$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: Uj37Ij+w2xwMJMCvX8ttzpGdPro5iHV5WvG2M0SxciM= Subject key identifier: BE:61:0D:CC:6A:C7:36:85:18:6C:B2:5F:81:DF:90:71:86:28:42:0B Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0212 Signing time: Mon 11 May 2026 02:58:45 +0000 Manifest this update: Mon 11 May 2026 02:58:44 +0000 Manifest next update: Mon 18 May 2026 02:58:44 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: P5ronyMcxK0ZZH0xVc44YJ+OusUrEjaGwWpeVT7UP2M=) 2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=) 3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: May 11 02:58:44 2026 GMT Not After : May 18 02:58:44 2026 GMT Subject: CN=6a0145e4-d08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:53:b2:ff:40:72:f9:be:e3:37:9e:7e:20: 87:ba:3b:e8:a9:ab:3f:57:25:7d:e1:dd:27:4b:51: 97:04:f6:80:36:f1:af:1b:7d:4a:77:ad:7e:cc:6c: 51:dc:8e:9b:87:fe:56:16:09:0a:64:d3:a8:08:3e: c6:47:61:53:18:5a:20:f4:01:4f:93:78:8e:9c:d6: dc:5f:64:47:4e:57:14:9d:ad:a2:00:16:32:75:1f: 6f:ba:ad:02:db:b2:6e:f4:20:03:9e:bf:a3:5c:03: 09:13:30:aa:c0:b6:c8:01:76:5c:6d:be:60:1c:d5: 5c:9e:81:89:bb:a4:7c:f1:0a:df:de:b1:84:90:28: 68:5d:07:91:3e:3c:83:ee:53:52:18:43:bf:38:36: c6:25:4b:d6:93:44:51:ce:68:49:7f:5e:ac:e9:f6: 0c:f6:12:a7:ac:7e:56:4d:21:14:6c:9d:db:19:b4: 41:a9:97:fe:6c:c8:6b:76:b2:3c:2b:54:35:ff:1f: 8b:b6:5b:38:24:bf:bd:01:68:f5:f7:1b:45:45:e6: b8:e3:45:85:5e:1c:10:57:4f:7c:4e:55:e4:7c:03: 71:ca:87:6d:c4:7d:40:8e:b5:20:29:cc:05:64:fb: 02:43:c1:81:6d:d3:00:59:47:32:c2:b2:aa:b9:97: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:0D:CC:6A:C7:36:85:18:6C:B2:5F:81:DF:90:71:86:28:42:0B X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:31:aa:85:d0:2a:b6:5e:87:7e:48:16:f9:6a:74:84:49:29: cb:70:5e:83:83:bd:9c:71:82:4d:9c:b4:72:c5:55:f4:02:0c: 0f:a5:d9:4e:0d:39:57:97:03:14:43:9d:f3:5a:82:1b:b7:6c: 52:83:b4:ff:f9:03:2e:aa:2e:44:cb:62:2f:16:c3:71:58:36: ef:b1:86:db:b3:1c:eb:a5:41:ae:23:48:72:89:64:1c:d5:fd: 88:36:0c:a6:a8:7f:09:27:83:ad:72:2d:34:21:e7:46:99:90: 94:c0:e4:e8:0c:54:5a:94:fc:f3:e3:ff:26:54:a1:72:27:e1: e9:d4:d7:ac:33:2d:8b:ed:36:e6:9e:10:d0:87:7e:ee:39:aa: 47:0e:12:b7:e8:99:30:e0:c1:88:79:de:a1:61:60:56:13:ae: 5e:18:89:ad:1b:d7:8f:8f:bc:01:6c:d4:7d:d9:cd:b1:c3:2f: d7:e0:22:f5:f5:b8:8c:b4:1f:d4:80:24:4a:ac:0f:ae:9f:a0: 33:69:cc:19:9d:4a:c6:96:e9:d6:f4:6c:57:1b:66:85:ee:41: ec:55:ad:9e:30:38:ef:9a:12:74:b0:c4:d0:93:80:dc:13:f6: e6:cf:23:3f:96:13:5e:d9:2d:68:d1:79:33:51:f0:97:bb:41: 29:44:9a:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjYwNTExMDI1ODQ0WhcNMjYwNTE4MDI1ODQ0WjAYMRYwFAYD VQQDEw02YTAxNDVlNC1kMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUFTsv9Acvm+4zeefiCHujvoqas/VyV94d0nS1GXBPaANvGvG31Kd61+zGxR 3I6bh/5WFgkKZNOoCD7GR2FTGFog9AFPk3iOnNbcX2RHTlcUna2iABYydR9vuq0C 27Ju9CADnr+jXAMJEzCqwLbIAXZcbb5gHNVcnoGJu6R88Qrf3rGEkChoXQeRPjyD 7lNSGEO/ODbGJUvWk0RRzmhJf16s6fYM9hKnrH5WTSEUbJ3bGbRBqZf+bMhrdrI8 K1Q1/x+Ltls4JL+9AWj19xtFRea440WFXhwQV098TlXkfANxyodtxH1AjrUgKcwF ZPsCQ8GBbdMAWUcywrKquZfU0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5hDcxq xzaFGGyyX4HfkHGGKEILMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIDGqhdAqtl6HfkgW+Wp0hEkpy3Beg4O9nHGCTZy0csVV9AIMD6XZTg05V5cD FEOd81qCG7dsUoO0//kDLqouRMtiLxbDcVg277GG27Mc66VBriNIcolkHNX9iDYM pqh/CSeDrXItNCHnRpmQlMDk6AxUWpT88+P/JlShcifh6dTXrDMti+025p4Q0Id+ 7jmqRw4St+iZMODBiHneoWFgVhOuXhiJrRvXj4+8AWzUfdnNscMv1+Ai9fW4jLQf 1IAkSqwPrp+gM2nMGZ1Kxpbp1vRsVxtmhe5B7FWtnjA475oSdLDE0JOA3BP25s8j P5YTXtktaNF5M1Hwl7tBKUSa8w== -----END CERTIFICATE-----Generated at Wed May 13 03:20:23 2026 by rpki-client