$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: 8jVY8kwK1QjINewUR5N7aSkjX+KZMksH1+tPMC4zIts= Subject key identifier: F0:23:67:EB:33:B3:2E:C2:D8:21:76:59:EA:5F:5F:77:FF:07:08:C8 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 09ED Signing time: Mon 28 Sep 2026 20:01:31 +0000 Manifest this update: Mon 28 Sep 2026 20:01:31 +0000 Manifest next update: Mon 05 Oct 2026 20:01:31 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: UXf0Cc7+puZUAZKWXvb99V02/y2mngExzhSM0MfytPI=) 2: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=) 3: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2568 (0xa08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Sep 28 20:01:31 2026 GMT Not After : Oct 5 20:01:31 2026 GMT Subject: CN=6abac79b-7d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:c8:2e:eb:71:3d:09:e9:95:17:65:a4:9f: b7:5d:83:63:fc:09:5a:d3:98:d4:c3:57:9e:a4:f1: 97:6e:a2:a9:39:6b:c4:3a:82:bc:a2:c6:5a:3c:31: 70:05:02:68:81:e8:8c:cf:a3:23:f8:9b:9d:14:41: 97:a0:76:ff:37:19:e9:30:bb:c9:ad:4b:59:3b:88: 35:7e:74:c9:25:d5:e7:8e:1e:c0:e3:9f:e4:91:2c: 14:64:10:eb:3f:d7:81:63:62:79:42:88:6a:98:93: 55:49:fe:5a:b1:8a:d7:ac:3a:8b:d9:43:31:ea:e3: 99:68:77:ca:50:3e:66:a7:9f:c5:39:fe:f5:ae:95: 14:14:84:f0:d0:f7:42:05:10:90:ca:78:92:7d:fb: 1f:64:24:e6:66:0f:c8:5b:ce:d5:74:87:fd:2d:5e: 21:57:7a:fe:65:3f:2b:b1:76:d8:e1:fa:4f:6d:53: b6:2f:4a:39:34:bb:ce:fa:7a:a3:f2:5a:fd:ae:8d: 7d:0f:7e:f2:36:08:e2:9f:6f:c7:82:81:8a:f5:fe: ab:8f:7d:3b:4e:49:77:87:e6:42:d4:88:b4:8d:68: d1:ef:32:04:be:85:78:a6:49:72:24:6d:75:df:c4: a4:47:37:a5:2b:63:46:72:ab:84:ad:36:84:81:68: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:23:67:EB:33:B3:2E:C2:D8:21:76:59:EA:5F:5F:77:FF:07:08:C8 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b4:ef:3d:af:c8:36:c5:0d:f6:68:58:b0:21:52:e7:81:9e: 58:31:dd:d8:ea:61:2c:97:5d:c4:82:4a:c9:f0:d4:29:84:ad: f7:8b:81:df:53:89:93:a3:61:27:d4:f4:b1:ee:ea:ff:92:0c: d1:47:d8:91:4d:bd:11:d0:49:ed:a7:2b:ca:73:95:d1:52:81: d2:4e:56:8f:48:d8:48:11:b4:42:d5:3e:01:b8:ed:06:84:52: 4c:58:b5:e5:48:69:ae:e6:0b:a2:d8:32:ee:20:2b:e1:1e:a9: ec:30:b4:84:fd:e7:14:90:63:13:f8:5d:a7:d7:70:6d:99:24: f0:44:24:2d:53:a4:7f:58:f6:98:cb:3c:5d:5f:f9:3e:00:68: 7a:10:a3:ac:0b:00:7a:58:f3:e7:a7:01:92:7c:51:30:43:9b: a8:c8:c0:5d:00:81:7c:60:78:7a:39:37:25:bb:28:1d:49:57: 1f:0c:9f:db:80:56:e0:4f:49:53:87:b5:df:ad:a5:0c:3d:63: c4:f0:a6:c2:9f:37:03:ae:63:79:90:98:55:70:e6:1f:88:f1: 91:d6:04:d1:df:0c:a4:8f:a3:8c:98:35:75:ed:f4:f2:37:24: 53:ec:e6:ae:dd:a5:dd:3e:a2:33:9b:da:ba:e1:a0:04:79:6f: 8c:59:71:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYwOTI4MjAwMTMxWhcNMjYxMDA1MjAwMTMxWjAYMRYwFAYD VQQDEw02YWJhYzc5Yi03ZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxPILutxPQnplRdlpJ+3XYNj/Ala05jUw1eepPGXbqKpOWvEOoK8osZaPDFw BQJogeiMz6Mj+JudFEGXoHb/NxnpMLvJrUtZO4g1fnTJJdXnjh7A45/kkSwUZBDr P9eBY2J5QohqmJNVSf5asYrXrDqL2UMx6uOZaHfKUD5mp5/FOf71rpUUFITw0PdC BRCQyniSffsfZCTmZg/IW87VdIf9LV4hV3r+ZT8rsXbY4fpPbVO2L0o5NLvO+nqj 8lr9ro19D37yNgjin2/HgoGK9f6rj307Tkl3h+ZC1Ii0jWjR7zIEvoV4pklyJG11 38SkRzelK2NGcquErTaEgWhpaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPAjZ+sz sy7C2CF2WepfX3f/BwjIMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATrTvPa/INsUN9mhYsCFS54GeWDHd2OphLJddxIJKyfDUKYSt94uB31OJk6Nh J9T0se7q/5IM0UfYkU29EdBJ7acrynOV0VKB0k5Wj0jYSBG0QtU+AbjtBoRSTFi1 5UhpruYLotgy7iAr4R6p7DC0hP3nFJBjE/hdp9dwbZkk8EQkLVOkf1j2mMs8XV/5 PgBoehCjrAsAeljz56cBknxRMEObqMjAXQCBfGB4ejk3JbsoHUlXHwyf24BW4E9J U4e1362lDD1jxPCmwp83A65jeZCYVXDmH4jxkdYE0d8MpI+jjJg1de308jckU+zm rt2l3T6iM5vauuGgBHlvjFlxHQ== -----END CERTIFICATE-----Generated at Tue Sep 29 17:33:56 2026 by rpki-client