$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: dqs8RpkxyllrRIdfDTekuN3Vc7pISOKZ+syMM6P5RNw= Subject key identifier: A7:52:3E:51:24:0D:1C:52:38:F7:55:11:C6:F1:39:5A:9E:DA:5F:F6 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0BD5 Signing time: Tue 12 May 2026 19:01:34 +0000 Manifest this update: Tue 12 May 2026 19:01:34 +0000 Manifest next update: Tue 19 May 2026 19:01:34 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: qvWgYiagd3nIFWKKCycpddCPm4YNahhSoZvyeu+JZko=) 2: F62847A2177911F18F01239F253D8C67.roa (hash: JBeW1rdY6GlTOUqqMMum9prGSAeNYsK+P09Gd+alKfI=) 3: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: nALmFx4QbD9mgsNW6j0fno4vQEX9hP6WHdbPbuXctXM=) 4: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: QNaa4w23l7Y82bTjgOsQxPiCwaFcnV0djxntPTBPsOg=) 5: F6A7E804177911F18F01239F253D8C67.roa (hash: Aqvsakafkw8x+1EMnuzVKvyQkhXbGYvngvcI/pmGvzY=) 6: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: 7++VXIIQ/2BV1xHqCF3NwkqZGS7smz3wo59HOc5L1qA=) 7: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vQgKkU+QtQWKKcMm6jhL0g3J0MHWWdGeRCmjJbM/2vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: May 12 19:01:34 2026 GMT Not After : May 19 19:01:34 2026 GMT Subject: CN=6a03790e-6bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:90:ae:d8:13:4b:00:01:08:78:72:76:32: e6:8a:1f:ac:4a:23:24:5a:04:f4:f9:10:db:ae:17: 28:4d:82:e5:6c:3b:57:7b:82:46:8f:bd:59:8d:18: 68:5a:52:f4:65:fb:14:8d:15:1e:c0:4f:f9:33:a0: 43:64:74:70:5a:94:f8:a4:15:b7:20:53:7e:be:e2: 7a:f2:d4:a6:0f:d1:48:a9:e3:8b:17:ac:86:00:d6: ea:8a:db:e5:25:45:04:76:ef:a7:fd:c0:b1:0b:0e: 49:34:5d:e0:0f:4f:6e:9a:3f:3a:2b:24:5d:fb:11: 9e:9b:c2:d6:f7:a2:52:7b:a4:16:d8:d9:33:5b:18: a2:2c:24:cd:80:42:53:04:a7:90:65:8a:db:6d:56: b0:28:57:d5:38:b2:19:cc:5b:a0:e1:7f:01:3a:bb: 38:81:2c:a9:13:e8:80:52:f3:63:d7:6e:0a:2b:87: 9a:aa:22:9a:34:2b:61:df:9a:00:cc:da:24:9a:98: 15:3a:24:83:16:49:b3:8b:10:db:15:14:9a:72:81: 2a:8c:3e:20:ed:99:bc:0a:b6:45:9e:5c:6a:45:c1: 40:70:ea:08:ee:4c:64:97:b4:b0:87:29:d4:82:7e: 6c:8a:e2:bd:f2:74:e9:57:2d:28:2b:bd:49:03:7e: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:52:3E:51:24:0D:1C:52:38:F7:55:11:C6:F1:39:5A:9E:DA:5F:F6 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:23:db:0a:d7:04:d3:ff:00:24:0f:a3:70:6f:5f:d5:55:8d: a1:12:26:8d:79:86:65:d7:7b:a8:e0:7a:aa:e2:cb:27:88:3e: 6f:78:fb:a1:d1:13:85:a0:f3:a7:cf:df:43:a9:57:2a:c0:34: 08:15:2c:31:5d:12:a1:2d:12:68:b1:fd:a7:36:a6:3d:7c:a9: da:1a:a5:3e:0a:f7:9e:8a:89:c5:58:9e:45:1a:6f:56:ec:d5: 35:d4:67:f6:85:91:6d:88:97:ce:d9:62:2b:02:60:83:f4:c2: 08:54:85:30:34:2b:38:d4:de:c2:92:cc:36:b2:1d:70:38:dc: f3:a3:43:7c:eb:a0:b8:da:6f:50:b5:94:a4:d0:da:b5:fa:42: 51:83:b2:5e:7d:68:e0:67:08:0a:56:24:59:15:7c:74:52:8d: 6a:c8:eb:de:bf:bf:80:54:77:fd:e7:7c:01:6f:b1:38:f6:33: bb:16:e7:45:a6:d0:4f:b9:44:2c:1d:df:b2:73:69:07:95:5b: 85:a0:ed:f2:06:f6:f1:21:b7:b9:c9:e8:ab:1f:7b:ff:00:36: 94:d5:f8:67:dd:4f:f1:73:da:ab:95:2c:c3:4c:ea:82:03:2b: 9d:08:72:55:4b:a0:22:a8:df:6a:3f:0c:5b:59:fd:2a:3c:7c: 98:5c:d7:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwNTEyMTkwMTM0WhcNMjYwNTE5MTkwMTM0WjAYMRYwFAYD VQQDEw02YTAzNzkwZS02YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+WQrtgTSwABCHhydjLmih+sSiMkWgT0+RDbrhcoTYLlbDtXe4JGj71ZjRho WlL0ZfsUjRUewE/5M6BDZHRwWpT4pBW3IFN+vuJ68tSmD9FIqeOLF6yGANbqitvl JUUEdu+n/cCxCw5JNF3gD09umj86KyRd+xGem8LW96JSe6QW2NkzWxiiLCTNgEJT BKeQZYrbbVawKFfVOLIZzFug4X8BOrs4gSypE+iAUvNj124KK4eaqiKaNCth35oA zNokmpgVOiSDFkmzixDbFRSacoEqjD4g7Zm8CrZFnlxqRcFAcOoI7kxkl7SwhynU gn5siuK98nTpVy0oK71JA34tDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdSPlEk DRxSOPdVEcbxOVqe2l/2MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUiPbCtcE0/8AJA+jcG9f1VWNoRImjXmGZdd7qOB6quLLJ4g+b3j7odEThaDz p8/fQ6lXKsA0CBUsMV0SoS0SaLH9pzamPXyp2hqlPgr3noqJxVieRRpvVuzVNdRn 9oWRbYiXztliKwJgg/TCCFSFMDQrONTewpLMNrIdcDjc86NDfOuguNpvULWUpNDa tfpCUYOyXn1o4GcIClYkWRV8dFKNasjr3r+/gFR3/ed8AW+xOPYzuxbnRabQT7lE LB3fsnNpB5VbhaDt8gb28SG3ucnoqx97/wA2lNX4Z91P8XPaq5Usw0zqggMrnQhy VUugIqjfaj8MW1n9Kjx8mFzXYg== -----END CERTIFICATE-----Generated at Wed May 13 12:37:10 2026 by rpki-client