$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json) Hash identifier: CDLGqnMn1we0oMbcEG89D4h/ncE8hFON6KxT9MINzeA= Subject key identifier: AE:60:7D:88:9B:9C:59:FE:56:7E:59:33:21:73:3A:EF:57:2F:F6:8D Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft Manifest number: 0362 Signing time: Mon 11 May 2026 02:04:01 +0000 Manifest this update: Mon 11 May 2026 02:04:00 +0000 Manifest next update: Mon 18 May 2026 02:04:00 +0000 Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: 57x4EFsuzsOnzhgfWmhfdF7F+aqmrwZSCtbMlzg74UE=) 2: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: m+YMSjzVUuc73W6hTfDFbMi0+yUuBUpgBYQofvaW6Ow=) 3: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: 6jds39GpIYDWTUvVrxm863ItczOC5PjSQTRWLznhaMU=) 4: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: HJTu/QaBBUaGGzi25rXbR60EpAJ8f6RdGFNR0tCCt90=) 5: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: lBUP0TSzebAFXmoSTqeDqtFMO8rYhPyrBUR141U167M=) 6: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: NNYpj3betzAmhzyg69sOsd+IkKaVWYtVMEooK8d8Jhg=) 7: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: P6k6ZFgyd5A01gmUt+7pAxzOrjslbaS8z1K2UjgCjog=) 8: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: 2rNOWeXpsmPPeo00gkw3XFog2FCfRkn+qinn6OJcsSU=) 9: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: YySN/OEFOesvLCn2GkCFn3w0IA8S3T8IMu+C8KUfxLg=) 10: E879EE7C144111EFB247B936C4F9AE02.roa (hash: ZeAGLGAA4h+CcuwE4PZxgCpOScaMQUl6R6qDfBF+VLY=) 11: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: neeN01r5VZ4YRUPHtpZwodLJIVHlwzKgdZUXHbEsINA=) 12: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: b357DS6un3095ihmJG/1qzltik8hgTz2G2EsqlSGWDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: May 11 02:04:00 2026 GMT Not After : May 18 02:04:00 2026 GMT Subject: CN=6a013910-ec07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:e4:ad:6d:bd:e4:16:41:38:1c:d8:21:26: e8:f6:be:75:d4:ee:29:9c:75:4b:bb:44:9d:ac:6f: 9c:d4:03:3d:37:6a:ab:33:f7:c8:26:99:c8:51:43: 05:95:76:73:89:09:26:71:9e:29:9a:a6:0f:17:8a: 3d:f3:fd:5c:54:6d:8d:a8:88:4e:5f:0b:4f:04:79: 11:98:96:c9:53:ce:e9:c0:f8:c4:65:f7:3c:37:62: 29:6e:72:7d:98:d9:25:06:be:06:71:91:60:81:bf: ef:b9:a6:3f:42:6c:c7:c2:2a:78:17:dd:ff:17:6d: 74:ce:1b:c6:02:d8:c3:58:47:86:76:c1:5b:2f:ad: 68:79:cd:09:a5:45:c4:48:16:63:65:21:72:18:2b: ff:92:eb:93:83:be:93:3c:51:20:d5:bd:67:2f:38: 48:d7:f2:58:37:85:1e:02:65:a5:d4:ae:0a:7b:75: 80:62:44:9c:d8:3a:6c:4d:92:a8:76:7c:b8:56:44: 5f:b6:b0:52:97:e7:1f:83:ff:f4:55:e8:9c:b5:13: 12:81:94:e3:fc:d6:c0:24:c2:c1:65:43:50:0c:f7: 53:92:a6:f0:4f:fe:00:c3:78:34:ce:b1:33:c8:ce: b1:03:08:a6:3c:28:7b:16:66:56:e8:b3:f3:61:6f: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:60:7D:88:9B:9C:59:FE:56:7E:59:33:21:73:3A:EF:57:2F:F6:8D X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:80:af:5f:d9:22:1e:08:69:07:1f:15:55:ff:1f:26:e1:5d: 93:3b:5c:6f:4b:2a:53:af:37:5a:45:d1:9f:2a:74:26:04:4a: a9:0e:ae:98:01:43:73:c4:ad:40:3a:8a:6c:18:f6:c0:fe:c1: 03:60:fb:ae:f7:44:9a:87:b7:cf:b6:e3:33:c8:22:37:c3:b9: d7:2e:41:3f:45:af:2e:af:4e:7c:7a:b6:a7:a8:74:a1:a7:ff: 42:86:c6:0f:54:a8:47:8d:b6:45:ad:dd:7d:4a:08:35:ba:6c: 29:21:38:14:e9:79:8e:c6:14:10:f1:d6:8e:f0:70:bb:ff:91: bd:81:23:d2:92:85:1a:60:1d:9e:b4:58:0b:30:c4:61:15:0a: dc:bf:1f:8d:59:5f:e2:4e:58:eb:7f:86:f6:9f:91:4a:f0:32: 19:a4:ad:32:40:82:e5:c5:48:d5:30:71:ec:8a:c2:44:73:7b: 62:73:3f:91:bd:97:e3:32:27:4f:c8:df:ff:57:72:7c:ad:ef: b5:87:bb:5f:41:55:a0:25:74:24:a5:53:38:a6:9b:9e:8b:fe: 4c:fe:c6:be:4d:91:a1:1b:b8:a7:00:8c:3a:55:0b:30:8b:78: b8:91:b0:59:89:fa:a4:57:59:49:05:f4:da:78:7f:5f:f7:d1: 0f:fd:29:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwNTExMDIwNDAwWhcNMjYwNTE4MDIwNDAwWjAYMRYwFAYD VQQDEw02YTAxMzkxMC1lYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz93krW295BZBOBzYISbo9r511O4pnHVLu0SdrG+c1AM9N2qrM/fIJpnIUUMF lXZziQkmcZ4pmqYPF4o98/1cVG2NqIhOXwtPBHkRmJbJU87pwPjEZfc8N2IpbnJ9 mNklBr4GcZFggb/vuaY/QmzHwip4F93/F210zhvGAtjDWEeGdsFbL61oec0JpUXE SBZjZSFyGCv/kuuTg76TPFEg1b1nLzhI1/JYN4UeAmWl1K4Ke3WAYkSc2DpsTZKo dny4VkRftrBSl+cfg//0VeictRMSgZTj/NbAJMLBZUNQDPdTkqbwT/4Aw3g0zrEz yM6xAwimPCh7FmZW6LPzYW82UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5gfYib nFn+Vn5ZMyFzOu9XL/aNMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx blVCSTFENEVzekNXbVA1amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh4CvX9kiHghpBx8VVf8fJuFdkztcb0sqU683WkXRnyp0JgRKqQ6umAFDc8St QDqKbBj2wP7BA2D7rvdEmoe3z7bjM8giN8O51y5BP0WvLq9OfHq2p6h0oaf/QobG D1SoR422Ra3dfUoINbpsKSE4FOl5jsYUEPHWjvBwu/+RvYEj0pKFGmAdnrRYCzDE YRUK3L8fjVlf4k5Y63+G9p+RSvAyGaStMkCC5cVI1TBx7IrCRHN7YnM/kb2X4zIn T8jf/1dyfK3vtYe7X0FVoCV0JKVTOKabnov+TP7Gvk2RoRu4pwCMOlULMIt4uJGw WYn6pFdZSQX02nh/X/fRD/0pSw== -----END CERTIFICATE-----Generated at Wed May 13 05:34:02 2026 by rpki-client