$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: JM9iJXmHov+gheHX7NQ1Abjsr1YNWbtZiuFoxFZAi4g= Subject key identifier: 58:90:01:AE:E0:CC:EB:EB:0A:CE:D3:41:B4:C8:67:2D:64:C4:38:85 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: A5 Signing time: Mon 21 Sep 2026 07:19:34 +0000 Manifest this update: Mon 21 Sep 2026 07:19:34 +0000 Manifest next update: Mon 28 Sep 2026 07:19:34 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: vZPcg3SuqEj9a5aB/HWPBnAmTQRfLAacNV4DB/Pfscg=) 2: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) 3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) 4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Sep 21 07:19:34 2026 GMT Not After : Sep 28 07:19:34 2026 GMT Subject: CN=6ab0da86-94f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:dd:f9:74:b1:03:69:1f:a3:ea:85:1c:70: e2:03:40:56:d0:6d:73:2c:f2:0b:7c:6f:ff:0c:69: 0f:28:2f:d6:10:18:50:de:e2:f5:d0:dc:3d:e6:b1: e7:3a:63:6c:8a:c5:c1:ee:67:3f:21:c1:cc:21:09: 48:29:d1:ce:f1:bd:4c:de:4d:f1:2a:97:44:2d:78: 35:fa:8b:53:22:e3:98:ae:6f:2f:e0:65:d9:15:2a: 9f:9b:47:01:25:91:e0:36:b6:75:89:4b:8d:c1:7a: fc:05:77:c4:9d:96:59:d2:8a:a2:35:a1:fc:c1:56: 96:fd:dc:d7:d0:fc:e3:f2:71:b0:9f:bf:b3:9c:59: c7:d0:2e:89:e4:ec:22:79:c5:17:d2:6e:63:6c:9a: 74:60:82:22:17:89:b0:e4:3b:2b:08:31:2b:dc:d5: 89:43:c4:4c:64:7a:d1:67:88:ef:48:6d:1b:36:a1: 63:09:15:bb:e1:cc:57:6d:0a:0c:d7:32:d9:8d:23: 58:03:70:8a:06:15:9c:95:5d:c6:2f:db:4e:64:c9: a2:0c:f1:cf:64:47:55:a9:1b:16:71:4f:64:c1:49: 44:3e:0d:d1:c8:c3:5b:42:1d:35:82:2e:ff:c3:c7: 6c:c5:ad:d6:c1:4a:40:fb:fa:9b:cf:bc:a1:46:a9: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:90:01:AE:E0:CC:EB:EB:0A:CE:D3:41:B4:C8:67:2D:64:C4:38:85 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6d:5d:b5:b9:aa:ac:d0:67:d2:0d:f0:8e:af:c7:26:ec:0c: 4e:29:36:76:e4:ab:d4:3f:9e:04:98:4e:18:b4:76:0f:7c:19: 2c:48:9f:35:00:f1:f7:76:49:88:7b:f7:56:56:07:a5:3c:7b: 19:e0:76:bb:82:a0:01:e6:11:e9:cb:93:47:12:0a:ff:1d:92: e1:ef:98:38:ec:05:31:50:fb:7c:f2:51:8d:7a:85:8a:80:d1: d4:9d:66:91:3d:3f:8d:ed:90:92:21:6b:f7:78:f9:53:8b:36: d6:7f:a2:d2:45:8e:5a:9a:7d:d9:bc:c3:44:3c:48:b2:c6:5a: a4:57:a3:c1:54:c5:1c:4b:11:61:3f:7d:a9:5d:5f:8b:e4:0f: 03:4e:d6:a0:00:7a:54:5d:57:66:3b:6b:59:2e:54:0e:ee:8a: 54:28:cf:4d:3a:d2:1e:5d:14:8a:b9:b0:52:85:84:2b:7d:c3: af:47:62:68:b5:03:bd:ee:b4:56:81:cb:0c:42:94:19:9b:e3: d2:38:ad:01:c8:a9:29:08:69:6e:2e:ce:76:2d:fa:a9:be:8a: fa:86:82:f3:c1:59:17:6a:6a:e6:cc:ac:ca:57:d5:db:ca:b9: 95:d4:af:5b:f9:71:bd:0d:d1:3f:dc:4c:98:c9:d5:e8:e0:1a: 62:7e:af:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEQUUxMTAvBgNVBAUTKDJEQkZDN0IyODYxNUIxRkY3OEQ3Q0Y0Njg4NkFGOTIx MzlGRjk2OEEwHhcNMjYwOTIxMDcxOTM0WhcNMjYwOTI4MDcxOTM0WjAYMRYwFAYD VQQDEw02YWIwZGE4Ni05NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocbd+XSxA2kfo+qFHHDiA0BW0G1zLPILfG//DGkPKC/WEBhQ3uL10Nw95rHn OmNsisXB7mc/IcHMIQlIKdHO8b1M3k3xKpdELXg1+otTIuOYrm8v4GXZFSqfm0cB JZHgNrZ1iUuNwXr8BXfEnZZZ0oqiNaH8wVaW/dzX0Pzj8nGwn7+znFnH0C6J5Owi ecUX0m5jbJp0YIIiF4mw5DsrCDEr3NWJQ8RMZHrRZ4jvSG0bNqFjCRW74cxXbQoM 1zLZjSNYA3CKBhWclV3GL9tOZMmiDPHPZEdVqRsWcU9kwUlEPg3RyMNbQh01gi7/ w8dsxa3WwUpA+/qbz7yhRql5RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiQAa7g zOvrCs7TQbTIZy1kxDiFMB8GA1UdIwQYMBaAFC2/x7KGFbH/eNfPRohq+SE5/5aK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RBRS8yRkJFQTQwMkM4 NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNmOTQxODlHaUdyNUlUbl9s b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RBRS8yRkJFQTQwMkM4NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNm OTQxODlHaUdyNUlUbl9sb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGW1dtbmqrNBn0g3wjq/HJuwMTik2duSr1D+eBJhOGLR2D3wZLEifNQDx93ZJ iHv3VlYHpTx7GeB2u4KgAeYR6cuTRxIK/x2S4e+YOOwFMVD7fPJRjXqFioDR1J1m kT0/je2QkiFr93j5U4s21n+i0kWOWpp92bzDRDxIssZapFejwVTFHEsRYT99qV1f i+QPA07WoAB6VF1XZjtrWS5UDu6KVCjPTTrSHl0UirmwUoWEK33Dr0diaLUDve60 VoHLDEKUGZvj0jitAcipKQhpbi7Odi36qb6K+oaC88FZF2pq5sysylfV28q5ldSv W/lxvQ3RP9xMmMnV6OAaYn6vpQ== -----END CERTIFICATE-----Generated at Mon Sep 21 22:15:49 2026 by rpki-client