$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: ba1lTJ2QP/M9lIbYMYdJZzFiJw2uCR+yP/OFcxVV3kw= Subject key identifier: 2C:A4:9D:0F:81:CF:A6:0B:FF:2A:BC:FB:B8:83:C6:93:19:B3:8A:23 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0236 Signing time: Thu 23 Jul 2026 03:50:06 +0000 Manifest this update: Thu 23 Jul 2026 03:50:06 +0000 Manifest next update: Thu 30 Jul 2026 03:50:06 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: GN8y2jmRGz/fFQhCgAeKnM3GvVpQZ4WpKhqywgxn/5E=) 2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=) 3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Jul 23 03:50:06 2026 GMT Not After : Jul 30 03:50:06 2026 GMT Subject: CN=6a618f6e-d391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fd:bd:b4:4d:86:4c:b3:c0:a1:7a:bf:cf:34: d3:c1:0f:38:7d:d5:83:cf:10:17:6f:62:1c:a2:53: bf:62:4c:38:0c:2e:5d:5a:7d:51:c4:ce:9f:7a:7a: bb:71:fe:48:ee:3a:f2:10:e1:c9:5e:12:75:02:d5: 82:03:76:a3:f1:8e:e7:a6:2e:6f:67:f8:bc:a7:4b: f0:4e:6f:b5:7f:59:87:60:8f:18:9e:bf:1e:40:da: 28:41:3e:6b:d5:a8:ab:ca:39:45:37:d7:1b:3b:e0: c4:0e:bd:b1:ef:9c:bb:de:07:81:3e:95:c8:70:0e: 12:e5:d3:55:88:09:aa:58:6d:8f:f8:59:2d:e3:99: 19:35:0c:49:07:50:7f:79:45:76:55:28:e3:24:7c: 9c:2d:1e:ca:d4:d9:9b:56:11:81:c5:1e:cb:88:ac: 6a:ae:e4:da:6e:9e:ca:be:9e:73:2e:4f:74:00:b3: d4:86:26:f3:1b:49:44:f1:f1:b2:e2:31:22:11:2c: e6:16:bc:9e:22:31:c9:86:a7:6f:bf:4b:8c:a7:ed: cb:8c:f1:80:77:32:ac:be:29:66:61:00:a8:8a:37: ea:9c:05:be:36:6b:65:bd:b5:fb:ca:ca:69:4a:c3: 73:03:9b:f8:d4:b2:26:0d:a0:8c:55:d0:50:fa:68: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:9D:0F:81:CF:A6:0B:FF:2A:BC:FB:B8:83:C6:93:19:B3:8A:23 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:61:b8:e4:c9:de:b7:2b:d8:67:b8:08:37:66:71:3f:5c:a6: 7f:7a:a8:0f:b8:72:dd:fd:77:3c:d4:12:9c:6d:d8:81:cc:9c: 33:30:a6:a4:b1:7c:b6:fd:d8:14:66:ad:c5:c3:6a:07:69:16: 52:e9:55:43:31:de:f3:e9:11:f9:df:34:6c:78:96:e1:45:2e: 6a:0d:d8:06:af:3d:33:c5:d6:c9:a3:d6:71:fd:73:c8:f5:2e: ee:55:dd:14:a5:cd:0a:1b:d4:5d:96:f5:8f:5c:3b:45:e5:2f: e0:81:e8:58:79:0b:73:03:30:2a:95:7d:11:6e:83:6a:eb:25: 4c:62:74:02:43:5e:6a:64:db:58:f3:21:b5:4b:ca:18:49:51: 0f:8d:1e:f6:27:ca:09:ae:fd:30:c6:67:75:ca:88:57:9b:16: d0:ba:2d:ca:18:64:80:0c:79:75:13:84:0d:06:76:04:5e:22: 4a:c6:da:d1:f4:2d:aa:9d:c5:d7:2a:9f:54:73:5f:59:b3:be: 0a:f8:71:42:c7:2c:9d:a4:94:61:a5:0e:db:3a:36:15:cc:25: e6:29:d5:03:e6:1d:f1:db:0f:02:98:74:14:63:2c:9c:2c:95: 85:bb:be:cb:c2:17:a5:9c:4a:00:b9:e7:5d:d0:e8:8f:5d:85: 1a:c0:0c:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjYwNzIzMDM1MDA2WhcNMjYwNzMwMDM1MDA2WjAYMRYwFAYD VQQDEw02YTYxOGY2ZS1kMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6P29tE2GTLPAoXq/zzTTwQ84fdWDzxAXb2IcolO/Ykw4DC5dWn1RxM6fenq7 cf5I7jryEOHJXhJ1AtWCA3aj8Y7npi5vZ/i8p0vwTm+1f1mHYI8Ynr8eQNooQT5r 1airyjlFN9cbO+DEDr2x75y73geBPpXIcA4S5dNViAmqWG2P+Fkt45kZNQxJB1B/ eUV2VSjjJHycLR7K1NmbVhGBxR7LiKxqruTabp7Kvp5zLk90ALPUhibzG0lE8fGy 4jEiESzmFryeIjHJhqdvv0uMp+3LjPGAdzKsvilmYQCoijfqnAW+NmtlvbX7yspp SsNzA5v41LImDaCMVdBQ+mjz3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyknQ+B z6YL/yq8+7iDxpMZs4ojMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvmG45MnetyvYZ7gIN2ZxP1ymf3qoD7hy3f13PNQSnG3YgcycMzCmpLF8tv3Y FGatxcNqB2kWUulVQzHe8+kR+d80bHiW4UUuag3YBq89M8XWyaPWcf1zyPUu7lXd FKXNChvUXZb1j1w7ReUv4IHoWHkLcwMwKpV9EW6DauslTGJ0AkNeamTbWPMhtUvK GElRD40e9ifKCa79MMZndcqIV5sW0LotyhhkgAx5dROEDQZ2BF4iSsba0fQtqp3F 1yqfVHNfWbO+CvhxQscsnaSUYaUO2zo2Fcwl5inVA+Yd8dsPAph0FGMsnCyVhbu+ y8IXpZxKALnnXdDoj12FGsAMQw== -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:27 2026 by rpki-client