$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: +/EvcEGt+8/1lHSeHvKyAN+3uBDKkJzKcvG43/aTJc8= Subject key identifier: FB:91:3A:DF:6E:37:84:86:E9:03:0F:8B:73:79:AF:10:4C:A5:7B:71 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0C62 Signing time: Sun 20 Sep 2026 18:39:04 +0000 Manifest this update: Sun 20 Sep 2026 18:39:04 +0000 Manifest next update: Sun 27 Sep 2026 18:39:04 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: r38vSvaaSt/BLMYayZU2tkg+69LKtUP0gevxvYWvAs8=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: mJ7FNfAsY8ilIUPeznnb6nLSUZbSai5AntD3LtENWkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Sep 20 18:39:04 2026 GMT Not After : Sep 27 18:39:04 2026 GMT Subject: CN=6ab02848-9ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:42:b6:86:25:a6:ff:5f:22:6d:6c:d5:f5: 13:86:a4:82:dd:29:f0:f4:a3:4d:07:bd:94:cf:21: 28:4f:a3:f6:84:fc:88:30:bc:ec:db:06:97:8e:95: c1:79:0c:be:c3:62:64:8f:ec:41:d4:7f:bb:4b:be: bd:64:90:ba:e7:cd:c1:88:48:06:c4:86:86:c1:99: 6b:6a:52:df:8a:bf:92:e6:ae:3b:e2:ec:9c:16:68: 90:c5:58:e2:a9:a8:70:c3:47:58:86:c4:8f:3b:a6: 1b:a1:da:49:65:c7:2d:a8:44:01:e5:d0:e6:36:9e: 34:80:55:3c:32:85:fc:0c:57:c8:f4:ce:7c:04:63: 7d:fa:b4:2b:ac:eb:74:d7:ba:43:08:b7:48:bb:c2: 19:3c:14:e6:a9:55:c9:4f:ca:f5:f4:16:f3:cf:32: 55:bd:e5:11:9a:b6:0e:d3:d1:02:6a:f0:85:dc:aa: 7c:52:69:f3:05:e3:96:ad:fa:04:53:6c:a6:46:0f: 09:09:3b:95:9e:e4:fd:5b:a3:a6:58:27:6f:5e:a9: 78:c8:5b:e1:c4:a2:f0:83:52:f9:a4:6a:8b:2e:72: 90:4f:29:6e:a5:f4:6b:f7:a5:2d:b0:31:16:b9:1a: 39:ff:bb:9c:c1:ab:bd:93:35:e0:b5:4a:cc:92:e7: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:91:3A:DF:6E:37:84:86:E9:03:0F:8B:73:79:AF:10:4C:A5:7B:71 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:85:74:7f:dc:75:87:df:fb:87:f3:d1:05:e9:e1:7b:f2: 83:58:35:15:06:79:a6:c5:94:be:4b:45:af:f7:25:a9:1c:4b: 0f:a5:a0:33:f1:99:71:74:88:cc:d6:f6:a0:97:c3:5d:4e:23: 25:5f:87:aa:52:a1:5d:fe:fd:dd:ea:fb:4b:91:d9:8d:d0:b4: 70:d2:f4:97:88:51:36:aa:4c:03:a4:91:17:ff:98:ca:a3:f0: 56:46:32:de:8f:ae:58:34:37:6e:23:90:ec:e3:04:5f:51:76: 49:74:4c:f9:18:e6:5c:6a:5f:4a:15:c8:8f:b0:16:f9:57:55: d8:46:10:3e:f5:1a:d2:b2:c2:e7:69:3a:f9:8a:71:16:ce:5e: 86:70:e9:b9:fb:b1:f8:f6:a8:ee:02:05:b6:d3:7f:b1:f9:dc: fc:a4:d6:7e:ed:78:1e:92:b9:25:54:a2:72:f2:d7:66:5b:c2: ac:56:76:ce:e7:d3:cd:4a:84:6b:46:81:54:43:77:6c:55:36: 0d:fe:4c:a3:05:25:1f:3c:d8:d9:1b:99:fb:70:0d:dd:c6:7d: e0:17:53:36:3a:ce:13:68:54:e4:2a:36:bd:e9:72:b3:64:e1: b5:4d:1f:72:8b:b7:a2:e5:58:26:bc:00:0d:52:9e:0e:bf:4c: 86:ae:c9:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjYwOTIwMTgzOTA0WhcNMjYwOTI3MTgzOTA0WjAYMRYwFAYD VQQDEw02YWIwMjg0OC05ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQZCtoYlpv9fIm1s1fUThqSC3Snw9KNNB72UzyEoT6P2hPyIMLzs2waXjpXB eQy+w2Jkj+xB1H+7S769ZJC6583BiEgGxIaGwZlralLfir+S5q474uycFmiQxVji qahww0dYhsSPO6YbodpJZcctqEQB5dDmNp40gFU8MoX8DFfI9M58BGN9+rQrrOt0 17pDCLdIu8IZPBTmqVXJT8r19BbzzzJVveURmrYO09ECavCF3Kp8UmnzBeOWrfoE U2ymRg8JCTuVnuT9W6OmWCdvXql4yFvhxKLwg1L5pGqLLnKQTylupfRr96UtsDEW uRo5/7ucwau9kzXgtUrMkufrWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuROt9u N4SG6QMPi3N5rxBMpXtxMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAehWFdH/cdYff+4fz0QXp4Xvyg1g1FQZ5psWUvktFr/clqRxLD6WgM/GZcXSI zNb2oJfDXU4jJV+HqlKhXf793er7S5HZjdC0cNL0l4hRNqpMA6SRF/+YyqPwVkYy 3o+uWDQ3biOQ7OMEX1F2SXRM+RjmXGpfShXIj7AW+VdV2EYQPvUa0rLC52k6+Ypx Fs5ehnDpufux+Pao7gIFttN/sfnc/KTWfu14HpK5JVSicvLXZlvCrFZ2zufTzUqE a0aBVEN3bFU2Df5MowUlHzzY2RuZ+3AN3cZ94BdTNjrOE2hU5Co2velys2ThtU0f cou3ouVYJrwADVKeDr9Mhq7Jlw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:11:28 2026 by rpki-client