$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: CfKnlzlDmHTNnmh/AvSz0tRH1H1zLD4PnJCnTOmPROI= Subject key identifier: F5:37:F5:3E:CA:77:95:37:D2:D3:62:37:8E:CF:C4:7A:82:13:C8:57 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0C2A Signing time: Fri 18 Sep 2026 18:49:04 +0000 Manifest this update: Fri 18 Sep 2026 18:49:03 +0000 Manifest next update: Fri 25 Sep 2026 18:49:03 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: 1b0ifefmFoLgcS9Q+Mh19iShIkASIhcRzlJAnON1xn8=) 2: 2C23C084A05511F1924EFF964111F970.roa (hash: +UnNrlvqk9fdI23k97EfwWpG/vnHy/lU/5HBsL5TEvQ=) 3: 24CEDDAAA05511F1ABADFA964111F970.roa (hash: U8ctAF3B6RY5gFom10YS1YLwzsbLU1R1fY8eYV+NVhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Sep 18 18:49:03 2026 GMT Not After : Sep 25 18:49:03 2026 GMT Subject: CN=6aad87a0-9521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:f7:6f:f1:b5:95:ea:58:84:f9:9d:b0:6a: e1:47:c5:ad:d2:39:5c:9d:b8:dc:19:2a:b3:cb:cc: cb:6e:df:ce:be:2f:90:e0:cd:fd:1c:7a:4f:1b:09: d2:4d:c2:a3:5b:75:e2:63:8e:5e:ec:6f:23:16:11: ef:c3:e5:72:40:7c:92:6e:e1:d9:1c:61:2a:49:5e: 9a:e9:12:26:8d:65:12:c9:36:23:d9:5d:5f:4c:a1: d7:f7:28:0a:40:aa:9d:c1:2e:76:b3:f4:a0:41:2f: d3:cf:78:a6:5b:82:3f:3c:76:9a:7b:96:c8:c5:ba: 40:f7:b5:d8:13:16:75:88:84:04:e7:bf:ae:e1:8c: a4:dc:82:4f:3e:6b:96:f0:6c:e5:75:49:34:80:b6: 26:9a:25:e9:77:e0:f0:7a:ed:c0:3e:32:52:3d:88: 43:a6:53:3e:c0:9b:6d:88:d2:63:71:80:f0:80:db: 34:f6:7c:64:4d:bf:72:d9:aa:dc:b8:a5:4e:6a:b0: 88:6a:89:ea:42:fd:2f:1e:9d:53:7f:37:41:d6:07: 28:12:91:df:99:0b:81:4e:1a:ec:5c:a6:c7:c9:1b: 49:0f:d9:63:ea:89:fe:f4:35:aa:69:c9:b5:eb:2b: 63:72:a2:e1:06:02:2c:96:82:e3:4e:f5:ab:89:2e: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:37:F5:3E:CA:77:95:37:D2:D3:62:37:8E:CF:C4:7A:82:13:C8:57 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:96:59:5f:77:c5:e6:d8:87:84:3d:59:d7:dc:16:5a:d8:c0: 4d:43:6a:3a:45:7f:36:d6:50:5c:34:a4:20:69:2c:67:71:02: 0e:e5:6a:1b:2f:15:d0:45:f7:fb:da:e9:42:ec:22:4a:6f:d9: 64:2f:b3:d3:ce:8d:de:ff:7c:08:5f:cc:6c:b6:c6:f1:28:51: 25:96:b4:4a:f5:e2:c8:77:c4:13:2e:3d:a5:a5:ea:55:87:4c: 79:09:9c:54:6f:f3:cb:63:5a:b7:aa:71:4b:fb:07:f6:6a:1a: dc:ad:7a:31:f9:d7:83:f8:95:2a:a7:3b:9e:d2:57:05:98:9e: 74:5b:fa:1e:04:0f:67:e8:11:e8:fd:e6:c4:42:f8:cf:d6:7e: 5b:17:0c:a5:05:4f:18:7c:08:53:7b:01:f9:af:24:ff:37:f9: b4:bb:4b:78:d8:9f:73:ca:35:29:44:bb:cd:1f:18:31:b3:54: 27:c4:3b:57:2a:78:8e:17:0e:a0:4f:d1:e2:3a:78:b0:d6:02: e5:eb:e4:b6:52:16:b2:a4:e1:52:6d:8c:39:be:a0:24:53:cf: 45:bb:81:d3:43:8f:67:f1:11:76:c6:74:3e:34:08:0b:7c:08: 04:c6:0f:ee:ee:48:f3:56:6d:86:d0:72:ee:70:5a:d9:fc:60: 9e:6c:e9:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjYwOTE4MTg0OTAzWhcNMjYwOTI1MTg0OTAzWjAYMRYwFAYD VQQDEw02YWFkODdhMC05NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteT3b/G1lepYhPmdsGrhR8Wt0jlcnbjcGSqzy8zLbt/Ovi+Q4M39HHpPGwnS TcKjW3XiY45e7G8jFhHvw+VyQHySbuHZHGEqSV6a6RImjWUSyTYj2V1fTKHX9ygK QKqdwS52s/SgQS/Tz3imW4I/PHaae5bIxbpA97XYExZ1iIQE57+u4Yyk3IJPPmuW 8GzldUk0gLYmmiXpd+Dweu3APjJSPYhDplM+wJttiNJjcYDwgNs09nxkTb9y2arc uKVOarCIaonqQv0vHp1TfzdB1gcoEpHfmQuBThrsXKbHyRtJD9lj6on+9DWqacm1 6ytjcqLhBgIsloLjTvWriS5tDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPU39T7K d5U30tNiN47PxHqCE8hXMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5ZZX3fF5tiHhD1Z19wWWtjATUNqOkV/NtZQXDSkIGksZ3ECDuVqGy8V0EX3 +9rpQuwiSm/ZZC+z086N3v98CF/MbLbG8ShRJZa0SvXiyHfEEy49paXqVYdMeQmc VG/zy2Nat6pxS/sH9moa3K16MfnXg/iVKqc7ntJXBZiedFv6HgQPZ+gR6P3mxEL4 z9Z+WxcMpQVPGHwIU3sB+a8k/zf5tLtLeNifc8o1KUS7zR8YMbNUJ8Q7Vyp4jhcO oE/R4jp4sNYC5evktlIWsqThUm2MOb6gJFPPRbuB00OPZ/ERdsZ0PjQIC3wIBMYP 7u5I81ZthtBy7nBa2fxgnmzpBg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:42:45 2026 by rpki-client