$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: ZtV++RCxMP/C4Fttj/3aVIMIUo+8nDHIy/BJ6VgMN7s= Subject key identifier: DF:9E:40:1F:7A:90:5B:80:E2:C0:6F:3C:20:61:F7:1D:70:2C:20:42 Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 35B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 3592 Signing time: Fri 18 Sep 2026 15:16:20 +0000 Manifest this update: Fri 18 Sep 2026 15:16:19 +0000 Manifest next update: Fri 25 Sep 2026 15:16:19 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: /Yw7wVR3eSFdcwVBGhqfVZKKWZh8KmzuyaYjGPUcDVc=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: HQH51hi8x4G+r78sw5Vb/qFkzB1JErJiNGaCDyzi5E0=) 3: uCAt4SXBl2CtUWyQ22mEcLh7WPg.asa (hash: btoH/G2nBy0fOe8e9v5dhBMJtDpFQdFY2sJmPNuTutI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13744 (0x35b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Sep 18 15:16:19 2026 GMT Not After : Sep 25 15:16:19 2026 GMT Subject: CN=6aad55c3-d960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:ff:0b:21:a8:b1:af:0d:8a:61:96:a2:fe: 5f:c4:43:bd:e0:58:3d:14:e9:91:06:83:8f:40:8c: ae:43:0f:0c:ad:93:94:c5:92:95:b3:66:f2:9f:33: 55:aa:2a:f4:73:03:c9:fb:47:ca:a9:43:fd:05:87: 9b:a8:2c:f8:b3:33:5f:ea:78:fb:60:fc:b4:4b:ff: fb:3c:6d:33:8f:7c:2c:74:3b:39:5e:79:88:15:ba: 57:0a:e1:7a:fa:2c:90:19:4f:a2:32:6a:c1:af:eb: 3c:e5:2e:84:fa:f5:43:56:28:81:e3:2e:70:ec:82: 83:1e:4d:28:2f:a6:c8:ab:b8:62:9b:ec:94:ba:78: 9d:0e:0f:96:b6:c3:75:2f:66:91:68:ff:93:95:a6: 45:93:10:01:af:50:19:ba:f4:7f:b0:96:66:90:3c: 22:6a:d5:8f:35:97:69:6d:ae:7a:e3:7e:73:a3:8b: 70:f9:d7:24:3c:4d:c7:64:7b:73:73:96:b1:78:f6: 1c:bc:e9:f0:3e:72:51:f2:bb:69:b4:0e:77:fb:45: 83:4b:a5:20:55:c5:5d:bf:31:30:a6:95:09:89:77: c6:a1:4b:79:b2:8b:63:ce:f2:8c:07:dd:e0:a3:f3: 2c:d9:7a:b4:7d:c2:73:f2:a2:3c:1f:75:ec:dd:46: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9E:40:1F:7A:90:5B:80:E2:C0:6F:3C:20:61:F7:1D:70:2C:20:42 X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c2:58:bf:e4:d8:d4:a5:85:5b:81:df:10:47:f8:12:96:e9: e7:c0:66:2e:4b:89:33:99:76:e9:be:28:35:7e:46:22:69:2b: 07:df:ce:ce:16:be:de:63:eb:bc:a8:11:6b:b7:7f:da:01:b4: 19:da:e4:79:b3:46:48:f9:3c:3f:e5:30:e7:99:d8:81:fb:d0: 34:30:1c:c9:9d:56:00:ec:ea:7c:f0:33:4a:d6:c9:34:4c:0b: be:34:0d:6d:72:a7:5b:64:3e:c9:00:7d:c3:43:a7:d3:24:58: 95:84:53:98:ef:b8:f9:88:9e:6d:bf:69:38:e6:48:75:97:c0: 1e:42:0a:d2:73:21:8e:53:a8:65:9f:d1:10:68:a1:aa:6a:a1: dc:f1:3b:cd:dd:44:54:72:18:ec:d6:0b:8c:12:f8:3f:25:2d: 45:04:39:2e:a0:77:e4:0d:67:7f:04:46:97:ad:26:29:d5:b6: 0b:49:9a:a8:26:20:00:43:f1:ea:27:3c:8b:b6:4c:2d:3f:45: a7:e6:31:5d:f4:82:ce:3a:2b:31:17:5d:35:43:6a:5a:eb:c6: 20:20:71:0f:d8:a9:bb:25:d0:3f:87:83:03:62:70:c1:fc:b0: 7b:0e:c7:74:d5:47:e0:49:d9:56:06:30:18:0d:6d:1c:d1:b2: b8:42:69:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjYwOTE4MTUxNjE5WhcNMjYwOTI1MTUxNjE5WjAYMRYwFAYD VQQDEw02YWFkNTVjMy1kOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8n/CyGosa8NimGWov5fxEO94Fg9FOmRBoOPQIyuQw8MrZOUxZKVs2bynzNV qir0cwPJ+0fKqUP9BYebqCz4szNf6nj7YPy0S//7PG0zj3wsdDs5XnmIFbpXCuF6 +iyQGU+iMmrBr+s85S6E+vVDViiB4y5w7IKDHk0oL6bIq7him+yUunidDg+WtsN1 L2aRaP+TlaZFkxABr1AZuvR/sJZmkDwiatWPNZdpba56435zo4tw+dckPE3HZHtz c5axePYcvOnwPnJR8rtptA53+0WDS6UgVcVdvzEwppUJiXfGoUt5sotjzvKMB93g o/Ms2Xq0fcJz8qI8H3Xs3UaOSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+eQB96 kFuA4sBvPCBh9x1wLCBCMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgsJYv+TY1KWFW4HfEEf4Epbp58BmLkuJM5l26b4oNX5GImkrB9/Ozha+3mPr vKgRa7d/2gG0GdrkebNGSPk8P+Uw55nYgfvQNDAcyZ1WAOzqfPAzStbJNEwLvjQN bXKnW2Q+yQB9w0On0yRYlYRTmO+4+Yiebb9pOOZIdZfAHkIK0nMhjlOoZZ/REGih qmqh3PE7zd1EVHIY7NYLjBL4PyUtRQQ5LqB35A1nfwRGl60mKdW2C0maqCYgAEPx 6ic8i7ZMLT9Fp+YxXfSCzjorMRddNUNqWuvGICBxD9ipuyXQP4eDA2Jwwfywew7H dNVH4EnZVgYwGA1tHNGyuEJpsw== -----END CERTIFICATE-----Generated at Sun Sep 20 12:49:43 2026 by rpki-client