$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: ddCb/YwbfLcKzd9FSEzYRgo5IZouuMrbQ7b7NsZ2NUQ= Subject key identifier: 18:7E:BD:5C:BE:DF:32:C8:D8:CC:68:C8:F9:BA:F7:9F:DD:E3:63:75 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 016C Signing time: Thu 23 Jul 2026 06:29:53 +0000 Manifest this update: Thu 23 Jul 2026 06:29:52 +0000 Manifest next update: Thu 30 Jul 2026 06:29:52 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: OT4sXYcYZqZCRo9gbSHfxhUdfM7kDvZS+aXiFTvLpNQ=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: /fpFKtFcwh7KjBndTGfGIO4WW4Bx9KlPmCwqANIq6FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Jul 23 06:29:52 2026 GMT Not After : Jul 30 06:29:52 2026 GMT Subject: CN=6a61b4e1-8653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:0f:7c:45:35:e8:e6:0f:f6:33:d0:16:dd: af:b0:5e:f5:98:13:08:6a:1c:bb:ad:9b:72:dc:6b: 39:29:8d:da:e9:f0:e3:4d:42:6c:1a:95:33:3e:75: 39:43:81:d0:36:30:10:dc:62:8f:86:9e:eb:b8:7c: 72:2d:dc:43:2b:4d:b0:2f:44:8c:f2:15:f3:2a:70: 6f:0d:7e:cc:d6:e1:74:42:49:be:ae:01:47:eb:b2: 23:9a:be:15:a5:cf:f4:5c:f3:16:b2:b6:d6:43:ab: 18:5b:e4:42:96:33:d2:89:92:a1:0d:41:0d:01:a3: 53:34:da:1c:73:d0:f8:4e:67:d8:cd:9c:cf:c1:7b: d9:d2:4c:73:45:90:fe:3f:b5:5b:ac:ec:a9:0e:af: be:ee:00:a5:bd:da:65:71:6a:38:83:de:cb:2b:85: ce:95:3c:08:ad:3b:49:a5:72:1d:da:ab:f8:2b:4b: 5d:6d:ab:b3:7f:63:d5:a0:94:87:ec:7e:db:35:89: 7a:4f:2e:08:8f:e5:93:f4:f7:a8:13:e3:c6:22:bb: 28:ff:f0:c0:23:93:2e:42:a4:f4:b5:17:f1:3a:82: 01:5a:37:da:32:a5:95:e8:d7:c5:bd:ab:f7:72:c0: 55:d1:d6:f1:4f:50:e5:4b:56:3f:75:ca:45:bc:c7: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7E:BD:5C:BE:DF:32:C8:D8:CC:68:C8:F9:BA:F7:9F:DD:E3:63:75 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ed:c2:3d:65:6e:42:10:da:78:48:4e:fc:61:28:42:ef:24: 3b:2c:10:43:e9:7e:99:12:93:50:b5:0b:2e:4c:9b:7f:31:00: 31:20:b7:20:a3:cd:44:44:84:43:68:19:76:c3:45:d3:af:8b: 3a:a2:f3:a4:48:32:fc:11:0c:65:46:0e:79:7c:03:dd:0f:ee: 3c:a8:78:11:0a:72:3b:ef:6b:d8:80:77:23:f8:6d:52:68:da: b1:6d:09:1d:c1:88:c6:ed:97:69:8d:0d:7b:95:cd:d8:94:69: ba:47:bb:f6:66:30:3b:69:64:1c:3b:bf:83:4a:b5:b5:d4:8c: 48:20:7b:ae:76:70:7d:21:0d:ed:9b:58:62:2d:b3:15:7d:45: 45:b7:c4:0e:bd:5f:51:27:81:4b:b1:fc:49:c0:b8:7a:d9:b3: 7c:60:3d:cb:c2:69:e6:0e:c5:3f:db:6a:4c:06:40:71:e8:f1: 18:a0:77:ab:1c:e6:bc:29:a9:07:82:bf:20:b1:4c:35:09:c4: 5b:a1:f4:30:8c:d7:c6:43:9a:81:3e:8c:c6:63:b3:87:bc:1a: a8:04:43:f2:07:2d:8d:12:7b:70:cc:ed:ae:f2:60:64:bc:fa: 26:19:d9:09:ee:61:da:2a:22:7a:9a:a4:aa:4b:5d:9e:c2:cc: b0:73:7a:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjYwNzIzMDYyOTUyWhcNMjYwNzMwMDYyOTUyWjAYMRYwFAYD VQQDEw02YTYxYjRlMS04NjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jAPfEU16OYP9jPQFt2vsF71mBMIahy7rZty3Gs5KY3a6fDjTUJsGpUzPnU5 Q4HQNjAQ3GKPhp7ruHxyLdxDK02wL0SM8hXzKnBvDX7M1uF0Qkm+rgFH67Ijmr4V pc/0XPMWsrbWQ6sYW+RCljPSiZKhDUENAaNTNNocc9D4TmfYzZzPwXvZ0kxzRZD+ P7VbrOypDq++7gClvdplcWo4g97LK4XOlTwIrTtJpXId2qv4K0tdbauzf2PVoJSH 7H7bNYl6Ty4Ij+WT9PeoE+PGIrso//DAI5MuQqT0tRfxOoIBWjfaMqWV6NfFvav3 csBV0dbxT1DlS1Y/dcpFvMenPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBh+vVy+ 3zLI2MxoyPm695/d42N1MB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIO3CPWVuQhDaeEhO/GEoQu8kOywQQ+l+mRKTULULLkybfzEAMSC3IKPNRESE Q2gZdsNF06+LOqLzpEgy/BEMZUYOeXwD3Q/uPKh4EQpyO+9r2IB3I/htUmjasW0J HcGIxu2XaY0Ne5XN2JRpuke79mYwO2lkHDu/g0q1tdSMSCB7rnZwfSEN7ZtYYi2z FX1FRbfEDr1fUSeBS7H8ScC4etmzfGA9y8Jp5g7FP9tqTAZAcejxGKB3qxzmvCmp B4K/ILFMNQnEW6H0MIzXxkOagT6MxmOzh7waqARD8gctjRJ7cMztrvJgZLz6JhnZ Ce5h2ioiepqkqktdnsLMsHN64Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:17:15 2026 by rpki-client