$ rpki-client -vvvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json) Hash identifier: fDLtRBWT+61pwvpRIJdLxVA/II+vxsvWmsfwXSfjmFA= Subject key identifier: 6A:80:7B:84:66:47:8B:41:D4:EF:E5:6F:08:72:7D:00:DE:46:35:E8 Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft Manifest number: A0 Signing time: Wed 23 Sep 2026 07:04:26 +0000 Manifest this update: Wed 23 Sep 2026 07:04:26 +0000 Manifest next update: Wed 30 Sep 2026 07:04:26 +0000 Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: ni7nn/wsR95QlKqZTgzaBEaGmGbOiKYIFrAJt+Ej9n8=) 2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=) 3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=) 4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A Validity Not Before: Sep 23 07:04:26 2026 GMT Not After : Sep 30 07:04:26 2026 GMT Subject: CN=6ab379fa-07f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:ef:84:26:ce:dc:f2:ac:e8:4b:c3:d9:a6: 71:fa:44:9e:6c:ee:e1:f9:87:c7:0f:34:3f:b5:3e: 05:e5:9c:8b:9c:ea:c9:b6:48:99:ae:8f:c6:32:cd: 86:76:3f:49:74:bb:54:a1:b5:17:8a:a9:44:c3:48: 20:ba:be:f6:85:34:f3:d3:d3:45:06:9d:1e:0d:cd: 57:6e:38:94:f0:a8:47:f3:1f:19:ea:be:5d:40:b8: a7:ef:f1:e4:89:80:98:12:52:68:67:02:d4:30:e2: 72:cd:34:be:98:9e:af:e1:d4:00:e0:24:88:87:17: f9:4f:c7:82:77:f3:18:27:91:3f:74:c1:43:8d:6d: 97:e3:cb:f1:4f:fe:a0:d0:49:f8:b7:cf:eb:2b:50: 32:45:ff:ef:1e:8f:4f:1a:6e:8f:0e:89:1d:fc:54: 6d:ab:79:7c:f5:04:3f:7a:71:83:85:71:28:b2:03: a5:51:7e:80:8d:44:35:6d:6a:fa:7e:05:11:cb:5d: 09:2a:ac:b8:fc:77:9a:a8:ef:dd:c0:3f:4c:bd:52: f4:2a:11:30:03:5b:68:e9:39:c4:59:d5:a3:8a:3c: 4c:d7:54:92:73:88:67:25:e1:51:0f:39:68:c3:52: 3c:74:3e:7e:aa:3f:ee:83:b4:3c:95:92:3f:6c:cf: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:80:7B:84:66:47:8B:41:D4:EF:E5:6F:08:72:7D:00:DE:46:35:E8 X509v3 Authority Key Identifier: keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:24:c6:7b:87:66:3b:d9:be:aa:72:85:a4:ee:d7:0f:9b:99: 94:bb:e8:69:dd:22:f5:cb:8d:19:96:33:c3:9d:db:69:80:2f: c2:87:45:c6:2e:8f:c3:e9:de:d6:85:32:3b:c7:c7:f4:69:64: 7e:50:43:82:20:1e:85:aa:af:93:82:02:a1:ac:61:b1:cf:01: c7:41:08:e0:65:37:5a:46:5e:c8:3a:65:24:d6:3f:76:75:5b: a0:f3:39:cc:08:53:d6:81:6d:47:f7:90:2a:f7:b1:9c:e5:14: 05:ef:d1:de:a3:4b:63:a5:67:d1:58:53:c7:eb:45:34:64:f7: 75:12:5e:ed:63:cf:7e:73:cc:fe:49:d9:f5:e2:7c:e6:de:7f: 97:d3:8c:d3:7f:1c:ef:f2:c3:37:f5:ff:bb:2d:ae:4c:ed:51: 2f:55:81:cb:c2:31:05:9a:d7:30:0f:df:b5:a9:70:62:cb:a0: 5b:6d:cf:01:77:38:7a:62:4f:89:c0:83:71:dd:ac:98:39:64: 6c:06:8e:70:58:cd:60:0b:dd:95:97:92:cf:65:2d:09:94:51: 82:c7:bb:fd:b4:10:b3:59:68:0f:77:bb:6d:9d:9b:2a:9d:86: 30:60:1f:b4:b6:15:dd:27:d1:31:ab:1d:27:d4:bb:07:ad:61: 21:ae:e3:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5NUExMTAvBgNVBAUTKDk0MTExNjNBNzM1N0VGRDhBMTJENjlCNkM5NDc2NTRG NDVERTZFMkEwHhcNMjYwOTIzMDcwNDI2WhcNMjYwOTMwMDcwNDI2WjAYMRYwFAYD VQQDEw02YWIzNzlmYS0wN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05/vhCbO3PKs6EvD2aZx+kSebO7h+YfHDzQ/tT4F5ZyLnOrJtkiZro/GMs2G dj9JdLtUobUXiqlEw0ggur72hTTz09NFBp0eDc1XbjiU8KhH8x8Z6r5dQLin7/Hk iYCYElJoZwLUMOJyzTS+mJ6v4dQA4CSIhxf5T8eCd/MYJ5E/dMFDjW2X48vxT/6g 0En4t8/rK1AyRf/vHo9PGm6PDokd/FRtq3l89QQ/enGDhXEosgOlUX6AjUQ1bWr6 fgURy10JKqy4/HeaqO/dwD9MvVL0KhEwA1to6TnEWdWjijxM11SSc4hnJeFRDzlo w1I8dD5+qj/ug7Q8lZI/bM/URwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqAe4Rm R4tB1O/lbwhyfQDeRjXoMB8GA1UdIwQYMBaAFJQRFjpzV+/YoS1ptslHZU9F3m4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjk1QS82MzUzMENGRUM4 RjExMUYwOEY5OTM3NzZDNEY5QUUwMi9sQkVXT25OWDc5aWhMV20yeVVkbFQwWGVi aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xCRVdPbk5YNzlpaExXbTJ5VWRsVDBYZWJpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njk1QS82MzUzMENGRUM4RjExMUYwOEY5OTM3NzZDNEY5QUUwMi9sQkVXT25OWDc5 aWhMV20yeVVkbFQwWGViaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKSTGe4dmO9m+qnKFpO7XD5uZlLvoad0i9cuNGZYzw53baYAvwodFxi6Pw+ne 1oUyO8fH9GlkflBDgiAehaqvk4ICoaxhsc8Bx0EI4GU3WkZeyDplJNY/dnVboPM5 zAhT1oFtR/eQKvexnOUUBe/R3qNLY6Vn0VhTx+tFNGT3dRJe7WPPfnPM/knZ9eJ8 5t5/l9OM038c7/LDN/X/uy2uTO1RL1WBy8IxBZrXMA/ftalwYsugW23PAXc4emJP icCDcd2smDlkbAaOcFjNYAvdlZeSz2UtCZRRgse7/bQQs1loD3e7bZ2bKp2GMGAf tLYV3SfRMasdJ9S7B61hIa7jfA== -----END CERTIFICATE-----Generated at Wed Sep 23 17:26:47 2026 by rpki-client