$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft File: LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json) Hash identifier: oiYfgUjLlqjsC515Y9cyatwXVSlx3LKuDOdQ0jns43Q= Subject key identifier: E6:A6:07:A9:C3:42:09:AB:B6:07:6D:53:87:5C:8E:E4:4C:78:B6:FA Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79 Certificate issuer: /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft Manifest number: 4F Signing time: Mon 21 Sep 2026 08:15:17 +0000 Manifest this update: Mon 21 Sep 2026 08:15:17 +0000 Manifest next update: Mon 28 Sep 2026 08:15:17 +0000 Files and hashes: 1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: kT/T68v9K5HTXPX+KaiHI8+kXmJI7Zux84v9DlmsTyI=) 2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879 Validity Not Before: Sep 21 08:15:17 2026 GMT Not After : Sep 28 08:15:17 2026 GMT Subject: CN=6ab0e795-4b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:c0:42:4d:9f:24:4c:4e:85:e7:ce:bf:a0: c1:ca:0a:5c:ad:c6:da:2a:73:bf:19:84:e7:a2:2b: 6f:d1:d3:66:cd:26:f0:9b:f8:22:c0:32:4c:3a:0b: 82:68:55:b2:01:50:9e:a4:92:61:b9:b6:1e:a8:c7: e0:a9:84:87:d1:0a:07:a4:90:90:53:19:45:f9:b2: d3:b1:14:f7:53:91:d7:c4:05:39:11:cf:1e:00:41: df:d3:c4:27:8a:71:06:c7:e1:35:f8:33:b5:92:d8: 23:b0:02:87:ff:4d:e5:9b:69:5e:43:76:02:75:c7: e9:86:4e:c7:a0:c7:5d:0b:5c:27:f0:57:d6:6c:1c: fd:68:f8:aa:f2:b9:14:0c:42:09:8d:86:5c:8e:0e: 04:6c:05:65:98:16:70:68:64:20:0c:01:49:13:0b: 4a:31:3e:f3:6a:0c:d4:f8:95:df:48:56:60:d5:c4: 78:5c:6f:1d:43:f2:7c:c3:f2:54:30:3d:7d:d3:a6: 46:c4:be:b2:5a:27:78:57:bf:c9:98:5c:85:e9:45: b1:3b:e6:70:65:83:db:31:4f:9e:57:9e:3b:b9:bd: aa:8a:ca:58:c3:5a:07:55:60:13:be:c7:0a:51:d6: 75:3a:9c:5d:1a:a9:80:33:92:fa:25:dd:9d:fd:08: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A6:07:A9:C3:42:09:AB:B6:07:6D:53:87:5C:8E:E4:4C:78:B6:FA X509v3 Authority Key Identifier: keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c9:40:0b:22:8c:32:0e:60:89:cc:24:92:a1:f2:a8:82:d7: ec:3c:da:1c:e0:77:e8:e1:4b:6c:92:aa:70:4a:ba:4d:1f:f9: c7:4d:c8:ca:c1:70:d8:04:6b:43:f0:61:9d:87:c3:09:cd:c7: 6f:4d:b6:f7:1f:7d:d4:25:55:d8:37:c5:54:7f:73:84:7a:71: ff:6e:ce:a3:51:1c:5a:29:1d:e9:5e:e6:fd:dc:10:be:e8:60: 5f:2e:49:22:fd:ee:c0:74:09:df:8b:69:c3:80:f7:aa:36:25: 96:cc:f2:f5:f6:af:fc:57:34:16:ec:7e:b8:37:1e:c3:42:e0: 00:77:87:4d:dc:37:46:2d:a1:db:21:36:1d:b3:6c:97:8e:c2: d7:c6:15:38:fc:08:4c:5e:4e:84:2a:11:14:79:7c:1e:2f:07: 71:43:42:d5:82:63:ff:00:27:3b:58:a9:a7:8b:b4:eb:e2:9c: ae:fc:f2:67:67:5f:bd:9a:43:32:7c:b6:bd:78:75:33:aa:60: 80:b5:44:9d:64:c6:d1:de:ec:7a:fe:c6:f2:c1:8a:fc:4b:db: a7:85:a1:71:a8:53:e1:fe:66:ed:7a:52:aa:7d:9e:c3:be:29: 6b:3e:b4:e2:3c:2f:51:3f:7b:57:f8:ac:ee:4f:c2:cc:03:39: 85:76:eb:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDg4MzExMC8GA1UEBRMoMkQ5QUEzQjBEODVEOEFDRDk2MzUyODA1NUM3NDg3QTY2 OTA0Qzg3OTAeFw0yNjA5MjEwODE1MTdaFw0yNjA5MjgwODE1MTdaMBgxFjAUBgNV BAMTDTZhYjBlNzk1LTRiNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEqcBCTZ8kTE6F586/oMHKClytxtoqc78ZhOeiK2/R02bNJvCb+CLAMkw6C4Jo VbIBUJ6kkmG5th6ox+CphIfRCgekkJBTGUX5stOxFPdTkdfEBTkRzx4AQd/TxCeK cQbH4TX4M7WS2COwAof/TeWbaV5DdgJ1x+mGTsegx10LXCfwV9ZsHP1o+KryuRQM QgmNhlyODgRsBWWYFnBoZCAMAUkTC0oxPvNqDNT4ld9IVmDVxHhcbx1D8nzD8lQw PX3TpkbEvrJaJ3hXv8mYXIXpRbE75nBlg9sxT55Xnju5vaqKyljDWgdVYBO+xwpR 1nU6nF0aqYAzkvol3Z39CHWbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5qYHqcNC Cau2B21Th1yO5Ex4tvowHwYDVR0jBBgwFoAULZqjsNhdis2WNSgFXHSHpmkEyHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEODgzLzdBRTQxNDBDM0Q1 QTExRjFBOEM4OThDOEE4ODMzNzczL0xacWpzTmhkaXMyV05TZ0ZYSFNIcG1rRXlI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFpxanNOaGRpczJXTlNnRlhIU0hwbWtFeUhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE ODgzLzdBRTQxNDBDM0Q1QTExRjFBOEM4OThDOEE4ODMzNzczL0xacWpzTmhkaXMy V05TZ0ZYSFNIcG1rRXlIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBzyUALIowyDmCJzCSSofKogtfsPNoc4Hfo4UtskqpwSrpNH/nHTcjKwXDYBGtD 8GGdh8MJzcdvTbb3H33UJVXYN8VUf3OEenH/bs6jURxaKR3pXub93BC+6GBfLkki /e7AdAnfi2nDgPeqNiWWzPL19q/8VzQW7H64Nx7DQuAAd4dN3DdGLaHbITYds2yX jsLXxhU4/AhMXk6EKhEUeXweLwdxQ0LVgmP/ACc7WKmni7Tr4pyu/PJnZ1+9mkMy fLa9eHUzqmCAtUSdZMbR3ux6/sbywYr8S9unhaFxqFPh/mbtelKqfZ7DvilrPrTi PC9RP3tX+KzuT8LMAzmFduuP -----END CERTIFICATE-----Generated at Tue Sep 22 14:47:19 2026 by rpki-client