$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json) Hash identifier: 5Pid/MFrhWd/ZrqSzjak7mBW1LUujEEH3ELuztOUvU0= Subject key identifier: B8:8D:BE:7F:EB:5D:48:44:3C:39:5E:79:5B:C6:99:6C:B1:05:B9:EE Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft Manifest number: 1D Signing time: Wed 13 May 2026 09:03:05 +0000 Manifest this update: Wed 13 May 2026 09:03:05 +0000 Manifest next update: Wed 20 May 2026 09:03:05 +0000 Files and hashes: 1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: kEWjXRHiMDFuVBaflK1QOzi/jJ1ZPfFvqDf/LkE7Ugg=) 2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Validity Not Before: May 13 09:03:05 2026 GMT Not After : May 20 09:03:05 2026 GMT Subject: CN=6a043e49-0d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:bd:93:27:18:a7:80:69:b5:da:75:5e:4d: ba:ea:2f:a7:35:e0:c6:53:dd:61:4c:ed:d7:20:b7: a8:c1:d7:62:b5:aa:d7:12:b1:46:29:58:0f:d1:61: 34:72:a2:22:31:cb:15:fb:45:03:6a:47:06:25:a6: c0:1f:10:3a:54:5a:70:96:04:28:ab:a1:57:be:53: 44:fe:64:1d:cb:4f:2c:92:57:67:68:4f:49:16:4b: 19:24:bc:11:29:a2:44:ff:e0:63:67:a6:d2:73:76: 40:33:ed:1c:08:36:16:98:39:39:fb:29:b6:ce:4f: 11:21:9b:4b:89:0a:fc:20:c1:83:d2:42:69:6b:c2: b6:72:71:5c:37:05:ec:6d:18:ba:20:70:87:d8:24: 0c:6c:89:88:5a:01:02:ba:bd:da:36:bd:bc:51:6c: 3d:86:52:a7:e7:d0:ea:f8:34:81:85:dd:fb:0d:3c: a2:72:96:95:8e:77:d8:2b:bc:da:86:4d:af:9f:76: e6:ad:49:b3:56:7d:c6:d2:ee:7d:3b:69:54:82:95: dd:b5:88:21:97:a2:a1:9c:42:81:d6:b8:44:d5:93: 1e:06:f5:97:72:0d:9f:31:19:fd:f3:fa:32:0a:1f: 01:cf:73:6c:73:09:37:88:cd:12:ff:a4:ce:ea:c7: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8D:BE:7F:EB:5D:48:44:3C:39:5E:79:5B:C6:99:6C:B1:05:B9:EE X509v3 Authority Key Identifier: keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:74:45:a7:3c:19:16:57:db:19:0e:60:68:ad:a1:6e:52:3b: 2f:d5:79:63:7f:e5:dc:1b:84:8d:a7:ec:b1:a7:14:01:c1:9b: 3e:40:6f:3b:e5:16:a4:73:d8:69:5f:14:c6:bb:50:6a:76:41: 94:97:1f:6d:4b:9a:7b:d6:07:3b:b0:2d:b8:b0:f5:90:c8:0d: 40:81:6a:92:70:81:0d:fe:34:34:00:d8:05:dd:ec:7b:e6:44: ca:4c:96:a4:d1:3c:21:f5:46:0e:5b:6f:8e:9d:38:b6:e7:dc: c1:55:2a:bf:00:48:ce:c8:52:6a:d9:14:49:d2:c1:da:18:d6: 2d:e4:5e:55:a2:a3:1b:10:1b:04:a2:ef:ba:a7:87:93:6e:7f: 03:91:0a:9a:7a:4c:eb:8d:ad:4d:dd:90:b7:13:d3:ad:63:c7: c4:a7:e2:0b:66:f4:c2:ef:7b:80:f9:b7:f7:09:ee:91:86:ae: 75:04:c8:4b:76:27:89:d0:8d:cc:2f:3e:e7:62:bc:40:d1:2b: b9:ab:f1:c6:03:96:e9:80:59:da:8a:e9:7e:e9:62:ae:9d:04: 92:cb:73:6b:48:7c:41:d1:fa:63:96:76:ee:d9:9d:59:ed:2c: 59:4d:f6:e6:a2:ed:cb:c6:b3:40:e0:35:9a:bf:85:42:bb:dd: 9b:b9:23:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkE4NzExMC8GA1UEBRMoOTZDMUJDOTg3QUQ2NjQzOTEzRjY1RTA1RDFBNjYzRjY0 QzRBRTFCNjAeFw0yNjA1MTMwOTAzMDVaFw0yNjA1MjAwOTAzMDVaMBgxFjAUBgNV BAMTDTZhMDQzZTQ5LTBkNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFjr2TJxingGm12nVeTbrqL6c14MZT3WFM7dcgt6jB12K1qtcSsUYpWA/RYTRy oiIxyxX7RQNqRwYlpsAfEDpUWnCWBCiroVe+U0T+ZB3LTyySV2doT0kWSxkkvBEp okT/4GNnptJzdkAz7RwINhaYOTn7KbbOTxEhm0uJCvwgwYPSQmlrwrZycVw3Bext GLogcIfYJAxsiYhaAQK6vdo2vbxRbD2GUqfn0Or4NIGF3fsNPKJylpWOd9grvNqG Ta+fduatSbNWfcbS7n07aVSCld21iCGXoqGcQoHWuETVkx4G9ZdyDZ8xGf3z+jIK HwHPc2xzCTeIzRL/pM7qx3/lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuI2+f+td SEQ8OV55W8aZbLEFue4wHwYDVR0jBBgwFoAUlsG8mHrWZDkT9l4F0aZj9kxK4bYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0JFMDYyOEMyMjRD NTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRrVDlsNEYwYVpqOWt4SzRi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHNHOG1IcldaRGtUOWw0RjBhWmo5a3hLNGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTg3L0JFMDYyOEMyMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRr VDlsNEYwYVpqOWt4SzRiWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCndEWnPBkWV9sZDmBoraFuUjsv1Xljf+XcG4SNp+yxpxQBwZs+QG875Rakc9hp XxTGu1BqdkGUlx9tS5p71gc7sC24sPWQyA1AgWqScIEN/jQ0ANgF3ex75kTKTJak 0Twh9UYOW2+OnTi259zBVSq/AEjOyFJq2RRJ0sHaGNYt5F5VoqMbEBsEou+6p4eT bn8DkQqaekzrja1N3ZC3E9OtY8fEp+ILZvTC73uA+bf3Ce6Rhq51BMhLdieJ0I3M Lz7nYrxA0Su5q/HGA5bpgFnaiul+6WKunQSSy3NrSHxB0fpjlnbu2Z1Z7SxZTfbm ou3LxrNA4DWav4VCu92buSPN -----END CERTIFICATE-----Generated at Wed May 13 11:36:17 2026 by rpki-client