$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json) Hash identifier: oTL58nfVs9sry6us/Cyi2xysCf/6DQuwHmByzOOeBss= Subject key identifier: CD:DB:AD:F7:11:56:F2:C2:D7:F4:B5:E4:91:5F:03:E5:5D:5C:0F:D5 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft Manifest number: 03B9 Signing time: Mon 21 Sep 2026 01:27:33 +0000 Manifest this update: Mon 21 Sep 2026 01:27:33 +0000 Manifest next update: Mon 28 Sep 2026 01:27:33 +0000 Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: l6HC+bY3acbypoAv77HfrYAXFJlwaivbEsGjo0pqvwI=) 2: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: tqHiB6MdNj5867Z3RrIXxNvtsP/WHrWgARnyhJP6ZUQ=) 3: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: aGUm8omo4ZFJXDjr4Xz+Jx5SdszNlZSFCVVvYUaDDDE=) 4: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: 4beFvb4hxPowcDYshVeExpQg/8txXAvZVZ0I7WzOu3o=) 5: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: aTh/szGkbByCO+bl8x7ZpvLQYMqSV+pbAIP3Duch7WM=) 6: E879EE7C144111EFB247B936C4F9AE02.roa (hash: PJy1pOjFWbAmsotvikHiiGWZOz13/Q1Q3kqdzHzWoW8=) 7: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: cE+N/sJmZXPwEqsr56rRVKadyFeojKXZbwqZsGJI3ow=) 8: FFCFFCFC756411F1BE4724178AA30FBC.roa (hash: K+M/GXpCv3Nhy9zZfN36sc5I9tx9qAwRUjDeflaFZJU=) 9: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: Lr5oonGaOp/1JBezgStkgVrxPphf7c1k8rUXUUlH1HQ=) 10: 6CD1CCC2936511F1BD100F9E4D11F970.roa (hash: TCfovgmfhV4JubGfoFfkBMtA3nN7dXUsM6EMCQAL8Ts=) 11: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: EhpTUDDHzY+fvrYZYj/pFiggKyojVq9obYmKAT1n3A0=) 12: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: mH9aDJls4Z4vdRc3n6JwAhEgaMfwmf9djBOACp2CztQ=) 13: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: +tqSxdBf9cs4OFgeQ2ZLbEvYIKIcLRjjRyzUUxp3EEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 21 01:27:33 2026 GMT Not After : Sep 28 01:27:33 2026 GMT Subject: CN=6ab08805-8674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:46:4d:8c:ac:be:90:93:0a:af:98:53:a1: 85:af:c0:2e:5e:f7:9c:b3:ed:6e:ad:35:ca:33:11: d0:15:b9:b1:d7:1a:48:ab:02:d5:a0:b5:00:ca:0f: c1:3d:b4:58:d8:69:51:f6:b2:84:98:db:1b:2d:95: 07:bc:83:9e:9a:1e:8f:5c:bc:a9:f1:21:f8:c4:c8: ab:d4:7e:75:e2:57:1a:70:95:75:4d:58:0a:a1:ce: 88:2b:17:22:e5:78:2c:57:c7:93:fe:85:b7:7b:4a: 94:56:cb:df:b6:ab:66:9b:1f:47:89:de:de:ed:8d: 64:83:78:33:e4:16:ed:79:24:bf:14:58:61:ad:b8: 8d:9c:31:98:d3:b2:53:6e:b6:ac:4f:b0:39:b6:7b: 