$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: 2VcaLx23XjPVOgxvK6PkFmNo3ywHjIgTHUoy/YjsiJM= Subject key identifier: FD:60:84:2D:B8:1B:23:D8:32:43:AB:FB:AF:5B:E7:A4:6D:A4:2D:FC Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 08A0 Signing time: Thu 24 Sep 2026 20:33:43 +0000 Manifest this update: Thu 24 Sep 2026 20:33:42 +0000 Manifest next update: Thu 01 Oct 2026 20:33:42 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: wXxXVSlcPlMF5tuHe/9Ge8LrWgcTvpu+eoeDb/ukTlA=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: 4fBuoHY1aMFnEZVyrM9kK7WExJGfPRlEzazH9d4YXTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Sep 24 20:33:42 2026 GMT Not After : Oct 1 20:33:42 2026 GMT Subject: CN=6ab58926-8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:99:d3:d0:79:e5:92:fd:1d:97:c3:24:ef: e3:a1:eb:a7:73:ce:24:f6:88:cd:81:85:0c:68:c1: 59:5e:1e:94:d0:3b:02:ef:23:0a:6a:7f:12:a2:9d: 41:b1:33:be:eb:b3:d6:95:d5:1a:65:c5:ca:a2:63: 8d:17:9e:98:30:30:21:c1:eb:65:a3:1c:3b:26:6f: 8b:f7:6d:e0:78:da:dc:bc:0c:bb:0e:2c:bf:b9:ea: 80:28:a3:37:51:d6:48:6b:2d:61:bc:ad:a8:32:25: 5d:6e:47:f5:e4:3c:8b:f7:2e:4f:75:16:e4:de:75: 61:c7:02:ce:8f:2d:6f:05:62:97:65:7a:e7:87:f3: 0b:4e:21:a2:51:e5:34:a4:01:a4:23:5d:b3:bd:7a: a7:00:8f:01:be:35:cc:ef:63:1c:a2:a2:1b:1b:17: 64:6e:e3:a2:43:f5:29:a5:fb:2e:ed:61:b6:4c:4a: 1e:f6:78:eb:7e:1b:74:9b:ea:13:d9:20:11:41:8c: 02:e6:5b:0c:45:ce:96:dd:04:d3:f4:15:0f:88:dd: 2d:73:1e:94:9a:3d:1a:4a:70:fd:fb:f6:03:60:1e: 67:d8:d4:33:c5:04:a7:b6:1d:b9:72:76:b0:d2:1f: 98:81:bc:5e:8b:2b:8e:89:70:e0:f6:8e:b2:c2:28: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:84:2D:B8:1B:23:D8:32:43:AB:FB:AF:5B:E7:A4:6D:A4:2D:FC X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b3:62:e8:49:da:24:73:2e:4c:26:b7:71:05:8b:42:35:a9: 0a:f5:33:50:40:0a:af:c6:93:b7:10:05:50:fe:49:9d:7b:2e: 21:7e:9d:d9:57:d2:88:e8:1c:e5:c0:39:26:d8:7e:46:ad:d4: c4:b5:85:35:25:7b:09:2f:ce:a9:a5:14:e2:06:a8:be:d5:b3: 53:5c:37:b5:3e:34:c7:c7:ba:f7:07:5f:13:09:cf:7f:9a:f0: 66:e1:83:de:2e:48:13:ef:fe:4f:17:3b:03:41:bc:24:3c:ee: df:65:ce:93:43:b8:7a:45:33:10:cc:68:36:78:8d:50:af:88: 7e:b3:0f:4f:b5:d5:e1:5c:9a:26:f8:70:e6:9d:7c:76:27:17: 9a:97:f0:38:53:64:77:4f:8b:1b:e4:59:6a:e2:04:6f:f9:c5: be:6b:66:6f:5d:1b:a8:8c:67:ce:d9:ad:32:42:6c:05:04:14: 0a:30:af:68:cd:28:6e:c0:f5:e9:e3:ef:ba:b3:9f:68:1a:fb: 22:f4:7e:f9:28:4d:90:c5:d2:7a:92:72:39:37:ce:80:2d:bf: 22:b1:f5:f4:07:9d:2c:b4:17:6d:07:48:27:99:dc:a5:08:ee: 64:2d:a5:fb:b9:24:76:c9:a4:66:65:11:d0:53:3b:77:ee:1e: 1f:1a:bc:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjYwOTI0MjAzMzQyWhcNMjYxMDAxMjAzMzQyWjAYMRYwFAYD VQQDEw02YWI1ODkyNi04YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpaZ09B55ZL9HZfDJO/joeunc84k9ojNgYUMaMFZXh6U0DsC7yMKan8Sop1B sTO+67PWldUaZcXKomONF56YMDAhwetloxw7Jm+L923geNrcvAy7Diy/ueqAKKM3 UdZIay1hvK2oMiVdbkf15DyL9y5PdRbk3nVhxwLOjy1vBWKXZXrnh/MLTiGiUeU0 pAGkI12zvXqnAI8BvjXM72McoqIbGxdkbuOiQ/Uppfsu7WG2TEoe9njrfht0m+oT 2SARQYwC5lsMRc6W3QTT9BUPiN0tcx6Umj0aSnD9+/YDYB5n2NQzxQSnth25cnaw 0h+YgbxeiyuOiXDg9o6ywih81QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1ghC24 GyPYMkOr+69b56RtpC38MB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHrNi6EnaJHMuTCa3cQWLQjWpCvUzUEAKr8aTtxAFUP5JnXsuIX6d2VfSiOgc 5cA5Jth+Rq3UxLWFNSV7CS/OqaUU4gaovtWzU1w3tT40x8e69wdfEwnPf5rwZuGD 3i5IE+/+Txc7A0G8JDzu32XOk0O4ekUzEMxoNniNUK+IfrMPT7XV4VyaJvhw5p18 dicXmpfwOFNkd0+LG+RZauIEb/nFvmtmb10bqIxnztmtMkJsBQQUCjCvaM0obsD1 6ePvurOfaBr7IvR++ShNkMXSepJyOTfOgC2/IrH19AedLLQXbQdIJ5ncpQjuZC2l +7kkdsmkZmUR0FM7d+4eHxq8tg== -----END CERTIFICATE-----Generated at Thu Sep 24 22:36:38 2026 by rpki-client