$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: wdYkWYAzKtxx1ZIyCuG+92CMR6+QGS1RDGQCD3QhHl8= Subject key identifier: BC:37:02:2E:16:F2:9D:34:61:66:23:C4:B2:5A:0A:3B:23:6A:85:F8 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0D2E Signing time: Tue 22 Sep 2026 18:09:10 +0000 Manifest this update: Tue 22 Sep 2026 18:09:10 +0000 Manifest next update: Tue 29 Sep 2026 18:09:10 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: 9/zVkoJ20jw4A/d5B453qlHc6rYh2RqzVuGQ/J5jIII=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: /MtJQ2aFPi8HYTchwzSmXpRAnCoGqWuQ+vHypfNM8zk=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: PU5K85ByPeJlmo+7kA0ZUbRl2pb30nPNJ3u58gZkpSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Sep 22 18:09:10 2026 GMT Not After : Sep 29 18:09:10 2026 GMT Subject: CN=6ab2c446-53da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:99:bb:e2:c9:d4:42:5f:45:14:1f:d0:aa:f6: 80:64:ce:47:6c:de:a1:10:17:b2:66:6d:2c:5c:0b: 42:20:6d:7e:7c:ed:2c:f0:4c:39:05:ca:32:e6:18: f5:15:8a:00:d3:b9:b5:04:dc:62:1a:4b:c0:2a:54: d6:d3:9e:a2:21:15:58:00:53:27:fc:a5:5a:fc:b0: ea:81:5d:69:8d:02:83:50:10:c5:f9:9a:b4:37:21: 3c:33:52:24:06:e9:5c:98:c8:4b:92:da:c0:48:41: ac:76:df:57:56:24:2c:7c:3b:d1:03:d0:40:98:90: eb:67:2c:14:7a:43:a2:49:3f:78:fc:7e:8c:b3:7d: 17:b5:5a:dc:7f:cd:24:20:ee:1e:85:7d:27:42:42: 8c:8b:30:63:44:67:84:8f:48:49:ad:d0:5f:c3:9e: 3e:c9:0f:d9:19:45:7a:f1:f6:10:05:2a:fc:e7:3d: 37:21:76:2b:7d:3a:ba:d3:06:8c:88:76:87:6c:c1: 17:7f:a7:c4:5a:89:55:49:e8:e8:9a:93:f1:9f:22: 4e:9b:28:90:2e:43:28:b0:ea:a4:0d:e5:5d:81:4e: 03:78:2e:d2:55:18:88:80:d9:30:f3:3e:41:ad:07: 2c:93:92:a9:67:89:bd:e3:bd:ef:9b:c5:af:4c:34: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:37:02:2E:16:F2:9D:34:61:66:23:C4:B2:5A:0A:3B:23:6A:85:F8 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:49:6e:43:34:d0:3e:b1:8a:19:98:1b:dc:44:db:07:2e:39: 70:66:ca:31:65:1a:d0:36:96:37:e6:0d:f8:7d:ea:33:5d:9c: bd:df:15:68:83:0c:29:4d:a5:9f:3f:3f:6a:45:80:91:39:e9: d7:e4:c1:1d:01:ed:dc:f1:c4:03:ee:dc:22:e3:f7:59:52:fa: 8a:ea:a3:f3:4f:9f:51:d1:be:fa:f6:73:d3:17:97:3c:19:a8: c7:30:42:08:39:69:e9:7f:a8:78:1a:1d:a4:6c:e3:5e:01:19: d4:24:b4:79:07:a0:e7:1c:83:05:9a:88:e6:e5:90:b6:d8:4b: 9b:80:5b:c3:1b:d4:6b:2a:34:5c:c1:cb:4e:e0:c2:84:55:20: 89:b4:63:06:53:1a:a6:bd:67:bb:c6:5c:f6:c6:a1:85:96:0c: b0:3d:ea:43:95:bd:c2:5b:e4:03:74:bc:85:be:e7:56:23:c0: ce:ce:8d:cb:9b:19:5b:c8:b7:fd:b2:09:1b:d9:37:39:cc:93: 10:0d:a2:7c:ba:04:28:a5:a9:0a:0b:cc:e6:23:4e:62:0c:55: e0:69:a2:c3:90:33:35:d2:d2:4f:aa:3e:2b:89:fb:4c:33:48: 4b:15:d3:69:ed:91:85:21:fa:1d:73:a8:aa:b3:04:f0:18:71: 04:e2:d7:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjYwOTIyMTgwOTEwWhcNMjYwOTI5MTgwOTEwWjAYMRYwFAYD VQQDEw02YWIyYzQ0Ni01M2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Zm74snUQl9FFB/QqvaAZM5HbN6hEBeyZm0sXAtCIG1+fO0s8Ew5Bcoy5hj1 FYoA07m1BNxiGkvAKlTW056iIRVYAFMn/KVa/LDqgV1pjQKDUBDF+Zq0NyE8M1Ik BulcmMhLktrASEGsdt9XViQsfDvRA9BAmJDrZywUekOiST94/H6Ms30XtVrcf80k IO4ehX0nQkKMizBjRGeEj0hJrdBfw54+yQ/ZGUV68fYQBSr85z03IXYrfTq60waM iHaHbMEXf6fEWolVSejompPxnyJOmyiQLkMosOqkDeVdgU4DeC7SVRiIgNkw8z5B rQcsk5KpZ4m9473vm8WvTDTlXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLw3Ai4W 8p00YWYjxLJaCjsjaoX4MB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhUluQzTQPrGKGZgb3ETbBy45cGbKMWUa0DaWN+YN+H3qM12cvd8VaIMMKU2l nz8/akWAkTnp1+TBHQHt3PHEA+7cIuP3WVL6iuqj80+fUdG++vZz0xeXPBmoxzBC CDlp6X+oeBodpGzjXgEZ1CS0eQeg5xyDBZqI5uWQtthLm4BbwxvUayo0XMHLTuDC hFUgibRjBlMapr1nu8Zc9sahhZYMsD3qQ5W9wlvkA3S8hb7nViPAzs6Ny5sZW8i3 /bIJG9k3OcyTEA2ifLoEKKWpCgvM5iNOYgxV4Gmiw5AzNdLST6o+K4n7TDNISxXT ae2RhSH6HXOoqrME8BhxBOLX5w== -----END CERTIFICATE-----Generated at Thu Sep 24 03:18:34 2026 by rpki-client