$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json) Hash identifier: DmGwzrgqBxnlGIBOcMNV80SFuPN015EPSkANX7JkWvk= Subject key identifier: 5F:46:A6:08:56:4C:52:8F:FA:2C:38:C9:8C:59:9F:49:BA:4C:39:5C Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft Manifest number: 41 Signing time: Mon 11 May 2026 08:36:58 +0000 Manifest this update: Mon 11 May 2026 08:36:58 +0000 Manifest next update: Mon 18 May 2026 08:36:58 +0000 Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: Jzandc8EX49Sn6LVr4E5oBtOlUH+PgnKSvLQXcGPUmA=) 2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Validity Not Before: May 11 08:36:58 2026 GMT Not After : May 18 08:36:58 2026 GMT Subject: CN=6a01952a-213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:57:42:1c:82:52:c4:78:d9:29:9b:20:55: 7b:95:78:f1:e8:54:6a:d9:51:0c:28:a1:7b:c9:e5: a9:2d:b8:57:ae:00:d8:00:6b:14:10:a1:38:f7:d4: ad:e6:3f:92:e9:63:19:be:09:33:76:6e:10:22:69: d4:9e:7f:0d:e5:71:45:92:d1:7c:31:0b:df:d9:50: 05:0b:bd:77:08:ae:31:7c:a1:fd:fb:bc:bc:1e:26: b2:90:9a:e1:b9:ca:a5:dd:b1:69:b4:57:93:86:a3: 8b:76:37:38:c7:bf:59:a7:34:a4:48:c0:bb:26:98: d2:28:20:01:4b:62:bb:8f:fe:e9:13:95:d1:e5:74: 7c:24:32:43:1f:84:24:79:fa:95:d5:3c:64:05:a4: 9d:94:23:28:ac:53:76:02:83:fb:fa:cf:b5:b3:f5: 21:3e:e2:9c:d8:37:4a:47:dc:75:25:fd:6c:d3:f5: c4:04:bf:89:86:cf:ef:77:39:56:ee:93:87:08:a8: 4e:26:64:7f:02:13:32:53:8b:34:de:ed:00:e0:16: d2:25:f1:6b:07:d1:79:1e:3a:1a:79:15:0f:1e:19: d8:d9:36:44:6e:72:0a:28:1c:f5:d7:8b:73:a0:c4: 42:c4:f9:5b:ee:45:a6:ca:d4:f2:be:8b:b5:2e:0c: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:A6:08:56:4C:52:8F:FA:2C:38:C9:8C:59:9F:49:BA:4C:39:5C X509v3 Authority Key Identifier: keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:03:db:b8:6f:8c:aa:ae:38:22:a2:ec:34:be:18:a5:fb:5f: ba:f4:59:71:d8:ca:af:d8:e1:1b:96:5f:89:4e:12:8d:ba:1c: c0:f7:21:5e:53:5a:0e:19:05:a6:1f:30:e1:0b:18:5e:e0:b5: cf:80:f1:51:6d:bf:a0:65:ce:0d:f6:ab:4c:2e:55:4d:ac:bf: 4f:00:44:99:95:63:1f:4d:da:7b:b1:70:cc:d1:e2:e0:a9:fd: 3b:a0:bc:9f:56:aa:c7:18:c9:c8:55:e9:2a:d2:27:d1:d3:37: b0:bf:dc:07:da:ef:42:73:54:78:38:45:a4:86:14:35:ac:62: 83:03:ce:2a:fb:b3:43:ea:54:7e:8a:d0:4d:3e:26:cc:c4:31: f0:10:da:56:7b:c5:98:cc:79:de:63:3e:a0:05:af:f2:15:95: 2f:83:27:53:c6:76:a8:8a:d1:be:52:3e:58:ee:91:3c:76:f9: a8:3a:dd:3f:8a:6b:c3:16:17:c1:58:f8:5a:29:43:c7:fc:5e: 8d:85:88:4b:ff:77:3c:b6:4b:5c:0b:75:d4:85:f0:db:b6:21: 75:dd:6d:65:22:e0:e7:48:58:e0:50:13:42:62:df:2a:65:65: 8e:f7:44:a4:e0:25:34:51:87:2f:e9:f9:8d:b0:88:65:91:ac: f0:f8:40:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlGMUMwRDRFN0My MTk2QTMzRTAeFw0yNjA1MTEwODM2NThaFw0yNjA1MTgwODM2NThaMBgxFjAUBgNV BAMTDTZhMDE5NTJhLTIxM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8y1dCHIJSxHjZKZsgVXuVePHoVGrZUQwooXvJ5aktuFeuANgAaxQQoTj31K3m P5LpYxm+CTN2bhAiadSefw3lcUWS0XwxC9/ZUAULvXcIrjF8of37vLweJrKQmuG5 yqXdsWm0V5OGo4t2NzjHv1mnNKRIwLsmmNIoIAFLYruP/ukTldHldHwkMkMfhCR5 +pXVPGQFpJ2UIyisU3YCg/v6z7Wz9SE+4pzYN0pH3HUl/WzT9cQEv4mGz+93OVbu k4cIqE4mZH8CEzJTizTe7QDgFtIl8WsH0XkeOhp5FQ8eGdjZNkRucgooHPXXi3Og xELE+VvuRabK1PK+i7UuDDcxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUX0amCFZM Uo/6LDjJjFmfSbpMOVwwHwYDVR0jBBgwFoAULRhptz6h6I6xK+afHA1OfCGWoz4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzUwMzU3Q0YwRUVE MTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2eEstYWZIQTFPZkNHV296 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFJocHR6Nmg2STZ4Sy1hZkhBMU9mQ0dXb3o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 RkZGLzUwMzU3Q0YwRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2 eEstYWZIQTFPZkNHV296NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDTA9u4b4yqrjgiouw0vhil+1+69Flx2Mqv2OEbll+JThKNuhzA9yFeU1oOGQWm HzDhCxhe4LXPgPFRbb+gZc4N9qtMLlVNrL9PAESZlWMfTdp7sXDM0eLgqf07oLyf VqrHGMnIVekq0ifR0zewv9wH2u9Cc1R4OEWkhhQ1rGKDA84q+7ND6lR+itBNPibM xDHwENpWe8WYzHneYz6gBa/yFZUvgydTxnaoitG+Uj5Y7pE8dvmoOt0/imvDFhfB WPhaKUPH/F6NhYhL/3c8tktcC3XUhfDbtiF13W1lIuDnSFjgUBNCYt8qZWWO90Sk 4CU0UYcv6fmNsIhlkazw+EDR -----END CERTIFICATE-----Generated at Wed May 13 04:39:35 2026 by rpki-client