$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json) Hash identifier: Huo/YQIUbvLAKZW1eKMJkBEPtQxWWaBuk+UaxzDS3LQ= Subject key identifier: FA:CC:DF:B2:E2:1F:C8:A8:75:C5:ED:5D:3E:18:17:17:2D:C2:66:E7 Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft Manifest number: 02DB Signing time: Tue 06 Oct 2026 06:16:45 +0000 Manifest this update: Tue 06 Oct 2026 06:16:45 +0000 Manifest next update: Tue 13 Oct 2026 06:16:45 +0000 Files and hashes: 1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: 25LoHf7/wGX/iecThWDWFh739cqBSsecHIddwSd2WEA=) 2: dTHGenAG0Y3TNVyWRneW2mjP-F0.asa (hash: JbeJSpkerq+CwxYJ/iF7DBQibaRKdHsrzKWNG6ptUCY=) 3: 349641F2A03111F1889724EB3511F970.roa (hash: CvTC/pIM80we377avR/pdEAzz4NkXAGS/quK/H+TxIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 06:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Validity Not Before: Oct 6 06:16:45 2026 GMT Not After : Oct 13 06:16:45 2026 GMT Subject: CN=6ac4924d-e05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:3a:ef:47:02:e6:12:25:e2:a5:d6:a8:c2: cd:7d:99:9c:fe:f7:c6:af:31:05:a9:63:b1:ab:b3: 14:a0:7a:1d:60:6c:15:71:86:9a:7c:67:f0:53:28: 91:80:20:16:e9:55:ea:62:d3:bc:7d:c6:fd:51:c4: e0:70:3d:49:d6:c2:4e:82:4e:57:03:f2:c3:9d:40: 2f:e7:4d:51:d5:08:23:e8:47:00:ca:15:1e:88:86: 17:e7:d3:18:ac:47:f8:27:11:46:8d:c0:84:b3:a9: ba:69:cb:04:b4:f1:a4:0b:fa:1e:7d:4b:df:56:f8: b4:90:be:97:04:77:96:00:e7:b3:06:7f:0a:d6:7d: f9:f3:18:98:bf:9c:58:85:ad:24:d9:1d:dc:9e:c6: 0e:b4:bd:af:e9:4c:5a:a8:df:60:90:ab:21:6f:33: 13:8f:7e:e3:91:75:65:34:83:3a:32:3e:56:ee:4a: ef:1c:07:7a:b6:b4:dc:5f:8c:21:33:f3:d0:74:06: 3d:72:29:bd:8d:79:60:ba:f8:b6:58:9a:a2:4d:45: a4:d1:b4:d3:f2:c3:7d:2e:1f:37:a7:97:7d:9c:bc: 1e:a5:b5:3d:71:6b:88:d6:69:3d:a0:25:16:e7:7b: 2d:58:c0:b2:6b:64:43:0f:eb:73:e4:ad:76:3b:67: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CC:DF:B2:E2:1F:C8:A8:75:C5:ED:5D:3E:18:17:17:2D:C2:66:E7 X509v3 Authority Key Identifier: keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:47:17:6e:bc:2f:9f:a8:a2:12:04:ca:59:00:55:19:57:cf: 7c:f9:8e:86:f0:82:a9:e8:61:d6:fb:d3:06:01:4c:7b:37:67: 8a:6f:64:0a:ce:c3:83:19:eb:ee:21:a9:c9:29:d1:d2:f1:7e: 5e:80:62:56:77:ac:43:23:01:95:a0:e9:25:75:22:b4:41:a9: a2:9d:32:55:ee:5c:3e:59:1a:5e:fa:e2:9d:8f:f4:a4:c4:54: db:65:3b:6c:c6:39:bd:c3:4e:8b:8d:bb:d2:98:b4:d8:4e:89: a9:d0:75:e4:9d:9c:31:8b:1e:ab:7e:74:7d:65:67:1b:40:80: 04:16:eb:c3:c8:7f:ec:2d:64:62:bd:08:c3:0a:cc:09:db:9a: a6:10:21:a9:e4:1e:12:99:ef:c7:70:2e:77:68:79:20:3c:58: f9:7b:00:2e:7e:4d:ff:a8:c1:b8:82:86:5d:8a:72:b9:87:f7: 3a:da:36:95:f7:b7:41:ab:83:a3:46:2d:de:55:9a:dc:f1:6a: d0:23:a8:96:09:87:ab:e6:84:34:e1:98:aa:67:01:75:65:9a: 72:f1:b1:4e:a9:bf:5d:cf:4c:a3:2e:51:30:b4:7c:cb:f4:7e: 37:50:3f:19:19:8c:a3:2a:b6:36:ad:bf:f3:08:91:22:71:3c: 52:80:36:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNENzUxMTAvBgNVBAUTKDJEQkM0NjVEQTY4MUI1QjMxMTg5N0FCNkM0NjhDMjU0 NzA2RTVEMkYwHhcNMjYxMDA2MDYxNjQ1WhcNMjYxMDEzMDYxNjQ1WjAYMRYwFAYD VQQDEw02YWM0OTI0ZC1lMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5Q670cC5hIl4qXWqMLNfZmc/vfGrzEFqWOxq7MUoHodYGwVcYaafGfwUyiR gCAW6VXqYtO8fcb9UcTgcD1J1sJOgk5XA/LDnUAv501R1Qgj6EcAyhUeiIYX59MY rEf4JxFGjcCEs6m6acsEtPGkC/oefUvfVvi0kL6XBHeWAOezBn8K1n358xiYv5xY ha0k2R3cnsYOtL2v6UxaqN9gkKshbzMTj37jkXVlNIM6Mj5W7krvHAd6trTcX4wh M/PQdAY9cim9jXlguvi2WJqiTUWk0bTT8sN9Lh83p5d9nLwepbU9cWuI1mk9oCUW 53stWMCya2RDD+tz5K12O2fqewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrM37Li H8iodcXtXT4YFxctwmbnMB8GA1UdIwQYMBaAFC28Rl2mgbWzEYl6tsRowlRwbl0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Q3NS81MkRFNEM0QTY0 QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRiTVJpWHEyeEdqQ1ZIQnVY UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xieEdYYWFCdGJNUmlYcTJ4R2pDVkhCdVhTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Q3NS81MkRFNEM0QTY0QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRi TVJpWHEyeEdqQ1ZIQnVYUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUcXbrwvn6iiEgTKWQBVGVfPfPmOhvCCqehh1vvTBgFMezdnim9kCs7Dgxnr 7iGpySnR0vF+XoBiVnesQyMBlaDpJXUitEGpop0yVe5cPlkaXvrinY/0pMRU22U7 bMY5vcNOi4270pi02E6JqdB15J2cMYseq350fWVnG0CABBbrw8h/7C1kYr0IwwrM CduaphAhqeQeEpnvx3Aud2h5IDxY+XsALn5N/6jBuIKGXYpyuYf3Oto2lfe3QauD o0Yt3lWa3PFq0COolgmHq+aENOGYqmcBdWWacvGxTqm/Xc9Moy5RMLR8y/R+N1A/ GRmMoyq2Nq2/8wiRInE8UoA2jA== -----END CERTIFICATE-----Generated at Tue Oct 6 19:50:32 2026 by rpki-client