$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: l3a70qlZQKMKFD5qol4VaG9ZKHvdIT8iMlqwgRbQeWw= Subject key identifier: EC:E8:32:33:24:DE:01:08:7E:3A:C9:EA:0C:0B:07:0D:16:BC:8D:B5 Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 0217 Signing time: Mon 21 Sep 2026 02:59:29 +0000 Manifest this update: Mon 21 Sep 2026 02:59:29 +0000 Manifest next update: Mon 28 Sep 2026 02:59:29 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: iYI8EA1+ZFIc5PHNl+3DHMslgOpEwL5mcrCef6+V4Bs=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=) 3: 2giYZ4FJY1AfV1i-ox9a5yMxwJc.asa (hash: IwYHYQgU1YboVtedT/IywN6meXIP64gHd/NsfENFs4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Sep 21 02:59:29 2026 GMT Not After : Sep 28 02:59:29 2026 GMT Subject: CN=6ab09d91-4ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:d3:07:97:7d:9f:8c:96:21:a8:fd:78:30: 4e:33:d0:45:ff:41:cb:28:39:0c:4d:ea:40:e1:15: 6a:fe:2c:7c:d9:fe:65:6e:00:3f:93:46:49:b5:ba: f9:27:8e:f4:07:7b:b5:ce:22:f8:90:0c:da:d5:8b: 7f:52:48:43:65:7a:c2:30:39:00:63:59:4e:19:71: 3d:8b:8f:38:81:81:99:1f:07:6e:3e:b6:0e:1a:41: 09:7c:8f:37:97:b6:88:f0:ff:ab:dd:77:cb:a1:bd: 86:0e:b7:3c:3c:3e:e2:8c:84:ba:b3:8c:b3:69:8b: 8e:4b:67:3a:c8:20:22:f7:2b:4b:10:6f:dd:68:55: 6c:a6:f0:8c:52:3e:e2:52:57:85:87:c5:b5:82:eb: 2d:22:f1:e4:6a:09:47:19:4a:ed:4a:a7:9e:3f:04: 10:49:77:7d:29:18:bc:47:35:48:56:be:a8:a9:ac: 9d:d5:df:99:41:c2:10:a6:4d:70:c0:5e:8a:ec:d7: e0:30:05:6c:c9:a9:42:ff:48:e5:f9:87:53:f6:bc: b7:f7:7b:a9:68:fc:55:43:8a:94:55:ee:bb:d3:e5: 93:83:9e:cb:04:d0:62:51:8f:b8:2c:a5:73:48:83: 7e:d0:9f:88:d1:5f:0b:fe:2d:0f:68:9b:a2:a9:38: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E8:32:33:24:DE:01:08:7E:3A:C9:EA:0C:0B:07:0D:16:BC:8D:B5 X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:94:97:66:5a:e1:cb:ee:fb:08:b9:03:ac:85:f1:af:07:5d: 44:10:bb:96:4a:04:00:29:83:5d:0e:4a:9c:dc:2f:f6:21:e1: fb:49:1d:5d:8c:48:2a:02:70:17:69:f4:be:7e:81:24:e9:42: c2:71:a8:c4:0a:9b:d2:b7:5d:a8:77:83:c1:37:54:9d:d2:8e: 82:9f:89:00:3f:74:b3:57:f7:b3:ac:1b:5b:3f:0b:cb:1c:2c: 18:fd:a5:3c:fb:78:c6:dd:7b:5b:cb:99:48:d7:1f:0e:0c:ac: d5:9b:6d:34:33:b6:ff:c9:82:e9:5e:02:25:83:29:0a:c6:c1: 2a:e5:e6:0f:98:ca:8b:cc:1f:ae:bb:44:69:12:08:8f:77:41: 6b:d1:3f:f7:fc:c8:78:06:7d:17:00:81:01:b0:8b:95:0f:1c: 92:ba:7f:7c:06:b8:56:8a:df:86:38:46:23:f4:b6:a4:db:d0: 36:bf:1c:4c:d0:b7:61:29:13:7e:de:2d:b9:20:cf:35:51:5c: 75:21:b6:92:ce:87:9c:02:2b:9a:00:4b:f9:cf:39:11:1c:04: 81:fd:cd:f2:10:d4:d8:e7:01:3b:42:4c:d5:03:ee:12:1a:40: a2:84:11:20:2d:ca:f2:40:4d:9d:57:90:df:e8:cf:96:6c:16: 2e:fb:ad:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjYwOTIxMDI1OTI5WhcNMjYwOTI4MDI1OTI5WjAYMRYwFAYD VQQDEw02YWIwOWQ5MS00YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBLTB5d9n4yWIaj9eDBOM9BF/0HLKDkMTepA4RVq/ix82f5lbgA/k0ZJtbr5 J470B3u1ziL4kAza1Yt/UkhDZXrCMDkAY1lOGXE9i484gYGZHwduPrYOGkEJfI83 l7aI8P+r3XfLob2GDrc8PD7ijIS6s4yzaYuOS2c6yCAi9ytLEG/daFVspvCMUj7i UleFh8W1gustIvHkaglHGUrtSqeePwQQSXd9KRi8RzVIVr6oqayd1d+ZQcIQpk1w wF6K7NfgMAVsyalC/0jl+YdT9ry393upaPxVQ4qUVe670+WTg57LBNBiUY+4LKVz SIN+0J+I0V8L/i0PaJuiqTh5UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzoMjMk 3gEIfjrJ6gwLBw0WvI21MB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5SXZlrhy+77CLkDrIXxrwddRBC7lkoEACmDXQ5KnNwv9iHh+0kdXYxIKgJw F2n0vn6BJOlCwnGoxAqb0rddqHeDwTdUndKOgp+JAD90s1f3s6wbWz8LyxwsGP2l PPt4xt17W8uZSNcfDgys1ZttNDO2/8mC6V4CJYMpCsbBKuXmD5jKi8wfrrtEaRII j3dBa9E/9/zIeAZ9FwCBAbCLlQ8ckrp/fAa4VorfhjhGI/S2pNvQNr8cTNC3YSkT ft4tuSDPNVFcdSG2ks6HnAIrmgBL+c85ERwEgf3N8hDU2OcBO0JM1QPuEhpAooQR IC3K8kBNnVeQ3+jPlmwWLvutvw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:25:05 2026 by rpki-client