$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: Y18EfnjQJBajEygZ9Nbu1TfwkSRT+BwofPDU9M0cKow= Subject key identifier: EB:90:C9:75:66:B5:CF:76:2E:10:8B:AB:21:7B:E7:D0:97:17:B9:1E Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 0278 Signing time: Mon 21 Sep 2026 02:00:02 +0000 Manifest this update: Mon 21 Sep 2026 02:00:01 +0000 Manifest next update: Mon 28 Sep 2026 02:00:01 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: 1SF6P+cmk/GYvYIynZaQKtuTu9cmiUEinDCekeWYYJ0=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: qXL1y3UIyUKBq86fYpLeRzyPV6LdHLN9g9teqc3CqyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Sep 21 02:00:01 2026 GMT Not After : Sep 28 02:00:01 2026 GMT Subject: CN=6ab08fa2-11e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:99:2f:71:96:e4:c6:6b:61:ba:5a:05:80: dd:22:0d:69:b2:37:3d:83:4a:76:52:e0:31:36:da: a5:49:34:61:9a:06:f8:a9:98:e9:bb:b9:e0:88:2f: 39:66:6e:3d:a7:d4:89:12:60:08:4f:64:1b:71:dc: 1e:f9:8e:08:55:fe:23:1f:31:f3:a3:0a:a1:55:8d: 08:89:1d:fe:b7:e0:66:02:33:d5:36:6a:db:db:36: f3:26:bf:54:4a:9f:72:bb:94:49:65:ee:1f:da:7f: a3:26:a3:0a:45:8d:2b:02:53:3d:4e:29:61:42:6e: e0:03:4b:4b:37:d9:be:87:53:ea:d1:c8:ad:23:ac: e1:29:49:72:1b:0d:3c:91:dc:3f:a5:f7:23:1f:1a: 03:5a:fa:8f:64:2a:8e:e4:87:93:b5:33:79:ef:94: f1:22:1c:a3:8f:e5:44:40:3e:de:08:80:4b:df:c8: 2b:8d:f1:2f:32:05:cd:da:11:07:dd:b6:27:8a:d8: a9:ef:38:de:77:3b:90:f9:34:ac:96:35:e7:10:9b: 03:3d:f4:89:08:09:bd:87:19:5c:e3:19:a9:d5:1f: 2b:f1:0f:1e:ca:9a:02:f4:17:92:e9:70:63:7a:66: 5f:85:83:3f:0a:33:b7:f1:e0:3c:c7:05:c1:e8:fb: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:90:C9:75:66:B5:CF:76:2E:10:8B:AB:21:7B:E7:D0:97:17:B9:1E X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b1:f9:e2:bd:24:1a:3d:a2:5f:b7:e8:4a:bd:d5:d8:2f:a3: 17:4c:1f:d1:6a:c1:07:74:f2:81:53:a8:64:82:20:ca:2a:3f: 23:a3:c3:cf:dd:e1:ab:eb:2a:80:eb:17:aa:cd:14:5f:f2:a2: 1a:1a:6f:dd:d8:63:27:48:31:a7:c0:77:aa:9b:42:f6:af:7e: 74:a6:d3:f1:0e:95:8f:49:9c:6b:51:d8:8a:47:94:9e:c0:cd: 9a:2b:11:f7:cb:1f:bf:5b:46:27:f2:ee:cd:c2:87:b8:d3:b8: 70:47:33:ec:a3:93:b1:3f:72:35:16:d8:10:3e:06:1c:01:58: e5:71:df:69:17:92:a7:a5:b0:d3:ca:d1:2e:99:a2:2c:11:14: 65:d7:f6:68:01:9b:5d:07:a6:35:a3:72:90:44:c0:75:43:66: 59:83:98:11:ce:cf:67:17:aa:d7:e6:1a:6d:7a:4f:48:55:c2: 08:6a:10:24:ab:2d:88:db:43:33:d6:11:56:07:01:95:98:ee: be:c0:16:26:77:66:de:9d:bc:c1:a4:29:cd:80:6a:af:22:65: ff:cd:b8:a2:08:35:a4:8c:24:f3:c5:fe:1a:03:a8:54:44:a2: 44:83:2a:67:b1:c1:3f:5f:64:58:b1:75:52:a8:78:70:5c:42: 2c:14:31:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjYwOTIxMDIwMDAxWhcNMjYwOTI4MDIwMDAxWjAYMRYwFAYD VQQDEw02YWIwOGZhMi0xMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKiZL3GW5MZrYbpaBYDdIg1psjc9g0p2UuAxNtqlSTRhmgb4qZjpu7ngiC85 Zm49p9SJEmAIT2Qbcdwe+Y4IVf4jHzHzowqhVY0IiR3+t+BmAjPVNmrb2zbzJr9U Sp9yu5RJZe4f2n+jJqMKRY0rAlM9TilhQm7gA0tLN9m+h1Pq0citI6zhKUlyGw08 kdw/pfcjHxoDWvqPZCqO5IeTtTN575TxIhyjj+VEQD7eCIBL38grjfEvMgXN2hEH 3bYnitip7zjedzuQ+TSsljXnEJsDPfSJCAm9hxlc4xmp1R8r8Q8eypoC9BeS6XBj emZfhYM/CjO38eA8xwXB6Pu9PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuQyXVm tc92LhCLqyF759CXF7keMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7H54r0kGj2iX7foSr3V2C+jF0wf0WrBB3TygVOoZIIgyio/I6PDz93hq+sq gOsXqs0UX/KiGhpv3dhjJ0gxp8B3qptC9q9+dKbT8Q6Vj0mca1HYikeUnsDNmisR 98sfv1tGJ/LuzcKHuNO4cEcz7KOTsT9yNRbYED4GHAFY5XHfaReSp6Ww08rRLpmi LBEUZdf2aAGbXQemNaNykETAdUNmWYOYEc7PZxeq1+YabXpPSFXCCGoQJKstiNtD M9YRVgcBlZjuvsAWJndm3p28waQpzYBqryJl/824ogg1pIwk88X+GgOoVESiRIMq Z7HBP19kWLF1Uqh4cFxCLBQxrg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:38:13 2026 by rpki-client