$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft File: lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json) Hash identifier: xukaUbsYMTa7HZvnUFUeOBHtb7QmN6cVbtryz1Rr7eQ= Subject key identifier: 63:01:81:8D:69:F6:CE:EB:08:FC:C4:D1:8C:BD:31:A8:92:FC:1D:4D Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft Manifest number: FD Signing time: Wed 23 Sep 2026 06:01:24 +0000 Manifest this update: Wed 23 Sep 2026 06:01:24 +0000 Manifest next update: Wed 30 Sep 2026 06:01:24 +0000 Files and hashes: 1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: j6CkIaVX6qF8rZrSujhnB2Xf9Zjbn9dSxbKMBIKk0Qo=) 2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: 6U2CgiUvlSZmVIxlf3rv78ibQxmJIaTJLFAkzr+rmKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Validity Not Before: Sep 23 06:01:24 2026 GMT Not After : Sep 30 06:01:24 2026 GMT Subject: CN=6ab36b34-4fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:db:a2:e9:be:51:f3:0c:6e:1a:66:ae:5b: fb:66:d5:49:72:93:67:10:ee:59:01:b0:7d:77:24: 67:c2:9a:1a:b5:55:22:fa:e1:28:92:9b:cd:a7:d1: 95:77:8a:85:f5:53:10:33:37:f2:e0:3f:7c:81:cf: 2f:21:e5:93:a3:29:ec:56:cb:ed:e8:e9:8e:b2:8c: 34:72:ba:5c:46:cf:cd:13:df:e5:c0:4b:05:77:a0: 83:1a:55:e0:6e:14:ba:8a:63:52:ae:4b:66:a9:fe: 10:27:c6:bb:fd:45:21:79:15:3b:9a:bd:fe:97:3d: b9:f7:1a:e1:fe:57:e3:d4:e9:e3:fd:fe:0d:59:c8: 8d:c9:02:42:6d:25:61:2d:02:78:64:e0:30:13:b7: d5:11:d6:89:d8:b5:6b:98:e8:4b:fd:d1:69:a0:86: de:b7:1d:1b:04:86:32:f3:72:c3:6d:10:bd:5d:d9: 02:6e:dc:39:53:27:c1:55:86:d0:e9:62:7a:28:16: bd:13:d1:af:7e:7a:97:b0:0b:18:52:9c:a0:38:04: 58:46:55:40:f1:ad:8c:df:ee:ca:73:7b:46:75:0a: 4e:c9:7a:c7:ab:b2:1d:d7:4f:6b:fc:6d:43:15:60: 0c:a9:71:64:f1:41:40:ae:49:a8:e7:9e:08:2b:2e: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:01:81:8D:69:F6:CE:EB:08:FC:C4:D1:8C:BD:31:A8:92:FC:1D:4D X509v3 Authority Key Identifier: keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:af:e8:fb:a1:c4:0c:cf:17:e1:09:f0:fd:a3:e0:e5:81:7b: b4:e7:47:26:6f:07:07:87:8b:58:35:1a:5c:64:1c:77:16:64: 71:0b:6e:58:de:b8:aa:8f:58:a3:b0:a8:d1:6f:b6:9e:49:aa: 6d:bd:78:9b:c6:6c:af:6c:3b:9e:7e:be:fd:d2:bb:75:7c:5f: da:cc:b4:3a:3a:8d:68:4c:ad:94:0f:9b:00:bf:a4:99:50:cf: 24:16:df:e4:8c:7e:fa:33:82:59:5c:48:22:1e:03:fe:bd:b3: da:9d:79:df:e4:36:da:d6:95:f0:55:d7:13:78:f1:d8:e8:0f: 02:99:e6:9b:6e:66:72:c0:84:6d:4c:dc:d5:9b:b5:d1:59:c9: 3f:b1:ca:57:77:b0:4a:0d:e3:c2:83:56:6b:59:4c:cc:4c:3f: b2:5f:82:ef:65:61:fe:4e:11:bf:ea:6a:06:7c:07:e1:c6:58: 5d:21:da:3e:b9:06:c1:98:4d:6b:51:63:59:71:95:d8:19:08: 92:91:a5:48:f6:1d:46:8f:6a:bc:81:54:91:45:c4:b5:32:44: 9b:a4:9a:0f:fa:4a:ae:79:9e:22:3d:26:36:03:20:cb:57:f5: 86:07:aa:c4:32:51:cf:7d:b5:50:64:b1:79:a7:ba:09:a1:de: b9:f5:2c:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MUQxMTAvBgNVBAUTKDk1MkE0REM3QzRENjEwOTU5OEJFRUU1QUMwQTIwNkQy N0I4NUM1NkEwHhcNMjYwOTIzMDYwMTI0WhcNMjYwOTMwMDYwMTI0WjAYMRYwFAYD VQQDEw02YWIzNmIzNC00ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc/boum+UfMMbhpmrlv7ZtVJcpNnEO5ZAbB9dyRnwpoatVUi+uEokpvNp9GV d4qF9VMQMzfy4D98gc8vIeWToynsVsvt6OmOsow0crpcRs/NE9/lwEsFd6CDGlXg bhS6imNSrktmqf4QJ8a7/UUheRU7mr3+lz259xrh/lfj1Onj/f4NWciNyQJCbSVh LQJ4ZOAwE7fVEdaJ2LVrmOhL/dFpoIbetx0bBIYy83LDbRC9XdkCbtw5UyfBVYbQ 6WJ6KBa9E9GvfnqXsAsYUpygOARYRlVA8a2M3+7Kc3tGdQpOyXrHq7Id109r/G1D FWAMqXFk8UFArkmo554IKy5EsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMBgY1p 9s7rCPzE0Yy9MaiS/B1NMB8GA1UdIwQYMBaAFJUqTcfE1hCVmL7uWsCiBtJ7hcVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcxRC8xRTBGOTkyRTM2 Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VKV1l2dTVhd0tJRzBudUZ4 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTcE54OFRXRUpXWXZ1NWF3S0lHMG51RnhXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcxRC8xRTBGOTkyRTM2Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VK V1l2dTVhd0tJRzBudUZ4V28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaq/o+6HEDM8X4Qnw/aPg5YF7tOdHJm8HB4eLWDUaXGQcdxZkcQtuWN64qo9Y o7Co0W+2nkmqbb14m8Zsr2w7nn6+/dK7dXxf2sy0OjqNaEytlA+bAL+kmVDPJBbf 5Ix++jOCWVxIIh4D/r2z2p153+Q22taV8FXXE3jx2OgPApnmm25mcsCEbUzc1Zu1 0VnJP7HKV3ewSg3jwoNWa1lMzEw/sl+C72Vh/k4Rv+pqBnwH4cZYXSHaPrkGwZhN a1FjWXGV2BkIkpGlSPYdRo9qvIFUkUXEtTJEm6SaD/pKrnmeIj0mNgMgy1f1hgeq xDJRz321UGSxeae6CaHeufUs0w== -----END CERTIFICATE-----Generated at Thu Sep 24 08:04:38 2026 by rpki-client