$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: Fp7SIRxmarQxwZX7g+y8V5I3Vtp1i4vDDNLZVb76iyA= Subject key identifier: BD:BE:C5:5B:C3:60:A0:F9:D4:C0:5D:16:9C:02:04:9B:B9:B1:47:DD Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 08F1 Signing time: Sun 20 Sep 2026 20:17:30 +0000 Manifest this update: Sun 20 Sep 2026 20:17:29 +0000 Manifest next update: Sun 27 Sep 2026 20:17:29 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: +iiy8baRkttelLSdT6K8QsVFfkIHeN1KGHNRSNczsWQ=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=) 3: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Sep 20 20:17:29 2026 GMT Not After : Sep 27 20:17:29 2026 GMT Subject: CN=6ab03f59-ba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:90:e5:3c:98:93:91:41:16:ac:68:88:8b:a0: 6b:75:2f:b8:98:1f:0b:1e:75:ee:06:2e:c2:44:b5: 10:be:d5:ca:ba:c3:a1:56:2a:48:d9:89:3f:fa:e9: 27:10:d1:36:f3:2a:df:91:64:04:11:3a:63:b4:f8: b3:e6:c6:6d:43:ad:ce:c1:21:9d:af:eb:f7:65:08: df:16:43:fa:7a:05:8c:2c:2e:8d:ff:e1:6c:92:6a: 7c:29:dd:59:af:3e:ea:4e:e4:ba:33:e2:78:c7:46: 1d:07:82:50:73:31:e2:31:82:4c:07:72:2d:7b:95: da:d9:58:40:a4:7a:bb:aa:b5:bc:0a:97:f5:1a:67: 5f:f9:33:80:47:bc:6c:d6:7d:c7:37:24:87:00:dc: d0:00:ba:53:c9:cb:86:9e:cf:dc:5c:8d:f5:1d:0c: 40:6b:02:3c:be:37:36:7d:3e:d8:a8:f3:85:62:9f: 60:0a:cf:26:c5:ff:a4:63:a8:7d:ff:9d:6f:6e:6f: 77:6e:51:bf:9f:77:9e:36:15:90:a0:62:8f:1e:70: 5c:6d:93:ea:34:d9:69:2e:30:0f:af:cd:90:9a:6b: 56:87:62:86:2f:06:41:eb:22:03:b2:40:c8:8c:94: 94:23:1f:ee:4c:3a:3e:f4:1b:63:a2:a4:d4:37:bc: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BE:C5:5B:C3:60:A0:F9:D4:C0:5D:16:9C:02:04:9B:B9:B1:47:DD X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a2:1a:7c:d4:1d:8e:2d:c9:5f:56:67:42:be:6f:8e:24:7e: 39:b1:27:4f:40:fe:24:95:b5:13:30:9a:bc:02:0c:49:64:14: 2d:02:fb:e9:29:5f:0a:3d:ca:cf:d4:c8:f9:1a:6b:d6:5c:d9: c4:77:7e:96:f6:73:0f:ba:81:05:63:5f:a3:d7:13:ee:c5:ef: 89:d5:de:4c:03:de:b2:94:d8:92:5d:d7:ef:03:05:51:08:7e: 5b:b2:df:2b:db:35:e4:29:b6:11:ae:25:0d:48:f6:f0:90:fe: 94:01:c5:cd:df:07:fc:c1:bf:78:12:a3:a0:cf:aa:7b:e3:5a: 75:75:0c:3f:72:77:7f:71:53:0f:57:50:76:be:13:d0:58:52: c9:e8:83:8d:83:b1:1f:80:6e:4b:7e:c0:80:06:ad:1f:a9:17: ef:30:e2:73:71:99:57:3e:13:23:fe:35:ac:a5:e4:6e:d5:2b: a0:6d:b3:e3:73:a7:0f:1d:87:fd:3b:d8:2c:41:e0:59:c8:d3: 3a:a3:5e:86:13:bc:25:f1:e2:5a:9d:1a:4d:3b:b1:89:31:00: ab:db:bc:03:b0:dc:8b:6c:f6:63:ed:22:b4:16:a2:79:8a:db: b2:b1:a3:e4:e7:ec:9a:0e:7f:a6:f6:3c:bb:b2:24:2c:af:24: dc:2f:fb:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwOTIwMjAxNzI5WhcNMjYwOTI3MjAxNzI5WjAYMRYwFAYD VQQDEw02YWIwM2Y1OS1iYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5DlPJiTkUEWrGiIi6BrdS+4mB8LHnXuBi7CRLUQvtXKusOhVipI2Yk/+ukn ENE28yrfkWQEETpjtPiz5sZtQ63OwSGdr+v3ZQjfFkP6egWMLC6N/+Fskmp8Kd1Z rz7qTuS6M+J4x0YdB4JQczHiMYJMB3Ite5Xa2VhApHq7qrW8Cpf1Gmdf+TOAR7xs 1n3HNySHANzQALpTycuGns/cXI31HQxAawI8vjc2fT7YqPOFYp9gCs8mxf+kY6h9 /51vbm93blG/n3eeNhWQoGKPHnBcbZPqNNlpLjAPr82QmmtWh2KGLwZB6yIDskDI jJSUIx/uTDo+9BtjoqTUN7wyUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2+xVvD YKD51MBdFpwCBJu5sUfdMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApqIafNQdji3JX1ZnQr5vjiR+ObEnT0D+JJW1EzCavAIMSWQULQL76SlfCj3K z9TI+Rpr1lzZxHd+lvZzD7qBBWNfo9cT7sXvidXeTAPespTYkl3X7wMFUQh+W7Lf K9s15Cm2Ea4lDUj28JD+lAHFzd8H/MG/eBKjoM+qe+NadXUMP3J3f3FTD1dQdr4T 0FhSyeiDjYOxH4BuS37AgAatH6kX7zDic3GZVz4TI/41rKXkbtUroG2z43OnDx2H /TvYLEHgWcjTOqNehhO8JfHiWp0aTTuxiTEAq9u8A7Dci2z2Y+0itBaieYrbsrGj 5Ofsmg5/pvY8u7IkLK8k3C/7Ow== -----END CERTIFICATE-----Generated at Mon Sep 21 22:23:53 2026 by rpki-client