$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft File: lckPE7iLVNi5Aowid2ir6Cyp0qc.mft (raw, json) Hash identifier: ELe4dpOQMrzEeM+7hXmKyGvsFTRj3FlWah/18PT96Lw= Subject key identifier: 2C:54:32:50:9A:33:33:7D:13:08:DE:24:9C:F7:DC:2E:AE:80:3A:EA Authority key identifier: 95:C9:0F:13:B8:8B:54:D8:B9:02:8C:22:77:68:AB:E8:2C:A9:D2:A7 Certificate issuer: /CN=A918FD04/serialNumber=95C90F13B88B54D8B9028C227768ABE82CA9D2A7 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lckPE7iLVNi5Aowid2ir6Cyp0qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft Manifest number: 16C3 Signing time: Mon 28 Sep 2026 18:26:45 +0000 Manifest this update: Mon 28 Sep 2026 18:26:44 +0000 Manifest next update: Mon 05 Oct 2026 18:26:44 +0000 Files and hashes: 1: lckPE7iLVNi5Aowid2ir6Cyp0qc.crl (hash: yzqzy6jm3NsXaZpSn9fw1F9uDlwA5iUtt6CqKIph/4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lckPE7iLVNi5Aowid2ir6Cyp0qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04, serialNumber=95C90F13B88B54D8B9028C227768ABE82CA9D2A7 Validity Not Before: Sep 28 18:26:44 2026 GMT Not After : Oct 5 18:26:44 2026 GMT Subject: CN=6abab165-236b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:d4:61:c7:6b:45:d5:5e:27:76:4c:42:4a: 0c:a9:25:35:a8:bf:c7:3a:ff:b8:96:90:b6:84:71: d4:e9:f4:f8:45:7c:df:dc:40:47:4a:ba:04:40:0a: 53:d7:7a:69:48:f9:ef:81:32:3e:26:87:ad:d9:b5: 66:52:58:f1:2f:49:87:c2:4b:2b:d4:ef:29:5b:3d: 33:2c:ff:21:e4:dc:a8:40:50:8b:73:9e:79:91:51: 99:cd:bb:08:7b:42:f2:d7:b8:a8:43:ce:22:24:db: 52:55:45:96:0c:66:1b:82:20:70:29:2c:9b:96:63: d0:56:db:d5:19:c6:20:8d:0a:a9:7b:b7:03:5c:a3: e8:83:0c:f8:95:02:b9:c8:31:5d:b2:44:b4:09:4c: 96:74:54:53:04:06:62:e0:ab:2d:58:c4:91:18:06: ab:1a:1f:3d:e9:60:40:72:09:48:c8:86:28:5f:22: e3:99:dc:07:9a:93:f7:87:87:c8:34:a6:3e:b8:ed: 8e:1f:aa:74:50:d3:c7:fd:52:c2:33:ce:ca:d8:cf: e9:00:ec:b8:ea:0a:ee:fc:40:c2:7c:00:57:0e:20: a6:27:9a:76:ad:ea:8a:6c:fc:ad:e1:b8:79:c3:26: 1d:a9:70:7c:55:5b:ea:61:7c:83:41:82:ee:5d:6a: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:54:32:50:9A:33:33:7D:13:08:DE:24:9C:F7:DC:2E:AE:80:3A:EA X509v3 Authority Key Identifier: keyid:95:C9:0F:13:B8:8B:54:D8:B9:02:8C:22:77:68:AB:E8:2C:A9:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lckPE7iLVNi5Aowid2ir6Cyp0qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/lckPE7iLVNi5Aowid2ir6Cyp0qc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:96:29:e9:80:ce:5b:22:55:81:b9:be:ea:fb:0d:b4:d3:dd: