$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: O0dxWVf+Em4xHjfhrX4vRzHa6OyeiaRysRacAqA2VNs= Subject key identifier: 23:24:B1:8D:93:A7:DA:B0:EC:F6:BC:32:99:47:50:E2:43:ED:E7:9B Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 0170 Signing time: Thu 23 Jul 2026 06:25:25 +0000 Manifest this update: Thu 23 Jul 2026 06:25:24 +0000 Manifest next update: Thu 30 Jul 2026 06:25:24 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: oBOtlarO34cWaxNCIt//BT4H5tyPQTWOaKSAWZ8A5hY=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) 4: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Jul 23 06:25:24 2026 GMT Not After : Jul 30 06:25:24 2026 GMT Subject: CN=6a61b3d5-2f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:d8:cc:2a:1d:45:bd:1c:8c:5b:e2:ea:98: f2:9b:21:85:60:95:5f:33:eb:d9:25:6e:bf:87:eb: 21:2e:88:38:3f:ae:7f:6a:bc:2f:8e:ac:29:c9:60: b5:7d:de:ac:78:fb:f3:b7:77:8a:20:02:92:ad:d6: bc:1d:fb:8d:0c:97:a3:69:fe:fd:5c:16:fd:d3:db: 3c:e2:74:99:ee:c3:99:49:72:2f:8b:0c:40:ae:c4: e9:b5:98:48:68:69:31:17:68:f3:8b:5c:91:91:34: e6:a2:4c:c3:49:15:c0:f0:c9:58:04:01:8c:9b:dd: 6b:83:f0:80:21:08:b3:53:32:11:4b:ab:8e:24:4c: 6b:4a:2a:8d:09:d2:33:a2:7d:e5:db:65:ef:a7:07: 31:09:4a:66:9f:fb:6e:70:42:02:65:04:9c:84:8a: 3b:21:84:d8:13:06:71:76:16:f0:66:47:1d:f1:ed: 91:f4:05:c0:5a:c9:ee:2e:92:b7:55:16:f4:0f:c2: dd:6d:3d:4f:40:89:e8:f9:2c:3a:58:be:8a:10:38: d2:57:61:8c:1f:bd:19:b1:d0:73:54:4d:01:34:f0: 60:fb:06:30:28:06:92:c7:85:b4:da:cf:74:7c:ac: 48:a2:d2:95:28:a0:b8:c8:b5:0e:47:2c:17:0c:23: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:B1:8D:93:A7:DA:B0:EC:F6:BC:32:99:47:50:E2:43:ED:E7:9B X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:ca:5b:76:aa:a3:a9:69:9b:bc:62:83:f9:cd:3b:a4:f2:f0: d0:e5:14:4d:2f:e5:af:de:ad:b1:1f:95:3f:e4:b1:2a:04:b3: 26:ba:1b:86:97:19:09:15:b6:a4:3a:4b:cd:bb:d3:5c:1e:16: fa:49:56:6a:61:85:64:bf:fb:f7:dd:6d:6b:dd:7b:3e:67:55: cc:e6:8e:58:93:85:78:fe:dc:e6:a9:1a:42:50:ab:aa:43:95: 25:52:79:75:bf:58:56:7e:ea:70:d5:5b:23:92:6c:f9:92:17: c9:3f:1b:20:cc:24:00:12:65:4f:b4:f7:91:b1:28:98:33:f8: c7:f8:4b:9c:5a:e7:54:0f:95:9f:82:4c:50:26:1a:e1:21:97: 33:da:90:e9:4b:49:43:1a:83:a9:b9:cc:56:58:e1:a7:ad:d0: 95:e6:4e:a3:40:07:a3:c1:2a:0d:79:74:2c:bb:87:84:3b:bd: ca:f8:a7:af:fa:52:ce:5e:7d:2f:28:90:2c:65:5d:33:90:75: f9:53:8c:68:8f:bf:22:84:3a:49:58:57:0e:96:2d:d8:23:84: 74:c1:f9:74:c7:6e:89:d7:b2:e9:e8:b7:ca:f8:d0:04:3b:10: ab:ea:2a:e2:1c:de:56:08:f9:19:08:06:a6:17:0a:95:3b:9e: 78:5f:37:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwNzIzMDYyNTI0WhcNMjYwNzMwMDYyNTI0WjAYMRYwFAYD VQQDEw02YTYxYjNkNS0yZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8zYzCodRb0cjFvi6pjymyGFYJVfM+vZJW6/h+shLog4P65/arwvjqwpyWC1 fd6sePvzt3eKIAKSrda8HfuNDJejaf79XBb909s84nSZ7sOZSXIviwxArsTptZhI aGkxF2jzi1yRkTTmokzDSRXA8MlYBAGMm91rg/CAIQizUzIRS6uOJExrSiqNCdIz on3l22XvpwcxCUpmn/tucEICZQSchIo7IYTYEwZxdhbwZkcd8e2R9AXAWsnuLpK3 VRb0D8LdbT1PQIno+Sw6WL6KEDjSV2GMH70ZsdBzVE0BNPBg+wYwKAaSx4W02s90 fKxIotKVKKC4yLUORywXDCPaQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMksY2T p9qw7Pa8MplHUOJD7eebMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzMpbdqqjqWmbvGKD+c07pPLw0OUUTS/lr96tsR+VP+SxKgSzJrobhpcZCRW2 pDpLzbvTXB4W+klWamGFZL/7991ta917PmdVzOaOWJOFeP7c5qkaQlCrqkOVJVJ5 db9YVn7qcNVbI5Js+ZIXyT8bIMwkABJlT7T3kbEomDP4x/hLnFrnVA+Vn4JMUCYa 4SGXM9qQ6UtJQxqDqbnMVljhp63QleZOo0AHo8EqDXl0LLuHhDu9yvinr/pSzl59 LyiQLGVdM5B1+VOMaI+/IoQ6SVhXDpYt2COEdMH5dMduidey6ei3yvjQBDsQq+oq 4hzeVgj5GQgGphcKlTueeF83pQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:10 2026 by rpki-client