$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: 5PVehJuCjXyGm8IYhquYaefw/sawU+fzTxnJxd7Sytw= Subject key identifier: 28:7A:80:CD:76:C0:A2:96:80:E0:5F:63:E8:D4:13:F6:E1:39:D7:BA Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1F8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1F76 Signing time: Mon 12 Oct 2026 16:02:28 +0000 Manifest this update: Mon 12 Oct 2026 16:02:28 +0000 Manifest next update: Mon 19 Oct 2026 16:02:28 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: Hh394Ztq3WRQw4hZwQl+xiUSpKU9mdXQcrMeo5BWWtQ=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=) 3: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: 3MKooCBU61wIsuGXSmqPXw064htJ8PtkFCtnxTlqkOw=) 4: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: rr7iOLl9TUyzkrsjzgFR/+q8JCXOgUaSGUX032fYyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8076 (0x1f8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Oct 12 16:02:28 2026 GMT Not After : Oct 19 16:02:28 2026 GMT Subject: CN=6acd0494-9317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:c2:6b:80:4e:c8:6d:aa:ac:95:c9:2e:fd: 5f:d9:f3:10:04:fb:b5:e2:3a:ef:fb:50:8d:40:4a: 68:95:0e:1c:de:60:46:07:7d:ce:1b:18:fc:15:a8: 68:78:41:7b:61:a8:41:57:8b:a6:0a:29:98:13:a3: 04:02:70:2e:8b:36:89:21:31:b1:ac:89:dc:2c:d2: a8:0b:25:b7:59:47:e6:5b:a7:7c:8b:14:58:1b:a7: b7:a5:0d:7b:5e:83:ee:77:d5:25:fd:71:d7:6f:e5: ef:44:19:c7:df:ec:fd:de:b5:33:56:d0:2a:cf:62: 39:7a:a0:b1:2f:dd:61:da:2d:df:6f:b4:63:a6:e3: aa:65:52:2b:d6:29:77:d7:c8:fe:a3:99:a9:81:ec: af:ba:7b:11:dc:59:9d:42:26:63:b0:16:f0:c2:32: 6d:f6:b2:78:8d:94:1f:37:e0:43:ca:c5:b2:d8:a9: 9d:71:6e:45:2f:85:e3:38:c4:e6:df:49:90:b0:8c: e6:85:b0:75:b9:b8:bb:a6:dd:20:f0:3c:28:1e:01: 9b:e6:2a:45:ca:42:4a:9f:97:07:0c:19:43:1b:c0: 0b:9d:3b:53:55:17:dd:0b:c9:e5:44:60:27:4e:c0: 3d:76:65:67:65:1a:21:03:94:a3:4d:2a:e7:94:0b: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:80:CD:76:C0:A2:96:80:E0:5F:63:E8:D4:13:F6:E1:39:D7:BA X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d1:64:72:5b:38:f1:23:38:16:20:15:ce:23:1e:00:31:57: 91:e3:40:6e:c0:0f:5e:81:db:ed:cc:a8:f7:05:4d:9f:b6:62: d9:64:88:b7:3c:44:76:05:70:ed:5e:cb:33:2a:b6:17:1b:3c: 29:6c:ea:0e:13:ef:87:51:e2:3a:e3:8f:0e:d3:50:8e:21:04: e3:d7:dd:e6:08:e5:ab:a3:be:da:83:4b:8e:94:93:07:ef:83: 62:eb:af:34:6c:e3:11:c9:9b:94:f6:4f:15:13:3c:78:fe:ec: e1:26:58:e6:69:7a:88:db:53:55:f7:06:06:f6:8a:77:a1:21: 95:b6:cc:f3:0a:de:a6:cd:24:2d:9f:93:7d:09:61:26:42:c3: 8a:6a:16:47:9c:de:06:8c:9c:18:72:97:9b:13:cb:dc:f4:36: 31:20:66:ca:cf:7b:a5:9d:ff:66:4c:49:93:78:cd:5a:1f:1c: 91:07:4a:6e:52:48:43:f3:26:8e:aa:6b:66:dc:14:b3:81:7b: ee:18:19:11:75:c0:55:eb:57:5c:df:eb:0d:6d:17:a3:cf:ff: 8e:34:71:c3:1f:35:eb:ae:d6:ee:c1:ac:ed:2e:17:1d:d3:cd: 8d:cc:32:49:a2:f7:67:b6:5a:05:89:00:b3:91:54:d7:46:28: f0:a8:4e:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjYxMDEyMTYwMjI4WhcNMjYxMDE5MTYwMjI4WjAYMRYwFAYD VQQDEw02YWNkMDQ5NC05MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQ/Ca4BOyG2qrJXJLv1f2fMQBPu14jrv+1CNQEpolQ4c3mBGB33OGxj8Faho eEF7YahBV4umCimYE6MEAnAuizaJITGxrIncLNKoCyW3WUfmW6d8ixRYG6e3pQ17 XoPud9Ul/XHXb+XvRBnH3+z93rUzVtAqz2I5eqCxL91h2i3fb7RjpuOqZVIr1il3 18j+o5mpgeyvunsR3FmdQiZjsBbwwjJt9rJ4jZQfN+BDysWy2KmdcW5FL4XjOMTm 30mQsIzmhbB1ubi7pt0g8DwoHgGb5ipFykJKn5cHDBlDG8ALnTtTVRfdC8nlRGAn TsA9dmVnZRohA5SjTSrnlAtkqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCh6gM12 wKKWgOBfY+jUE/bhOde6MB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm9Fkcls48SM4FiAVziMeADFXkeNAbsAPXoHb7cyo9wVNn7Zi2WSItzxEdgVw 7V7LMyq2Fxs8KWzqDhPvh1HiOuOPDtNQjiEE49fd5gjlq6O+2oNLjpSTB++DYuuv NGzjEcmblPZPFRM8eP7s4SZY5ml6iNtTVfcGBvaKd6EhlbbM8wreps0kLZ+TfQlh JkLDimoWR5zeBoycGHKXmxPL3PQ2MSBmys97pZ3/ZkxJk3jNWh8ckQdKblJIQ/Mm jqprZtwUs4F77hgZEXXAVetXXN/rDW0Xo8//jjRxwx81667W7sGs7S4XHdPNjcwy SaL3Z7ZaBYkAs5FU10Yo8KhOow== -----END CERTIFICATE-----Generated at Wed Oct 14 01:36:38 2026 by rpki-client