$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: 3xW9IE3OVqE/7Lr0a6L61qEMoMgOZ5jJUpT3LRvNGVQ= Subject key identifier: C2:62:10:37:D1:EA:D5:B1:77:AC:73:0F:59:F9:3F:5A:50:4E:9F:80 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 018F Signing time: Mon 21 Sep 2026 04:31:26 +0000 Manifest this update: Mon 21 Sep 2026 04:31:26 +0000 Manifest next update: Mon 28 Sep 2026 04:31:26 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: jx0PR37AFW3UxXbTA7ePjJs+eIkCOwotet6K58BXyPc=) 2: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) 3: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) 4: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Sep 21 04:31:26 2026 GMT Not After : Sep 28 04:31:26 2026 GMT Subject: CN=6ab0b31e-48c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:42:e2:c1:df:82:ac:25:15:d9:23:41:4c: b7:51:8d:45:55:07:cd:c7:69:52:ef:6e:4f:52:18: 17:53:4a:6b:6f:8f:0d:cb:08:f1:84:87:70:f2:0f: 2e:4f:97:22:ba:a9:1b:10:8b:12:54:f9:01:64:ad: 87:9c:a1:4b:54:3d:4a:c9:80:58:dc:e9:46:e4:71: 91:59:5b:ac:c7:75:2d:a8:93:0f:ac:45:21:3d:e2: e5:0c:ad:68:3d:1b:55:db:16:68:88:68:82:6a:4a: 57:61:a2:a2:43:b5:44:74:15:7d:ae:fd:7d:30:ad: 1e:e5:83:43:34:b3:a4:11:36:a2:16:63:39:23:d5: 50:c9:de:8f:c7:40:51:64:ff:52:5e:f0:4f:20:d1: d9:aa:33:31:ba:1d:26:43:a6:2a:8b:d5:9d:39:8a: c0:84:c3:df:8d:9a:c0:a6:2c:da:18:48:d9:0e:bd: 0b:ff:d3:a2:8c:ae:77:45:73:10:87:99:3f:87:a3: 3d:07:d6:d1:0e:c6:04:ed:ca:a5:54:8b:4d:c6:23: ad:9a:ee:95:0e:e7:0d:21:52:25:65:11:c7:f1:93: 5d:4b:90:1f:96:c8:a6:9a:65:1e:b4:92:f0:96:87: a1:4c:0f:d8:61:b8:d0:ca:86:cf:eb:59:94:73:f3: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:62:10:37:D1:EA:D5:B1:77:AC:73:0F:59:F9:3F:5A:50:4E:9F:80 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b3:f6:08:63:05:29:dd:26:95:23:70:af:cb:e7:fb:dd:95: 7e:4d:67:26:e4:16:8e:54:b9:cf:63:b2:ad:c9:b4:02:17:81: bf:4d:23:7b:59:44:4f:0a:83:c0:0e:41:6a:71:77:8f:eb:27: ea:56:81:23:e2:0c:84:08:eb:26:a9:4f:4b:70:51:d5:33:22: a4:3d:13:ef:c0:48:66:3d:d7:0a:f4:4d:c3:d8:7d:b1:bb:a3: 54:01:eb:12:2e:84:a7:b6:e3:51:3e:bc:4d:8c:cc:f3:ad:39: f4:f5:25:ef:8e:50:59:d9:1a:69:48:b4:f4:b3:34:48:a4:d5: a7:c0:79:96:41:33:b4:b2:46:4d:ac:24:fa:25:81:a7:90:39: 9a:e7:0a:77:13:06:d1:8a:9f:cb:fb:6c:a3:af:fc:20:32:29: fa:1d:9a:a9:a0:16:7c:20:28:80:c0:d0:76:bf:68:c4:b1:8f: c1:1a:5a:6b:82:8d:10:07:a1:c1:49:77:61:2d:e0:b6:d0:04: ba:82:72:9d:23:45:28:df:0f:5b:3c:f9:3c:bc:b7:80:f4:ab: d5:0f:f7:49:c5:b9:fe:52:31:c6:5f:f4:65:70:02:29:f1:3d: 4b:be:1b:19:14:97:a2:00:50:d4:da:d0:f6:b3:96:73:de:5a: 04:78:af:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwOTIxMDQzMTI2WhcNMjYwOTI4MDQzMTI2WjAYMRYwFAYD VQQDEw02YWIwYjMxZS00OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9xC4sHfgqwlFdkjQUy3UY1FVQfNx2lS725PUhgXU0prb48NywjxhIdw8g8u T5ciuqkbEIsSVPkBZK2HnKFLVD1KyYBY3OlG5HGRWVusx3UtqJMPrEUhPeLlDK1o PRtV2xZoiGiCakpXYaKiQ7VEdBV9rv19MK0e5YNDNLOkETaiFmM5I9VQyd6Px0BR ZP9SXvBPINHZqjMxuh0mQ6Yqi9WdOYrAhMPfjZrApizaGEjZDr0L/9OijK53RXMQ h5k/h6M9B9bRDsYE7cqlVItNxiOtmu6VDucNIVIlZRHH8ZNdS5AflsimmmUetJLw loehTA/YYbjQyobP61mUc/MbbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJiEDfR 6tWxd6xzD1n5P1pQTp+AMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAarP2CGMFKd0mlSNwr8vn+92Vfk1nJuQWjlS5z2Oyrcm0AheBv00je1lETwqD wA5BanF3j+sn6laBI+IMhAjrJqlPS3BR1TMipD0T78BIZj3XCvRNw9h9sbujVAHr Ei6Ep7bjUT68TYzM86059PUl745QWdkaaUi09LM0SKTVp8B5lkEztLJGTawk+iWB p5A5mucKdxMG0Yqfy/tso6/8IDIp+h2aqaAWfCAogMDQdr9oxLGPwRpaa4KNEAeh wUl3YS3gttAEuoJynSNFKN8PWzz5PLy3gPSr1Q/3ScW5/lIxxl/0ZXACKfE9S74b GRSXogBQ1NrQ9rOWc95aBHivow== -----END CERTIFICATE-----Generated at Mon Sep 21 09:15:20 2026 by rpki-client