$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json) Hash identifier: urNpcIF/KAOPQNg24TlYluaxMmdKt21X5QP7SOQL688= Subject key identifier: B3:C9:FC:AB:9F:BB:62:41:69:B0:44:DB:B4:D2:38:B8:50:D7:9C:25 Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 Certificate issuer: /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft Manifest number: 84 Signing time: Mon 21 Sep 2026 07:42:06 +0000 Manifest this update: Mon 21 Sep 2026 07:42:06 +0000 Manifest next update: Mon 28 Sep 2026 07:42:06 +0000 Files and hashes: 1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: JwTJk33nj21mQLt++EiCO8DDNNSOKrKBe6d5PT0T8Fw=) 2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: s2faR/BPs0e9l2J2jTA2X6q8H0jSwkE9aF0b9GI1C9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Validity Not Before: Sep 21 07:42:06 2026 GMT Not After : Sep 28 07:42:06 2026 GMT Subject: CN=6ab0dfce-4c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:50:c2:b8:87:9f:93:0d:15:21:8c:21:74: 64:91:9e:57:9b:0f:55:b8:2a:8e:62:cf:f6:9b:6c: 36:f7:bd:ad:4a:45:86:8c:b9:c8:5e:5e:72:99:32: e8:cb:65:dc:0a:01:00:38:74:e7:40:c6:83:a9:d1: c8:b0:da:11:e7:1f:1e:4e:66:ce:8e:89:65:fe:8e: fc:45:a8:ca:0d:82:eb:8d:bb:8f:21:4f:ad:a5:ad: a0:18:90:bb:af:87:4d:7f:69:85:8e:00:4d:a9:e7: 33:7d:b5:7e:2a:74:cf:cb:af:ea:9d:16:3c:d4:2e: 46:a1:df:10:9a:15:7c:f0:9a:fb:2f:d1:b5:2f:ce: a0:28:fe:04:d4:e3:6a:82:e3:63:9e:54:27:b6:da: e1:93:7c:73:2f:80:f0:b1:8f:78:97:97:32:6d:c6: 0f:99:37:93:00:5b:f1:4f:74:d7:76:09:a3:a2:0f: 34:6d:e1:08:16:78:be:99:43:96:3a:88:bd:4c:e8: 8c:5d:29:ee:45:6f:9a:79:f4:9e:e4:d6:bf:80:e8: ff:9e:84:0a:2a:07:97:41:f6:77:ee:06:b7:cf:06: e6:13:fe:79:27:05:c7:ef:cf:f2:5d:ca:1e:3b:2b: 6a:ec:e5:88:ec:43:f9:1c:e6:56:1f:3e:c5:58:34: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C9:FC:AB:9F:BB:62:41:69:B0:44:DB:B4:D2:38:B8:50:D7:9C:25 X509v3 Authority Key Identifier: keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2a:05:40:00:cb:50:28:ef:00:43:d5:4b:d2:ad:ab:df:8c: 8a:12:64:4d:d8:13:c9:61:d7:3d:de:c7:e8:3f:58:3b:ed:72: 96:05:9d:8e:91:9c:86:c4:07:e2:a5:ae:89:cd:fb:fb:ab:db: 91:33:46:41:e3:1e:e9:b6:12:d8:19:b7:76:08:cd:fe:ed:96: 65:c9:34:67:f9:55:63:03:90:3a:94:f9:a7:71:46:fb:5f:87: 4f:0f:b4:6a:1d:1a:90:d1:94:d6:76:93:60:ff:ac:60:f0:93: 7a:9c:22:ac:a6:b5:6c:cd:0c:e5:ad:0d:4b:29:4b:1c:e6:a1: dc:13:69:e8:77:a3:80:8e:29:9a:ed:84:0e:a6:e3:b7:c1:43: 4a:ad:70:1c:7d:a7:8a:68:a0:5e:6b:13:7b:ca:cb:46:c2:31: c0:6c:e7:77:30:8c:81:cc:e3:84:72:c2:22:e0:d8:98:08:ab: 70:eb:8e:3c:d8:39:ad:9d:d9:73:1f:a8:b8:93:25:70:3b:61: ad:6a:bb:4a:42:69:06:a0:6a:a6:d1:73:f2:3b:cd:d7:39:99: e5:91:2d:da:01:0c:58:51:b9:cc:17:13:71:bc:a8:81:5b:31: 95:22:6e:e2:8e:0b:e4:94:f4:e1:9f:ac:1e:1d:52:05:64:aa: c2:ed:db:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBOEExMTAvBgNVBAUTKDk0QzY0M0UxNkQwNEE3NzM4QkM3MkI1QjEwN0UwNUIx NjE2MTQwMTMwHhcNMjYwOTIxMDc0MjA2WhcNMjYwOTI4MDc0MjA2WjAYMRYwFAYD VQQDEw02YWIwZGZjZS00YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMdQwriHn5MNFSGMIXRkkZ5Xmw9VuCqOYs/2m2w2972tSkWGjLnIXl5ymTLo y2XcCgEAOHTnQMaDqdHIsNoR5x8eTmbOjoll/o78RajKDYLrjbuPIU+tpa2gGJC7 r4dNf2mFjgBNqeczfbV+KnTPy6/qnRY81C5God8QmhV88Jr7L9G1L86gKP4E1ONq guNjnlQnttrhk3xzL4DwsY94l5cybcYPmTeTAFvxT3TXdgmjog80beEIFni+mUOW Ooi9TOiMXSnuRW+aefSe5Na/gOj/noQKKgeXQfZ37ga3zwbmE/55JwXH78/yXcoe Oytq7OWI7EP5HOZWHz7FWDR0uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPJ/Kuf u2JBabBE27TSOLhQ15wlMB8GA1UdIwQYMBaAFJTGQ+FtBKdzi8crWxB+BbFhYUAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE4QS85NkMyRkIwOEYy RDExMUYwOTg5QUQ4Q0UzQzZGNTZCQy9sTVpENFcwRXAzT0x4eXRiRUg0RnNXRmhR Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xNWkQ0VzBFcDNPTHh5dGJFSDRGc1dGaFFCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE4QS85NkMyRkIwOEYyRDExMUYwOTg5QUQ4Q0UzQzZGNTZCQy9sTVpENFcwRXAz T0x4eXRiRUg0RnNXRmhRQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATCoFQADLUCjvAEPVS9Ktq9+MihJkTdgTyWHXPd7H6D9YO+1ylgWdjpGchsQH 4qWuic37+6vbkTNGQeMe6bYS2Bm3dgjN/u2WZck0Z/lVYwOQOpT5p3FG+1+HTw+0 ah0akNGU1naTYP+sYPCTepwirKa1bM0M5a0NSylLHOah3BNp6HejgI4pmu2EDqbj t8FDSq1wHH2nimigXmsTe8rLRsIxwGzndzCMgczjhHLCIuDYmAircOuOPNg5rZ3Z cx+ouJMlcDthrWq7SkJpBqBqptFz8jvN1zmZ5ZEt2gEMWFG5zBcTcbyogVsxlSJu 4o4L5JT04Z+sHh1SBWSqwu3bRQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:04 2026 by rpki-client