$ rpki-client -vvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft File: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft (raw, json) Hash identifier: 0/bCWsfR1cCw/4QMi37oyHn+2WWOgPC/DuKz0L+yJNs= Subject key identifier: 34:64:99:EC:6D:2E:57:1C:61:DB:B9:83:5A:19:8F:75:A7:EB:5E:6E Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft Manifest number: 3C Signing time: Mon 11 May 2026 08:44:14 +0000 Manifest this update: Mon 11 May 2026 08:44:13 +0000 Manifest next update: Mon 18 May 2026 08:44:13 +0000 Files and hashes: 1: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl (hash: 8cAPNUkieXlUmIWVfydaaq5tUjGF8kVEKX5cq8dSMsU=) 2: 8A145232FCFC11F0A8CB3974376F56BC.roa (hash: Xjz1s0MQRu7MQA5suGipgKZp8P0BW1VYHZCCTuVLDsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Validity Not Before: May 11 08:44:13 2026 GMT Not After : May 18 08:44:13 2026 GMT Subject: CN=6a0196de-c679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:69:7b:3f:24:1d:57:4a:ca:0f:6c:77:ab: 96:0b:1e:d5:bc:84:ab:60:4f:d7:96:7e:19:e3:2d: 43:23:71:8f:21:a6:a7:eb:12:38:32:3c:df:a5:9a: cb:3f:e7:03:c8:3e:19:56:64:91:d3:f3:ff:35:dd: c4:18:6c:76:dd:1f:49:c5:bf:f0:bb:30:ba:c3:dc: 1d:04:76:49:7d:f1:7a:32:0e:07:24:fe:46:cc:13: 4e:69:89:06:9d:c9:3a:6d:1e:3b:4e:87:21:6a:d7: a6:b6:38:8c:75:da:da:70:e0:bd:49:4e:50:01:64: 52:5d:07:70:28:42:d9:5e:a2:f3:f8:ca:98:48:16: 41:0e:3a:bc:29:ce:52:47:ff:74:b9:2e:9f:ab:21: fd:17:03:a8:fa:08:c9:d7:83:7e:b0:51:3d:13:c6: 01:69:ae:4f:4c:29:20:04:41:3c:af:4b:80:c5:57: c7:41:c9:4f:a1:28:fb:8a:87:a4:a2:c5:63:2f:7c: bb:a2:24:70:18:4f:43:37:fd:70:4f:1d:bb:55:55: 3e:8d:bd:22:61:34:2f:58:5a:b9:2f:6a:b6:cf:5f: fc:b9:58:8f:9b:cd:20:b2:64:74:ef:dc:cd:47:ef: b4:83:e2:93:dd:f7:de:fd:bb:3d:8b:65:6e:e0:7e: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:99:EC:6D:2E:57:1C:61:DB:B9:83:5A:19:8F:75:A7:EB:5E:6E X509v3 Authority Key Identifier: keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3c:57:7f:4e:96:c4:86:07:7b:59:bf:2e:b6:44:48:ff:d7: 9e:56:ce:18:3c:c9:c0:cb:5c:6a:6b:96:1b:e3:18:95:ac:97: 63:71:0c:d7:c6:a4:ad:f1:e4:51:15:e1:85:f0:7b:a1:10:16: b9:91:72:1f:c1:92:df:91:e6:90:6f:99:7e:c6:2a:9d:af:b1: 8d:9b:c2:bd:ae:62:54:07:fb:b3:ec:86:09:f6:ca:70:66:c2: 13:84:ed:f4:67:5d:98:87:89:35:ad:a4:9d:4f:bd:2f:cf:e6: 1d:7c:69:b2:63:47:81:53:bb:d8:58:54:de:42:ad:19:0b:28: bb:69:13:76:39:ed:ba:1d:e5:74:1c:3a:a0:8a:80:6e:99:e5: c2:c9:62:1b:5a:ae:04:36:80:56:7f:cb:cf:6d:df:9b:02:ea: 42:24:dc:ae:3d:94:03:df:5b:5e:2e:0f:d5:40:30:17:fb:9b: 7d:2b:73:fc:f8:97:9a:c4:62:eb:4c:d9:88:f8:1a:99:3a:ae: c8:43:c6:36:b6:51:9b:00:02:5e:69:81:a9:13:12:75:c1:1c: 94:53:cd:ba:ab:af:a6:57:ce:6a:f8:ff:4a:3f:1b:2b:8d:82: a0:5e:a3:f2:cc:76:3d:cd:c0:72:ef:f9:04:1a:49:4f:22:e7: d9:ce:a6:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDI3RjExMC8GA1UEBRMoOTU2MEJDQTlBQjZDNjhCRDkwOUYzMDRDNUIyMkJBNjM2 MzlDRjAxQzAeFw0yNjA1MTEwODQ0MTNaFw0yNjA1MTgwODQ0MTNaMBgxFjAUBgNV BAMTDTZhMDE5NmRlLWM2NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBoWl7PyQdV0rKD2x3q5YLHtW8hKtgT9eWfhnjLUMjcY8hpqfrEjgyPN+lmss/ 5wPIPhlWZJHT8/813cQYbHbdH0nFv/C7MLrD3B0Edkl98XoyDgck/kbME05piQad yTptHjtOhyFq16a2OIx12tpw4L1JTlABZFJdB3AoQtleovP4yphIFkEOOrwpzlJH /3S5Lp+rIf0XA6j6CMnXg36wUT0TxgFprk9MKSAEQTyvS4DFV8dByU+hKPuKh6Si xWMvfLuiJHAYT0M3/XBPHbtVVT6NvSJhNC9YWrkvarbPX/y5WI+bzSCyZHTv3M1H 77SD4pPd9979uz2LZW7gfo/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNGSZ7G0u Vxxh27mDWhmPdafrXm4wHwYDVR0jBBgwFoAUlWC8qatsaL2QnzBMWyK6Y2Oc8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjdGLzNCQkRBQ0UyRkMw NjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwyUW56Qk1XeUs2WTJPYzhC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFdDOHFhdHNhTDJRbnpCTVd5SzZZMk9jOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MjdGLzNCQkRBQ0UyRkMwNjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwy UW56Qk1XeUs2WTJPYzhCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB/PFd/TpbEhgd7Wb8utkRI/9eeVs4YPMnAy1xqa5Yb4xiVrJdjcQzXxqSt8eRR FeGF8HuhEBa5kXIfwZLfkeaQb5l+xiqdr7GNm8K9rmJUB/uz7IYJ9spwZsIThO30 Z12Yh4k1raSdT70vz+YdfGmyY0eBU7vYWFTeQq0ZCyi7aRN2Oe26HeV0HDqgioBu meXCyWIbWq4ENoBWf8vPbd+bAupCJNyuPZQD31teLg/VQDAX+5t9K3P8+JeaxGLr TNmI+BqZOq7IQ8Y2tlGbAAJeaYGpExJ1wRyUU826q6+mV85q+P9KPxsrjYKgXqPy zHY9zcBy7/kEGklPIufZzqZx -----END CERTIFICATE-----Generated at Wed May 13 08:33:24 2026 by rpki-client