:ea:ff:8e:e3:45:00:45:bd:a3:97: c9:e4:a5:b9:44:4e:b1:e5:97:92:32:6e:4a:6e:e4: 4a:d2:e1:08:59:fa:1a:bb:a0:a1:c5:d2:3a:32:b5: 4f:6f:f7:98:89:68:ee:a7:fa:44:e1:17:c4:20:f6: 83:7a:37:1f:73:60:7b:5f:83:bf:a5:d3:c7:37:72: 39:ad:1c:15:86:88:29:90:b2:7c:e9:08:ae:6c:df: e5:20:2b:40:d6:6a:3d:1d:07:c6:07:39:b4:c9:59: d2:69:2c:63:27:ac:be:46:6a:a9:bd:f3:4b:d6:00: 14:87:47:3f:32:b0:32:ed:a0:ff:59:30:87:e0:7e: fa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AD:76:46:25:23:18:9E:E3:22:0C:A8:0C:E5:60:1E:57:CD:0E:14 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:2e:e9:6c:bd:6d:aa:64:51:af:b6:54:fb:85:df:3a:d9:b4: 5e:ab:0b:5c:45:d6:f0:67:a0:97:ae:2f:35:8b:cd:6e:55:09: 2c:80:87:76:34:c5:85:be:d1:89:d2:2b:89:fa:a0:88:0a:d7: 45:af:7b:76:c9:e7:d6:00:5b:9d:4e:44:92:0f:c7:e3:f3:e3: d5:f0:85:51:42:49:a3:c5:c1:dc:05:2d:d9:a5:56:59:dc:82: 1a:ce:37:7b:ac:50:79:99:0c:8f:11:bd:b4:44:92:ad:f9:04: 49:1a:0f:33:42:ad:da:5b:6e:4b:d6:18:1b:86:23:9f:06:a8: 2e:25:8a:7a:34:68:f3:53:8a:23:ab:2d:04:f7:b9:76:0e:fc: 94:e5:02:ed:ee:05:df:6a:21:51:78:f8:03:d8:67:0c:77:c3: e7:20:66:62:23:0c:1f:37:da:5c:48:e6:12:d0:af:ee:e6:ee: ac:f9:d7:d3:85:77:c2:9d:c9:4a:31:66:57:5d:30:ab:cf:1e: 5d:bb:ee:ed:4e:72:66:ff:53:a0:08:64:4a:c4:5b:11:24:31: c0:4f:81:fc:cb:67:e9:9e:15:d6:0d:d2:3c:ac:93:1d:23:f7: c9:e4:c3:13:da:40:9b:1a:7b:f1:df:47:d5:35:23:34:95:2a: 8f:b5:79:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYwNTEyMTYyNTA0WhcNMjYwNTE5MTYyNTA0WjAYMRYwFAYD VQQDEw02YTAzNTQ2MS1hYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwTWd6WvF3OvcSUw+nOkTZ08XqbTmhtAnjEDOmhuoPDeDXik2qPPZo8CksVC Wercm+k/O+TG5ThPP6ChaGDcDuUgkuEePXG+auIKEU310fybi12lPZfYLR6R2TdC 5+lwbrXrNoBXYJAhsEz+QaDcMII/rpp0jMgi6pNF7+r/juNFAEW9o5fJ5KW5RE6x 5ZeSMm5KbuRK0uEIWfoau6ChxdI6MrVPb/eYiWjup/pE4RfEIPaDejcfc2B7X4O/ pdPHN3I5rRwVhogpkLJ86QiubN/lICtA1mo9HQfGBzm0yVnSaSxjJ6y+RmqpvfNL 1gAUh0c/MrAy7aD/WTCH4H76fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWtdkYl Ixie4yIMqAzlYB5XzQ4UMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQi7pbL1tqmRRr7ZU+4XfOtm0XqsLXEXW8Gegl64vNYvNblUJLICHdjTFhb7R idIrifqgiArXRa97dsnn1gBbnU5Ekg/H4/Pj1fCFUUJJo8XB3AUt2aVWWdyCGs43 e6xQeZkMjxG9tESSrfkESRoPM0Kt2ltuS9YYG4YjnwaoLiWKejRo81OKI6stBPe5 dg78lOUC7e4F32ohUXj4A9hnDHfD5yBmYiMMHzfaXEjmEtCv7uburPnX04V3wp3J SjFmV10wq88eXbvu7U5yZv9ToAhkSsRbESQxwE+B/Mtn6Z4V1g3SPKyTHSP3yeTD E9pAmxp78d9H1TUjNJUqj7V5vg== -----END CERTIFICATE-----Generated at Wed May 13 00:57:31 2026 by rpki-client