$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json) Hash identifier: HRp+GLNaNb5ZtXtDBO2eKe6TnwuRKuZeHZ2k+eM4gVI= Subject key identifier: AD:0A:C0:80:C6:6B:32:A0:01:59:04:32:1C:F1:02:EE:AA:61:9C:D0 Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft Manifest number: 06F0 Signing time: Mon 21 Sep 2026 00:01:29 +0000 Manifest this update: Mon 21 Sep 2026 00:01:28 +0000 Manifest next update: Mon 28 Sep 2026 00:01:28 +0000 Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: 7l/MvYlvIlNPppXkJOSARyHSxAX2btWJl0nEqfCIRBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Validity Not Before: Sep 21 00:01:28 2026 GMT Not After : Sep 28 00:01:28 2026 GMT Subject: CN=6ab073d9-9df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:c3:37:bd:ae:8a:b3:e8:5e:83:77:37:54: a0:de:41:06:28:b7:c2:b3:c4:34:a0:ba:a1:50:41: 2e:7e:17:67:30:a8:91:f6:6f:f2:86:cc:4c:23:55: 18:c4:3d:e1:92:bf:da:93:b0:a7:94:11:32:5b:7e: 60:77:5f:94:17:62:54:01:9a:89:57:0c:d6:60:a4: 56:e4:61:1d:1a:49:00:ca:d0:c6:5e:ef:8a:28:98: a2:fa:3d:8f:cf:a1:37:67:6c:d9:3b:00:20:58:1a: c6:39:33:6a:f3:de:30:81:fc:db:15:c8:fb:23:30: e2:52:65:45:b4:e9:b1:43:9e:b6:4a:3c:ae:74:2b: e7:be:fb:40:08:3a:b5:21:27:c1:6a:91:c5:d8:5b: 48:c8:31:7b:97:e1:25:d2:fe:36:02:c8:30:b7:c9: c7:eb:8c:a1:c4:b7:f8:50:51:8e:d1:45:1c:07:14: b8:ba:5e:c3:f3:a3:43:92:8a:6f:b6:b2:09:bd:c5: fa:67:86:86:9e:96:16:f1:cd:64:3f:f5:a4:11:b1: ea:ae:67:62:55:7d:20:a9:f3:01:13:29:d0:24:40: 7f:08:a7:b0:34:ec:5d:fe:7b:b0:0a:34:2b:35:5b: cf:7c:43:1e:78:81:72:ba:0d:c0:a2:75:42:15:8f: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0A:C0:80:C6:6B:32:A0:01:59:04:32:1C:F1:02:EE:AA:61:9C:D0 X509v3 Authority Key Identifier: keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:dc:a7:59:39:99:b9:73:13:4d:45:b5:7e:a8:10:91:3f:9b: 23:fd:a0:3f:d0:32:f6:fa:b1:6e:63:72:ed:70:21:ab:06:61: 0c:45:d9:bd:f7:05:d2:45:35:dd:95:6c:9a:89:53:37:28:1c: 33:4e:62:84:7f:33:b7:79:f5:55:bb:82:bb:55:27:f1:27:01: 4f:93:eb:3d:b2:dc:7f:42:16:79:c7:38:46:54:d2:3d:b7:08: 33:76:66:a0:30:ea:d0:da:6c:78:6c:c5:c3:a7:aa:7d:4e:63: af:d5:27:25:01:16:7c:03:f0:4a:19:cd:ac:09:75:9c:ab:02: a5:03:be:da:12:60:53:c5:6a:b4:32:ba:10:0f:52:7d:f5:d5: 1e:67:df:21:e4:3f:ec:72:fe:2b:5f:dd:bc:b4:39:3c:5e:0b: c0:83:cb:a9:80:90:f2:9a:84:78:7b:df:41:29:90:4a:1c:dc: a6:32:f2:1b:1c:45:e5:1b:1a:d2:1b:98:78:66:13:81:54:4a: 7c:a8:5a:8f:78:ef:3e:db:a9:03:26:3b:ef:f0:d6:0c:83:7c: eb:7f:55:e4:a2:f0:6d:41:08:5d:26:91:1c:b9:13:5c:24:19: 7b:c5:4b:e1:9a:bb:3f:3e:db:dd:6e:45:82:58:a6:04:64:b4: 46:f4:1c:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx ODA0RTM1RTYwHhcNMjYwOTIxMDAwMTI4WhcNMjYwOTI4MDAwMTI4WjAYMRYwFAYD VQQDEw02YWIwNzNkOS05ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV7DN72uirPoXoN3N1Sg3kEGKLfCs8Q0oLqhUEEufhdnMKiR9m/yhsxMI1UY xD3hkr/ak7CnlBEyW35gd1+UF2JUAZqJVwzWYKRW5GEdGkkAytDGXu+KKJii+j2P z6E3Z2zZOwAgWBrGOTNq894wgfzbFcj7IzDiUmVFtOmxQ562SjyudCvnvvtACDq1 ISfBapHF2FtIyDF7l+El0v42Asgwt8nH64yhxLf4UFGO0UUcBxS4ul7D86NDkopv trIJvcX6Z4aGnpYW8c1kP/WkEbHqrmdiVX0gqfMBEynQJEB/CKewNOxd/nuwCjQr NVvPfEMeeIFyug3AonVCFY9AwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0KwIDG azKgAVkEMhzxAu6qYZzQMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1Bo Z0w5MUpyb2RsVElZQk9OZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ9ynWTmZuXMTTUW1fqgQkT+bI/2gP9Ay9vqxbmNy7XAhqwZhDEXZvfcF0kU1 3ZVsmolTNygcM05ihH8zt3n1VbuCu1Un8ScBT5PrPbLcf0IWecc4RlTSPbcIM3Zm oDDq0NpseGzFw6eqfU5jr9UnJQEWfAPwShnNrAl1nKsCpQO+2hJgU8VqtDK6EA9S ffXVHmffIeQ/7HL+K1/dvLQ5PF4LwIPLqYCQ8pqEeHvfQSmQShzcpjLyGxxF5Rsa 0huYeGYTgVRKfKhaj3jvPtupAyY77/DWDIN8639V5KLwbUEIXSaRHLkTXCQZe8VL 4Zq7Pz7b3W5FglimBGS0RvQcug== -----END CERTIFICATE-----Generated at Tue Sep 22 04:10:35 2026 by rpki-client