$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json) Hash identifier: tjrAylOC5K0ar6OrLPW2nc1PfEG+qiMCdH3a9uYXtmg= Subject key identifier: 4E:83:95:34:2A:C6:C2:38:6C:7D:9F:D3:0E:54:E1:82:BC:05:32:3D Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft Manifest number: 02A8 Signing time: Mon 21 Sep 2026 01:37:59 +0000 Manifest this update: Mon 21 Sep 2026 01:37:58 +0000 Manifest next update: Mon 28 Sep 2026 01:37:58 +0000 Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: UwUG1e1DKVCDQM3Gk6TyA36VhsiQjpTZdCz+lxMdEvk=) 2: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=) 3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=) 4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: olArFcM1PUtHpMUsUbFSqGqQtjy1wHpvrbRn0NFqaZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Validity Not Before: Sep 21 01:37:58 2026 GMT Not After : Sep 28 01:37:58 2026 GMT Subject: CN=6ab08a76-5492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:20:3b:59:27:68:cb:e9:ce:ab:ad:22:9e: 62:dc:52:9d:03:08:04:f9:9c:c5:fe:db:0e:ea:b7: f6:cb:e0:ce:7b:ce:43:c9:3e:c6:59:74:5b:a4:ff: 4b:4c:2b:2e:89:1a:3e:c5:78:c8:ec:43:64:be:f6: 73:b9:aa:4f:cc:ae:4a:00:bb:4f:3d:71:a5:9e:5a: 16:9b:8d:63:6d:82:b7:ef:a7:5f:5c:4c:04:a6:78: 3e:c8:55:35:ff:fb:0a:40:25:18:61:78:9e:7f:d8: 6f:8c:c9:2b:4e:c3:77:70:31:19:bb:18:4b:57:22: cf:3c:84:fb:24:a6:d6:ef:75:37:d1:a7:77:9a:5b: f0:f9:b6:66:74:15:c7:1e:4f:86:52:0a:b9:c0:57: ae:ba:04:ec:77:d0:a7:48:20:4f:20:b3:60:35:5a: 9a:e8:d2:f4:62:79:80:6e:1b:8c:cc:1d:68:11:4a: 6f:b2:dd:04:9e:2f:c8:42:f5:4d:b7:9c:d2:cb:bf: 67:27:2c:f9:fa:e4:ad:c0:2c:50:8a:c9:32:dc:31: 89:d3:4f:2f:3c:98:7f:90:dd:e3:a1:c9:d4:e2:05: 32:5c:46:0f:f1:9e:ec:2d:29:f1:31:47:e0:e4:3c: 13:ce:3d:b4:97:08:f8:a2:2b:47:1b:76:d2:7b:c8: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:95:34:2A:C6:C2:38:6C:7D:9F:D3:0E:54:E1:82:BC:05:32:3D X509v3 Authority Key Identifier: keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5f:65:97:56:68:ac:7e:69:3e:53:93:e0:39:39:56:9d:3c: f3:98:f8:bd:12:15:5f:08:bc:f4:87:31:c3:24:6c:2e:03:1d: b9:7d:ca:e0:b2:a6:49:2d:2b:b3:79:f3:b6:52:e7:4e:b6:0f: b5:87:06:8b:46:ec:af:58:79:39:fd:ba:c3:2f:ab:52:68:e9: cb:c5:ec:10:3f:4b:5a:58:af:e9:ef:e0:99:aa:cc:33:f9:5d: 51:d3:16:17:a1:75:ab:bf:99:06:f2:04:51:43:9d:7c:15:eb: 35:b7:26:83:a5:30:99:69:e1:d3:f8:64:b5:6c:6b:b4:b2:39: c4:38:92:98:b6:de:f3:53:f8:3c:69:7b:e3:d8:8b:70:7d:c4: 21:09:e1:e4:35:1c:8d:91:19:29:0c:c5:00:fe:e6:19:5c:e0: d9:03:ea:b2:ad:73:c7:58:b5:16:bb:98:07:c9:00:71:2e:98: 29:58:22:8b:f5:84:24:11:2d:a8:76:a6:6e:1d:7a:b4:b3:fe: 64:1b:59:fb:2b:7b:92:67:b1:d0:bf:18:e9:b1:45:51:6e:a4: 78:b9:71:f8:fb:fe:fb:11:3a:be:c2:8e:d8:d6:66:69:43:8c: cb:79:88:11:19:e7:ad:87:fa:fa:f2:02:51:10:e6:9f:3f:19: 8b:c8:1c:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG QkVGQTVDRDAwHhcNMjYwOTIxMDEzNzU4WhcNMjYwOTI4MDEzNzU4WjAYMRYwFAYD VQQDEw02YWIwOGE3Ni01NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkwgO1knaMvpzqutIp5i3FKdAwgE+ZzF/tsO6rf2y+DOe85DyT7GWXRbpP9L TCsuiRo+xXjI7ENkvvZzuapPzK5KALtPPXGlnloWm41jbYK376dfXEwEpng+yFU1 //sKQCUYYXief9hvjMkrTsN3cDEZuxhLVyLPPIT7JKbW73U30ad3mlvw+bZmdBXH Hk+GUgq5wFeuugTsd9CnSCBPILNgNVqa6NL0YnmAbhuMzB1oEUpvst0Eni/IQvVN t5zSy79nJyz5+uStwCxQisky3DGJ008vPJh/kN3jocnU4gUyXEYP8Z7sLSnxMUfg 5DwTzj20lwj4oitHG3bSe8j7mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6DlTQq xsI4bH2f0w5U4YK8BTI9MB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1 RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz NzlzVGgtTUw3RF83NzZYTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbF9ll1ZorH5pPlOT4Dk5Vp0885j4vRIVXwi89IcxwyRsLgMduX3K4LKmSS0r s3nztlLnTrYPtYcGi0bsr1h5Of26wy+rUmjpy8XsED9LWliv6e/gmarMM/ldUdMW F6F1q7+ZBvIEUUOdfBXrNbcmg6UwmWnh0/hktWxrtLI5xDiSmLbe81P4PGl749iL cH3EIQnh5DUcjZEZKQzFAP7mGVzg2QPqsq1zx1i1FruYB8kAcS6YKVgii/WEJBEt qHambh16tLP+ZBtZ+yt7kmex0L8Y6bFFUW6keLlx+Pv++xE6vsKO2NZmaUOMy3mI ERnnrYf6+vICURDmnz8Zi8gcZA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:57:00 2026 by rpki-client