$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft File: lFwg-9B2Q_0GLCpQroE0vOVb06E.mft (raw, json) Hash identifier: AvqQ80BYqj+UPq4BPtvLqVCQ77m1AnubgsVouZgmuiQ= Subject key identifier: FE:91:9B:E8:6F:3E:E0:72:39:CB:38:64:A2:E9:3B:22:1D:BC:6D:D8 Authority key identifier: 94:5C:20:FB:D0:76:43:FD:06:2C:2A:50:AE:81:34:BC:E5:5B:D3:A1 Certificate issuer: /CN=A915AEB5/serialNumber=945C20FBD07643FD062C2A50AE8134BCE55BD3A1 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft Manifest number: 14 Signing time: Sun 11 Oct 2026 09:47:06 +0000 Manifest this update: Sun 11 Oct 2026 09:47:05 +0000 Manifest next update: Sun 18 Oct 2026 09:47:05 +0000 Files and hashes: 1: lFwg-9B2Q_0GLCpQroE0vOVb06E.crl (hash: W4E+1xIE7jH2v/ZhyFIvv0AODU5ybmIffHZZuNFJgVU=) 2: 00B5B2CAAE1211F1954733B94E11F970.roa (hash: BPjtbNqMSVFm7GMmktha8r/KyoyUmgzAgYzGdPTKU30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.crl rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AEB5, serialNumber=945C20FBD07643FD062C2A50AE8134BCE55BD3A1 Validity Not Before: Oct 11 09:47:05 2026 GMT Not After : Oct 18 09:47:05 2026 GMT Subject: CN=6acb5b1a-4b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:ad:ae:db:ab:3d:ba:1a:72:f3:ce:93:af: 94:c1:f2:8d:e4:47:40:e6:f5:5f:97:39:66:b5:71: 59:10:67:d8:a6:e0:9e:40:6a:ac:04:c9:14:a7:04: ac:b7:0b:e4:ab:23:90:8e:07:14:56:8c:03:2f:b8: 06:a9:85:47:b5:3e:2b:2a:3a:98:71:e1:56:fb:9d: 5f:db:af:81:72:73:d8:3c:30:a1:cd:a4:0e:82:8b: 30:c1:b0:ad:b9:58:1f:c2:a8:93:6c:d9:24:6d:a0: 1e:7a:7a:e3:71:7a:0f:90:4a:78:96:6a:96:a0:d7: f4:02:81:61:4e:19:8c:ab:fe:fc:9c:26:2a:a3:92: ed:63:79:77:20:dc:d2:e1:84:d9:3a:1c:07:88:fc: d9:01:24:8f:67:97:14:22:5e:bd:93:f6:f2:32:e9: d6:50:bd:93:47:85:bf:bd:cd:1b:32:b6:cc:9f:96: 2a:d0:f6:c7:bf:05:62:63:73:dc:60:53:00:ab:43: 68:17:4c:b3:c9:a3:81:14:d4:18:86:2b:77:0f:2a: 14:a6:04:6e:02:5f:ae:f6:f1:81:71:06:c0:23:3a: a5:e2:89:c6:bf:e5:6c:2f:78:51:69:80:7d:83:56: 98:d9:d5:68:ce:42:59:d7:f1:48:35:8f:18:54:5b: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:91:9B:E8:6F:3E:E0:72:39:CB:38:64:A2:E9:3B:22:1D:BC:6D:D8 X509v3 Authority Key Identifier: keyid:94:5C:20:FB:D0:76:43:FD:06:2C:2A:50:AE:81:34:BC:E5:5B:D3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c4:f2:ba:ce:33:50:e9:89:96:e5:71:66:c4:ed:c5:b0:2d: 