$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json) Hash identifier: tcfGXhYPk6wTSRA7GbnJWnzcstKhLgpDTPALUyNnplw= Subject key identifier: 18:44:61:E2:9F:61:F4:3E:52:3B:C5:BD:C5:40:B9:F7:61:C2:9C:3D Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86 Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft Manifest number: 01EE Signing time: Wed 23 Sep 2026 03:29:33 +0000 Manifest this update: Wed 23 Sep 2026 03:29:32 +0000 Manifest next update: Wed 30 Sep 2026 03:29:32 +0000 Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: JCwoJIhsopUABv0NEWVST4Jp2GDysCM8Ros7Cq000Qs=) 2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: 3ACPZlFXJEBS0DfhOh+fI+mz2WtH3cLyLDO6b8JhniE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86 Validity Not Before: Sep 23 03:29:32 2026 GMT Not After : Sep 30 03:29:32 2026 GMT Subject: CN=6ab3479d-4115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:78:11:78:09:51:95:c9:d1:9e:0d:96:dd: 0c:7a:ae:43:0d:b1:f9:e5:ae:09:b1:26:77:3a:01: ef:f8:25:23:8a:e2:4a:8f:3f:1c:8c:e6:b1:14:28: 00:7e:13:a3:7a:ad:da:e2:11:fb:9a:99:d5:37:6f: 36:4b:ea:fa:23:5e:c8:49:cb:4c:5e:59:ba:25:1d: ed:c4:8c:55:b7:3e:7d:a6:0c:24:14:26:29:eb:77: b5:fa:16:ac:26:b9:31:26:2f:07:f7:9b:01:c5:2c: 6d:6f:cf:9f:20:30:61:2f:67:85:77:ba:38:e7:91: c0:2b:8b:39:4c:53:7f:97:86:9e:ba:a3:2b:3a:3a: 02:b3:94:85:08:ab:ec:87:13:34:e4:12:09:73:d0: 90:21:b3:c3:16:4b:b7:f7:23:9c:5d:67:05:bf:52: d8:8d:5b:0f:c1:9c:7b:10:df:c3:6d:92:ab:95:29: f8:ca:71:0a:df:7c:33:dc:45:fe:f1:6b:39:80:fd: 14:28:85:18:0d:94:c4:10:de:5d:10:f2:14:40:82: e6:d5:39:d4:31:82:f2:63:b0:52:22:d2:40:17:5a: cf:6c:7b:3d:ab:b1:cf:21:a6:29:1f:05:53:f1:28: d1:ad:37:77:5d:39:f2:06:8b:60:b2:8c:e0:01:88: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:44:61:E2:9F:61:F4:3E:52:3B:C5:BD:C5:40:B9:F7:61:C2:9C:3D X509v3 Authority Key Identifier: keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ff:99:8b:71:b4:6a:ee:fc:81:c7:35:9b:2e:47:fd:72:63: 26:44:37:fe:b3:10:1a:d7:82:be:57:82:26:76:d0:5b:e3:6c: cb:1d:e4:85:dd:a4:b9:ff:a8:22:5d:7a:7f:05:3e:a3:22:7a: fb:41:66:91:47:84:4f:2a:c0:01:1e:b2:20:f7:aa:9f:2d:00: 42:1f:a3:aa:64:74:83:4c:bc:08:ff:09:c3:16:59:66:d9:5b: 72:67:25:80:ed:6d:1c:62:38:b2:20:2a:03:ad:82:a6:1b:6a: fa:08:93:d7:69:09:46:41:20:56:ad:ab:be:a9:34:ff:ad:0b: 0f:53:a4:bb:f6:0b:d6:4b:24:c3:f4:93:65:ec:5d:f8:e8:99: ff:d9:a8:7e:7a:fa:e7:ed:35:c0:ce:75:15:de:b3:fc:6a:c3: 31:2b:9f:d7:94:da:6a:a2:63:86:c9:dc:5a:61:f2:3d:cd:9f: 24:83:89:cc:d0:6d:58:bf:43:37:e7:08:7e:29:c6:99:2c:4d: 89:c4:bf:d6:a9:66:29:bb:19:87:85:ba:75:ff:12:9f:c6:8d: a9:18:df:e3:1f:2f:77:60:73:2a:f9:89:3b:b9:b8:16:c5:1a: 44:e0:03:93:ca:25:00:32:fb:14:16:48:31:b0:8d:9f:e8:eb: da:a9:25:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDJERjlBMUUzNzVBMTdCOEVBNTYwMjdCNDVBOEJENjZG OTY3NDdEODYwHhcNMjYwOTIzMDMyOTMyWhcNMjYwOTMwMDMyOTMyWjAYMRYwFAYD VQQDEw02YWIzNDc5ZC00MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gB4EXgJUZXJ0Z4Nlt0Meq5DDbH55a4JsSZ3OgHv+CUjiuJKjz8cjOaxFCgA fhOjeq3a4hH7mpnVN282S+r6I17ISctMXlm6JR3txIxVtz59pgwkFCYp63e1+has JrkxJi8H95sBxSxtb8+fIDBhL2eFd7o455HAK4s5TFN/l4aeuqMrOjoCs5SFCKvs hxM05BIJc9CQIbPDFku39yOcXWcFv1LYjVsPwZx7EN/DbZKrlSn4ynEK33wz3EX+ 8Ws5gP0UKIUYDZTEEN5dEPIUQILm1TnUMYLyY7BSItJAF1rPbHs9q7HPIaYpHwVT 8SjRrTd3XTnyBotgsozgAYjIewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhEYeKf YfQ+UjvFvcVAufdhwpw9MB8GA1UdIwQYMBaAFC35oeN1oXuOpWAntFqL1m+WdH2G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8xODFCODIyMEU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0NmxZQ2UwV292V2I1WjBm WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xmbWg0M1doZTQ2bFlDZTBXb3ZXYjVaMGZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8xODFCODIyMEU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0 NmxZQ2UwV292V2I1WjBmWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbf+Zi3G0au78gcc1my5H/XJjJkQ3/rMQGteCvleCJnbQW+Nsyx3khd2kuf+o Il16fwU+oyJ6+0FmkUeETyrAAR6yIPeqny0AQh+jqmR0g0y8CP8JwxZZZtlbcmcl gO1tHGI4siAqA62Cphtq+giT12kJRkEgVq2rvqk0/60LD1Oku/YL1kskw/STZexd +OiZ/9mofnr65+01wM51Fd6z/GrDMSuf15TaaqJjhsncWmHyPc2fJIOJzNBtWL9D N+cIfinGmSxNicS/1qlmKbsZh4W6df8Sn8aNqRjf4x8vd2BzKvmJO7m4FsUaROAD k8olADL7FBZIMbCNn+jr2qkl2g== -----END CERTIFICATE-----Generated at Wed Sep 23 19:51:13 2026 by rpki-client