$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft File: R-lr-DG7PMQ7TweEJj5ylYddVRY.mft (raw, json) Hash identifier: SGdgJgFDrEANxn+3FZeicITlS4OFso1+ks7vhKEBx1Q= Subject key identifier: 01:C9:39:0F:B5:42:BF:7A:6C:CA:B9:6B:1D:95:FE:26:3B:AE:C8:18 Authority key identifier: 47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 Certificate issuer: /CN=A91C4204/serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft Manifest number: E1 Signing time: Thu 23 Jul 2026 08:18:04 +0000 Manifest this update: Thu 23 Jul 2026 08:18:03 +0000 Manifest next update: Thu 30 Jul 2026 08:18:03 +0000 Files and hashes: 1: R-lr-DG7PMQ7TweEJj5ylYddVRY.crl (hash: Bu2fXASYmmQS9PGteiDTFh4qZhxpBGdEVjIV5YPqwBQ=) 2: CA2D4952300911F0AB675D3EC4F9AE02.roa (hash: LQJzwkclBmwOmL2YkraTcankSfQmcjnSpIupRPPZZKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Validity Not Before: Jul 23 08:18:03 2026 GMT Not After : Jul 30 08:18:03 2026 GMT Subject: CN=6a61ce3c-68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:04:6e:64:2f:0d:27:74:5a:1b:4c:23:eb: e5:eb:16:58:64:f0:f0:04:66:80:76:33:51:ca:1f: a5:b9:fb:2c:4f:e2:25:e9:3c:85:89:fb:d5:33:92: 22:74:13:bb:ec:cf:1c:ec:2e:32:55:c8:94:5c:ff: 4d:0d:a8:17:9a:a2:a7:d9:ae:0c:53:81:71:c4:fa: f6:a8:6a:30:90:19:4a:13:49:c8:56:39:3b:3f:1f: b9:38:78:83:8b:96:90:be:13:c9:e3:fa:a7:c0:27: 29:b5:ee:4d:83:71:ba:8e:a1:53:e5:df:7c:ba:28: da:f0:19:06:18:e6:61:34:f8:21:b0:fb:70:6e:46: 20:e8:98:88:2b:e5:62:f3:28:ec:56:24:4a:20:31: 87:91:3c:c6:13:f3:84:e9:6f:55:b2:c6:4b:06:16: 35:d4:a1:3e:c9:b9:25:cd:1e:c1:dd:fb:2b:64:14: 26:ae:dc:e3:96:f5:c5:8d:fa:ec:18:92:3c:31:78: 65:9e:ed:cb:04:7f:d2:d7:eb:82:18:5d:e4:dd:e5: 18:38:4d:d4:e8:19:9f:05:69:71:83:92:dc:6a:ed: 3c:36:1a:05:c3:26:d7:8c:e1:6e:0e:79:c3:64:e5: c7:0a:2c:24:86:fd:80:0e:2f:69:45:f9:5b:15:65: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C9:39:0F:B5:42:BF:7A:6C:CA:B9:6B:1D:95:FE:26:3B:AE:C8:18 X509v3 Authority Key Identifier: keyid:47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f7:5c:12:82:a5:15:c4:ee:ec:33:f2:35:38:bd:6c:9f:74: b7:3f:7d:0c:26:cc:fd:e5:10:c6:76:54:48:7b:07:11:60:b1: 1e:4a:3b:9d:6a:8a:3c:a8:34:9d:f6:78:88:73:78:97:7c:6a: f5:9a:0f:43:9b:a9:69:32:2a:8a:38:0a:8b:fb:b8:03:66:84: 06:c0:4e:3d:3b:90:d8:77:12:59:ca:dd:82:ee:0a:c9:c7:cb: f0:2a:9a:d7:1f:42:2c:8b:b1:e6:4f:05:f9:8e:ef:b0:c6:ec: de:13:88:a7:73:16:31:44:6f:2a:ef:cd:13:6a:a1:4d:6e:3e: 4a:8d:19:1e:89:f3:80:a7:0f:9d:2b:5b:2b:dd:62:ca:f5:71: 75:14:f6:80:ec:9e:5d:cf:f9:e4:86:a3:44:0a:4a:60:65:34: 46:36:87:8f:78:28:65:42:4e:04:35:63:13:09:d5:d7:df:4c: 8e:58:82:c3:07:62:bc:07:7d:f5:30:14:af:f1:14:0b:4a:e2: 02:a3:90:1a:3e:4a:09:1a:c3:46:96:31:6c:34:e4:68:95:ff: 12:e1:cc:64:6d:ac:fb:94:f1:2e:c9:4b:12:6d:af:cc:21:56: 4b:1b:09:1e:63:fa:db:dc:c2:b3:5e:b9:82:df:20:a8:49:e5: 1f:a3:7a:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQyMDQxMTAvBgNVBAUTKDQ3RTk2QkY4MzFCQjNDQzQzQjRGMDc4NDI2M0U3Mjk1 ODc1RDU1MTYwHhcNMjYwNzIzMDgxODAzWhcNMjYwNzMwMDgxODAzWjAYMRYwFAYD VQQDEw02YTYxY2UzYy02OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxm0EbmQvDSd0WhtMI+vl6xZYZPDwBGaAdjNRyh+lufssT+Il6TyFifvVM5Ii dBO77M8c7C4yVciUXP9NDagXmqKn2a4MU4FxxPr2qGowkBlKE0nIVjk7Px+5OHiD i5aQvhPJ4/qnwCcpte5Ng3G6jqFT5d98uija8BkGGOZhNPghsPtwbkYg6JiIK+Vi 8yjsViRKIDGHkTzGE/OE6W9VssZLBhY11KE+ybklzR7B3fsrZBQmrtzjlvXFjfrs GJI8MXhlnu3LBH/S1+uCGF3k3eUYOE3U6BmfBWlxg5Lcau08NhoFwybXjOFuDnnD ZOXHCiwkhv2ADi9pRflbFWWnPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHJOQ+1 Qr96bMq5ax2V/iY7rsgYMB8GA1UdIwQYMBaAFEfpa/gxuzzEO08HhCY+cpWHXVUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDIwNC80NDFCNTA1MjMw MDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BNUTdUd2VFSmo1eWxZZGRW UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ItbHItREc3UE1RN1R3ZUVKajV5bFlkZFZSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDIwNC80NDFCNTA1MjMwMDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BN UTdUd2VFSmo1eWxZZGRWUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfdcEoKlFcTu7DPyNTi9bJ90tz99DCbM/eUQxnZUSHsHEWCxHko7nWqKPKg0 nfZ4iHN4l3xq9ZoPQ5upaTIqijgKi/u4A2aEBsBOPTuQ2HcSWcrdgu4KycfL8Cqa 1x9CLIux5k8F+Y7vsMbs3hOIp3MWMURvKu/NE2qhTW4+So0ZHonzgKcPnStbK91i yvVxdRT2gOyeXc/55IajRApKYGU0RjaHj3goZUJOBDVjEwnV199MjliCwwdivAd9 9TAUr/EUC0riAqOQGj5KCRrDRpYxbDTkaJX/EuHMZG2s+5TxLslLEm2vzCFWSxsJ HmP629zCs165gt8gqEnlH6N63A== -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:51 2026 by rpki-client