$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json) Hash identifier: q8L/7TBS0WAvfiPhvS7vg6TLJmAkJzYLpyv3fZkX4lo= Subject key identifier: F7:E5:A2:2D:E9:3C:96:AF:21:70:22:E9:6A:1F:A8:2B:81:E7:ED:B3 Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Certificate serial: 1120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft Manifest number: 111D Signing time: Tue 22 Sep 2026 17:11:26 +0000 Manifest this update: Tue 22 Sep 2026 17:11:25 +0000 Manifest next update: Tue 29 Sep 2026 17:11:25 +0000 Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: isjES2IO+DH75zggyAteKAq48AlP5tDn2isorSPGs5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4384 (0x1120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Validity Not Before: Sep 22 17:11:25 2026 GMT Not After : Sep 29 17:11:25 2026 GMT Subject: CN=6ab2b6bd-8d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:bb:99:e3:d5:11:d5:79:3c:0f:f0:6b:f1: 1a:aa:05:39:37:eb:bd:6a:ad:1e:10:59:ea:b3:19: 5e:ca:22:59:dc:8b:2b:db:ea:e2:56:37:cb:87:2f: 83:4c:a6:0d:ae:1c:ef:f3:ca:6b:ab:b9:3c:d7:89: 20:b5:1e:cd:64:c5:76:97:12:f5:63:dd:82:58:46: 20:e4:e8:55:cd:63:8c:52:74:9f:39:6d:ae:a4:b2: 1e:b0:c3:53:a4:0d:1b:7e:bd:81:ad:43:75:04:ad: df:4e:07:c3:8c:5f:42:ea:f7:6f:04:fa:b2:65:f7: ee:16:2c:1b:b6:60:37:70:0c:f0:14:13:e5:a2:b1: f2:bd:77:e2:88:2f:64:e9:0f:0e:1a:d4:ac:67:63: 1c:3a:e3:28:be:b2:c8:1f:21:ba:75:45:11:cd:10: 35:12:fd:cc:89:ac:0a:7a:c3:4c:9b:57:98:ac:17: 8b:da:0d:51:d2:65:05:89:2b:4e:09:38:9f:9a:44: 6e:56:ee:94:b0:3b:a9:88:38:1b:60:42:2f:1e:03: c8:ff:4c:df:93:76:96:44:92:c7:2a:a4:64:2f:bb: 64:bd:82:e0:18:8b:45:35:38:ca:f1:4f:56:92:0f: f7:72:5a:21:1b:80:ba:4a:ec:aa:cb:20:a0:72:6f: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:A2:2D:E9:3C:96:AF:21:70:22:E9:6A:1F:A8:2B:81:E7:ED:B3 X509v3 Authority Key Identifier: keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2e:73:1b:04:d9:5e:05:b4:73:81:56:6b:ec:5e:32:27:7d: ae:96:25:f6:75:97:2f:7d:8e:db:28:9a:af:2b:ad:86:a2:62: 38:15:fc:bc:ae:dc:65:64:61:a2:55:bb:6c:67:1b:19:1b:2a: 29:a3:3a:d1:e2:e5:15:7e:9a:f4:80:62:74:b7:9f:9c:d1:0b: 1e:cc:1b:9c:45:72:88:f3:2d:34:9c:a0:1a:b4:72:9f:77:7d: 42:e2:68:cd:1d:18:30:1a:ba:e3:ae:81:1b:f6:73:71:fd:e8: 62:48:fe:82:7c:7e:47:80:94:78:c7:2d:30:d4:a6:dd:da:cb: 9e:52:a1:c1:d5:ef:9e:4e:ff:c6:03:db:80:b8:27:fe:1e:67: 50:b4:d1:49:f9:b6:31:6d:0b:71:de:1d:cb:77:3a:e9:78:90: fd:a7:23:1b:12:77:cd:c5:dc:37:df:47:ee:25:c8:32:ec:de: 8b:50:f4:17:d5:64:40:85:aa:27:3f:9f:0b:b7:2d:27:03:9f: cc:ed:56:5f:68:07:4c:79:20:f9:b7:70:cb:e4:8a:32:46:77: 3b:72:c5:9c:24:89:64:83:2b:9f:76:44:55:f6:2d:34:42:47: b4:62:9f:79:60:1b:f4:50:a6:d6:03:42:ff:e5:a6:10:25:18: 55:d9:3d:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBFMjExMTAvBgNVBAUTKDk0QzlENDNCNTNCNUQ4NTBEOThFMERBMkQ1RUYzQzRF MUMzMTIwNDUwHhcNMjYwOTIyMTcxMTI1WhcNMjYwOTI5MTcxMTI1WjAYMRYwFAYD VQQDEw02YWIyYjZiZC04ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOW7mePVEdV5PA/wa/EaqgU5N+u9aq0eEFnqsxleyiJZ3Isr2+riVjfLhy+D TKYNrhzv88prq7k814kgtR7NZMV2lxL1Y92CWEYg5OhVzWOMUnSfOW2upLIesMNT pA0bfr2BrUN1BK3fTgfDjF9C6vdvBPqyZffuFiwbtmA3cAzwFBPlorHyvXfiiC9k 6Q8OGtSsZ2McOuMovrLIHyG6dUURzRA1Ev3MiawKesNMm1eYrBeL2g1R0mUFiStO CTifmkRuVu6UsDupiDgbYEIvHgPI/0zfk3aWRJLHKqRkL7tkvYLgGItFNTjK8U9W kg/3clohG4C6SuyqyyCgcm+BrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfloi3p PJavIXAi6WofqCuB5+2zMB8GA1UdIwQYMBaAFJTJ1DtTtdhQ2Y4NotXvPE4cMSBF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEUyMS9BNUU5NTBENDQy NzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJGRFpqZzJpMWU4OFRod3hJ RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNblVPMU8xMkZEWmpnMmkxZTg4VGh3eElFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEUyMS9BNUU5NTBENDQyNzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJG RFpqZzJpMWU4OFRod3hJRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAei5zGwTZXgW0c4FWa+xeMid9rpYl9nWXL32O2yiaryuthqJiOBX8vK7cZWRh olW7bGcbGRsqKaM60eLlFX6a9IBidLefnNELHswbnEVyiPMtNJygGrRyn3d9QuJo zR0YMBq6466BG/Zzcf3oYkj+gnx+R4CUeMctMNSm3drLnlKhwdXvnk7/xgPbgLgn /h5nULTRSfm2MW0Lcd4dy3c66XiQ/acjGxJ3zcXcN99H7iXIMuzei1D0F9VkQIWq Jz+fC7ctJwOfzO1WX2gHTHkg+bdwy+SKMkZ3O3LFnCSJZIMrn3ZEVfYtNEJHtGKf eWAb9FCm1gNC/+WmECUYVdk9Rg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:29:12 2026 by rpki-client