$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: LJxW+6jxUnEqOmRNe9zstEtU8a84TV/o3c8mZ4QQNkM= Subject key identifier: 8A:75:05:B3:F9:F1:54:02:32:D6:66:E4:B4:9D:65:04:1F:B6:08:EA Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 03AC Signing time: Fri 25 Sep 2026 00:32:41 +0000 Manifest this update: Fri 25 Sep 2026 00:32:40 +0000 Manifest next update: Fri 02 Oct 2026 00:32:40 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 89zgQtE4Y4iknTN8n6QzFdb2t7t1ofA72WKh1UG4DVA=) 2: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=) 3: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=) 4: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=) 5: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=) 6: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=) 7: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Sep 25 00:32:40 2026 GMT Not After : Oct 2 00:32:40 2026 GMT Subject: CN=6ab5c129-017c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:40:f7:dd:46:9a:d8:98:00:5a:d4:62:2c: 58:37:e4:4b:ec:78:e8:8b:06:cc:50:cf:32:24:88: 04:ad:d2:7a:d5:82:98:d2:0d:e0:d1:44:84:c9:4a: 42:cf:bf:a3:ee:51:09:99:d1:14:0b:7d:00:7b:d1: a8:78:9c:9b:60:70:6b:a6:10:a4:e6:53:f5:82:ce: 03:87:b4:a7:0c:a1:ac:ad:22:c8:57:fa:02:b8:a5: 42:9d:9a:93:ca:e2:5d:ab:b1:7c:eb:03:2a:f0:ce: 69:b0:17:80:2c:1b:34:c1:18:69:24:7c:36:ba:8c: 74:cd:48:0e:62:7f:0f:46:a4:90:a8:5a:54:f5:89: 08:c9:6a:9a:4c:a9:3f:9c:10:83:f7:ef:8b:ec:da: 77:a3:fe:50:5d:de:15:44:65:40:ec:0a:07:7b:5f: 21:fd:c6:52:d6:b3:3a:48:51:47:d5:eb:a6:52:60: 44:da:33:58:73:a7:94:cb:17:6c:4e:e1:db:42:23: c2:a1:8f:67:bb:ef:cf:6b:fe:a2:b0:75:93:ff:be: c2:c6:a4:35:ba:1e:e8:a5:22:69:b9:4d:72:3b:e6: e7:79:e1:45:9e:14:7b:c0:52:cd:92:fa:ae:3d:58: 22:ad:d4:f7:fd:97:24:de:28:77:1d:30:49:44:4b: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:75:05:B3:F9:F1:54:02:32:D6:66:E4:B4:9D:65:04:1F:B6:08:EA X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ca:a1:af:21:52:18:09:10:23:09:d6:bb:98:3e:45:d5:3c: 2f:21:27:0a:1e:5c:93:70:43:7c:ed:fd:05:bb:52:b3:df:d6: 0c:7f:99:df:f1:3b:c5:80:f3:26:a4:7a:1a:d1:9f:37:39:29: 73:00:d7:72:50:a0:b8:e2:84:93:12:69:a0:d0:46:2b:86:ee: 4e:31:cd:fd:1c:89:e9:df:50:04:20:88:f9:d7:15:70:7f:12: 2c:0c:1c:78:07:76:2d:ec:f7:f0:ab:b8:05:a6:d5:46:cb:68: 1f:40:dc:e7:02:50:55:fc:67:50:a1:4a:fe:68:76:47:5c:a7: 97:86:7c:ee:c9:a0:3f:cc:2f:af:39:1c:7c:01:7e:50:0f:a8: 2e:82:1a:62:68:60:c9:87:b6:dc:dc:75:35:11:0c:ba:7f:be: f4:b2:6b:f9:27:93:08:5b:a2:0c:14:c2:0e:bb:f8:3c:e5:77: 49:45:40:d0:14:a3:7f:0a:36:5b:76:6c:61:ea:20:b4:20:cd: 58:c7:6a:2d:83:d5:f0:92:5a:c7:c8:40:68:4e:e8:72:9c:3a: 24:2e:d0:44:ef:39:82:e1:a4:b2:9b:12:47:06:2d:94:8a:62: 21:b3:85:05:c3:c2:4d:a0:f2:4a:54:25:4e:bc:51:01:d8:e4: 5d:9f:a2:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwOTI1MDAzMjQwWhcNMjYxMDAyMDAzMjQwWjAYMRYwFAYD VQQDEw02YWI1YzEyOS0wMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul1A991GmtiYAFrUYixYN+RL7HjoiwbMUM8yJIgErdJ61YKY0g3g0USEyUpC z7+j7lEJmdEUC30Ae9GoeJybYHBrphCk5lP1gs4Dh7SnDKGsrSLIV/oCuKVCnZqT yuJdq7F86wMq8M5psBeALBs0wRhpJHw2uox0zUgOYn8PRqSQqFpU9YkIyWqaTKk/ nBCD9++L7Np3o/5QXd4VRGVA7AoHe18h/cZS1rM6SFFH1eumUmBE2jNYc6eUyxds TuHbQiPCoY9nu+/Pa/6isHWT/77CxqQ1uh7opSJpuU1yO+bneeFFnhR7wFLNkvqu PVgirdT3/Zck3ih3HTBJREvwlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIp1BbP5 8VQCMtZm5LSdZQQftgjqMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqcqhryFSGAkQIwnWu5g+RdU8LyEnCh5ck3BDfO39BbtSs9/WDH+Z3/E7xYDz JqR6GtGfNzkpcwDXclCguOKEkxJpoNBGK4buTjHN/RyJ6d9QBCCI+dcVcH8SLAwc eAd2Lez38Ku4BabVRstoH0Dc5wJQVfxnUKFK/mh2R1ynl4Z87smgP8wvrzkcfAF+ UA+oLoIaYmhgyYe23Nx1NREMun++9LJr+SeTCFuiDBTCDrv4POV3SUVA0BSjfwo2 W3ZsYeogtCDNWMdqLYPV8JJax8hAaE7ocpw6JC7QRO85guGkspsSRwYtlIpiIbOF BcPCTaDySlQlTrxRAdjkXZ+igA== -----END CERTIFICATE-----Generated at Sat Sep 26 04:43:18 2026 by rpki-client