$ rpki-client -vvvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: bL7VF00MKp7WbNVucP8tME+IItFmHJQKBQVrzJkyIWs= Subject key identifier: 7F:5C:59:50:14:FD:50:DE:61:BE:91:0D:8E:0E:27:53:48:F0:6D:E6 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 0776 Signing time: Sun 20 Sep 2026 21:41:50 +0000 Manifest this update: Sun 20 Sep 2026 21:41:50 +0000 Manifest next update: Sun 27 Sep 2026 21:41:50 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: 7Mk8BgIvr7NhXA4x9RI6qvX26jS5SFqLVdXCr+1PbJQ=) 2: 1C9DA52E9BD011F0AE2D7868C4F9AE02.roa (hash: FJD5HahYGYldSP/+Nxp4VyhD4H6bs1q2QrljjpyN2Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Sep 20 21:41:50 2026 GMT Not After : Sep 27 21:41:50 2026 GMT Subject: CN=6ab0531e-f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:c2:18:53:61:0c:4c:e0:a4:e5:31:c0:04: 3d:00:9c:20:08:f0:32:3e:0b:24:8f:e5:49:08:f7: c2:3c:e6:7e:5a:89:a9:dc:b2:d2:ba:c5:ae:cd:d8: b0:f3:90:09:96:ed:b8:6c:32:f0:56:45:96:b6:83: 2f:ab:ff:9b:17:1e:2d:81:72:a3:73:5f:d9:1c:27: 32:ce:0a:94:54:2b:ba:96:e4:9a:ce:95:4e:dd:cd: dc:e6:f5:0a:01:e3:25:ef:a6:f3:ec:94:c8:9d:71: 57:90:4a:6f:b0:a1:4b:08:97:84:81:65:c3:27:01: eb:af:15:87:7a:5c:e8:1f:39:10:e1:24:cf:b6:03: 04:c1:de:96:b2:b1:0d:17:c1:a6:cf:f5:e4:0f:e5: 52:c1:82:82:41:84:92:a6:c7:15:39:4c:eb:ae:45: 15:1b:2d:b4:b4:66:d1:dc:23:98:96:a7:b7:3f:a0: c5:62:cc:92:68:59:1b:51:c8:a4:3e:91:14:30:4e: 92:e2:49:fc:34:18:38:b2:08:c2:0a:80:b0:6f:26: 4e:64:f3:a3:66:21:3b:61:cf:e9:be:e8:bc:b4:77: 6d:7f:68:d0:56:81:f4:d8:d3:a2:8a:73:31:6a:10: ea:b7:41:af:ea:bd:61:60:1a:a5:b2:24:7b:95:95: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5C:59:50:14:FD:50:DE:61:BE:91:0D:8E:0E:27:53:48:F0:6D:E6 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5c:63:44:9e:8d:7b:55:4a:6a:9c:3e:5e:ff:5a:68:a1:66: ab:58:a5:39:a4:a0:e8:8c:b1:a3:8d:56:bd:be:d8:6a:40:70: fc:76:67:d1:9f:30:44:6c:ea:a0:cd:72:53:b8:e6:ac:be:90: a2:50:9e:bf:6c:e2:82:32:de:92:7e:32:82:5a:8d:c4:21:ef: 4d:60:62:1e:41:5d:ac:6d:fc:55:ea:90:87:bc:d7:fc:c2:30: f7:ac:55:0e:1e:24:bf:01:d4:0c:94:50:0f:4f:4f:bf:6d:9d: 0f:af:28:fc:07:18:ce:83:cb:8b:b9:d2:3b:dc:36:bb:84:de: 1b:4a:5e:d6:78:eb:56:fa:ac:b0:20:64:ba:b4:58:c5:d5:e0: e2:10:c8:bf:68:98:0a:62:3f:04:b7:9a:da:5d:5a:e3:85:f5: 0e:e2:45:8c:4a:13:ed:46:92:a7:ac:38:df:5b:1e:ba:68:07: 9a:d1:9c:e6:29:b0:bb:a7:b0:da:c5:b2:a7:d2:6e:bd:84:b2: bc:bf:60:67:8d:b6:be:93:ea:a7:03:67:52:f0:d0:a2:89:0f: bd:74:b7:28:3e:66:57:46:39:01:be:c6:a7:d0:24:6a:19:94: 8c:b9:4d:47:93:7a:0e:f5:9b:ed:d9:ea:53:f2:17:40:44:90: 7b:26:32:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjYwOTIwMjE0MTUwWhcNMjYwOTI3MjE0MTUwWjAYMRYwFAYD VQQDEw02YWIwNTMxZS1mMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4vCGFNhDEzgpOUxwAQ9AJwgCPAyPgskj+VJCPfCPOZ+Womp3LLSusWuzdiw 85AJlu24bDLwVkWWtoMvq/+bFx4tgXKjc1/ZHCcyzgqUVCu6luSazpVO3c3c5vUK AeMl76bz7JTInXFXkEpvsKFLCJeEgWXDJwHrrxWHelzoHzkQ4STPtgMEwd6WsrEN F8Gmz/XkD+VSwYKCQYSSpscVOUzrrkUVGy20tGbR3COYlqe3P6DFYsySaFkbUcik PpEUME6S4kn8NBg4sgjCCoCwbyZOZPOjZiE7Yc/pvui8tHdtf2jQVoH02NOiinMx ahDqt0Gv6r1hYBqlsiR7lZVsnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9cWVAU /VDeYb6RDY4OJ1NI8G3mMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL1xjRJ6Ne1VKapw+Xv9aaKFmq1ilOaSg6Iyxo41Wvb7YakBw/HZn0Z8wRGzq oM1yU7jmrL6QolCev2zigjLekn4yglqNxCHvTWBiHkFdrG38VeqQh7zX/MIw96xV Dh4kvwHUDJRQD09Pv22dD68o/AcYzoPLi7nSO9w2u4TeG0pe1njrVvqssCBkurRY xdXg4hDIv2iYCmI/BLea2l1a44X1DuJFjEoT7UaSp6w431seumgHmtGc5imwu6ew 2sWyp9JuvYSyvL9gZ422vpPqpwNnUvDQookPvXS3KD5mV0Y5Ab7Gp9AkahmUjLlN R5N6DvWb7dnqU/IXQESQeyYypg== -----END CERTIFICATE-----Generated at Tue Sep 22 01:48:34 2026 by rpki-client