$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: hBzZronKUiwK16gCBPzkaYa/yxflOUi8aD0dNAngvIY= Subject key identifier: 76:33:BC:EC:D8:B7:2A:83:D2:6E:FA:C3:AB:29:EE:7D:58:BB:CB:76 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 0132 Signing time: Mon 21 Sep 2026 05:55:47 +0000 Manifest this update: Mon 21 Sep 2026 05:55:46 +0000 Manifest next update: Mon 28 Sep 2026 05:55:46 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: WnhpC1jmc9COI25lOLguntVHey5JEJlKVVNJQgiDevQ=) 2: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=) 3: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: KaHspWR0HemZK0q9LOChU8le2zgj9l3UI0kexYlJ+/g=) 4: A679A90E6ACA11F19C5D49226847A888.roa (hash: HlE4/rCdBHaYQMrVtMYhseWs8raS1AuMlQ1WnzgrFwc=) 5: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=) 6: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=) 7: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Sep 21 05:55:46 2026 GMT Not After : Sep 28 05:55:46 2026 GMT Subject: CN=6ab0c6e2-d91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:bd:c6:4c:02:89:9c:30:14:1f:b7:2a:b0: 8b:91:b4:ab:6a:49:eb:90:03:41:7e:d3:ba:09:47: f1:e2:e4:d8:9f:96:4b:0d:63:ed:9c:b3:0f:51:79: 1d:d2:ba:3d:62:cb:24:cd:a0:81:5d:13:b0:94:28: 48:af:85:0d:06:5f:03:99:86:be:c7:a6:dc:cb:30: bd:a4:74:a3:b9:55:aa:42:e2:9a:7b:ca:a9:3e:e8: d0:55:98:44:28:bf:48:7d:9b:3a:da:e8:b7:d5:c5: e8:c2:bd:30:1c:75:fe:a1:37:1d:aa:f9:47:0b:9e: 57:4b:09:77:0f:54:6e:33:d1:ca:25:c8:6a:32:5f: e3:48:ef:d6:cf:ef:45:19:5b:ed:31:2b:05:72:f0: f0:22:e3:95:f1:f9:66:92:5c:83:37:a5:15:86:d4: 54:02:f4:b7:cc:91:43:aa:e5:b5:51:5f:e3:c8:7f: 62:90:81:c8:b2:1d:09:e2:fd:16:34:1c:a0:f3:85: 9f:06:82:cf:bf:cb:21:a3:e5:af:19:2f:3b:8b:6a: b1:13:ac:79:56:15:1d:11:fc:dd:06:da:5f:6f:cf: 87:5d:a0:51:85:da:2b:9c:45:60:40:19:82:b9:8c: c3:b5:22:9b:c8:b9:b1:25:8f:38:c5:2b:32:9e:2d: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:33:BC:EC:D8:B7:2A:83:D2:6E:FA:C3:AB:29:EE:7D:58:BB:CB:76 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f9:95:4f:56:a8:8b:74:aa:a6:40:8c:5b:0d:f8:4a:97:9a: ed:07:72:3c:5c:1a:59:ef:f8:06:e6:da:81:3a:5c:fa:1d:16: b4:85:a9:81:c6:8c:f4:cb:3d:06:bd:6c:43:a1:7c:7c:a3:7a: 7c:a6:d2:15:bc:a8:26:ab:70:7a:39:54:ac:5d:a5:e2:bd:3d: 40:18:28:47:c5:81:64:3c:f5:09:38:a4:c7:c6:9e:ff:fa:7d: 77:80:79:4a:dc:94:6a:7e:56:11:9d:e3:25:e5:cb:96:32:71: c6:93:20:10:2f:45:f4:74:3c:fc:b8:37:5a:dd:7d:ca:77:0c: 31:f6:38:7a:b4:be:bc:5a:4e:e9:34:00:a6:55:a1:e8:86:38: 00:a3:51:5f:49:0f:e8:7d:bb:75:47:fc:59:b9:27:6e:3f:75: 6a:cc:68:37:7e:5f:39:a6:c4:e6:e1:6e:2f:25:8f:88:c1:08: 7e:e9:1f:64:5b:2e:c9:ae:ba:fd:87:1c:7e:7e:cb:63:a5:37: c5:3a:53:8a:8d:03:78:e3:f8:36:59:22:86:b3:88:00:2e:26: 7e:cd:af:46:27:4e:be:b8:60:85:10:24:d7:56:4b:87:a8:3c: e1:36:1f:e1:a1:a9:ce:f9:a3:83:75:ad:20:0e:db:fd:cf:1a: 34:f3:2b:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYwOTIxMDU1NTQ2WhcNMjYwOTI4MDU1NTQ2WjAYMRYwFAYD VQQDEw02YWIwYzZlMi1kOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAu9xkwCiZwwFB+3KrCLkbSraknrkANBftO6CUfx4uTYn5ZLDWPtnLMPUXkd 0ro9YsskzaCBXROwlChIr4UNBl8DmYa+x6bcyzC9pHSjuVWqQuKae8qpPujQVZhE KL9IfZs62ui31cXowr0wHHX+oTcdqvlHC55XSwl3D1RuM9HKJchqMl/jSO/Wz+9F GVvtMSsFcvDwIuOV8flmklyDN6UVhtRUAvS3zJFDquW1UV/jyH9ikIHIsh0J4v0W NByg84WfBoLPv8sho+WvGS87i2qxE6x5VhUdEfzdBtpfb8+HXaBRhdornEVgQBmC uYzDtSKbyLmxJY84xSsyni2rtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYzvOzY tyqD0m76w6sp7n1Yu8t2MB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYfmVT1aoi3SqpkCMWw34Spea7QdyPFwaWe/4BubagTpc+h0WtIWpgcaM9Ms9 Br1sQ6F8fKN6fKbSFbyoJqtwejlUrF2l4r09QBgoR8WBZDz1CTikx8ae//p9d4B5 StyUan5WEZ3jJeXLljJxxpMgEC9F9HQ8/Lg3Wt19yncMMfY4erS+vFpO6TQAplWh 6IY4AKNRX0kP6H27dUf8Wbknbj91asxoN35fOabE5uFuLyWPiMEIfukfZFsuya66 /Yccfn7LY6U3xTpTio0DeOP4NlkihrOIAC4mfs2vRidOvrhghRAk11ZLh6g84TYf 4aGpzvmjg3WtIA7b/c8aNPMrhA== -----END CERTIFICATE-----Generated at Mon Sep 21 15:40:04 2026 by rpki-client