$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft File: lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json) Hash identifier: RQxX0rz57N3A0tFTXw2GKm7d3QYuMQihqX4c//8EHPk= Subject key identifier: 07:E6:2E:50:A1:3C:D0:4B:A0:1D:2C:77:88:53:52:70:36:02:26:D6 Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft Manifest number: 01F1 Signing time: Fri 23 Oct 2026 03:59:11 +0000 Manifest this update: Fri 23 Oct 2026 03:59:11 +0000 Manifest next update: Fri 30 Oct 2026 03:59:11 +0000 Files and hashes: 1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: y+ItBxxmWLhKMr5WzZfBseiwY6P/LGJ3Q2pa+ZtUSoU=) 2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 03:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Oct 23 03:59:11 2026 GMT Not After : Oct 30 03:59:11 2026 GMT Subject: CN=6adadb8f-57cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:cf:b0:76:38:2b:60:1a:73:6b:d1:e8:08: d2:75:0a:9d:51:8e:f8:aa:9b:ed:d3:f2:67:f7:7c: 3f:2b:d2:98:ae:bb:1b:13:f3:1d:74:31:03:ac:09: 67:ae:21:d3:37:0f:e9:d8:45:0a:c5:1d:87:a3:10: 8b:e1:3c:37:76:62:8e:7c:a1:38:74:3b:b3:97:2f: 30:6f:1f:e6:77:30:6c:9d:c3:01:d1:a4:2c:83:27: c5:a6:f7:52:7d:91:2e:b6:b0:9e:72:64:59:b0:83: eb:6f:eb:54:85:b6:93:9f:47:c8:58:a9:dd:bf:fa: 81:02:60:92:02:3d:ed:65:3e:a6:2a:c7:52:90:c6: 95:6f:2c:fe:2e:82:9e:6e:8d:0b:5c:d3:eb:e3:b9: 11:26:fd:54:48:0c:00:86:d2:25:01:f4:cb:85:30: 83:42:07:6f:44:2c:17:1f:53:91:50:a6:f2:23:f4: d6:1b:23:5b:5f:75:da:f9:23:e7:e5:e6:88:75:8a: 3e:f5:e5:77:ae:d0:4c:dc:ee:76:26:c8:5a:da:69: 44:4e:48:5b:ed:4a:55:01:a5:f8:ee:94:15:d0:42: 89:04:1d:70:dc:bc:ad:77:07:d5:6e:54:22:5b:d0: ba:37:19:66:53:80:a4:f8:59:74:c2:bc:ac:c2:f9: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:2E:50:A1:3C:D0:4B:A0:1D:2C:77:88:53:52:70:36:02:26:D6 X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3f:31:7d:5d:6b:fd:e9:68:85:54:20:3f:18:f0:d7:ec:03: fb:75:27:b7:2a:91:42:9e:6d:e4:90:f5:8d:ec:10:45:d0:3d: e0:77:68:df:1f:e7:d5:9d:84:7f:c3:6c:06:67:67:65:99:ce: eb:19:e0:69:24:64:17:35:3e:b3:fe:eb:34:4b:ba:67:9f:06: dd:7d:5a:97:20:a1:70:bd:db:13:48:07:eb:44:b7:c2:5c:39: 87:8d:8d:bf:67:ec:ea:ae:c6:65:e3:94:11:05:02:92:68:2c: 8f:fd:2d:f1:c3:a7:87:40:27:51:6c:69:31:0b:30:31:63:13: ae:55:7d:62:54:59:7b:7a:8d:86:47:39:5c:bb:3b:b7:8f:64: 2f:36:f8:10:ae:a5:0c:90:6d:6a:0e:44:07:90:94:6e:85:9f: bb:8b:f9:43:17:1e:4f:04:e4:21:62:d0:a0:52:c0:7c:dc:28: 52:02:15:93:56:6e:c1:22:b7:b2:3a:53:10:bc:db:69:7c:5d: 67:a1:a8:2c:43:67:4f:c3:9b:c7:98:b6:eb:77:7c:72:3b:79: 9e:bb:62:b9:4d:04:76:72:8e:7f:a6:82:11:fb:c3:0c:1e:54: cf:6c:26:c4:ac:74:ad:ce:36:45:aa:4e:8f:c3:0b:28:5a:ab: ac:33:2d:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjYxMDIzMDM1OTExWhcNMjYxMDMwMDM1OTExWjAYMRYwFAYD VQQDEw02YWRhZGI4Zi01N2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojjPsHY4K2Aac2vR6AjSdQqdUY74qpvt0/Jn93w/K9KYrrsbE/MddDEDrAln riHTNw/p2EUKxR2HoxCL4Tw3dmKOfKE4dDuzly8wbx/mdzBsncMB0aQsgyfFpvdS fZEutrCecmRZsIPrb+tUhbaTn0fIWKndv/qBAmCSAj3tZT6mKsdSkMaVbyz+LoKe bo0LXNPr47kRJv1USAwAhtIlAfTLhTCDQgdvRCwXH1ORUKbyI/TWGyNbX3Xa+SPn 5eaIdYo+9eV3rtBM3O52Jsha2mlETkhb7UpVAaX47pQV0EKJBB1w3LytdwfVblQi W9C6NxlmU4Ck+Fl0wryswvk5JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfmLlCh PNBLoB0sd4hTUnA2AibWMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFR RGRXakJoQXd5SnBJbG9BNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUj8xfV1r/elohVQgPxjw1+wD+3UntyqRQp5t5JD1jewQRdA94Hdo3x/n1Z2E f8NsBmdnZZnO6xngaSRkFzU+s/7rNEu6Z58G3X1alyChcL3bE0gH60S3wlw5h42N v2fs6q7GZeOUEQUCkmgsj/0t8cOnh0AnUWxpMQswMWMTrlV9YlRZe3qNhkc5XLs7 t49kLzb4EK6lDJBtag5EB5CUboWfu4v5QxceTwTkIWLQoFLAfNwoUgIVk1ZuwSK3 sjpTELzbaXxdZ6GoLENnT8Obx5i263d8cjt5nrtiuU0EdnKOf6aCEfvDDB5Uz2wm xKx0rc42RapOj8MLKFqrrDMt8g== -----END CERTIFICATE-----Generated at Fri Oct 23 19:35:07 2026 by rpki-client