$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: VDrgZ418P8KrFFg5OviLnqeRj41WP/6O73UcMECBc+M= Subject key identifier: 3B:5B:00:4D:12:6E:16:C4:46:8C:C3:E6:98:FB:27:61:28:02:CE:F4 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0D4A Signing time: Sun 20 Sep 2026 18:10:50 +0000 Manifest this update: Sun 20 Sep 2026 18:10:49 +0000 Manifest next update: Sun 27 Sep 2026 18:10:49 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: lnWeV0GIdYJkdfxuYgQaIGFznpD4HXq2d6GPejhA+LA=) 2: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=) 3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Sep 20 18:10:49 2026 GMT Not After : Sep 27 18:10:49 2026 GMT Subject: CN=6ab021a9-6cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:a0:a7:3d:87:23:0c:c5:1b:3c:d1:44:b8: 83:be:b1:44:08:6c:6b:7d:7b:1f:22:f4:06:88:3f: 41:41:ef:c4:5b:5d:eb:94:90:ff:1a:11:85:8f:d2: 03:5c:05:eb:88:6b:c2:c1:50:6d:ed:26:8e:4d:84: 14:71:ba:4c:bc:86:ae:10:87:78:0b:75:d6:95:dc: 8d:e1:19:00:97:ff:f2:dd:f7:84:f1:62:5a:47:45: f5:9a:e7:8d:cc:7e:3d:c7:0a:bc:c5:0d:af:e0:5a: 3d:cd:ec:e1:fe:28:62:5b:23:b0:f8:c4:85:9d:a6: 04:3d:d2:26:9a:c0:37:a2:02:81:9c:fb:f9:ad:c0: 09:ab:b4:97:67:d9:a7:a7:45:88:e7:87:f8:76:81: 33:af:3f:2b:f4:5c:75:18:38:5c:0b:1f:57:8d:fa: 6f:c0:88:42:53:d6:b3:57:cd:15:03:3e:5b:8c:ef: 18:c4:3a:e9:96:ca:1b:0c:ea:45:c7:62:5c:d2:3e: 82:14:91:fd:52:93:a2:1a:2f:72:74:0f:84:1e:2f: f5:fe:88:aa:a1:0b:c2:53:a5:00:ae:44:66:d2:a7: 3e:c6:7e:18:f3:28:31:ac:fe:f0:16:dc:89:a8:b7: 5d:19:f8:7c:8b:eb:c5:22:e8:c7:7f:28:21:e0:43: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:00:4D:12:6E:16:C4:46:8C:C3:E6:98:FB:27:61:28:02:CE:F4 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b9:e3:71:83:d0:10:ab:6a:e2:0b:63:2a:96:4f:97:ec:4f: 1d:9e:32:50:28:db:b0:20:fb:c2:5a:1b:ff:3b:ff:43:28:99: c3:9c:b3:6f:f0:65:da:ca:45:c4:95:d4:5c:c6:e1:77:5c:46: da:7c:57:5c:b7:da:10:a4:98:50:26:73:f9:47:69:d0:c6:62: de:b7:3c:b1:5b:77:10:02:b6:1b:5f:81:8e:3b:04:d3:f7:cb: e0:e1:10:67:29:5b:6d:cd:03:1f:e3:5c:fa:58:30:e5:6a:96: 1f:37:45:ed:cc:fc:75:e7:5d:42:ec:35:af:46:05:ac:8b:1c: d6:3e:6d:8b:b2:c6:f3:b7:9c:a5:e7:1b:1d:98:a9:95:a3:1c: 04:dd:32:35:97:fd:4c:d4:fc:ec:dd:02:a7:a0:6e:7a:e9:8a: 23:20:14:93:96:57:fc:03:6f:e0:21:74:fd:c7:9e:c6:5c:4e: a0:c7:89:cc:0f:80:0d:c5:da:3e:da:43:bf:48:a6:c6:87:8b: 38:ce:25:3c:1e:57:2b:73:58:ae:fd:3e:ae:9c:13:b8:94:23: d1:95:15:f3:98:1c:22:1e:9e:52:16:97:ad:11:f1:90:31:c9: 19:14:fd:e9:fc:39:14:8c:4f:05:25:e9:b4:cf:bd:65:64:4e: 30:53:bc:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjYwOTIwMTgxMDQ5WhcNMjYwOTI3MTgxMDQ5WjAYMRYwFAYD VQQDEw02YWIwMjFhOS02Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xqgpz2HIwzFGzzRRLiDvrFECGxrfXsfIvQGiD9BQe/EW13rlJD/GhGFj9ID XAXriGvCwVBt7SaOTYQUcbpMvIauEId4C3XWldyN4RkAl//y3feE8WJaR0X1mueN zH49xwq8xQ2v4Fo9zezh/ihiWyOw+MSFnaYEPdImmsA3ogKBnPv5rcAJq7SXZ9mn p0WI54f4doEzrz8r9Fx1GDhcCx9XjfpvwIhCU9azV80VAz5bjO8YxDrplsobDOpF x2Jc0j6CFJH9UpOiGi9ydA+EHi/1/oiqoQvCU6UArkRm0qc+xn4Y8ygxrP7wFtyJ qLddGfh8i+vFIujHfygh4EMrFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtbAE0S bhbERozD5pj7J2EoAs70MB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh7njcYPQEKtq4gtjKpZPl+xPHZ4yUCjbsCD7wlob/zv/QyiZw5yzb/Bl2spF xJXUXMbhd1xG2nxXXLfaEKSYUCZz+Udp0MZi3rc8sVt3EAK2G1+BjjsE0/fL4OEQ Zylbbc0DH+Nc+lgw5WqWHzdF7cz8deddQuw1r0YFrIsc1j5ti7LG87ecpecbHZip laMcBN0yNZf9TNT87N0Cp6BueumKIyAUk5ZX/ANv4CF0/ceexlxOoMeJzA+ADcXa PtpDv0imxoeLOM4lPB5XK3NYrv0+rpwTuJQj0ZUV85gcIh6eUhaXrRHxkDHJGRT9 6fw5FIxPBSXptM+9ZWROMFO8lg== -----END CERTIFICATE-----Generated at Mon Sep 21 13:23:53 2026 by rpki-client