$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: vhlX3mJZktU9e5NnPrO9XeEKUYEwkaRG82dR3iPWUlA= Subject key identifier: 95:11:A0:E7:13:2B:35:37:80:9D:86:F7:8A:FE:06:F6:3E:B4:EA:57 Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: EA Signing time: Mon 21 Sep 2026 06:35:36 +0000 Manifest this update: Mon 21 Sep 2026 06:35:35 +0000 Manifest next update: Mon 28 Sep 2026 06:35:35 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: ONwQmT0ZZMSHmrZ3yyeAdlOBr7fZ+xab73AXDfrXIAs=) 2: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) 3: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Sep 21 06:35:35 2026 GMT Not After : Sep 28 06:35:35 2026 GMT Subject: CN=6ab0d038-58f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:2a:be:18:af:79:05:7c:d7:41:3e:d2:7c: de:ce:b0:e4:92:48:c9:e7:87:0e:d3:91:23:fb:b1: d3:4b:28:fa:74:68:63:4d:8a:27:b7:4b:22:21:a2: 25:71:a0:58:07:51:24:34:33:c6:e5:68:b0:fa:7a: 70:8c:e0:8b:37:b9:bc:5f:ec:26:74:f8:43:1c:df: 5c:83:4f:a4:cd:e7:02:40:bd:95:c7:6f:70:d2:7a: 5f:38:ba:fc:fe:45:a6:02:d5:90:d1:17:de:f8:52: bc:e6:a6:2d:b7:ad:6c:b9:f2:51:e1:23:bc:90:2c: e9:f7:73:3f:7c:7a:2a:92:0e:de:49:aa:8e:c2:a1: 62:2c:96:57:78:7d:1c:aa:47:1e:dd:cb:d6:bb:38: f1:13:19:19:1b:58:98:8e:57:32:0e:98:f7:3c:95: de:85:f5:e9:e8:99:fd:72:87:98:93:9f:e1:d3:ae: 18:f4:54:1e:8d:94:d8:d0:f4:f7:33:cd:82:d8:fa: ea:ce:ff:27:95:cf:e5:53:ea:e7:cf:1b:d3:51:86: 10:5d:60:8a:3d:db:5d:12:18:28:58:f5:78:ec:62: 4e:05:07:7d:89:7b:6a:c3:dc:50:0f:bf:7f:ac:16: 3b:39:1f:80:14:c8:44:92:f1:94:9c:d3:1f:f8:bd: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:11:A0:E7:13:2B:35:37:80:9D:86:F7:8A:FE:06:F6:3E:B4:EA:57 X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:66:db:f4:1a:d5:42:46:dd:e4:25:33:91:bf:6b:4d:aa:62: b6:6b:87:13:dd:19:72:0e:27:00:d6:c7:3e:85:6a:3b:d8:a0: 81:e6:27:09:49:5f:49:a1:d3:9f:d4:2d:db:ca:9f:52:69:8a: 44:28:31:a5:19:d4:08:5b:5b:6b:77:ae:73:13:f8:b9:6f:1e: be:9e:22:8e:e8:a9:f8:40:ee:a3:9f:3e:48:6f:8b:f3:fb:52: ab:02:c5:2e:2f:7d:1c:34:32:6c:60:28:66:b8:f7:df:e6:be: 9d:18:e1:bf:db:4c:31:17:da:e1:d0:fe:1a:d2:2e:b9:c8:a2: bc:eb:e4:c7:40:ab:c2:d6:b3:79:00:39:8a:67:72:b7:cc:b8: ff:67:74:f3:29:f5:74:06:69:44:3b:7e:3a:2e:cb:94:6f:67: 68:f3:30:0c:3a:6a:a0:31:d7:ee:e6:c5:92:fd:cd:fc:92:f3: 3a:a4:b1:c8:96:9d:5e:f1:c8:45:5a:c0:50:7c:a1:65:2b:9d: 1b:e4:0b:38:79:24:b7:87:d9:14:c6:f3:57:dc:06:48:ce:9f: 29:26:57:0a:51:7f:88:7c:dd:8e:18:aa:36:e7:59:67:0c:2c: d1:82:cf:8d:8b:ce:ff:75:57:c2:b7:2e:79:0c:ac:c6:8f:de: 72:5d:46:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYwOTIxMDYzNTM1WhcNMjYwOTI4MDYzNTM1WjAYMRYwFAYD VQQDEw02YWIwZDAzOC01OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK8qvhiveQV810E+0nzezrDkkkjJ54cO05Ej+7HTSyj6dGhjTYont0siIaIl caBYB1EkNDPG5Wiw+npwjOCLN7m8X+wmdPhDHN9cg0+kzecCQL2Vx29w0npfOLr8 /kWmAtWQ0Rfe+FK85qYtt61sufJR4SO8kCzp93M/fHoqkg7eSaqOwqFiLJZXeH0c qkce3cvWuzjxExkZG1iYjlcyDpj3PJXehfXp6Jn9coeYk5/h064Y9FQejZTY0PT3 M82C2Prqzv8nlc/lU+rnzxvTUYYQXWCKPdtdEhgoWPV47GJOBQd9iXtqw9xQD79/ rBY7OR+AFMhEkvGUnNMf+L3RmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJURoOcT KzU3gJ2G94r+BvY+tOpXMB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApGbb9BrVQkbd5CUzkb9rTapitmuHE90Zcg4nANbHPoVqO9iggeYnCUlfSaHT n9Qt28qfUmmKRCgxpRnUCFtba3eucxP4uW8evp4ijuip+EDuo58+SG+L8/tSqwLF Li99HDQybGAoZrj33+a+nRjhv9tMMRfa4dD+GtIuuciivOvkx0CrwtazeQA5imdy t8y4/2d08yn1dAZpRDt+Oi7LlG9naPMwDDpqoDHX7ubFkv3N/JLzOqSxyJadXvHI RVrAUHyhZSudG+QLOHkkt4fZFMbzV9wGSM6fKSZXClF/iHzdjhiqNudZZwws0YLP jYvO/3VXwrcueQysxo/ecl1G+A== -----END CERTIFICATE-----Generated at Tue Sep 22 06:58:55 2026 by rpki-client