$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: ckhmS3dy73UjQEENu0XXYr2XHI1Bd1G4yurTNRwQNPQ= Subject key identifier: 5B:99:7D:F3:53:6D:5D:50:78:F9:B5:D2:37:4A:60:36:19:BE:CC:98 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 018B Signing time: Mon 21 Sep 2026 04:36:17 +0000 Manifest this update: Mon 21 Sep 2026 04:36:16 +0000 Manifest next update: Mon 28 Sep 2026 04:36:16 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: EccXPoWocbr+pECApx26LNi19d5hPpyBZtGLCMSoApc=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: /fpFKtFcwh7KjBndTGfGIO4WW4Bx9KlPmCwqANIq6FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Sep 21 04:36:16 2026 GMT Not After : Sep 28 04:36:16 2026 GMT Subject: CN=6ab0b441-1b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:b5:c1:9e:00:e8:d3:93:a8:22:f9:30:5f: 81:13:49:1c:df:a8:36:e7:ed:cb:bd:f7:fc:d1:64: 4c:6c:3a:3e:a0:d3:28:d2:69:c7:df:9b:7f:0d:93: 3b:09:80:34:4a:a0:ad:f7:b6:74:79:fa:68:c8:ea: 9b:2a:a4:43:8f:8a:31:95:07:74:b0:f0:10:15:f5: c4:8b:67:46:32:85:68:ea:66:e0:4e:82:83:0a:48: d4:dc:2b:bc:51:e9:2f:68:8f:ea:ee:de:68:37:dc: 97:89:a4:2f:33:28:43:87:d5:21:0f:fd:ab:f0:b0: 0d:ef:23:df:f9:01:b4:ed:ce:49:53:bd:1b:fe:a4: 23:8f:b3:9b:a2:41:03:c3:04:f0:aa:be:ad:0a:4f: 19:10:a6:36:87:58:96:b6:7a:82:fc:15:72:e7:ca: 27:da:7a:f7:72:53:97:1e:cd:51:57:b9:75:98:8a: a7:d4:2f:a0:95:e8:22:c7:5c:07:5a:10:ab:72:b2: 46:ea:a7:c7:76:ce:5b:c8:0f:d6:49:f1:13:10:32: 2f:93:04:63:29:c7:0c:bd:ba:af:d8:89:28:33:bf: a6:06:00:c7:66:04:44:66:b5:c6:3c:19:65:6c:ff: 35:ef:02:de:71:6b:d3:9f:b0:2b:63:e5:f5:3a:1a: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:99:7D:F3:53:6D:5D:50:78:F9:B5:D2:37:4A:60:36:19:BE:CC:98 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:3a:2b:de:9e:80:1e:a1:25:f2:fe:cc:23:56:c3:a7:f4:ec: 4d:e8:23:7c:f7:59:d0:62:31:e3:e3:0d:7a:e4:87:a9:db:29: e4:24:d5:83:ad:a0:2b:69:89:6a:15:92:01:7a:4e:e1:b9:64: f6:15:2d:e8:2e:7d:15:2e:da:15:4e:c4:34:29:e3:db:d6:8b: 97:0a:18:8b:85:f6:1c:fb:08:d6:da:51:4a:b5:26:cc:23:30: 6e:ac:a8:76:87:db:6e:ca:1d:40:87:91:49:95:8b:8c:35:96: 6e:dc:69:7e:3b:55:80:db:94:c7:95:13:0b:74:24:a5:b0:6c: c0:8a:4e:ed:a1:c5:07:60:a1:af:13:a0:4b:71:7b:c8:69:1f: b1:e4:89:bc:58:30:c6:30:ff:f6:c9:bd:ed:0d:95:0b:a7:3f: e7:d7:c0:1c:69:2a:be:b3:67:14:68:ba:73:6b:7e:21:67:b1: bd:96:41:4b:23:c7:56:76:28:53:99:7a:a6:1b:04:e0:6a:5e: 22:0c:1b:7e:be:04:65:06:2c:36:cb:c5:a6:f0:71:29:02:55: 9e:4e:e1:ad:a3:c3:93:98:e0:c2:79:7a:f6:8a:cc:8b:f1:98: 29:b5:94:6e:ff:9e:15:0e:58:90:6c:fb:6a:13:7d:c5:bd:1c: 0d:74:7a:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjYwOTIxMDQzNjE2WhcNMjYwOTI4MDQzNjE2WjAYMRYwFAYD VQQDEw02YWIwYjQ0MS0xYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzi1wZ4A6NOTqCL5MF+BE0kc36g25+3Lvff80WRMbDo+oNMo0mnH35t/DZM7 CYA0SqCt97Z0efpoyOqbKqRDj4oxlQd0sPAQFfXEi2dGMoVo6mbgToKDCkjU3Cu8 UekvaI/q7t5oN9yXiaQvMyhDh9UhD/2r8LAN7yPf+QG07c5JU70b/qQjj7ObokED wwTwqr6tCk8ZEKY2h1iWtnqC/BVy58on2nr3clOXHs1RV7l1mIqn1C+glegix1wH WhCrcrJG6qfHds5byA/WSfETEDIvkwRjKccMvbqv2IkoM7+mBgDHZgREZrXGPBll bP817wLecWvTn7ArY+X1OhrlfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuZffNT bV1QePm10jdKYDYZvsyYMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFTor3p6AHqEl8v7MI1bDp/TsTegjfPdZ0GIx4+MNeuSHqdsp5CTVg62gK2mJ ahWSAXpO4blk9hUt6C59FS7aFU7ENCnj29aLlwoYi4X2HPsI1tpRSrUmzCMwbqyo dofbbsodQIeRSZWLjDWWbtxpfjtVgNuUx5UTC3QkpbBswIpO7aHFB2ChrxOgS3F7 yGkfseSJvFgwxjD/9sm97Q2VC6c/59fAHGkqvrNnFGi6c2t+IWexvZZBSyPHVnYo U5l6phsE4GpeIgwbfr4EZQYsNsvFpvBxKQJVnk7hraPDk5jgwnl69orMi/GYKbWU bv+eFQ5YkGz7ahN9xb0cDXR6qg== -----END CERTIFICATE-----Generated at Mon Sep 21 21:21:17 2026 by rpki-client