$ rpki-client -vvvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: 9P7YFSItKUiAsOAJ5wJtP36/VJqUKnLTHqcQGr4Opns= Subject key identifier: 8A:D2:4D:61:7B:CB:17:B9:9A:50:37:E8:CD:B3:5E:20:B8:24:D6:D7 Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 039D Signing time: Wed 23 Sep 2026 00:17:14 +0000 Manifest this update: Wed 23 Sep 2026 00:17:13 +0000 Manifest next update: Wed 30 Sep 2026 00:17:13 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: yLv+sXZlYBmP8NXzfGtJ5eiodDSoeYgdyXG4mR2/3Rk=) 2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: kbj/qZCCFFcNhZw3sqrJDaXIf5h+0nQW4F9uuXPmNWM=) 3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: qwPyRzKdt7F2prPIJu2RV96XdN340vghb2ALVy3uoMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: Sep 23 00:17:13 2026 GMT Not After : Sep 30 00:17:13 2026 GMT Subject: CN=6ab31a8a-3b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:4a:af:90:90:79:e0:2a:75:f1:22:3e:4d: 29:d1:62:c5:be:2f:5f:bf:bb:63:49:47:f4:0b:e6: 34:d8:0e:17:5b:08:40:3f:4f:3a:de:35:f4:c6:35: 0e:65:80:50:b9:6d:0b:c9:cf:d2:78:90:06:ba:95: 50:65:c5:bd:83:97:12:eb:79:1e:2f:fc:b1:9c:a5: 27:e4:46:fe:0e:bc:7c:b9:d1:b5:ac:03:97:4a:b4: 0a:c9:7e:a6:97:e1:9a:ba:24:7b:fb:bd:70:b6:41: 8d:46:5e:5c:69:58:55:a7:34:2f:a8:8d:a3:f6:64: 88:94:f0:5e:70:f5:61:d1:52:77:9c:91:8d:20:fc: 6f:d8:22:90:e2:37:32:f7:63:a7:ff:90:7c:a6:9e: bd:73:8b:57:48:73:4a:fb:8f:a9:32:a4:5f:7a:49: 8c:2b:33:f3:56:57:54:43:e5:72:bc:b5:60:78:f7: 88:da:43:b7:41:d9:0a:2d:9a:d6:8e:62:04:89:d9: ce:22:71:d0:08:bb:68:0e:7c:8f:2c:3d:c5:ec:d4: 6e:6a:1a:40:93:14:d3:d8:5c:fa:d5:49:cf:f4:44: f0:b4:a9:26:ac:4e:57:b0:88:bb:67:c4:13:a2:7d: 81:47:d5:02:a9:4b:32:d0:69:db:fd:1f:04:a4:b9: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:4D:61:7B:CB:17:B9:9A:50:37:E8:CD:B3:5E:20:B8:24:D6:D7 X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:81:fe:3a:c9:82:74:6c:15:54:7c:71:4d:45:ee:9c:ed:5e: 78:d3:cb:9c:a6:a6:16:b1:33:47:fc:c6:53:c1:a7:75:a4:31: b6:6d:86:24:60:cb:88:04:5d:df:87:b4:8b:a2:ca:37:e8:65: 86:c9:b5:53:72:ca:c1:59:49:da:0d:79:94:b6:a1:10:55:9f: 15:85:d1:f4:d6:a2:9b:0a:0c:6c:28:d3:97:0e:d8:cb:a8:93: 53:50:4b:8e:5c:81:39:0e:29:e9:39:32:5b:47:d0:7d:c6:a2: 76:b5:b8:74:9a:33:c7:4e:54:34:cc:5b:0e:53:1d:14:4b:ce: 85:00:9a:00:7c:b0:8f:e0:c1:4e:6a:d5:5c:45:a2:02:3d:79: 72:41:da:74:89:32:41:22:82:b2:5e:83:4d:1a:24:17:c0:5a: af:40:bd:79:ee:70:12:94:48:c6:90:fa:b9:c8:3a:0d:73:b9: 10:06:53:b3:6b:1a:7e:81:92:6e:8f:b5:3f:e3:97:f7:51:c1: 73:f0:7c:9d:9b:83:9e:61:60:91:b6:97:c3:da:1f:c4:74:ac: 43:c3:19:3a:5d:70:3a:4a:0b:4e:aa:05:f5:0a:4c:81:a6:2d: 30:ad:cb:79:10:ef:81:9e:d1:25:27:9e:01:76:23:e5:42:a4: c1:88:59:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjYwOTIzMDAxNzEzWhcNMjYwOTMwMDAxNzEzWjAYMRYwFAYD VQQDEw02YWIzMWE4YS0zYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWlKr5CQeeAqdfEiPk0p0WLFvi9fv7tjSUf0C+Y02A4XWwhAP0863jX0xjUO ZYBQuW0Lyc/SeJAGupVQZcW9g5cS63keL/yxnKUn5Eb+Drx8udG1rAOXSrQKyX6m l+GauiR7+71wtkGNRl5caVhVpzQvqI2j9mSIlPBecPVh0VJ3nJGNIPxv2CKQ4jcy 92On/5B8pp69c4tXSHNK+4+pMqRfekmMKzPzVldUQ+VyvLVgePeI2kO3QdkKLZrW jmIEidnOInHQCLtoDnyPLD3F7NRuahpAkxTT2Fz61UnP9ETwtKkmrE5XsIi7Z8QT on2BR9UCqUsy0Gnb/R8EpLlJJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrSTWF7 yxe5mlA36M2zXiC4JNbXMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYYH+OsmCdGwVVHxxTUXunO1eeNPLnKamFrEzR/zGU8GndaQxtm2GJGDLiARd 34e0i6LKN+hlhsm1U3LKwVlJ2g15lLahEFWfFYXR9NaimwoMbCjTlw7Yy6iTU1BL jlyBOQ4p6TkyW0fQfcaidrW4dJozx05UNMxbDlMdFEvOhQCaAHywj+DBTmrVXEWi Aj15ckHadIkyQSKCsl6DTRokF8Bar0C9ee5wEpRIxpD6ucg6DXO5EAZTs2safoGS bo+1P+OX91HBc/B8nZuDnmFgkbaXw9ofxHSsQ8MZOl1wOkoLTqoF9QpMgaYtMK3L eRDvgZ7RJSeeAXYj5UKkwYhZLw== -----END CERTIFICATE-----Generated at Thu Sep 24 22:34:05 2026 by rpki-client