$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json) Hash identifier: CBkzl1LMJeP63htJDCvrGck/HpNOJLEWcSCKbNtFIyo= Subject key identifier: 44:6C:93:10:54:20:2F:E2:4D:7A:06:1F:46:53:0B:7B:3A:58:49:7A Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft Manifest number: 0238 Signing time: Mon 12 Oct 2026 18:33:31 +0000 Manifest this update: Mon 12 Oct 2026 18:33:30 +0000 Manifest next update: Mon 19 Oct 2026 18:33:30 +0000 Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: aYQgoJS1bUsiEFaFUEtrjGG2/4Xjazvd2Hn5ZVMoujg=) 2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: tSRP0mSyeCxo4ldlJd0x8udwsUTZBLiY2tDABXr5M1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Validity Not Before: Oct 12 18:33:30 2026 GMT Not After : Oct 19 18:33:30 2026 GMT Subject: CN=6acd27fb-3f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:38:04:5c:8b:25:90:f9:2b:8b:f8:55:74: 92:af:19:aa:97:28:6d:c0:78:2e:87:20:c4:44:c3: 5a:8c:fd:3c:27:b9:14:09:54:7a:97:ce:85:c5:cc: 73:f2:b7:9a:b4:40:81:89:82:53:0a:e9:9b:8a:9c: 13:51:c4:57:27:97:ad:21:01:09:fd:5e:03:fa:62: 27:22:a1:bb:33:41:4f:ad:67:1b:08:3d:ca:d0:52: 1a:cd:db:08:24:1a:b6:f5:a7:51:d2:fc:1a:b6:7b: d7:fa:87:84:5e:39:3b:b3:71:9d:79:d5:c8:ce:63: ae:bd:de:cd:1c:1a:2b:a9:57:6e:ec:71:66:ac:e5: 6a:09:c3:5e:a2:3f:f3:ea:39:e6:80:8e:8b:08:22: 11:b9:06:e0:3c:2a:f0:82:e8:da:0d:a5:0e:2b:70: 86:8c:5e:d3:0d:ce:35:2d:e1:ca:b8:a3:b0:1f:37: 3e:e4:9b:cf:b9:b3:18:e9:6b:c1:02:db:f6:c7:d2: 47:8e:0e:80:b7:65:3e:11:fe:27:02:92:4f:de:38: 9a:08:b6:ed:fe:04:a5:b2:7c:26:52:37:0f:66:68: f5:9f:ba:e8:2c:bb:5d:e3:af:8f:cc:ff:72:4d:60: 02:5c:57:06:16:cc:7b:67:dd:2a:68:51:65:c4:24: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:93:10:54:20:2F:E2:4D:7A:06:1F:46:53:0B:7B:3A:58:49:7A X509v3 Authority Key Identifier: keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b7:c0:b1:77:56:c1:9f:64:da:f2:0d:f2:ae:9b:2e:1b:9d: 63:ba:05:26:ae:6c:12:1f:16:6d:9b:4f:fb:91:d9:61:ec:ea: 83:1a:ea:47:eb:79:fa:d6:c3:26:b3:c5:55:bd:67:8a:11:96: af:15:67:f0:33:9b:b1:be:ce:6c:41:7b:60:c3:d6:79:10:b4: 2d:41:8e:6f:50:3c:5d:7c:00:6c:33:e6:04:14:b1:7c:f9:b3: 47:d4:42:06:04:09:e2:f8:58:33:9f:16:9c:de:92:23:07:4a: 43:0a:85:61:2a:c1:2e:9e:99:09:ed:c3:ac:00:24:0d:18:32: e4:81:50:48:04:81:d6:cc:54:32:3b:78:8a:5b:d2:35:96:11: d7:01:f9:fa:d3:4d:65:51:80:9b:c6:1a:6b:e3:9d:0a:94:77: 73:02:c5:03:5f:24:a6:9b:ec:0b:aa:a2:74:16:f4:b6:2c:86: 47:63:52:dd:d8:f9:70:d3:ec:61:b6:61:7f:e8:1e:63:cf:0a: c9:0d:29:e1:91:97:0e:64:ea:87:05:ae:f4:f7:b7:d6:a6:99: 5f:e3:f7:25:ff:3b:72:6a:55:73:49:ce:5d:ea:16:2d:18:e7: 97:c8:15:24:b9:02:3e:41:59:34:08:72:7b:ec:7d:de:17:27: 68:68:8f:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKDk0M0FEOUJDNjE3N0FCOEMyRjhFODEzMUMxNEE1NDY1 RUM0Mjk1NEYwHhcNMjYxMDEyMTgzMzMwWhcNMjYxMDE5MTgzMzMwWjAYMRYwFAYD VQQDEw02YWNkMjdmYi0zZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys04BFyLJZD5K4v4VXSSrxmqlyhtwHguhyDERMNajP08J7kUCVR6l86Fxcxz 8reatECBiYJTCumbipwTUcRXJ5etIQEJ/V4D+mInIqG7M0FPrWcbCD3K0FIazdsI JBq29adR0vwatnvX+oeEXjk7s3GdedXIzmOuvd7NHBorqVdu7HFmrOVqCcNeoj/z 6jnmgI6LCCIRuQbgPCrwgujaDaUOK3CGjF7TDc41LeHKuKOwHzc+5JvPubMY6WvB Atv2x9JHjg6At2U+Ef4nApJP3jiaCLbt/gSlsnwmUjcPZmj1n7roLLtd46+PzP9y TWACXFcGFsx7Z90qaFFlxCRTnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERskxBU IC/iTXoGH0ZTC3s6WEl6MB8GA1UdIwQYMBaAFJQ62bxhd6uML46BMcFKVGXsQpVP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC8zNjE4QUI2RTcy QTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0d3Zqb0V4d1VwVVpleENs VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xEclp2R0YzcTR3dmpvRXh3VXBVWmV4Q2xVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC8zNjE4QUI2RTcyQTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0 d3Zqb0V4d1VwVVpleENsVTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGbfAsXdWwZ9k2vIN8q6bLhudY7oFJq5sEh8WbZtP+5HZYezqgxrqR+t5+tbD JrPFVb1nihGWrxVn8DObsb7ObEF7YMPWeRC0LUGOb1A8XXwAbDPmBBSxfPmzR9RC BgQJ4vhYM58WnN6SIwdKQwqFYSrBLp6ZCe3DrAAkDRgy5IFQSASB1sxUMjt4ilvS NZYR1wH5+tNNZVGAm8Yaa+OdCpR3cwLFA18kppvsC6qidBb0tiyGR2NS3dj5cNPs YbZhf+geY88KyQ0p4ZGXDmTqhwWu9Pe31qaZX+P3Jf87cmpVc0nOXeoWLRjnl8gV JLkCPkFZNAhye+x93hcnaGiPcw== -----END CERTIFICATE-----Generated at Wed Oct 14 17:33:24 2026 by rpki-client