$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft File: R-lr-DG7PMQ7TweEJj5ylYddVRY.mft (raw, json) Hash identifier: zEvdqZWTyvkhaooLql3CwGmtvOANb+H/TXwCCZXiV3k= Subject key identifier: 2B:E9:34:C1:1E:3B:63:CC:0D:3B:71:AF:7E:41:05:5C:48:8F:5E:42 Authority key identifier: 47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 Certificate issuer: /CN=A91C4204/serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft Manifest number: 0100 Signing time: Mon 21 Sep 2026 06:10:20 +0000 Manifest this update: Mon 21 Sep 2026 06:10:19 +0000 Manifest next update: Mon 28 Sep 2026 06:10:19 +0000 Files and hashes: 1: R-lr-DG7PMQ7TweEJj5ylYddVRY.crl (hash: jSNre+eiMXeCnD/TzicFq8EfsdkejZYv8/psUI9MrhE=) 2: CA2D4952300911F0AB675D3EC4F9AE02.roa (hash: LQJzwkclBmwOmL2YkraTcankSfQmcjnSpIupRPPZZKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Validity Not Before: Sep 21 06:10:19 2026 GMT Not After : Sep 28 06:10:19 2026 GMT Subject: CN=6ab0ca4b-db23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a4:89:e3:db:ed:74:ac:83:64:7d:45:e4:e5: 5e:2c:77:dd:38:ab:60:86:70:96:00:2a:ae:19:03: eb:ba:fd:82:09:19:b3:81:1f:8f:8b:e3:e8:3a:57: 01:05:bb:a8:b1:53:ee:72:97:26:51:e5:79:41:cd: 19:a3:7d:35:a2:e4:e8:ca:e4:fb:62:5a:43:a0:f2: 8d:a5:b1:1c:be:a8:91:cb:13:3f:db:b8:25:c2:22: 24:23:6c:10:1d:a9:12:b1:3e:ab:39:89:d4:59:c8: df:67:af:d1:13:29:9a:b8:be:1d:c9:b7:6c:1f:38: cd:1a:0f:5a:f7:79:e0:99:46:50:8a:5e:6f:78:57: 20:16:ee:45:32:21:0e:71:1e:44:2a:49:f9:8a:eb: 5b:65:34:61:59:7b:d8:a7:d7:27:2f:b0:ee:9e:a4: e7:39:25:70:53:72:1e:64:c0:91:4c:32:8d:f4:e4: 6a:29:c4:65:f0:7c:ca:f7:f7:0f:dc:a0:30:99:c9: 6b:3e:25:7a:e7:c0:dd:54:69:81:29:26:1c:f2:b8: 29:a5:9c:b5:5e:20:c9:e0:ab:79:14:5a:28:81:51: b2:00:89:1e:6b:a7:e6:77:7f:00:5c:1a:52:fb:6a: ae:56:b8:5d:e4:8e:ef:e3:45:0d:d4:38:f5:a8:70: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:34:C1:1E:3B:63:CC:0D:3B:71:AF:7E:41:05:5C:48:8F:5E:42 X509v3 Authority Key Identifier: keyid:47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6a:54:6d:47:24:db:72:02:34:53:ba:76:77:0e:f6:75:61: 03:01:95:a1:17:b1:d5:99:a0:30:77:a5:7d:8d:73:76:ae:ea: 52:4f:b1:81:20:6c:cd:0e:6d:c2:9e:09:d4:93:07:85:5d:2c: 96:9a:f0:32:50:d7:87:a9:59:df:60:7e:6f:77:76:29:07:f9: 09:2c:a8:87:68:0c:70:25:eb:d6:b0:0a:f9:10:d3:59:cb:0b: bb:9e:89:7d:b1:25:7b:13:ed:8a:03:b3:23:b6:67:3c:5a:35: 96:e8:c1:ab:bf:25:d2:9f:1f:67:b9:79:b9:4e:6f:64:e2:a8: 94:87:84:fe:e6:0a:4d:91:ff:e0:27:3d:a1:9f:86:05:67:ee: ba:f4:24:a7:d2:1d:cf:f3:0d:5d:84:44:8b:05:19:6f:9b:6c: 8d:3f:fc:9c:3d:14:52:6e:d0:54:37:21:65:dd:b2:f8:ef:db: dd:1e:2e:3b:d4:b6:1f:5a:e8:f0:65:35:07:ef:05:c0:66:c0: f2:f1:77:3e:86:0c:61:e7:8b:b9:c7:e3:70:82:8d:4f:57:00: dd:e7:4a:61:ab:1d:62:21:a3:09:d3:31:bc:e9:73:84:3d:26: aa:04:35:dd:4d:2e:b1:50:76:c8:b2:1e:dc:fe:ab:89:ea:14: 09:53:2d:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQyMDQxMTAvBgNVBAUTKDQ3RTk2QkY4MzFCQjNDQzQzQjRGMDc4NDI2M0U3Mjk1 ODc1RDU1MTYwHhcNMjYwOTIxMDYxMDE5WhcNMjYwOTI4MDYxMDE5WjAYMRYwFAYD VQQDEw02YWIwY2E0Yi1kYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6SJ49vtdKyDZH1F5OVeLHfdOKtghnCWACquGQPruv2CCRmzgR+Pi+PoOlcB BbuosVPucpcmUeV5Qc0Zo301ouToyuT7YlpDoPKNpbEcvqiRyxM/27glwiIkI2wQ HakSsT6rOYnUWcjfZ6/REymauL4dybdsHzjNGg9a93ngmUZQil5veFcgFu5FMiEO cR5EKkn5iutbZTRhWXvYp9cnL7DunqTnOSVwU3IeZMCRTDKN9ORqKcRl8HzK9/cP 3KAwmclrPiV658DdVGmBKSYc8rgppZy1XiDJ4Kt5FFoogVGyAIkea6fmd38AXBpS +2quVrhd5I7v40UN1Dj1qHBVkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvpNMEe O2PMDTtxr35BBVxIj15CMB8GA1UdIwQYMBaAFEfpa/gxuzzEO08HhCY+cpWHXVUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDIwNC80NDFCNTA1MjMw MDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BNUTdUd2VFSmo1eWxZZGRW UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ItbHItREc3UE1RN1R3ZUVKajV5bFlkZFZSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDIwNC80NDFCNTA1MjMwMDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BN UTdUd2VFSmo1eWxZZGRWUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjmpUbUck23ICNFO6dncO9nVhAwGVoRex1ZmgMHelfY1zdq7qUk+xgSBszQ5t wp4J1JMHhV0slprwMlDXh6lZ32B+b3d2KQf5CSyoh2gMcCXr1rAK+RDTWcsLu56J fbElexPtigOzI7ZnPFo1lujBq78l0p8fZ7l5uU5vZOKolIeE/uYKTZH/4Cc9oZ+G BWfuuvQkp9Idz/MNXYREiwUZb5tsjT/8nD0UUm7QVDchZd2y+O/b3R4uO9S2H1ro 8GU1B+8FwGbA8vF3PoYMYeeLucfjcIKNT1cA3edKYasdYiGjCdMxvOlzhD0mqgQ1 3U0usVB2yLIe3P6rieoUCVMtUw== -----END CERTIFICATE-----Generated at Tue Sep 22 00:34:49 2026 by rpki-client