$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json) Hash identifier: ZYStKTJRq3sJSTAKR5VI3F7q6FA12CtYlJS468nPQGE= Subject key identifier: 60:A5:92:EE:60:2A:4E:82:33:41:F4:69:42:6F:5F:BA:11:E9:1C:95 Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft Manifest number: 04D1 Signing time: Tue 22 Sep 2026 23:27:57 +0000 Manifest this update: Tue 22 Sep 2026 23:27:57 +0000 Manifest next update: Tue 29 Sep 2026 23:27:57 +0000 Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: XvpXmpC5wHoh8Dd1QsxUAB11n/y7HLT+pk0CraL+J20=) 2: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=) 3: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: 1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Validity Not Before: Sep 22 23:27:57 2026 GMT Not After : Sep 29 23:27:57 2026 GMT Subject: CN=6ab30efd-d9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:06:14:45:99:98:b3:41:5f:08:1a:04:44: 5d:73:1e:42:4e:c7:13:86:99:18:42:bd:cb:7f:92: 53:02:6f:85:f7:ad:ad:05:43:bf:41:ac:b1:1f:06: 25:99:ea:41:0b:e2:5e:be:00:48:b8:5f:72:87:27: e9:94:1c:3d:1c:79:bf:46:49:70:5f:d2:6c:16:f4: c1:34:33:8c:e5:5a:4f:96:af:c8:49:36:ee:56:ee: b5:85:75:94:ba:47:86:66:d8:29:7d:c9:bb:54:f1: e2:0e:de:27:ce:a5:10:01:bc:c4:42:f6:2b:93:0d: 98:01:d8:d4:6a:f4:2c:30:f3:e1:85:0a:fc:9b:b1: 38:35:f8:55:0c:90:fb:d4:ee:50:69:c1:50:a4:c8: 9e:49:5f:8f:df:36:b8:bb:8b:8b:f5:69:e6:d5:a5: 88:61:11:9b:6a:2a:c8:f3:63:f3:cb:cb:5b:17:61: 0e:6f:57:a5:c0:92:43:ff:69:7e:91:84:c5:b3:c9: 83:e9:2c:5c:5c:3d:17:17:1c:86:f1:f8:04:e0:d5: 69:cc:0f:f7:20:e5:87:02:09:b2:24:6b:60:54:1e: ba:ab:10:47:8b:51:a0:bd:e5:aa:87:4f:51:53:bd: 13:d5:3f:29:3b:aa:fb:c4:9f:de:8d:e0:bb:f0:6d: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:92:EE:60:2A:4E:82:33:41:F4:69:42:6F:5F:BA:11:E9:1C:95 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:3f:76:4f:a8:c4:13:a6:00:60:9f:da:87:e0:07:18:76:e1: 39:7d:f3:df:70:50:fa:87:80:61:4c:86:a4:c0:3e:16:cf:37: fb:11:10:e8:03:6c:6e:81:3b:a9:11:c3:6e:ac:6d:6c:61:56: 1e:1b:5f:33:e7:6d:88:b7:de:88:44:d8:fe:09:3b:10:66:87: b3:2e:49:50:c2:49:e3:0c:53:f8:6c:36:7b:06:ff:8d:9d:43: 5a:3b:6b:62:bb:df:ce:33:eb:4d:cd:5d:d3:7d:2b:5e:fb:df: 55:ac:8f:a4:9c:4c:8c:a1:2d:80:28:33:1b:8e:2e:1c:5a:02: 6d:16:a1:af:6b:7a:32:ea:35:68:96:49:62:94:ec:7d:49:70: 5a:82:2b:ef:bc:14:89:08:23:c7:d8:50:45:64:12:44:ea:0f: 57:58:9d:d9:85:d4:51:d8:04:2c:34:e2:a8:a3:eb:34:28:54: 99:74:d8:e0:82:a9:79:30:fd:ea:da:91:0f:ad:29:64:f2:2b: 4a:b1:a8:bc:06:cf:fe:70:82:0e:dc:2e:df:5e:9f:2d:b3:d0: 9d:81:0d:d5:9e:7d:0e:18:12:15:5e:17:fc:2c:3b:e0:eb:a9: 68:0a:84:dd:7e:dc:dc:ff:5e:37:dc:2b:cc:db:d3:56:90:48: 95:4d:df:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjYwOTIyMjMyNzU3WhcNMjYwOTI5MjMyNzU3WjAYMRYwFAYD VQQDEw02YWIzMGVmZC1kOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdoGFEWZmLNBXwgaBERdcx5CTscThpkYQr3Lf5JTAm+F962tBUO/QayxHwYl mepBC+JevgBIuF9yhyfplBw9HHm/RklwX9JsFvTBNDOM5VpPlq/ISTbuVu61hXWU ukeGZtgpfcm7VPHiDt4nzqUQAbzEQvYrkw2YAdjUavQsMPPhhQr8m7E4NfhVDJD7 1O5QacFQpMieSV+P3za4u4uL9Wnm1aWIYRGbairI82Pzy8tbF2EOb1elwJJD/2l+ kYTFs8mD6SxcXD0XFxyG8fgE4NVpzA/3IOWHAgmyJGtgVB66qxBHi1GgveWqh09R U70T1T8pO6r7xJ/ejeC78G1rHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGClku5g Kk6CM0H0aUJvX7oR6RyVMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkMzMC8xMTJBRjFBQzg1QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpa R3VwVkpybzJhS0VlU2V5NU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgz92T6jEE6YAYJ/ah+AHGHbhOX3z33BQ+oeAYUyGpMA+Fs83+xEQ6ANsboE7 qRHDbqxtbGFWHhtfM+dtiLfeiETY/gk7EGaHsy5JUMJJ4wxT+Gw2ewb/jZ1DWjtr YrvfzjPrTc1d030rXvvfVayPpJxMjKEtgCgzG44uHFoCbRahr2t6Muo1aJZJYpTs fUlwWoIr77wUiQgjx9hQRWQSROoPV1id2YXUUdgELDTiqKPrNChUmXTY4IKpeTD9 6tqRD60pZPIrSrGovAbP/nCCDtwu316fLbPQnYEN1Z59DhgSFV4X/Cw74OupaAqE 3X7c3P9eN9wrzNvTVpBIlU3fvg== -----END CERTIFICATE-----Generated at Wed Sep 23 08:25:49 2026 by rpki-client