$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft File: lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft (raw, json) Hash identifier: ReqnFbdNPciTjtQ8exyFqA+pX7HJGT786aYsn19YycE= Subject key identifier: 3B:A9:F9:F1:9C:E9:DC:D5:44:B0:5B:FE:66:E1:61:78:E8:86:42:88 Authority key identifier: 94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D Certificate issuer: /CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft Manifest number: 09A4 Signing time: Tue 12 May 2026 20:16:15 +0000 Manifest this update: Tue 12 May 2026 20:16:14 +0000 Manifest next update: Tue 19 May 2026 20:16:14 +0000 Files and hashes: 1: lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl (hash: xgOlBI+WE9tZmwC0hoY2rahfacXpS4IpAAd85ZCOfzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Validity Not Before: May 12 20:16:14 2026 GMT Not After : May 19 20:16:14 2026 GMT Subject: CN=6a038a8f-11eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:d2:d2:eb:95:fe:e5:8a:97:a1:5e:5e:74: 44:19:37:6e:0a:bd:13:fa:f9:27:06:91:6f:5b:52: ac:25:d3:69:14:2f:ab:fc:77:fc:b5:52:e1:73:8d: 2b:f2:d1:59:e6:9b:df:f7:e9:1a:17:3b:57:4e:2c: 35:45:61:40:a7:69:ba:73:15:72:62:1c:6b:ca:09: b0:d9:bd:44:7b:41:2d:ef:c8:c5:3a:57:50:38:a1: 62:fc:28:dd:3d:61:41:05:33:37:71:2a:12:cd:6e: b6:42:ab:5c:1d:96:a1:b8:f9:c4:24:90:e3:de:3c: 14:a6:4f:08:57:b6:07:67:e5:89:e5:4b:21:6d:e3: 82:f4:99:92:2f:42:76:e4:b3:2d:12:28:e4:1c:73: 0c:58:41:73:fe:a7:eb:39:43:2e:cf:86:27:e9:1c: 0b:a5:23:32:c1:71:43:b0:1f:7a:f9:69:fa:89:fa: f7:9d:a2:0a:f8:46:33:e5:3a:39:ce:8f:6d:2c:1e: 68:a5:26:17:73:ca:28:ad:49:0d:09:05:99:91:ea: af:7c:09:8f:5c:13:a0:3e:4a:ee:28:d8:8a:35:46: b0:f8:60:2c:ab:8f:b1:fb:07:52:1a:66:22:38:68: 0a:9f:5d:cc:a0:f0:2b:14:98:76:2c:76:33:e0:bd: 45:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:F9:F1:9C:E9:DC:D5:44:B0:5B:FE:66:E1:61:78:E8:86:42:88 X509v3 Authority Key Identifier: keyid:94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:5f:53:4e:6d:bf:ab:4f:15:b5:c9:42:f1:d5:4d:cf:0b:97: 66:77:68:a8:19:0c:31:1a:e8:59:13:88:2f:60:24:4e:1a:1f: d3:b9:7f:43:c9:34:53:b9:1a:08:f8:11:76:c0:b6:ce:d8:fd: e8:e9:a6:b5:29:93:c0:c9:b0:38:7b:29:0f:d1:1d:3e:2f:5e: 1d:05:99:ea:c9:ec:2d:bc:b3:1e:5c:2f:99:44:59:04:c6:5b: 54:ee:ee:ff:f2:1c:16:5a:63:f5:93:54:19:5a:08:cc:10:65: 4c:2b:86:9d:1e:ea:9a:a2:3c:b1:db:55:2b:3b:10:65:f9:c4: f3:b8:b8:69:f3:84:5e:f6:26:28:7f:73:dd:89:9d:94:ce:37: 98:d9:33:6b:da:7a:e8:40:f4:da:08:3c:53:06:cf:2a:80:25: ff:bf:fa:31:c6:26:16:ef:82:e4:62:82:67:84:e9:9c:c3:37: 7e:91:61:99:82:3c:32:2e:2d:ef:c9:b3:2b:e9:6f:f0:24:cf: 74:35:9b:60:40:65:fb:da:d7:67:ad:1e:f4:2c:df:c8:af:60: f1:53:d1:ac:1d:45:f8:b2:5d:67:79:71:45:c1:91:a3:b6:e7: eb:f9:04:7c:16:94:f3:83:c3:db:91:ec:dc:6d:17:8f:cf:39: 26:6c:67:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQxQzkxMTAvBgNVBAUTKDk0NzBFNzYxMDgwNjNFNEY3QzY0QUQ0M0QwNzZCQzEx QUUxRkRCNUQwHhcNMjYwNTEyMjAxNjE0WhcNMjYwNTE5MjAxNjE0WjAYMRYwFAYD VQQDEw02YTAzOGE4Zi0xMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiT3S0uuV/uWKl6FeXnREGTduCr0T+vknBpFvW1KsJdNpFC+r/Hf8tVLhc40r 8tFZ5pvf9+kaFztXTiw1RWFAp2m6cxVyYhxrygmw2b1Ee0Et78jFOldQOKFi/Cjd PWFBBTM3cSoSzW62QqtcHZahuPnEJJDj3jwUpk8IV7YHZ+WJ5UshbeOC9JmSL0J2 5LMtEijkHHMMWEFz/qfrOUMuz4Yn6RwLpSMywXFDsB96+Wn6ifr3naIK+EYz5To5 zo9tLB5opSYXc8oorUkNCQWZkeqvfAmPXBOgPkruKNiKNUaw+GAsq4+x+wdSGmYi OGgKn13MoPArFJh2LHYz4L1F8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDup+fGc 6dzVRLBb/mbhYXjohkKIMB8GA1UdIwQYMBaAFJRw52EIBj5PfGStQ9B2vBGuH9td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1BrOThaSzFEMEhhOEVhNGYy MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIRG5ZUWdHUGs5OFpLMUQwSGE4RWE0ZjIxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1Br OThaSzFEMEhhOEVhNGYyMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARV9TTm2/q08VtclC8dVNzwuXZndoqBkMMRroWROIL2AkThof07l/Q8k0U7ka CPgRdsC2ztj96OmmtSmTwMmwOHspD9EdPi9eHQWZ6snsLbyzHlwvmURZBMZbVO7u //IcFlpj9ZNUGVoIzBBlTCuGnR7qmqI8sdtVKzsQZfnE87i4afOEXvYmKH9z3Ymd lM43mNkza9p66ED02gg8UwbPKoAl/7/6McYmFu+C5GKCZ4TpnMM3fpFhmYI8Mi4t 78mzK+lv8CTPdDWbYEBl+9rXZ60e9CzfyK9g8VPRrB1F+LJdZ3lxRcGRo7bn6/kE fBaU84PD25Hs3G0Xj885JmxngQ== -----END CERTIFICATE-----Generated at Wed May 13 03:09:32 2026 by rpki-client