$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: uGLXA8HC2lcKOF/jKxVJ/SHZkREGn4n45Ru1tUYrN+4= Subject key identifier: EA:BD:28:70:4D:9A:24:07:7C:DC:FD:C5:A2:21:73:C6:2E:81:A8:35 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 6C Signing time: Tue 13 Oct 2026 08:47:43 +0000 Manifest this update: Tue 13 Oct 2026 08:47:42 +0000 Manifest next update: Tue 20 Oct 2026 08:47:42 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: YSLTPLkaBD+sb2bttZVFz6iNiPjjEvGpE24Nvb6g6z8=) 2: 0A1C4E5C53AC11F19DB1C139B4833773.roa (hash: u+mOL6p14fYJ42VLhe7ZTS6oNzz6YUYqHu2z8DUWqD4=) 3: 3987426E53AC11F1A96C853AB4833773.roa (hash: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Oct 13 08:47:42 2026 GMT Not After : Oct 20 08:47:42 2026 GMT Subject: CN=6acdf02e-e37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:91:d8:68:e9:e5:5c:75:e6:9b:5a:84:f6: 9e:ea:04:a8:85:47:d8:dc:0c:27:43:4d:56:82:92: f0:ca:f9:dd:a6:47:19:cf:1f:76:dd:29:51:e7:67: 20:c3:6c:cd:31:38:96:97:e2:43:98:51:a3:53:1c: 72:d6:38:be:c5:a9:54:fc:cd:dd:f7:30:09:79:fc: b1:d9:d7:89:a3:3e:fa:22:95:46:12:a2:0c:d3:92: aa:58:5b:f2:4a:5c:58:f4:93:d7:21:73:3e:93:b5: b3:8a:ac:ff:19:bd:3e:36:29:75:47:b3:d3:2a:ca: 34:31:32:0b:ee:61:0e:b4:97:53:13:65:bb:5d:11: ff:bc:0e:5c:cd:a1:a9:47:be:ff:98:51:84:4c:ec: e9:a4:46:20:22:6c:5d:39:b3:17:3f:dc:8f:40:aa: 3e:3a:29:ce:ac:74:61:b7:b7:c1:7f:25:e3:2c:d1: 9c:2c:ab:35:52:39:51:56:98:4a:37:3b:a1:13:23: a8:6f:50:c5:c5:10:2e:54:34:12:7f:7e:b2:78:9d: 27:df:2e:58:7f:c7:78:50:ea:ab:26:29:db:f9:73: 56:a8:70:77:50:a9:04:ff:af:8f:bb:59:04:2b:37: a1:81:70:20:21:e9:d5:bb:8b:f9:50:63:ed:b6:ee: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BD:28:70:4D:9A:24:07:7C:DC:FD:C5:A2:21:73:C6:2E:81:A8:35 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:93:c2:59:4b:31:45:c3:96:42:3b:b0:07:4e:ef:00:ea:f0: a1:b5:da:76:95:1d:ab:0b:95:a4:33:d6:4c:a4:4d:d6:a9:75: 78:1c:0d:7a:32:80:42:31:4b:27:31:d1:9a:ea:d3:a9:28:c5: c1:f4:97:8b:c3:ac:5e:b4:6b:de:2b:63:06:88:b3:ea:27:14: d7:f2:89:ad:d4:9f:99:15:0e:ec:a9:66:bd:f4:9d:23:37:03: 2b:ec:6d:0d:d0:d8:0d:2a:c9:10:b8:cd:2a:91:41:1d:43:74: f7:25:e5:eb:48:e4:b8:49:99:ac:52:07:af:93:bb:87:e9:a1: 44:1c:0e:97:26:9a:fd:ac:bc:3f:da:6a:81:27:3f:f6:b1:b6: 7c:dd:f8:6f:07:b3:ed:a7:00:69:e3:8e:26:31:7a:73:fb:3f: f8:91:5d:6c:7b:49:92:ca:6b:2c:9e:9b:e4:72:06:15:9e:94: e3:5d:7d:62:fc:dc:c8:a7:d4:fe:1d:0e:fb:74:23:dc:3f:9d: 1d:0f:6a:d7:42:9b:14:cf:f7:bf:f9:c1:22:15:98:b3:6f:d9: de:ab:29:9b:48:f0:d1:49:8f:d9:58:2b:2d:80:8c:c3:26:2c: 7d:bf:7c:64:4f:7c:3a:0d:58:54:7a:f5:e8:6a:f1:69:0b:71: d4:fe:9f:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjEwMTMwODQ3NDJaFw0yNjEwMjAwODQ3NDJaMBgxFjAUBgNV BAMTDTZhY2RmMDJlLWUzN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCir5HYaOnlXHXmm1qE9p7qBKiFR9jcDCdDTVaCkvDK+d2mRxnPH3bdKVHnZyDD bM0xOJaX4kOYUaNTHHLWOL7FqVT8zd33MAl5/LHZ14mjPvoilUYSogzTkqpYW/JK XFj0k9chcz6TtbOKrP8ZvT42KXVHs9MqyjQxMgvuYQ60l1MTZbtdEf+8DlzNoalH vv+YUYRM7OmkRiAibF05sxc/3I9Aqj46Kc6sdGG3t8F/JeMs0ZwsqzVSOVFWmEo3 O6ETI6hvUMXFEC5UNBJ/frJ4nSffLlh/x3hQ6qsmKdv5c1aocHdQqQT/r4+7WQQr N6GBcCAh6dW7i/lQY+227sF5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6r0ocE2a JAd83P3FoiFzxi6BqDUwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAjk8JZSzFFw5ZCO7AHTu8A6vChtdp2lR2rC5WkM9ZMpE3WqXV4HA16MoBCMUsn MdGa6tOpKMXB9JeLw6xetGveK2MGiLPqJxTX8omt1J+ZFQ7sqWa99J0jNwMr7G0N 0NgNKskQuM0qkUEdQ3T3JeXrSOS4SZmsUgevk7uH6aFEHA6XJpr9rLw/2mqBJz/2 sbZ83fhvB7PtpwBp444mMXpz+z/4kV1se0mSymssnpvkcgYVnpTjXX1i/NzIp9T+ HQ77dCPcP50dD2rXQpsUz/e/+cEiFZizb9neqymbSPDRSY/ZWCstgIzDJix9v3xk T3w6DVhUevXoavFpC3HU/p/D -----END CERTIFICATE-----Generated at Wed Oct 14 10:43:48 2026 by rpki-client