$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json) Hash identifier: PgbwXhrcuOmy1vuaLZ4eIZVJUjoKaMjuiSQ1SFPPDFU= Subject key identifier: 7A:91:58:1F:75:E2:C2:D4:69:B7:70:BB:35:8F:81:15:B0:A1:11:95 Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Certificate serial: 1128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft Manifest number: 1125 Signing time: Thu 08 Oct 2026 17:20:41 +0000 Manifest this update: Thu 08 Oct 2026 17:20:40 +0000 Manifest next update: Thu 15 Oct 2026 17:20:40 +0000 Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: CTFBnKJN7fsqCY64sLMaNBIpZE0XwGuSCneC00lkcfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4392 (0x1128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Validity Not Before: Oct 8 17:20:40 2026 GMT Not After : Oct 15 17:20:40 2026 GMT Subject: CN=6ac7d0e9-ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:b3:c9:e4:8f:b5:33:4d:a8:56:82:6b:0e: d8:6f:cc:25:38:57:84:30:c0:44:29:dd:75:8d:cb: b3:6f:7d:16:f2:dc:b1:e3:b5:55:0a:2d:10:d8:a2: 3b:68:78:d1:61:1a:d4:75:93:cf:48:49:48:7d:8a: 86:45:f5:64:e8:0a:a5:01:7a:98:f2:2e:dc:06:86: 1f:a0:ce:6d:70:27:1a:eb:8d:fc:f2:e0:94:34:c8: a1:0e:27:01:d5:dd:cf:9f:b8:94:3b:98:a3:6f:95: ff:45:12:29:f4:9a:d4:fc:f9:04:02:8c:f8:8b:61: be:0a:81:4a:3a:cc:75:3a:05:9c:ed:47:85:b7:bc: 7e:60:8e:57:e6:9c:95:ff:d4:ae:fa:ed:aa:6e:40: fd:86:cb:6e:cf:39:47:e6:0b:23:62:f2:80:a6:07: f4:5a:74:8e:57:7d:95:70:e4:33:67:a3:18:42:5d: a0:09:9f:63:63:33:ec:e7:2c:bd:ba:df:46:5e:32: b7:00:e8:bf:9c:c0:c6:e9:2a:bb:10:e6:b9:17:17: d1:33:24:4c:54:ae:71:e7:0c:b6:66:4f:c4:40:27: 89:13:32:c8:f9:6a:e3:6a:10:5c:37:a6:55:0a:dd: 92:ef:28:91:49:6c:6c:8b:cf:70:62:0c:a3:91:12: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:58:1F:75:E2:C2:D4:69:B7:70:BB:35:8F:81:15:B0:A1:11:95 X509v3 Authority Key Identifier: keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b8:e2:ac:39:23:9d:c0:0c:47:2e:d7:d3:5e:a7:f8:04:5c: 6c:5e:64:31:c7:64:25:6a:09:c1:4f:39:2c:53:9a:79:5b:05: 24:4c:c8:17:c6:c2:d5:68:f4:d5:1c:77:d9:81:70:b6:c4:fa: 58:f7:a6:b5:20:c2:08:07:e0:0b:d3:03:52:4a:e6:f4:d0:1b: b5:24:d8:c7:b8:79:58:02:63:ce:ae:55:19:93:f7:ad:96:5b: 99:36:68:29:3d:36:0d:3d:9c:5e:8a:67:14:33:2a:13:30:62: 00:4c:9d:6f:46:9e:6d:7e:99:01:45:f7:08:e4:02:81:94:f7: af:53:69:c3:27:28:a8:be:20:d6:81:41:06:15:31:f3:c7:31: 5c:0a:3f:ae:36:28:c7:4a:b3:7a:ee:b8:a3:20:12:bd:ac:88: af:d3:54:97:51:f6:0b:43:c2:60:f5:bb:8d:19:5c:88:3d:31: 1f:5f:eb:02:a7:14:62:a6:f8:67:00:ac:3d:bf:03:0a:a3:83: 75:c6:78:7e:23:90:75:67:b8:ed:c8:00:19:b0:9e:a4:be:45: a8:b1:6a:8f:ba:96:b6:c6:8e:bc:93:67:e3:cf:60:4c:94:44: f5:04:70:5b:bb:27:5e:3a:b3:e1:27:6c:ef:88:65:27:b7:4d: 25:78:77:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBFMjExMTAvBgNVBAUTKDk0QzlENDNCNTNCNUQ4NTBEOThFMERBMkQ1RUYzQzRF MUMzMTIwNDUwHhcNMjYxMDA4MTcyMDQwWhcNMjYxMDE1MTcyMDQwWjAYMRYwFAYD VQQDEw02YWM3ZDBlOS1jZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/ezyeSPtTNNqFaCaw7Yb8wlOFeEMMBEKd11jcuzb30W8tyx47VVCi0Q2KI7 aHjRYRrUdZPPSElIfYqGRfVk6AqlAXqY8i7cBoYfoM5tcCca64388uCUNMihDicB 1d3Pn7iUO5ijb5X/RRIp9JrU/PkEAoz4i2G+CoFKOsx1OgWc7UeFt7x+YI5X5pyV /9Su+u2qbkD9hstuzzlH5gsjYvKApgf0WnSOV32VcOQzZ6MYQl2gCZ9jYzPs5yy9 ut9GXjK3AOi/nMDG6Sq7EOa5FxfRMyRMVK5x5wy2Zk/EQCeJEzLI+WrjahBcN6ZV Ct2S7yiRSWxsi89wYgyjkRJiUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqRWB91 4sLUabdwuzWPgRWwoRGVMB8GA1UdIwQYMBaAFJTJ1DtTtdhQ2Y4NotXvPE4cMSBF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEUyMS9BNUU5NTBENDQy NzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJGRFpqZzJpMWU4OFRod3hJ RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNblVPMU8xMkZEWmpnMmkxZTg4VGh3eElFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEUyMS9BNUU5NTBENDQyNzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJG RFpqZzJpMWU4OFRod3hJRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbjirDkjncAMRy7X016n+ARcbF5kMcdkJWoJwU85LFOaeVsFJEzIF8bC1Wj0 1Rx32YFwtsT6WPemtSDCCAfgC9MDUkrm9NAbtSTYx7h5WAJjzq5VGZP3rZZbmTZo KT02DT2cXopnFDMqEzBiAEydb0aebX6ZAUX3COQCgZT3r1NpwycoqL4g1oFBBhUx 88cxXAo/rjYox0qzeu64oyASvayIr9NUl1H2C0PCYPW7jRlciD0xH1/rAqcUYqb4 ZwCsPb8DCqODdcZ4fiOQdWe47cgAGbCepL5FqLFqj7qWtsaOvJNn489gTJRE9QRw W7snXjqz4Sds74hlJ7dNJXh3xQ== -----END CERTIFICATE-----Generated at Fri Oct 9 00:16:48 2026 by rpki-client