$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: 9Ntj+MLj9Ft0iT79vX+emEz8rCqokrqCKMpDhFCfAj8= Subject key identifier: 65:30:E8:EC:35:8F:5F:41:F4:59:68:66:7E:D9:7A:44:BA:04:73:1A Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 04F9 Signing time: Thu 23 Jul 2026 00:33:04 +0000 Manifest this update: Thu 23 Jul 2026 00:33:04 +0000 Manifest next update: Thu 30 Jul 2026 00:33:04 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: KyCa4rG2e+pZ4pUzUvPd4RsAccy02v4VarupNp3I8zw=) 2: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: RIwVKjVZKrFHjQ/9a+o2G3hFBPmeu0/eXYz01rKe7M4=) 3: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: zzqL67oBfa7jh21a6YkB8pxmZp3PhnTtbMccXW5iB0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Jul 23 00:33:04 2026 GMT Not After : Jul 30 00:33:04 2026 GMT Subject: CN=6a616140-099e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:84:8c:bc:b5:27:43:4b:0f:c6:0e:6b:dc:97: 74:71:8f:89:a2:6c:1e:c4:9a:4e:6f:c3:5b:f2:86: 68:4d:3f:ba:21:5b:0b:65:d9:b3:d3:a6:58:31:58: 22:04:4c:72:06:be:fe:97:c7:ad:ae:d9:c8:92:5e: ee:5b:7b:2d:4f:55:01:67:16:dc:2e:31:58:0d:e5: 4a:61:b0:79:b2:64:3c:79:fc:69:16:b0:8a:5e:a4: 83:e1:95:3d:5b:19:e2:ac:57:c6:fa:47:a6:36:7e: 8c:79:0b:83:5f:27:64:3f:60:13:91:db:ab:63:3e: ba:87:75:76:78:e8:df:cc:5b:c7:69:c2:f6:e3:e3: fc:eb:11:78:0e:f9:67:2d:db:b0:9c:ac:fb:3f:69: 86:7e:46:43:28:a8:47:04:6d:11:94:2f:7d:2a:ba: d5:0b:cb:0d:52:71:69:7f:2e:93:75:30:c6:ca:8c: 2c:88:fb:b6:1d:3d:2c:9d:9e:95:4a:a8:16:ec:64: ef:f9:4e:16:65:6f:92:41:bf:e9:4e:20:d5:97:57: 65:ec:65:fc:a9:1b:62:90:16:5a:b9:9e:f7:4b:70: 06:24:fe:18:6f:45:27:4a:37:c6:f6:89:10:e6:88: 93:de:69:a5:29:99:a6:f1:97:52:ad:73:cb:af:88: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:30:E8:EC:35:8F:5F:41:F4:59:68:66:7E:D9:7A:44:BA:04:73:1A X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9a:57:3b:4b:42:e4:c1:a3:46:de:9c:45:84:0f:64:81:c9: af:e1:8e:ec:9e:4a:b0:7b:a1:47:08:3a:6a:a5:67:9d:bc:09: 22:97:a6:87:e0:73:fd:2d:8f:4f:89:77:98:26:53:35:07:96: fd:26:34:2d:b5:37:cd:d9:a2:a9:fa:17:f3:59:60:4f:a5:06: c1:e5:e9:8d:6b:72:30:b4:a9:f2:c5:88:bc:e2:17:56:9a:3f: 89:6a:50:ff:35:00:ef:19:80:59:d3:a2:f5:37:2b:c7:ee:34: b5:7f:cc:37:f8:59:00:51:b8:55:0b:7e:e5:f9:a8:ab:0a:1d: 04:4c:cc:16:88:bf:68:07:82:aa:fd:62:e1:d1:9b:51:68:c4: 91:9e:61:90:79:b3:d6:ba:ec:10:97:0c:94:3e:08:bd:8a:e9: 9b:ad:a9:88:b3:4b:7c:5e:85:7e:38:48:c0:af:26:47:4b:04: df:07:49:9f:bc:5c:6a:5e:18:63:d6:d0:b8:66:ca:e0:af:1d: 7a:4d:c2:aa:0b:72:a5:16:84:25:3f:61:69:cf:0c:21:86:9f: 9a:23:11:62:e4:f8:7c:64:cd:b4:06:3f:43:06:c5:ca:f6:ea: 0a:52:8e:2f:37:8a:ca:3c:6a:dc:fd:fe:61:bc:28:41:87:b2: 36:be:c9:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjYwNzIzMDAzMzA0WhcNMjYwNzMwMDAzMzA0WjAYMRYwFAYD VQQDEw02YTYxNjE0MC0wOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24SMvLUnQ0sPxg5r3Jd0cY+JomwexJpOb8Nb8oZoTT+6IVsLZdmz06ZYMVgi BExyBr7+l8etrtnIkl7uW3stT1UBZxbcLjFYDeVKYbB5smQ8efxpFrCKXqSD4ZU9 WxnirFfG+kemNn6MeQuDXydkP2ATkdurYz66h3V2eOjfzFvHacL24+P86xF4Dvln LduwnKz7P2mGfkZDKKhHBG0RlC99KrrVC8sNUnFpfy6TdTDGyowsiPu2HT0snZ6V SqgW7GTv+U4WZW+SQb/pTiDVl1dl7GX8qRtikBZauZ73S3AGJP4Yb0UnSjfG9okQ 5oiT3mmlKZmm8ZdSrXPLr4jZlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUw6Ow1 j19B9FloZn7ZekS6BHMaMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPZpXO0tC5MGjRt6cRYQPZIHJr+GO7J5KsHuhRwg6aqVnnbwJIpemh+Bz/S2P T4l3mCZTNQeW/SY0LbU3zdmiqfoX81lgT6UGweXpjWtyMLSp8sWIvOIXVpo/iWpQ /zUA7xmAWdOi9Tcrx+40tX/MN/hZAFG4VQt+5fmoqwodBEzMFoi/aAeCqv1i4dGb UWjEkZ5hkHmz1rrsEJcMlD4IvYrpm62piLNLfF6FfjhIwK8mR0sE3wdJn7xcal4Y Y9bQuGbK4K8dek3CqgtypRaEJT9hac8MIYafmiMRYuT4fGTNtAY/QwbFyvbqClKO LzeKyjxq3P3+YbwoQYeyNr7J5Q== -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:02 2026 by rpki-client