$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: p7JHiMOy7ZYQGMMNvjKzvlk9blEO7pK8Fs3WsOZJ4z4= Subject key identifier: D3:7F:94:21:74:EC:0E:07:90:1C:9C:D3:F3:60:CA:BF:26:0B:26:39 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 02D9 Signing time: Wed 13 May 2026 01:27:43 +0000 Manifest this update: Wed 13 May 2026 01:27:42 +0000 Manifest next update: Wed 20 May 2026 01:27:42 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: wtffe2qj0/rlb7IMnjnx+qe1ZWHJZffybVkAsOqk2jA=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: UPDUd4t5zx8UFYbNLzFGnvRhyMjEHl7Tb9rUHZFXp40=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 7/ANmUusyhHaIQ0U3dh4piILL1EQvQjyTLSsoXWQ5XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: May 13 01:27:42 2026 GMT Not After : May 20 01:27:42 2026 GMT Subject: CN=6a03d38f-5949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:b1:bb:59:cc:45:da:c1:be:19:24:ab:b0: 11:77:28:59:d1:90:41:5c:95:13:eb:5e:cb:3c:bf: 5c:d5:a4:c4:04:01:6d:9e:6a:8d:1b:36:95:9e:8d: 85:b8:83:7b:ef:fc:21:b3:1e:e7:1e:b1:a4:a8:9a: 84:3b:8f:ee:48:65:fe:23:c3:d8:94:1d:37:20:ba: 33:50:61:84:b8:47:48:14:ce:d2:5f:75:4f:dd:ea: c8:95:e1:1e:94:18:d9:f0:13:c3:5b:a9:dc:73:9a: 7f:ab:78:5d:f9:bb:c8:0b:a9:90:b5:ac:d2:2a:de: 4b:d4:89:3c:8a:d9:1a:cd:76:e0:73:1d:9e:90:31: d0:72:0c:d4:b6:ab:54:bd:4a:62:2f:b8:3d:83:0e: 84:b7:0a:a3:84:e9:46:9b:b7:79:6b:e9:1a:87:cd: bb:d3:c1:fb:11:8b:a3:bd:8f:4b:d0:7b:c3:4c:bc: b8:7f:e8:6c:4d:8e:ba:4b:68:9a:bc:2d:e6:5c:8e: cf:c5:16:de:2c:78:7f:31:e0:f9:36:04:71:81:f4: 4b:58:55:4b:7d:ef:26:1b:12:e3:71:5f:3b:4b:2d: 0c:48:4d:aa:b3:e2:5b:a7:e2:2c:b0:db:fd:a2:5f: cd:b0:6c:a1:4e:4f:cf:77:42:ee:a9:46:60:5a:1e: 3b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7F:94:21:74:EC:0E:07:90:1C:9C:D3:F3:60:CA:BF:26:0B:26:39 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:32:92:82:2e:9b:15:07:1b:b0:49:8d:25:24:a9:a0:f5:7e: 70:f4:d5:12:0f:b7:ac:e2:f6:5c:4f:ce:ab:f3:4b:b5:38:ec: b4:4f:61:47:18:cd:71:fe:51:8b:2c:74:ac:da:e5:aa:fb:1a: 3d:91:71:bc:33:c9:d2:ad:ed:8a:7b:c5:e1:17:44:84:0a:a0: 06:94:93:2e:6b:6d:ba:c1:75:0b:c5:f2:7e:4a:a8:20:1b:00: 10:b3:20:98:3f:ba:40:68:38:0a:49:dd:3b:ed:ab:65:c1:db: 03:f8:92:25:c2:90:0f:01:53:2e:4d:3b:31:e9:0c:f7:6e:17: e7:6a:31:54:1e:3a:f5:c2:25:80:1d:6e:9a:65:1e:61:29:ea: ff:85:6a:22:6f:3c:76:0a:66:5c:ca:f9:e0:23:d8:f9:0d:4b: 40:4e:37:71:2c:d2:ba:7b:2b:1e:f2:e0:9a:ab:df:79:b2:49: 1f:0a:ba:d2:69:b9:5e:37:dd:69:2f:6a:72:c1:38:40:4f:65: 58:34:47:3c:8c:74:40:4c:b2:66:a4:c7:8b:89:ad:52:2b:b4: 4f:09:bc:a8:30:45:95:44:0a:36:89:8b:8a:cf:05:16:c0:2a: 8a:67:97:9c:ef:0d:7c:b5:cf:f9:4a:a1:40:0e:c0:ab:d9:a0: bd:b7:10:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjYwNTEzMDEyNzQyWhcNMjYwNTIwMDEyNzQyWjAYMRYwFAYD VQQDEw02YTAzZDM4Zi01OTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36Sxu1nMRdrBvhkkq7ARdyhZ0ZBBXJUT617LPL9c1aTEBAFtnmqNGzaVno2F uIN77/whsx7nHrGkqJqEO4/uSGX+I8PYlB03ILozUGGEuEdIFM7SX3VP3erIleEe lBjZ8BPDW6ncc5p/q3hd+bvIC6mQtazSKt5L1Ik8itkazXbgcx2ekDHQcgzUtqtU vUpiL7g9gw6EtwqjhOlGm7d5a+kah82708H7EYujvY9L0HvDTLy4f+hsTY66S2ia vC3mXI7PxRbeLHh/MeD5NgRxgfRLWFVLfe8mGxLjcV87Sy0MSE2qs+Jbp+IssNv9 ol/NsGyhTk/Pd0LuqUZgWh47pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNN/lCF0 7A4HkByc0/Ngyr8mCyY5MB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOzKSgi6bFQcbsEmNJSSpoPV+cPTVEg+3rOL2XE/Oq/NLtTjstE9hRxjNcf5R iyx0rNrlqvsaPZFxvDPJ0q3tinvF4RdEhAqgBpSTLmttusF1C8XyfkqoIBsAELMg mD+6QGg4CkndO+2rZcHbA/iSJcKQDwFTLk07MekM924X52oxVB469cIlgB1ummUe YSnq/4VqIm88dgpmXMr54CPY+Q1LQE43cSzSunsrHvLgmqvfebJJHwq60mm5Xjfd aS9qcsE4QE9lWDRHPIx0QEyyZqTHi4mtUiu0Twm8qDBFlUQKNomLis8FFsAqimeX nO8NfLXP+UqhQA7Aq9mgvbcQgw== -----END CERTIFICATE-----Generated at Wed May 13 03:50:58 2026 by rpki-client