$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: OkPQj9/SvD4+SZsJCPNskR+iVp8/o/kbp8ZhdlOcMRY= Subject key identifier: DF:E6:C5:DC:51:03:9C:F7:1E:03:E1:CC:42:CA:03:39:BC:DE:09:3E Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 3606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 35C5 Signing time: Tue 22 Sep 2026 14:15:42 +0000 Manifest this update: Tue 22 Sep 2026 14:15:41 +0000 Manifest next update: Tue 29 Sep 2026 14:15:41 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: iPTjk2SqyI3+HwHLYFGbQdMeKdvP8sFcT4s2KWjA8Yc=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13830 (0x3606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Sep 22 14:15:41 2026 GMT Not After : Sep 29 14:15:41 2026 GMT Subject: CN=6ab28d8e-8365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:20:6b:60:77:c5:8a:87:45:f8:c8:2e:f4: d4:0f:0c:58:12:cf:85:c4:2d:b8:8b:23:1f:ad:d7: 97:46:ad:56:c1:0f:24:cd:10:79:24:d7:12:63:e0: b9:43:51:84:85:da:06:12:93:7e:fa:01:db:b2:b4: e8:70:ec:91:2f:5f:0a:80:c7:8e:07:b7:ae:19:63: 74:b3:2b:1f:85:38:1f:b9:35:76:ed:3c:64:6a:ce: 26:de:18:dc:22:4b:16:8c:3b:4b:04:52:bf:9a:90: 3e:7f:fb:c1:93:d2:03:aa:6a:55:35:27:fe:7a:70: 97:9e:2a:5d:fa:8a:24:27:92:ff:e3:38:67:d4:14: cc:89:4f:19:1c:9f:51:29:82:09:66:62:02:e1:88: 17:0e:14:31:27:60:af:60:56:7a:8a:f4:08:c8:6d: fb:f8:39:7a:dc:4c:a6:16:c4:63:9d:6d:5e:f3:e2: 5c:44:3e:46:b4:33:9a:bf:8f:c3:ad:f6:b9:ed:27: c2:e6:eb:5e:2a:01:d7:3a:c9:1b:3d:b3:31:90:56: 63:e7:cf:19:90:5a:4c:60:ca:3f:4b:fb:72:4a:43: 50:ac:42:73:5e:31:3f:8c:8d:39:27:55:d8:bd:37: 5c:53:bd:a8:7f:73:1a:87:a6:cb:9b:ce:11:11:03: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:C5:DC:51:03:9C:F7:1E:03:E1:CC:42:CA:03:39:BC:DE:09:3E X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0b:24:32:fe:db:e9:ea:7d:9f:54:73:17:bd:4b:a8:0a:7c: bb:09:2c:3d:95:53:4d:c2:a5:6a:a3:01:9b:96:99:5b:e0:7c: 92:d3:12:8c:83:44:47:16:02:7c:b0:b0:e1:83:b6:ac:d0:4c: 5b:17:c8:4a:4e:78:d4:2f:74:0d:1e:b2:5c:d2:1a:52:05:9b: ae:be:2f:01:83:3b:96:d7:43:1c:ec:e0:4a:22:ec:b1:ae:43: c0:3b:3e:92:f9:9e:77:eb:a2:53:db:2a:84:18:a0:5f:66:6a: 61:33:c0:0e:e7:0f:38:1c:2a:b0:e9:40:e8:bd:ec:6f:c8:84: a2:82:ab:6d:0f:f3:23:8c:1a:ca:2c:87:59:ae:9b:2d:4f:10: 25:ee:e2:7a:a6:fb:6e:95:90:c4:5b:71:00:a6:d9:73:1d:29: f9:27:f9:6d:5e:86:81:5c:77:d9:21:69:1e:be:83:6e:fe:35: 02:38:87:8d:55:99:a2:56:ee:c9:2a:1b:18:ee:ca:c0:b5:85: 37:fb:bf:f0:c6:1b:60:11:f4:86:53:f5:b3:fa:f8:10:63:67: fb:6c:88:6b:92:c7:36:8f:49:6b:27:4b:30:cb:20:fd:8b:11: 36:64:34:58:a7:8c:d2:a9:51:87:2c:02:f5:5b:f7:a6:2e:f9: c6:63:49:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjYwOTIyMTQxNTQxWhcNMjYwOTI5MTQxNTQxWjAYMRYwFAYD VQQDEw02YWIyOGQ4ZS04MzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ygga2B3xYqHRfjILvTUDwxYEs+FxC24iyMfrdeXRq1WwQ8kzRB5JNcSY+C5 Q1GEhdoGEpN++gHbsrTocOyRL18KgMeOB7euGWN0sysfhTgfuTV27Txkas4m3hjc IksWjDtLBFK/mpA+f/vBk9IDqmpVNSf+enCXnipd+ookJ5L/4zhn1BTMiU8ZHJ9R KYIJZmIC4YgXDhQxJ2CvYFZ6ivQIyG37+Dl63EymFsRjnW1e8+JcRD5GtDOav4/D rfa57SfC5uteKgHXOskbPbMxkFZj588ZkFpMYMo/S/tySkNQrEJzXjE/jI05J1XY vTdcU72of3Mah6bLm84REQNH+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/mxdxR A5z3HgPhzELKAzm83gk+MB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMAskMv7b6ep9n1RzF71LqAp8uwksPZVTTcKlaqMBm5aZW+B8ktMSjINERxYC fLCw4YO2rNBMWxfISk541C90DR6yXNIaUgWbrr4vAYM7ltdDHOzgSiLssa5DwDs+ kvmed+uiU9sqhBigX2ZqYTPADucPOBwqsOlA6L3sb8iEooKrbQ/zI4wayiyHWa6b LU8QJe7ieqb7bpWQxFtxAKbZcx0p+Sf5bV6GgVx32SFpHr6Dbv41AjiHjVWZolbu ySobGO7KwLWFN/u/8MYbYBH0hlP1s/r4EGNn+2yIa5LHNo9JaydLMMsg/YsRNmQ0 WKeM0qlRhywC9Vv3pi75xmNJtw== -----END CERTIFICATE-----Generated at Thu Sep 24 08:15:08 2026 by rpki-client