60:2c:ac:5e:45:fc:9d:6b:d7:59:93:71:33:e1:b4: e1:3b:48:56:be:a9:4a:d7:d9:46:01:d4:20:dd:c4: 97:ab:48:63:0e:9a:6c:54:8a:8d:b5:fd:bf:46:47: 8e:f9:16:8d:c6:6c:87:a8:c0:a7:d1:26:5d:56:9d: 0a:27:be:ac:fb:c7:07:a4:00:fb:d2:ef:b7:da:c5: 6f:79:e7:80:42:ab:23:d3:a6:ca:d9:b1:1d:2a:24: 0b:ca:5d:56:1e:ec:57:21:d7:c9:4b:0e:a5:44:0e: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:AD:F7:11:56:F2:C2:D7:F4:B5:E4:91:5F:03:E5:5D:5C:0F:D5 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:da:ea:f0:e7:1a:35:80:30:39:0c:41:98:56:70:41:63:1a: 76:5a:a8:2f:da:c5:34:fa:af:d5:21:cd:9c:fa:4e:db:21:de: fc:b3:8f:48:a3:23:49:2b:11:5c:a6:1a:7a:af:d7:fb:62:81: 16:89:4e:c0:bb:b1:0e:40:73:0f:f5:51:61:f4:1e:88:ea:57: ba:ea:e2:6c:7d:31:4f:e3:66:76:71:6e:8e:a5:bc:4e:e1:a1: 66:fa:95:fe:37:f5:ba:8b:21:5e:72:1a:d7:78:6b:8b:a1:dd: 3d:52:94:be:52:11:df:62:7c:be:19:70:fa:e0:0e:7c:f2:e2: 15:7d:ed:ee:f5:f5:ad:87:03:93:8e:7d:61:07:a5:66:ba:08: 5d:a2:18:43:ff:77:6b:9f:e5:2d:c5:97:c8:a3:05:7b:ea:44: 47:f4:2e:37:20:72:66:9d:9e:29:15:ca:c4:e1:61:d9:ac:e2: 16:f3:60:ac:eb:be:ef:27:53:75:18:cb:11:ea:51:d6:f8:5e: b9:9a:70:39:c7:cd:f9:28:7f:4d:6d:17:80:a5:b2:59:43:d4: 99:aa:7b:a0:fb:56:74:67:f4:54:e7:7c:94:b9:ee:8d:92:2e: 9e:40:2e:f6:64:99:31:2a:e6:11:e7:2a:af:fe:a2:83:61:61: 68:f7:6a:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwOTIxMDEyNzMzWhcNMjYwOTI4MDEyNzMzWjAYMRYwFAYD VQQDEw02YWIwODgwNS04Njc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2FGTYysvpCTCq+YU6GFr8AuXvecs+1urTXKMxHQFbmx1xpIqwLVoLUAyg/B PbRY2GlR9rKEmNsbLZUHvIOemh6PXLyp8SH4xMir1H514lcacJV1TVgKoc6IKxci 5XgsV8eT/oW3e0qUVsvftqtmmx9Hid7e7Y1kg3gz5BbteSS/FFhhrbiNnDGY07JT brasT7A5tntgLKxeRfyda9dZk3Ez4bThO0hWvqlK19lGAdQg3cSXq0hjDppsVIqN tf2/RkeO+RaNxmyHqMCn0SZdVp0KJ76s+8cHpAD70u+32sVveeeAQqsj06bK2bEd KiQLyl1WHuxXIdfJSw6lRA5KxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3brfcR VvLC1/S15JFfA+VdXA/VMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx blVCSTFENEVzekNXbVA1amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZdrq8OcaNYAwOQxBmFZwQWMadlqoL9rFNPqv1SHNnPpO2yHe/LOPSKMjSSsR XKYaeq/X+2KBFolOwLuxDkBzD/VRYfQeiOpXuuribH0xT+NmdnFujqW8TuGhZvqV /jf1uoshXnIa13hri6HdPVKUvlIR32J8vhlw+uAOfPLiFX3t7vX1rYcDk459YQel ZroIXaIYQ/93a5/lLcWXyKMFe+pER/QuNyByZp2eKRXKxOFh2aziFvNgrOu+7ydT dRjLEepR1vheuZpwOcfN+Sh/TW0XgKWyWUPUmap7oPtWdGf0VOd8lLnujZIunkAu 9mSZMSrmEecqr/6ig2FhaPdqQQ== -----END CERTIFICATE-----Generated at Tue Sep 22 13:39:30 2026 by rpki-client