$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: ygryH2+z1dT+faZc3SFI3zJGIbVMnNwMCoD+LN5/0Yw= Subject key identifier: 99:27:5D:FA:66:A5:4C:20:61:E7:30:D1:3C:12:9F:CA:8C:CD:7B:00 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 6B Signing time: Wed 23 Sep 2026 07:47:59 +0000 Manifest this update: Wed 23 Sep 2026 07:47:59 +0000 Manifest next update: Wed 30 Sep 2026 07:47:59 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: xJMX4sdoczLkhYKAwToAwQ/+i7kz7AhO/bL0potSBBg=) 2: 60C94672909911F189B737F66C11F970.roa (hash: MkE66wfeDgOquisiYVXHDlUpsCxTafplxHRM0Iqm2AA=) 3: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: xm+x+fd04WB7I1yVjzFgWBEajtZgqkuYkfVhhVRPfos=) 4: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: LCbiXJV4M3UWd5Td2YnoUunf4O6JAsggUfEGQHHJ8+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Sep 23 07:47:59 2026 GMT Not After : Sep 30 07:47:59 2026 GMT Subject: CN=6ab3842f-e9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:7b:b2:42:52:35:00:ab:bf:d3:12:79:f5: f8:4c:bc:5a:39:02:b7:7a:9c:ba:62:8e:25:96:b0: 14:f0:f7:b0:37:39:78:1d:9e:35:21:46:7d:73:b4: 5b:17:0b:1c:04:01:e9:a9:53:33:a0:b6:40:e9:1d: a0:2d:9f:86:2a:3f:94:c3:90:2e:ea:b7:4c:15:73: 16:25:33:5c:4d:d6:9b:62:cd:30:7a:55:12:ee:47: 22:fa:32:93:65:58:cb:be:bd:e8:0a:fc:b4:d5:77: ad:81:bf:71:46:97:24:ee:2e:47:b2:b2:2d:62:64: ea:4f:81:2f:e0:3c:1f:cf:4b:f8:3e:68:6a:5d:17: 4c:7f:10:c8:81:23:ca:99:6b:e1:17:f4:68:7c:8e: 18:77:5d:40:02:66:8b:86:8e:d7:6d:09:23:af:a6: 6f:03:0f:98:33:05:b1:64:86:de:64:bf:c0:97:27: dc:7f:05:05:4f:b3:f0:ea:02:fd:7b:e6:4a:e8:44: b1:d2:77:8f:e0:b1:d1:e4:10:f0:57:96:c8:67:33: 1b:2b:f1:33:cc:4a:69:25:ab:fc:0d:79:a7:7f:76: 35:5b:3a:ef:8b:af:3b:12:db:a0:20:40:47:3b:c4: f5:82:9d:34:8e:ba:a1:0e:09:96:91:5d:b3:16:9f: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:5D:FA:66:A5:4C:20:61:E7:30:D1:3C:12:9F:CA:8C:CD:7B:00 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8b:71:ef:ef:5a:b9:25:4a:c1:b6:70:0b:91:4a:42:79:93: c1:a4:a8:51:4b:92:d7:07:67:53:a7:52:c1:3f:5b:86:09:4b: 95:b1:30:2d:90:84:48:fc:47:91:2b:ae:67:91:d8:c5:63:a7: 30:1f:16:9d:90:39:c9:50:63:f3:fc:2d:2d:69:61:f9:f1:b9: 9b:b2:2b:4f:60:e8:fc:db:74:5b:7b:c1:14:52:10:1b:0a:bc: b9:cb:a8:47:41:63:5c:80:d9:ad:2b:81:28:ea:be:75:87:fd: 01:cc:57:18:7b:82:24:63:d6:42:bc:e1:0d:b0:01:1a:ee:6d: a4:fe:cf:db:08:45:e4:bf:98:f6:f0:b9:f5:d3:98:d2:8d:30: bf:4d:e4:96:75:a6:a7:65:70:e0:c0:7b:26:28:bb:b7:a5:37: 4d:e3:bb:21:76:95:af:66:95:ed:15:d2:4e:ba:22:45:1b:fc: d6:ec:f7:5b:01:64:55:ba:d6:c1:f3:db:86:95:bc:3f:2e:6c: 77:73:00:e9:c9:e4:80:0a:4d:a4:fa:4c:fb:47:d2:1f:be:0d: c7:bb:89:94:6b:ec:9f:48:2d:63:da:22:9d:a4:9e:43:6a:c5: 9f:70:43:a2:e9:3f:d1:ef:67:71:b0:58:28:4c:0a:91:ce:a8: e4:fc:e8:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA5MjMwNzQ3NTlaFw0yNjA5MzAwNzQ3NTlaMBgxFjAUBgNV BAMTDTZhYjM4NDJmLWU5ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzzXuyQlI1AKu/0xJ59fhMvFo5Ard6nLpijiWWsBTw97A3OXgdnjUhRn1ztFsX CxwEAempUzOgtkDpHaAtn4YqP5TDkC7qt0wVcxYlM1xN1ptizTB6VRLuRyL6MpNl WMu+vegK/LTVd62Bv3FGlyTuLkeysi1iZOpPgS/gPB/PS/g+aGpdF0x/EMiBI8qZ a+EX9Gh8jhh3XUACZouGjtdtCSOvpm8DD5gzBbFkht5kv8CXJ9x/BQVPs/DqAv17 5kroRLHSd4/gsdHkEPBXlshnMxsr8TPMSmklq/wNead/djVbOu+LrzsS26AgQEc7 xPWCnTSOuqEOCZaRXbMWn4inAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmSdd+mal TCBh5zDRPBKfyozNewAwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOi3Hv71q5JUrBtnALkUpCeZPBpKhRS5LXB2dTp1LBP1uGCUuVsTAtkIRI/EeR K65nkdjFY6cwHxadkDnJUGPz/C0taWH58bmbsitPYOj823Rbe8EUUhAbCry5y6hH QWNcgNmtK4Eo6r51h/0BzFcYe4IkY9ZCvOENsAEa7m2k/s/bCEXkv5j28Ln105jS jTC/TeSWdaanZXDgwHsmKLu3pTdN47shdpWvZpXtFdJOuiJFG/zW7PdbAWRVutbB 89uGlbw/Lmx3cwDpyeSACk2k+kz7R9Ifvg3Hu4mUa+yfSC1j2iKdpJ5DasWfcEOi 6T/R72dxsFgoTAqRzqjk/Oh+ -----END CERTIFICATE-----Generated at Wed Sep 23 16:38:55 2026 by rpki-client