$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: Vkk1SWfHivI76fsFj+ZsA3Gr9Zb36P1QOl1BryOe+1M= Subject key identifier: AE:7C:8B:3E:9B:95:65:B4:84:30:B6:CA:C4:82:39:FD:1B:06:D4:B6 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 62 Signing time: Mon 11 May 2026 08:16:30 +0000 Manifest this update: Mon 11 May 2026 08:16:29 +0000 Manifest next update: Mon 18 May 2026 08:16:29 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: grDeXt/ZyisrhB6mC58dsB0HYv81pbXIf8Qd9DYcqgE=) 2: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) 3: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) 4: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: May 11 08:16:29 2026 GMT Not After : May 18 08:16:29 2026 GMT Subject: CN=6a01905e-5bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:ce:1e:9c:83:aa:8e:8b:d6:33:e1:c8:b0: 74:db:6f:98:bf:dd:d0:66:1a:77:41:d4:0d:e3:1c: c2:69:c5:bc:ab:55:44:a8:56:bb:7c:2d:02:a3:90: 98:52:47:5c:b4:b2:70:3a:74:a5:59:c7:7a:a6:71: cd:de:ed:ee:2f:aa:6a:a2:bb:7c:e6:dd:cb:3c:4e: e1:69:a3:69:7b:4e:06:06:41:1f:d3:84:b7:40:2d: df:b0:ea:02:58:5b:e5:c4:c3:f4:e7:86:aa:6b:35: d6:e3:0b:2a:a4:ff:ab:10:50:1d:f4:bf:76:6c:dc: 83:b6:af:65:8e:e6:6d:3b:4f:02:e5:fa:d2:3c:45: a1:8c:f7:ca:3e:98:9b:31:1c:88:ef:38:7b:67:58: 69:bc:42:88:d2:f3:09:35:f5:bd:1a:6e:ba:f3:a3: 3d:93:61:f9:ad:b2:6f:5a:a6:61:a5:dd:ec:c0:be: 76:de:98:3b:23:4e:08:c0:f8:ab:61:c5:b1:0a:68: e7:ef:f9:39:51:83:a4:fc:bf:c1:23:f3:19:ab:01: e8:bb:26:28:75:8e:8b:bf:20:db:1c:ae:8c:2f:56: 9c:bf:d1:60:ea:78:6d:c9:49:57:fd:6c:40:cb:87: c6:6b:a6:00:cc:89:4f:f0:55:e9:60:05:31:47:45: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7C:8B:3E:9B:95:65:B4:84:30:B6:CA:C4:82:39:FD:1B:06:D4:B6 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0b:dd:dc:23:78:4d:6f:f3:ce:7b:56:b8:97:c1:7c:8a:12: 4e:7d:76:a2:ec:7f:da:90:11:4e:09:47:78:d1:31:8b:f2:80: d7:50:c0:68:9e:7e:d0:b0:a6:7a:0b:f8:74:d1:67:7a:7c:5e: f3:6d:de:22:e3:fb:07:68:e5:4b:f9:c5:e3:17:ea:89:29:6a: 8a:fc:a9:34:ee:1d:f6:04:fb:4e:af:56:06:73:48:f3:01:06: 47:fc:04:13:9f:e2:13:a6:fd:ef:f8:1d:42:a2:6f:6b:ec:67: 63:5a:ce:20:52:ed:10:74:6b:30:5e:5f:45:50:98:d5:f4:34: 70:da:35:c9:b0:f0:2d:34:63:c7:b0:d0:c0:79:5a:a9:87:21: ee:46:1f:73:e7:db:e6:d5:5c:00:31:f8:07:51:85:69:70:c6: e4:60:0c:0b:75:8b:d8:79:1a:0b:bf:6e:23:98:f0:a0:1a:e7: 96:00:8b:94:43:ea:0a:84:22:41:11:2b:25:2a:52:c6:95:3e: 17:11:c6:70:90:07:0a:9b:7f:94:ec:23:50:71:bb:d6:64:d0: f0:7f:fc:69:f3:56:8b:44:01:3a:18:e2:fe:39:b8:78:d7:f1: 22:d5:15:c2:c3:cd:88:1d:3c:7a:21:f4:09:11:8c:2f:21:9c: 74:d2:59:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNjA1MTEwODE2MjlaFw0yNjA1MTgwODE2MjlaMBgxFjAUBgNV BAMTDTZhMDE5MDVlLTViYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcQM4enIOqjovWM+HIsHTbb5i/3dBmGndB1A3jHMJpxbyrVUSoVrt8LQKjkJhS R1y0snA6dKVZx3qmcc3e7e4vqmqiu3zm3cs8TuFpo2l7TgYGQR/ThLdALd+w6gJY W+XEw/TnhqprNdbjCyqk/6sQUB30v3Zs3IO2r2WO5m07TwLl+tI8RaGM98o+mJsx HIjvOHtnWGm8QojS8wk19b0abrrzoz2TYfmtsm9apmGl3ezAvnbemDsjTgjA+Kth xbEKaOfv+TlRg6T8v8Ej8xmrAei7Jih1jou/INscrowvVpy/0WDqeG3JSVf9bEDL h8ZrpgDMiU/wVelgBTFHRfmBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrnyLPpuV ZbSEMLbKxII5/RsG1LYwHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+C93cI3hNb/POe1a4l8F8ihJOfXai7H/akBFOCUd40TGL8oDXUMBonn7QsKZ6 C/h00Wd6fF7zbd4i4/sHaOVL+cXjF+qJKWqK/Kk07h32BPtOr1YGc0jzAQZH/AQT n+ITpv3v+B1Com9r7GdjWs4gUu0QdGswXl9FUJjV9DRw2jXJsPAtNGPHsNDAeVqp hyHuRh9z59vm1VwAMfgHUYVpcMbkYAwLdYvYeRoLv24jmPCgGueWAIuUQ+oKhCJB ESslKlLGlT4XEcZwkAcKm3+U7CNQcbvWZNDwf/xp81aLRAE6GOL+Obh41/Ei1RXC w82IHTx6IfQJEYwvIZx00llu -----END CERTIFICATE-----Generated at Tue May 12 23:47:06 2026 by rpki-client