$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft File: lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json) Hash identifier: y3y38GJXFqbKEcDtpz3Um4humDgfscV0OFw1oE7yIFY= Subject key identifier: 82:65:D0:C9:09:22:1C:E3:F3:50:69:C7:3B:0C:A8:83:7E:8D:DC:9D Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01 Certificate issuer: /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft Manifest number: 43 Signing time: Thu 23 Jul 2026 10:28:14 +0000 Manifest this update: Thu 23 Jul 2026 10:28:14 +0000 Manifest next update: Thu 30 Jul 2026 10:28:14 +0000 Files and hashes: 1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: su09MDhhkZKTLHXzD05e1kSmJGHC5xWL4XxzUs1G5T4=) 2: A1E11254233211F193BBD607A5833773.roa (hash: yATqUA3STQ8R5PmkT2WcIp8HtIqcDGU6lhFcb0afmd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401 Validity Not Before: Jul 23 10:28:14 2026 GMT Not After : Jul 30 10:28:14 2026 GMT Subject: CN=6a61ecbe-2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:9c:f4:b8:7c:d8:67:e4:d7:5a:a8:76:54: 5e:3e:26:6a:b3:a6:72:0d:dc:99:4f:19:3d:1c:01: ad:97:e9:ed:ae:9c:02:9f:7c:65:04:4b:a3:10:c2: c1:03:fd:a7:f4:70:88:26:87:23:b8:d3:f4:0f:b6: 33:5d:bc:d2:e2:6b:26:93:73:ea:ef:f7:25:45:2e: ec:b4:4f:35:5a:5f:b2:8b:d0:c6:0a:a8:ae:a8:6c: 47:17:0a:d6:1a:7f:5c:8e:bd:4a:4b:bb:57:db:4c: 99:61:33:7b:dd:4d:49:a8:af:7c:73:0e:cf:03:37: 7b:3f:8b:cb:ea:ec:29:f1:99:da:14:07:b5:36:c7: 32:2b:33:2a:7e:3a:c4:46:96:f8:0d:a5:93:b8:83: 90:3d:fe:d4:d8:79:be:ed:94:5b:c4:e9:13:34:3b: 0c:3e:7f:5d:27:ba:99:9b:2e:8b:92:c6:03:97:1f: 12:40:27:c9:5b:18:f1:07:d1:c9:35:2a:3c:7a:fd: 78:f8:df:c6:64:86:0d:77:c3:1e:3b:04:f3:f4:7f: 10:0e:84:0d:41:13:12:23:a1:54:12:00:cc:0e:44: ef:fa:33:29:d6:a9:5e:9b:24:b4:21:96:c3:1c:32: 5c:dd:78:dd:da:40:cd:fa:22:71:09:89:e2:f7:d3: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:65:D0:C9:09:22:1C:E3:F3:50:69:C7:3B:0C:A8:83:7E:8D:DC:9D X509v3 Authority Key Identifier: keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bf:6f:68:23:9c:1c:0c:af:f4:f4:9c:51:b1:f4:0d:45:e3: 2e:8b:ad:6b:4a:db:c3:cd:3b:98:47:27:5c:32:17:6c:df:f8: 08:d4:40:db:48:4f:9a:3d:4d:1b:38:33:29:c7:79:34:b6:ae: 4d:a1:fe:be:a8:f4:6a:b6:a3:6d:07:48:b6:2e:a5:ff:8b:74: 10:f7:0b:2c:19:81:7f:45:45:38:6f:95:ee:b6:77:4f:0b:c1: 14:2f:70:79:33:33:d4:fb:0f:1a:24:03:2a:f2:83:5a:81:bd: a8:8f:80:15:39:fa:b5:90:fb:2f:01:0d:f5:9f:9d:10:e6:c7: b0:df:b9:9e:a2:25:22:cb:76:6f:6f:de:c7:d7:f1:7a:b4:ec: e9:04:85:5a:ea:21:14:8c:63:93:13:dd:bb:4e:e5:89:db:43: 35:52:de:32:ce:4a:49:97:57:dd:aa:ef:02:51:cb:ad:4b:e9: 96:b4:72:a5:aa:66:8d:63:eb:d1:00:b5:71:32:33:8b:85:a7: c6:a6:cd:9a:dd:3d:9e:85:6d:f5:85:1a:95:d7:0e:c8:4c:05: cf:72:ee:d4:d2:43:e6:f8:2d:16:9c:c6:75:9e:3d:ac:28:96: d0:dc:c9:99:4e:65:e4:7d:1d:96:0b:cb:d6:b4:30:a1:a3:c8: ae:ba:2b:24 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoOTREMkNGNDRBMzY5QTQyMjM0NEY3NjU3ODNCRjAxRTk4 MkE5QzQwMTAeFw0yNjA3MjMxMDI4MTRaFw0yNjA3MzAxMDI4MTRaMBgxFjAUBgNV BAMTDTZhNjFlY2JlLTJmNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCM5z0uHzYZ+TXWqh2VF4+JmqzpnIN3JlPGT0cAa2X6e2unAKffGUES6MQwsED /af0cIgmhyO40/QPtjNdvNLiayaTc+rv9yVFLuy0TzVaX7KL0MYKqK6obEcXCtYa f1yOvUpLu1fbTJlhM3vdTUmor3xzDs8DN3s/i8vq7CnxmdoUB7U2xzIrMyp+OsRG lvgNpZO4g5A9/tTYeb7tlFvE6RM0Oww+f10nupmbLouSxgOXHxJAJ8lbGPEH0ck1 Kjx6/Xj438Zkhg13wx47BPP0fxAOhA1BExIjoVQSAMwORO/6MynWqV6bJLQhlsMc MlzdeN3aQM36InEJieL30y79AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgmXQyQki HOPzUGnHOwyog36N3J0wHwYDVR0jBBgwFoAUlNLPRKNppCI0T3ZXg78B6YKpxAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0YyNTZDQzE2MjMy QzExRjE5M0E0RDgzMkEzODMzNzczL2xOTFBSS05wcENJMFQzWlhnNzhCNllLcHhB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE5MUFJLTnBwQ0kwVDNaWGc3OEI2WUtweEFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0YyNTZDQzE2MjMyQzExRjE5M0E0RDgzMkEzODMzNzczL2xOTFBSS05wcENJ MFQzWlhnNzhCNllLcHhBRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvv29oI5wcDK/09JxRsfQNReMui61rStvDzTuYRydcMhds3/gI1EDbSE+aPU0b ODMpx3k0tq5Nof6+qPRqtqNtB0i2LqX/i3QQ9wssGYF/RUU4b5XutndPC8EUL3B5 MzPU+w8aJAMq8oNagb2oj4AVOfq1kPsvAQ31n50Q5sew37meoiUiy3Zvb97H1/F6 tOzpBIVa6iEUjGOTE927TuWJ20M1Ut4yzkpJl1fdqu8CUcutS+mWtHKlqmaNY+vR ALVxMjOLhafGps2a3T2ehW31hRqV1w7ITAXPcu7U0kPm+C0WnMZ1nj2sKJbQ3MmZ TmXkfR2WC8vWtDCho8iuuisk -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:29 2026 by rpki-client