84:3c:7a:22:23:94:30:bd:5c:7c:59:1f:ae:a8:ef:b1:d7:63: 9d:74:09:4f:18:09:be:61:eb:02:0f:e0:27:29:0f:5f:52:47: 6d:40:bd:58:d1:25:86:ac:8c:cb:f8:44:33:8f:67:e0:8d:79: a8:c4:72:fd:7d:ea:fb:7b:5a:82:c6:07:75:36:93:97:9e:dd: fa:d7:9b:15:4c:59:74:ff:bc:6d:a1:44:5d:de:ca:c6:50:05: c1:b1:09:4c:82:29:f4:21:ec:07:46:49:ec:ba:cb:ff:d0:dd: 16:6a:37:0f:bb:55:68:c7:dc:b9:24:73:38:16:6c:ea:d5:b3: 40:f0:95:e5:98:79:7a:e2:5c:94:24:2b:69:55:e9:0e:3c:38: 2c:6f:aa:15:cd:09:cf:78:78:49:61:b1:d5:fa:94:a0:9f:4b: c9:89:89:18:33:1c:a8:f8:5f:a9:14:a2:4d:02:a3:2e:a1:7a: 20:8b:a9:ed:bc:13:3c:34:b9:4a:2e:1c:ce:90:b0:35:01:07: 8c:a2:31:e8:1f:77:41:98:8f:e9:12:a5:1c:60:7f:cd:38:2e: 70:02:57:0a:f3:a4:b0:fc:83:c6:f2:82:73:28:f8:d4:6c:12: 28:77:7f:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUVCNTExMC8GA1UEBRMoOTQ1QzIwRkJEMDc2NDNGRDA2MkMyQTUwQUU4MTM0QkNF NTVCRDNBMTAeFw0yNjEwMTEwOTQ3MDVaFw0yNjEwMTgwOTQ3MDVaMBgxFjAUBgNV BAMTDTZhY2I1YjFhLTRiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmd62u26s9uhpy886Tr5TB8o3kR0Dm9V+XOWa1cVkQZ9im4J5AaqwEyRSnBKy3 C+SrI5COBxRWjAMvuAaphUe1PisqOphx4Vb7nV/br4Fyc9g8MKHNpA6CizDBsK25 WB/CqJNs2SRtoB56euNxeg+QSniWapag1/QCgWFOGYyr/vycJiqjku1jeXcg3NLh hNk6HAeI/NkBJI9nlxQiXr2T9vIy6dZQvZNHhb+9zRsytsyflirQ9se/BWJjc9xg UwCrQ2gXTLPJo4EU1BiGK3cPKhSmBG4CX6728YFxBsAjOqXiica/5WwveFFpgH2D VpjZ1WjOQlnX8Ug1jxhUWzKrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/pGb6G8+ 4HI5yzhkouk7Ih28bdgwHwYDVR0jBBgwFoAUlFwg+9B2Q/0GLCpQroE0vOVb06Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBRUI1LzlFMzQyRDNFQUUx MTExRjE4NzRCOUU5MjRFMTFGOTcwL2xGd2ctOUIyUV8wR0xDcFFyb0Uwdk9WYjA2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEZ3Zy05QjJRXzBHTENwUXJvRTB2T1ZiMDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB RUI1LzlFMzQyRDNFQUUxMTExRjE4NzRCOUU5MjRFMTFGOTcwL2xGd2ctOUIyUV8w R0xDcFFyb0Uwdk9WYjA2RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACxPK6zjNQ6YmW5XFmxO3FsC2EPHoiI5QwvVx8WR+uqO+x12OddAlPGAm+YesC D+AnKQ9fUkdtQL1Y0SWGrIzL+EQzj2fgjXmoxHL9fer7e1qCxgd1NpOXnt3615sV TFl0/7xtoURd3srGUAXBsQlMgin0IewHRknsusv/0N0WajcPu1Vox9y5JHM4Fmzq 1bNA8JXlmHl64lyUJCtpVekOPDgsb6oVzQnPeHhJYbHV+pSgn0vJiYkYMxyo+F+p FKJNAqMuoXogi6ntvBM8NLlKLhzOkLA1AQeMojHoH3dBmI/pEqUcYH/NOC5wAlcK 86Sw/IPG8oJzKPjUbBIod381 -----END CERTIFICATE-----Generated at Sun Oct 11 18:45:38 2026 by rpki-client