$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: leGWQeuaGUIsCAu0MzV4/s0nI8wq3VsAyWri3mnBe0w= Subject key identifier: 0F:4D:77:D9:E7:1D:3D:CB:42:00:7E:4A:5E:C1:75:DA:B8:CE:68:07 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 0A0B Signing time: Wed 22 Jul 2026 20:17:31 +0000 Manifest this update: Wed 22 Jul 2026 20:17:30 +0000 Manifest next update: Wed 29 Jul 2026 20:17:30 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: P/X1xkI6weFdIs68Hx8DksOxur1HCxcg7Pf/HSN2KGY=) 2: 570B25FA305111F0BED81784C4F9AE02.roa (hash: UNamoSLqPfgLYpd2PGo2wGNk5GFxnnncmR2Esq//UuA=) 3: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: 9cZAA819ZNYxdN7xk7f1AZKeDye0bv4EBp7wGGivMIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Jul 22 20:17:30 2026 GMT Not After : Jul 29 20:17:30 2026 GMT Subject: CN=6a61255a-f221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:6e:19:07:d8:b7:62:15:7e:06:d4:28:8e: 11:60:92:af:17:9e:da:6f:1b:3e:5e:40:8d:3f:d5: 6b:b2:fd:d9:40:b3:0a:bf:42:50:7b:4a:0a:46:b9: b4:83:b7:c6:b7:0f:df:93:27:d7:eb:eb:ac:0c:33: e7:ab:8c:1e:cb:cb:44:76:2f:03:00:bd:24:fc:92: e6:08:9c:12:76:84:da:68:0d:b1:bf:37:a8:f7:dc: f7:8b:6b:f7:7d:24:97:b6:65:5c:6e:c9:ef:11:c8: ae:a1:be:94:cf:1e:22:12:d9:0e:99:ff:84:fb:06: d5:3c:3b:bd:95:cc:4e:cc:ab:50:fb:e9:21:ab:7b: 9b:2d:5e:31:15:e7:91:6c:87:09:70:f0:c5:c7:ea: 9f:78:1a:d6:00:37:27:dc:d3:6d:38:a0:f3:5a:ed: b5:8d:a3:ae:92:52:7f:05:f9:04:94:70:3a:d4:ea: b2:3e:0f:47:61:4a:31:7d:48:2d:5d:11:e3:64:f6: 3e:81:3f:42:d7:a8:2b:a1:7b:d1:a2:bf:ea:c9:8e: b1:7e:b5:4c:05:bc:e5:05:a7:8a:01:80:75:33:17: fd:b5:b6:e1:2b:11:e5:bd:b7:17:54:ce:83:fa:e0: a1:4e:52:15:a9:d1:a9:dd:07:ad:d2:87:b5:b1:0c: 70:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:77:D9:E7:1D:3D:CB:42:00:7E:4A:5E:C1:75:DA:B8:CE:68:07 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9f:6c:df:a9:8f:93:1b:e9:26:97:97:f8:f2:03:3d:11:7a: 37:22:f7:93:f3:ee:59:f3:af:ae:65:c5:f4:a5:7d:66:07:ec: da:7e:a6:96:55:9e:94:55:45:9a:69:5a:84:ed:08:be:42:40: 95:b4:14:b1:03:c7:b3:53:03:b2:e5:e1:f3:e4:26:f1:d9:32: 12:ce:3c:a6:83:b0:81:fe:5c:55:6e:0b:eb:c7:05:e9:86:80: fb:54:04:ed:dd:43:c1:14:a3:01:c8:42:ca:df:08:d1:30:a4: 28:0b:18:64:77:ce:5f:8f:04:18:bd:a6:a1:b3:fd:c0:fd:e6: 77:0b:c1:e4:1b:ed:28:8c:0e:6f:71:7e:54:9f:43:56:ee:60: ea:a2:88:c4:84:e7:a4:f1:fc:36:0f:2b:03:41:5f:c8:a6:3e: 77:cb:6e:d8:cf:c3:c1:60:39:7c:7f:cd:58:fd:1a:73:e3:23: d7:5d:ab:7d:67:10:a4:16:44:33:cc:46:a8:8a:38:d3:a2:11: db:88:2a:f8:42:ff:49:de:75:cb:de:31:32:6d:75:83:7b:44: fc:e4:87:2d:0d:43:12:b6:8a:e7:f6:3c:e4:ea:e9:ba:96:c4: 8f:a3:e4:0c:2f:e3:18:2e:c3:6e:9c:19:cc:92:c0:b9:46:43: 84:21:74:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjYwNzIyMjAxNzMwWhcNMjYwNzI5MjAxNzMwWjAYMRYwFAYD VQQDEw02YTYxMjU1YS1mMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcFuGQfYt2IVfgbUKI4RYJKvF57abxs+XkCNP9Vrsv3ZQLMKv0JQe0oKRrm0 g7fGtw/fkyfX6+usDDPnq4wey8tEdi8DAL0k/JLmCJwSdoTaaA2xvzeo99z3i2v3 fSSXtmVcbsnvEciuob6Uzx4iEtkOmf+E+wbVPDu9lcxOzKtQ++khq3ubLV4xFeeR bIcJcPDFx+qfeBrWADcn3NNtOKDzWu21jaOuklJ/BfkElHA61OqyPg9HYUoxfUgt XRHjZPY+gT9C16groXvRor/qyY6xfrVMBbzlBaeKAYB1Mxf9tbbhKxHlvbcXVM6D +uChTlIVqdGp3Qet0oe1sQxwswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9Nd9nn HT3LQgB+Sl7Bddq4zmgHMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAep9s36mPkxvpJpeX+PIDPRF6NyL3k/PuWfOvrmXF9KV9Zgfs2n6mllWelFVF mmlahO0IvkJAlbQUsQPHs1MDsuXh8+Qm8dkyEs48poOwgf5cVW4L68cF6YaA+1QE 7d1DwRSjAchCyt8I0TCkKAsYZHfOX48EGL2mobP9wP3mdwvB5BvtKIwOb3F+VJ9D Vu5g6qKIxITnpPH8Ng8rA0FfyKY+d8tu2M/DwWA5fH/NWP0ac+Mj112rfWcQpBZE M8xGqIo406IR24gq+EL/Sd51y94xMm11g3tE/OSHLQ1DEraK5/Y85OrpupbEj6Pk DC/jGC7DbpwZzJLAuUZDhCF0bQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:15:28 2026 by rpki-client