$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: ZgA2DgXLfRNUlFx79zycWQ7HMUBjPDGDeyCzcqZWfzk= Subject key identifier: 16:7D:E8:E7:B3:7B:08:CE:F8:FB:99:0C:03:38:5A:CE:0D:38:B1:C8 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 031E Signing time: Mon 21 Sep 2026 00:52:47 +0000 Manifest this update: Mon 21 Sep 2026 00:52:46 +0000 Manifest next update: Mon 28 Sep 2026 00:52:46 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: 5o63AGiWEX37KInC0MOMta4IqcSAgzyOzWvdrRrc5b4=) 2: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: G3kaiurPfatRPZP7CqPIKbvlqsnpSEfzHgPDnICHiCk=) 3: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: zhPJuDjgckqRzGpF3JKmc3mqbX/Sm5NWxnx6UnLAwsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Sep 21 00:52:46 2026 GMT Not After : Sep 28 00:52:46 2026 GMT Subject: CN=6ab07fdf-315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:38:d8:06:96:e7:c4:a7:75:6c:60:5a:55: 80:8f:9e:36:bf:b2:d6:22:34:98:3d:8d:0d:29:db: 9d:28:e4:63:30:82:14:80:f0:8d:5d:46:1e:15:a7: a1:6b:f9:89:71:e0:24:f0:fe:b7:d3:05:5d:94:ab: ec:21:d2:98:39:1f:8d:9a:18:87:e8:03:50:7c:d1: 77:be:32:14:5f:51:5f:0e:c1:59:bb:93:ea:39:fb: a6:c6:6e:b8:73:16:b5:41:d1:37:75:ca:1c:e8:e2: 84:2f:b3:e4:97:e5:8c:85:ca:b0:fe:09:5e:a5:4a: f7:6c:3b:af:d8:3b:75:3d:31:91:d7:97:02:b6:3b: 97:d7:dc:c1:7a:a4:86:2a:c5:c8:ad:9c:a9:b0:65: 1b:ae:37:dc:aa:73:10:79:e6:6c:c5:2b:c8:1e:d9: b1:7d:97:ab:17:b4:29:2e:56:3f:8b:c0:c0:51:18: 91:65:49:62:92:1c:16:52:a9:af:34:3f:d4:ee:88: 5c:06:b7:5d:9d:03:41:ff:87:7c:f7:af:88:43:08: 38:ae:5a:a6:98:f1:a3:06:e4:d0:07:ca:27:0b:5d: cf:32:ad:1b:20:58:79:2d:46:55:d7:c9:a6:80:d4: 69:b9:1a:fd:5e:33:55:06:b9:66:1c:9d:07:21:c6: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7D:E8:E7:B3:7B:08:CE:F8:FB:99:0C:03:38:5A:CE:0D:38:B1:C8 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6a:82:3a:1d:c0:8f:fc:6a:07:e2:bc:d9:67:94:a7:78:4d: 53:7d:85:3a:d8:88:09:2d:d0:dd:41:f8:d0:67:2b:87:39:67: f7:f6:f9:16:ae:46:99:04:5e:3e:be:77:07:c0:71:f7:b1:52: d7:d5:51:e9:a7:ba:24:05:96:98:4d:2d:d6:05:e3:f9:97:1d: 25:81:5b:52:21:38:59:7e:79:ab:21:89:ca:1b:3b:8c:e3:2d: e4:5a:fe:c4:e4:ca:d7:4a:3d:68:3e:7f:67:05:09:be:6b:68: 07:15:ea:16:cc:0a:5f:7c:4a:d3:52:f4:85:53:1b:96:f4:8f: e8:03:c2:94:37:53:b6:d3:6a:5c:61:07:f0:89:26:50:ab:bd: 73:5a:36:57:d5:df:a7:be:47:84:e3:11:b4:50:c7:d2:7d:06: b2:ae:4d:b1:3f:87:1c:c0:9d:25:28:50:c7:40:5c:fb:20:d4: 65:30:4a:39:af:03:b5:6f:cc:aa:35:68:d4:61:fb:28:27:a0: 4c:7f:2e:c3:9c:d8:57:f7:6d:b9:05:14:fd:84:fb:1e:ee:c1: aa:d8:03:3f:c8:aa:48:72:af:63:17:e2:1c:a3:58:19:2b:96: 58:db:d2:d5:85:e0:dd:7f:12:84:ef:d9:49:d1:f1:3d:b1:9b: 4b:99:2f:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjYwOTIxMDA1MjQ2WhcNMjYwOTI4MDA1MjQ2WjAYMRYwFAYD VQQDEw02YWIwN2ZkZi0zMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw842AaW58SndWxgWlWAj542v7LWIjSYPY0NKdudKORjMIIUgPCNXUYeFaeh a/mJceAk8P630wVdlKvsIdKYOR+NmhiH6ANQfNF3vjIUX1FfDsFZu5PqOfumxm64 cxa1QdE3dcoc6OKEL7Pkl+WMhcqw/glepUr3bDuv2Dt1PTGR15cCtjuX19zBeqSG KsXIrZypsGUbrjfcqnMQeeZsxSvIHtmxfZerF7QpLlY/i8DAURiRZUlikhwWUqmv ND/U7ohcBrddnQNB/4d896+IQwg4rlqmmPGjBuTQB8onC13PMq0bIFh5LUZV18mm gNRpuRr9XjNVBrlmHJ0HIcYIswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZ96Oez ewjO+PuZDAM4Ws4NOLHIMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZmqCOh3Aj/xqB+K82WeUp3hNU32FOtiICS3Q3UH40Gcrhzln9/b5Fq5GmQRe Pr53B8Bx97FS19VR6ae6JAWWmE0t1gXj+ZcdJYFbUiE4WX55qyGJyhs7jOMt5Fr+ xOTK10o9aD5/ZwUJvmtoBxXqFswKX3xK01L0hVMblvSP6APClDdTttNqXGEH8Ikm UKu9c1o2V9Xfp75HhOMRtFDH0n0Gsq5NsT+HHMCdJShQx0Bc+yDUZTBKOa8DtW/M qjVo1GH7KCegTH8uw5zYV/dtuQUU/YT7Hu7BqtgDP8iqSHKvYxfiHKNYGSuWWNvS 1YXg3X8ShO/ZSdHxPbGbS5kvZA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:01 2026 by rpki-client