$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: iaI0phP/SjnAqDw+V5ZuBjeDOqhPMCh7c7XlWRpKWmU= Subject key identifier: 1C:13:57:89:E6:DB:B6:DF:5B:D3:9B:47:1E:8B:FA:76:3A:AD:6E:F9 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: 018C Signing time: Mon 21 Sep 2026 04:25:09 +0000 Manifest this update: Mon 21 Sep 2026 04:25:08 +0000 Manifest next update: Mon 28 Sep 2026 04:25:08 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: YTydDeZiIiBrwcRCZpcgC+j7vkwOlWqMJKKiIFDblL0=) 2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=) 3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Sep 21 04:25:08 2026 GMT Not After : Sep 28 04:25:08 2026 GMT Subject: CN=6ab0b1a4-f85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:e0:65:8f:f4:0f:54:40:06:18:54:f9:ae: ba:c1:55:ae:e2:7a:89:7a:0e:b0:f1:ee:34:57:33: bd:aa:29:d6:47:96:3d:df:e3:17:39:75:f3:37:ca: f3:fc:82:3d:25:c1:68:c1:ce:05:85:14:55:7e:d9: dd:17:5f:4a:db:6c:21:3a:f9:ef:ac:10:23:f5:d4: a5:e5:2e:69:20:80:7f:4e:92:74:ec:36:41:a2:54: 2e:3a:2d:8d:ed:71:8c:e1:8b:af:24:19:dc:fa:bd: 58:5f:a8:03:62:56:99:d7:8a:03:a4:92:37:a4:ab: cd:d9:d5:41:b1:72:ce:18:19:52:d1:fa:81:5c:36: 28:cd:9f:df:47:16:0b:16:99:05:61:d5:82:35:71: d8:a1:b1:2a:cc:b0:9a:b4:a5:cd:4a:25:1b:9d:8c: 09:15:d9:84:e0:51:0b:41:0e:f9:f8:8e:b7:fd:21: d8:4d:e3:9f:cb:b4:68:bb:df:4b:de:67:d8:8e:0b: 27:cf:0d:a4:b0:f3:f1:9b:9c:b6:13:dc:03:f9:be: 10:95:88:b0:dd:0c:17:02:9e:86:6d:ff:48:2b:ed: 74:0d:d2:5b:b3:51:54:62:fb:c1:ac:00:50:e8:82: d4:bb:66:70:1f:b7:30:2d:4a:25:00:13:00:4a:1f: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:13:57:89:E6:DB:B6:DF:5B:D3:9B:47:1E:8B:FA:76:3A:AD:6E:F9 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ef:94:ea:c0:c3:f2:90:0e:aa:90:7c:63:ac:cc:7b:dc:d0: a8:b8:69:cf:07:43:1b:32:fb:1d:ea:64:0e:a6:d1:eb:cd:35: 4e:f0:c2:c2:d2:ca:42:88:ad:77:03:23:ba:5b:da:b8:b5:30: 1d:e7:dd:9e:a2:a7:42:44:aa:b2:1f:32:77:59:c0:39:80:dc: 4f:d5:d8:34:d1:44:06:22:fc:62:b3:ef:ff:4d:5d:3d:bc:af: e0:45:1c:a6:98:d6:cb:4b:61:06:9b:c8:12:a3:e7:15:0b:29: 70:8a:11:ab:24:59:16:c0:aa:1f:7a:e4:68:ed:49:fb:3a:65: 9a:5d:96:38:5b:15:72:48:5d:f2:78:76:36:23:73:42:ea:f8: 4e:8b:98:9b:b4:41:9d:81:d1:23:82:f8:92:e6:7d:6f:99:d3: 91:9a:f4:11:21:2d:da:93:80:53:ad:04:3a:26:06:95:d4:ea: c4:3c:5f:96:84:2b:61:2b:52:2a:05:5a:3c:31:1c:07:69:f7: be:80:27:b0:7b:05:97:8b:88:1b:78:50:e0:fc:1f:86:77:33: b8:f7:20:60:27:b8:9c:85:39:84:42:ae:b2:50:25:4a:7f:1b: 33:9e:93:51:ae:7d:25:17:a2:40:62:03:ac:62:ea:90:6f:81: 7e:3b:44:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjYwOTIxMDQyNTA4WhcNMjYwOTI4MDQyNTA4WjAYMRYwFAYD VQQDEw02YWIwYjFhNC1mODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1XgZY/0D1RABhhU+a66wVWu4nqJeg6w8e40VzO9qinWR5Y93+MXOXXzN8rz /II9JcFowc4FhRRVftndF19K22whOvnvrBAj9dSl5S5pIIB/TpJ07DZBolQuOi2N 7XGM4YuvJBnc+r1YX6gDYlaZ14oDpJI3pKvN2dVBsXLOGBlS0fqBXDYozZ/fRxYL FpkFYdWCNXHYobEqzLCatKXNSiUbnYwJFdmE4FELQQ75+I63/SHYTeOfy7Rou99L 3mfYjgsnzw2ksPPxm5y2E9wD+b4QlYiw3QwXAp6Gbf9IK+10DdJbs1FUYvvBrABQ 6ILUu2ZwH7cwLUolABMASh8YJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwTV4nm 27bfW9ObRx6L+nY6rW75MB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX++U6sDD8pAOqpB8Y6zMe9zQqLhpzwdDGzL7HepkDqbR6801TvDCwtLKQoit dwMjulvauLUwHefdnqKnQkSqsh8yd1nAOYDcT9XYNNFEBiL8YrPv/01dPbyv4EUc ppjWy0thBpvIEqPnFQspcIoRqyRZFsCqH3rkaO1J+zplml2WOFsVckhd8nh2NiNz Qur4TouYm7RBnYHRI4L4kuZ9b5nTkZr0ESEt2pOAU60EOiYGldTqxDxfloQrYStS KgVaPDEcB2n3voAnsHsFl4uIG3hQ4PwfhnczuPcgYCe4nIU5hEKuslAlSn8bM56T Ua59JReiQGIDrGLqkG+BfjtE8A== -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:32 2026 by rpki-client