$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: 8UZfp6EuZ6dw2A6EmPDgImiiYDG98dPG75GJ0PnY58g= Subject key identifier: 5F:F4:0D:BB:FF:CA:4A:FD:BA:F3:09:83:68:DE:A1:C5:FC:EF:0D:AD Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 04E6 Signing time: Tue 22 Sep 2026 23:22:13 +0000 Manifest this update: Tue 22 Sep 2026 23:22:12 +0000 Manifest next update: Tue 29 Sep 2026 23:22:12 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: WF9dUCrynMugkaream/W5tjUTlEEV5Pjg1ZaKz7OwaI=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 2aYC0ELWow+IfSe343bqAO+DbKR4exbO+moWs9x1JMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Sep 22 23:22:12 2026 GMT Not After : Sep 29 23:22:12 2026 GMT Subject: CN=6ab30da5-e213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:6d:39:45:1b:98:77:17:33:e7:2c:3e:60: ff:91:2f:01:f3:39:9b:fe:79:c2:7c:b6:88:47:a6: b8:5c:b3:c9:46:ea:95:03:38:12:a2:ba:29:f1:c7: 5c:09:4f:2f:ad:6f:5b:bb:e1:bd:3a:44:ce:4a:a5: 3c:ab:9d:d0:50:73:ea:2f:01:82:93:64:2d:fb:b1: 20:e9:07:a2:bb:de:d0:a5:c5:bb:db:30:a2:8a:5b: b6:d6:f2:38:ac:a7:0b:0a:4c:c6:0f:73:e8:47:02: 4a:bb:c9:4b:5c:fd:4d:63:33:00:ab:e1:97:5b:77: 48:64:07:2e:82:18:66:ed:25:27:e7:fc:7c:b5:0f: 44:d0:0d:3c:09:8b:0e:41:47:82:3d:35:f1:08:eb: b4:44:53:87:fb:8e:c9:76:00:04:d0:60:62:60:99: 8e:85:51:c1:fa:eb:b8:7d:09:14:b5:91:49:b1:41: c4:ee:d7:de:60:95:30:2f:b1:07:6d:1a:ed:87:74: 20:9f:e9:44:7c:4e:3b:c8:82:7a:02:12:da:35:22: 3d:8f:c0:5c:10:12:0c:bd:7f:3e:b8:0a:bb:d6:68: 1f:37:48:72:d3:14:72:9e:91:3a:94:e5:42:4c:7b: 55:03:00:98:cf:45:7a:39:f6:35:77:b8:fa:20:80: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:0D:BB:FF:CA:4A:FD:BA:F3:09:83:68:DE:A1:C5:FC:EF:0D:AD X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:5a:ea:68:bd:c4:a8:6c:b5:0f:99:d2:9a:b6:e6:19:53:f0: 7a:6a:76:bd:d8:fa:78:8f:49:b3:d1:22:4a:7a:95:18:b6:7e: 9d:56:3b:35:94:08:e5:6e:06:f4:15:9d:10:6b:b7:db:bf:4e: 36:cf:a5:64:14:5e:ff:62:29:bf:b7:78:b3:61:c7:ce:fc:07: d8:89:e2:24:42:78:35:33:1d:b2:8e:5d:03:c9:78:e3:80:a5: 21:05:99:d1:f5:b7:ae:29:d1:44:6c:96:6c:56:35:03:67:eb: 5c:52:58:db:2f:64:50:22:30:db:a1:37:14:e1:d9:cb:ce:e6: ca:42:59:6f:0e:34:60:b7:3f:f3:6d:11:95:21:eb:3e:ae:2f: ca:f2:b4:ce:16:a7:1a:06:fa:db:ab:91:56:9c:f4:6b:cc:ed: 75:90:d2:f3:3d:04:5c:87:29:33:4c:1b:45:b4:bd:4a:15:73: bb:06:03:83:9b:1d:f5:6a:3f:81:80:92:95:af:4d:88:5b:74: 71:54:f3:90:23:ff:63:1a:ea:3d:2c:8f:a1:44:91:05:0f:47: 89:23:4b:7e:b3:d6:eb:35:91:ef:7f:21:0b:4b:02:67:39:db: 6c:2f:e0:2d:76:ee:74:17:00:c0:59:bd:a2:45:18:35:c0:ca: 6a:b2:7b:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjYwOTIyMjMyMjEyWhcNMjYwOTI5MjMyMjEyWjAYMRYwFAYD VQQDEw02YWIzMGRhNS1lMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RhtOUUbmHcXM+csPmD/kS8B8zmb/nnCfLaIR6a4XLPJRuqVAzgSorop8cdc CU8vrW9bu+G9OkTOSqU8q53QUHPqLwGCk2Qt+7Eg6Qeiu97QpcW72zCiilu21vI4 rKcLCkzGD3PoRwJKu8lLXP1NYzMAq+GXW3dIZAcughhm7SUn5/x8tQ9E0A08CYsO QUeCPTXxCOu0RFOH+47JdgAE0GBiYJmOhVHB+uu4fQkUtZFJsUHE7tfeYJUwL7EH bRrth3Qgn+lEfE47yIJ6AhLaNSI9j8BcEBIMvX8+uAq71mgfN0hy0xRynpE6lOVC THtVAwCYz0V6OfY1d7j6IICsiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/0Dbv/ ykr9uvMJg2jeocX87w2tMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7FrqaL3EqGy1D5nSmrbmGVPwemp2vdj6eI9Js9EiSnqVGLZ+nVY7NZQI5W4G 9BWdEGu3279ONs+lZBRe/2Ipv7d4s2HHzvwH2IniJEJ4NTMdso5dA8l444ClIQWZ 0fW3rinRRGyWbFY1A2frXFJY2y9kUCIw26E3FOHZy87mykJZbw40YLc/820RlSHr Pq4vyvK0zhanGgb626uRVpz0a8ztdZDS8z0EXIcpM0wbRbS9ShVzuwYDg5sd9Wo/ gYCSla9NiFt0cVTzkCP/YxrqPSyPoUSRBQ9HiSNLfrPW6zWR738hC0sCZznbbC/g LXbudBcAwFm9okUYNcDKarJ7kQ== -----END CERTIFICATE-----Generated at Wed Sep 23 21:37:02 2026 by rpki-client