$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft File: l68SGHeJLIAH_k5xa4jjO-74AN8.mft (raw, json) Hash identifier: RLI8e/V2rUFwmmzJ2FKB+tQsCZ3p4BNxXyEyWXhpLj0= Subject key identifier: CF:E1:C9:98:7F:A7:E7:1E:0E:CA:A1:AE:C9:A3:EA:B1:CE:66:1F:C4 Authority key identifier: 97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF Certificate issuer: /CN=A91B1F08/serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft Manifest number: 1E Signing time: Mon 21 Sep 2026 08:52:46 +0000 Manifest this update: Mon 21 Sep 2026 08:52:46 +0000 Manifest next update: Mon 28 Sep 2026 08:52:46 +0000 Files and hashes: 1: l68SGHeJLIAH_k5xa4jjO-74AN8.crl (hash: Yaj3Lc3cI9eWL3s0HRwOXDHYXl5814IyF9I1tVQCoDk=) 2: CF6E968E8B2811F18D2B202C3D11F970.roa (hash: nKbDtnjj8624VgFqL+Q3DAFfPVFpI7iStLeG1RhUWGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F08, serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Validity Not Before: Sep 21 08:52:46 2026 GMT Not After : Sep 28 08:52:46 2026 GMT Subject: CN=6ab0f05e-fdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:84:15:76:92:9e:92:f7:8a:7a:24:cc:73: c0:dc:03:d0:55:55:9d:97:5d:2f:d1:26:dc:70:08: 28:e9:c5:5f:4c:d9:01:77:37:a2:a3:1e:5a:8f:16: 82:12:dd:ba:c5:ab:36:d3:68:66:67:16:46:ac:00: e5:93:d8:97:fe:52:b5:02:8c:6c:3f:16:c9:b1:d7: 66:e5:e6:97:e5:99:65:46:9a:9e:a1:9f:ed:f1:22: 7b:15:d1:8e:bd:64:66:82:f4:4a:26:e7:a3:8b:06: 33:1f:1d:b0:3e:9d:89:e5:40:dd:b6:1d:66:cf:b1: d5:c4:92:bc:52:3c:27:10:4c:a3:fb:32:09:f3:92: 47:59:97:61:1c:d1:11:2d:14:7b:3e:a5:ac:c8:29: e3:45:1a:f8:b8:a5:23:9d:b1:64:e8:a4:ec:b0:02: 24:22:c7:d1:46:90:af:79:02:fb:fa:d5:17:b4:59: 2c:cd:23:a3:84:a1:cf:89:56:8c:46:ac:60:d0:70: 79:9a:5c:91:ab:3d:be:e0:b9:16:1a:98:dc:70:ca: 1b:16:38:9b:c7:e1:db:dc:f6:0e:2b:1e:85:ae:87: 6a:1c:7c:04:0a:f6:42:47:f2:7d:17:4a:a0:22:0a: 54:c9:9b:86:59:5c:77:dd:6d:5c:6a:bd:f9:fc:29: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E1:C9:98:7F:A7:E7:1E:0E:CA:A1:AE:C9:A3:EA:B1:CE:66:1F:C4 X509v3 Authority Key Identifier: keyid:97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1a:de:11:77:3d:38:91:3f:62:91:32:54:71:d5:b0:81:ca: 6f:cf:58:cb:a2:7c:5b:7b:95:ca:1b:ce:f3:c1:f0:77:62:60: 62:4f:4a:4a:d3:06:f8:59:5c:c1:47:3b:7f:f0:13:9c:2a:25: 5a:ec:9a:07:32:36:69:2b:ac:56:96:de:a4:2f:f1:f9:a5:dc: 68:f5:95:4c:54:21:a8:51:9f:65:c4:a6:e3:f5:32:38:bc:81: 4d:c5:b6:09:67:09:c8:ea:99:31:3f:60:50:d9:39:42:6c:f0: e1:a0:07:42:23:1c:0c:e1:ea:0c:50:aa:c2:fc:d1:a4:92:4e: 99:84:36:10:d9:53:b7:5c:9a:8b:92:e9:d8:e0:bb:d3:9b:87: c6:51:1d:e6:f2:6f:d5:a1:ec:01:3a:e1:8b:e2:d7:70:78:c7: c7:63:14:12:62:54:7e:1a:32:a5:c3:06:a2:68:14:f2:e4:ea: c5:45:8a:5d:d2:7a:db:a1:79:63:93:f3:f6:82:f3:18:54:b6: 6f:0c:be:b6:d6:7a:65:18:a4:de:5a:4f:c5:1f:fe:df:28:b8: 2c:ee:81:f6:a2:d0:a3:82:60:55:d0:cc:5c:f7:23:16:ba:ed: 58:c3:04:0a:cc:88:7c:0c:47:d0:e0:6a:f3:6f:a7:a2:f2:c6: 90:5b:15:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUYwODExMC8GA1UEBRMoOTdBRjEyMTg3Nzg5MkM4MDA3RkU0RTcxNkI4OEUzM0JF RUY4MDBERjAeFw0yNjA5MjEwODUyNDZaFw0yNjA5MjgwODUyNDZaMBgxFjAUBgNV BAMTDTZhYjBmMDVlLWZkYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWoYQVdpKekveKeiTMc8DcA9BVVZ2XXS/RJtxwCCjpxV9M2QF3N6KjHlqPFoIS 3brFqzbTaGZnFkasAOWT2Jf+UrUCjGw/Fsmx12bl5pflmWVGmp6hn+3xInsV0Y69 ZGaC9Eom56OLBjMfHbA+nYnlQN22HWbPsdXEkrxSPCcQTKP7MgnzkkdZl2Ec0REt FHs+pazIKeNFGvi4pSOdsWTopOywAiQix9FGkK95Avv61Re0WSzNI6OEoc+JVoxG rGDQcHmaXJGrPb7guRYamNxwyhsWOJvH4dvc9g4rHoWuh2ocfAQK9kJH8n0XSqAi ClTJm4ZZXHfdbVxqvfn8KaefAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz+HJmH+n 5x4OyqGuyaPqsc5mH8QwHwYDVR0jBBgwFoAUl68SGHeJLIAH/k5xa4jjO+74AN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRjA4LzBBMjI4OEUwOEIy ODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElBSF9rNXhhNGpqTy03NEFO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDY4U0dIZUpMSUFIX2s1eGE0ampPLTc0QU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RjA4LzBBMjI4OEUwOEIyODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElB SF9rNXhhNGpqTy03NEFOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA2Gt4Rdz04kT9ikTJUcdWwgcpvz1jLonxbe5XKG87zwfB3YmBiT0pK0wb4WVzB Rzt/8BOcKiVa7JoHMjZpK6xWlt6kL/H5pdxo9ZVMVCGoUZ9lxKbj9TI4vIFNxbYJ ZwnI6pkxP2BQ2TlCbPDhoAdCIxwM4eoMUKrC/NGkkk6ZhDYQ2VO3XJqLkunY4LvT m4fGUR3m8m/VoewBOuGL4tdweMfHYxQSYlR+GjKlwwaiaBTy5OrFRYpd0nrboXlj k/P2gvMYVLZvDL621nplGKTeWk/FH/7fKLgs7oH2otCjgmBV0Mxc9yMWuu1YwwQK zIh8DEfQ4Grzb6ei8saQWxW6 -----END CERTIFICATE-----Generated at Tue Sep 22 20:36:41 2026 by rpki-client