ae:75:f9:68:bc:6e:c1:47:83:88:17:4a:a9:c2:d7:52:81:c9: 54:d5:2a:80:23:b1:51:77:ce:88:5a:73:72:bf:83:46:f6:bd: 16:7f:7f:d2:2c:88:08:4e:f7:79:0e:a2:50:d2:7a:7c:65:98: bf:f0:f8:16:ba:d6:fb:1e:a3:ea:7d:3b:c3:b4:d0:fc:9b:f0: ae:ea:0d:03:a7:69:9b:65:c4:79:aa:4d:e9:5b:26:8b:54:c1: 3b:6e:df:1f:72:00:fe:0d:f9:26:8a:2e:30:f2:1e:2b:10:15: e1:8c:c1:3c:d5:25:dc:36:44:8d:0c:57:22:48:61:2f:99:c5: af:f4:0b:09:a4:99:32:00:ba:75:53:af:62:79:f3:34:e1:7f: 48:6f:05:60:25:50:d7:f7:f0:c7:30:3c:7e:ab:27:27:56:7b: 2e:bb:ba:dd:95:9f:0e:79:d0:ee:2d:9d:69:37:b3:f0:91:f2: fe:ae:5a:83:08:c2:bb:4a:71:f8:b9:b6:3f:2c:6d:a3:34:77: 6f:80:4a:fa:07:3d:f9:fe:da:ff:45:c8:70:a0:76:32:66:9f: de:0d:71:65:4e:ba:9a:af:3f:4f:f9:c2:51:2e:4f:49:d1:f8: 02:cb:d2:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkQwNDExMC8GA1UEBRMoOTVDOTBGMTNCODhCNTREOEI5MDI4QzIyNzc2OEFCRTgy Q0E5RDJBNzAeFw0yNjA5MjgxODI2NDRaFw0yNjEwMDUxODI2NDRaMBgxFjAUBgNV BAMTDTZhYmFiMTY1LTIzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCP/NRhx2tF1V4ndkxCSgypJTWov8c6/7iWkLaEcdTp9PhFfN/cQEdKugRAClPX emlI+e+BMj4mh63ZtWZSWPEvSYfCSyvU7ylbPTMs/yHk3KhAUItznnmRUZnNuwh7 QvLXuKhDziIk21JVRZYMZhuCIHApLJuWY9BW29UZxiCNCql7twNco+iDDPiVArnI MV2yRLQJTJZ0VFMEBmLgqy1YxJEYBqsaHz3pYEByCUjIhihfIuOZ3Aeak/eHh8g0 pj647Y4fqnRQ08f9UsIzzsrYz+kA7LjqCu78QMJ8AFcOIKYnmnat6ops/K3huHnD Jh2pcHxVW+phfINBgu5dagxPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULFQyUJoz M30TCN4knPfcLq6AOuowHwYDVR0jBBgwFoAUlckPE7iLVNi5Aowid2ir6Cyp0qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRDA0LzBBQkJGNDcyMERG MjExRUE4RUU4OTEzQkM0RjlBRTAyL2xja1BFN2lMVk5pNUFvd2lkMmlyNkN5cDBx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGNrUEU3aUxWTmk1QW93aWQyaXI2Q3lwMHFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RDA0LzBBQkJGNDcyMERGMjExRUE4RUU4OTEzQkM0RjlBRTAyL2xja1BFN2lMVk5p NUFvd2lkMmlyNkN5cDBxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3linpgM5bIlWBub7q+w20092udflovG7BR4OIF0qpwtdSgclU1SqAI7FRd86I WnNyv4NG9r0Wf3/SLIgITvd5DqJQ0np8ZZi/8PgWutb7HqPqfTvDtND8m/Cu6g0D p2mbZcR5qk3pWyaLVME7bt8fcgD+Dfkmii4w8h4rEBXhjME81SXcNkSNDFciSGEv mcWv9AsJpJkyALp1U69iefM04X9IbwVgJVDX9/DHMDx+qycnVnsuu7rdlZ8OedDu LZ1pN7PwkfL+rlqDCMK7SnH4ubY/LG2jNHdvgEr6Bz35/tr/RchwoHYyZp/eDXFl Trqarz9P+cJRLk9J0fgCy9IQ -----END CERTIFICATE-----Generated at Tue Sep 29 13:14:18 2026 by rpki-client