$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: dZ/KEls7eONssvvyqHH5/OnjsMUBGFCj8BAHicqoxgg= Subject key identifier: FD:3B:7F:AF:AB:D6:04:1E:5B:33:16:87:4F:C9:70:BE:21:35:95:04 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0C40 Signing time: Sun 20 Sep 2026 18:43:33 +0000 Manifest this update: Sun 20 Sep 2026 18:43:32 +0000 Manifest next update: Sun 27 Sep 2026 18:43:32 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: spX/Q6Px+gdDEks1+JgL+q5RbUW1mRofgPd7Oh8HopA=) 2: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: j2CWh2M1Zubhu80nB8Ke1i2o0Pn0OuTxS4mQsSIpork=) 3: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: Mz6TVl8d97rl0T5Sgcb40knK3DLPqLH5f8e3CzLuT7A=) 4: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: EtWPVe46Z6YD/Gko0Vzg+XYe7+MF4xJzoOYHJ+2jqX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Sep 20 18:43:32 2026 GMT Not After : Sep 27 18:43:32 2026 GMT Subject: CN=6ab02954-eaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:61:b7:bf:02:c4:cf:c7:85:17:54:6e:67: 38:2f:ea:8c:aa:ad:94:a3:c6:42:28:c5:72:83:b5: d1:23:f0:11:ad:45:37:fb:90:78:39:68:4a:bb:58: 85:80:af:45:c7:97:04:4c:05:f2:cd:22:22:30:30: cc:2a:8d:88:af:a1:9b:6b:f6:b2:a9:7f:1f:0b:10: 69:36:e5:bc:7e:43:1c:bb:30:d3:86:56:47:cc:74: cc:32:a5:41:ed:1f:ea:56:4d:5d:48:e3:7a:43:0b: 2a:97:a0:45:28:b0:99:3e:14:6b:00:3a:53:fe:a7: 2d:6c:6b:1b:5e:41:99:f8:71:6d:0a:02:e5:62:52: cb:0f:26:4d:28:e8:fa:53:b4:21:29:0d:39:08:39: 04:5c:b3:c8:6f:dc:dc:f3:54:dc:da:d8:a7:c3:e2: 1e:a0:d8:f2:4c:15:3c:84:09:ef:1e:6c:b6:03:6d: d0:ea:5e:da:05:f7:12:47:95:1d:cb:ed:c0:af:95: cc:04:35:a6:91:8f:44:47:c0:46:9a:10:6b:b5:33: 4b:df:8c:0b:14:c5:85:cf:32:3b:5d:e7:58:b9:4b: f1:cc:fd:2c:e3:24:44:ea:f7:15:06:d4:0f:6f:a2: ff:3e:a2:b6:5b:7e:f1:b8:30:b4:8e:6e:ef:bf:fb: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3B:7F:AF:AB:D6:04:1E:5B:33:16:87:4F:C9:70:BE:21:35:95:04 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:f7:6a:67:2c:fc:48:40:66:09:3d:69:95:33:0f:f5:ac: e4:da:19:2b:8a:1d:0e:35:f0:d0:10:a3:5b:66:eb:8f:8c:25: 38:c4:54:4a:40:d9:37:a3:18:21:28:16:1a:0f:81:5d:5e:0d: ce:c6:4f:96:73:1c:d2:7a:5d:fa:1c:97:1c:1c:5d:84:99:f9: 3b:19:73:ab:8f:06:a6:7b:6b:95:45:7b:8b:99:f4:5b:4e:8f: 44:91:a0:ac:ac:11:62:ae:1f:16:67:a1:3d:d1:ef:95:58:2a: f2:7a:69:a6:e6:f9:9b:6f:5d:3b:8a:21:ea:b6:0a:37:7f:39: 24:8c:83:6c:b8:9d:e4:75:fd:f9:4b:50:30:28:d4:ef:b5:3f: 37:f5:fd:ab:6b:b5:d7:8f:d0:88:30:15:7c:93:6d:da:e2:93: 48:6e:aa:9c:2e:1c:7a:ec:cd:5a:29:89:bc:1f:d3:a5:56:63: 23:ae:cc:71:f8:3a:8b:ec:0f:9d:d1:bf:7d:40:04:07:5c:a8: 1b:a9:54:c0:0d:e1:0d:ad:73:ab:36:5f:1d:ca:1c:87:2a:12: c4:56:c9:50:5e:6e:ef:bc:d5:6c:e8:b6:b4:bf:8c:7d:2f:39: 16:c8:d5:d4:a2:fd:da:ee:73:c9:dc:cb:4b:c1:60:cb:59:12: bf:70:ad:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYwOTIwMTg0MzMyWhcNMjYwOTI3MTg0MzMyWjAYMRYwFAYD VQQDEw02YWIwMjk1NC1lYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ilht78CxM/HhRdUbmc4L+qMqq2Uo8ZCKMVyg7XRI/ARrUU3+5B4OWhKu1iF gK9Fx5cETAXyzSIiMDDMKo2Ir6Gba/ayqX8fCxBpNuW8fkMcuzDThlZHzHTMMqVB 7R/qVk1dSON6Qwsql6BFKLCZPhRrADpT/qctbGsbXkGZ+HFtCgLlYlLLDyZNKOj6 U7QhKQ05CDkEXLPIb9zc81Tc2tinw+IeoNjyTBU8hAnvHmy2A23Q6l7aBfcSR5Ud y+3Ar5XMBDWmkY9ER8BGmhBrtTNL34wLFMWFzzI7XedYuUvxzP0s4yRE6vcVBtQP b6L/PqK2W37xuDC0jm7vv/ty8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP07f6+r 1gQeWzMWh0/JcL4hNZUEMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7X3amcs/EhAZgk9aZUzD/Ws5NoZK4odDjXw0BCjW2brj4wlOMRUSkDZN6MY ISgWGg+BXV4NzsZPlnMc0npd+hyXHBxdhJn5Oxlzq48GpntrlUV7i5n0W06PRJGg rKwRYq4fFmehPdHvlVgq8npppub5m29dO4oh6rYKN385JIyDbLid5HX9+UtQMCjU 77U/N/X9q2u114/QiDAVfJNt2uKTSG6qnC4ceuzNWimJvB/TpVZjI67Mcfg6i+wP ndG/fUAEB1yoG6lUwA3hDa1zqzZfHcochyoSxFbJUF5u77zVbOi2tL+MfS85FsjV 1KL92u5zydzLS8Fgy1kSv3CtkA== -----END CERTIFICATE-----Generated at Mon Sep 21 16:04:14 2026 by rpki-client