$ rpki-client -vvvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: MyElOrvlcUOAe/2D1cJWT0bbYxkjt1y9UWP2uae79cM= Subject key identifier: 39:43:16:F2:97:F0:1C:04:BB:AA:72:35:D8:93:00:3A:2A:EA:26:10 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 040D Signing time: Wed 23 Sep 2026 00:00:19 +0000 Manifest this update: Wed 23 Sep 2026 00:00:18 +0000 Manifest next update: Wed 30 Sep 2026 00:00:18 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: kIrdjgmX7dZFW9Y1pz9cUUz+2E2D2ZCXfX4fXC5y4vc=) 2: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: TSL+MTPK8EgRMcMjr6qrtFpszOvhkzRM0QdAHqJaU40=) 3: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: vSHf1X3O2nMKh82RanHECAwvzlkFPBFjzTmLD8chpCY=) 4: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=) 5: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: yi7NYs8PxhwuWWuOtg4OuRxpExkIea04i2z4LtVyM0w=) 6: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 9isDfhzAiD/lHOxq4r19J9IhtSqgH/VDgO9RTET6Oqo=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Sep 23 00:00:18 2026 GMT Not After : Sep 30 00:00:18 2026 GMT Subject: CN=6ab31693-2ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:72:90:27:11:81:cb:a0:e7:32:ee:aa:70: f4:53:94:72:9d:53:a2:18:92:fc:96:d2:84:55:f4: 9c:44:c7:02:36:35:6c:11:5e:1a:67:0f:45:76:92: 3e:a8:fd:fd:0e:81:e9:72:f9:a7:be:56:ef:f6:22: 23:b5:3f:c1:f5:a2:5b:8e:06:c5:27:1e:36:b9:df: 57:a1:e1:47:6a:81:10:c0:76:17:e6:90:c8:28:0e: f2:cf:15:95:77:91:5e:1a:d1:3a:d7:be:b6:71:ee: ca:62:e6:10:4e:b3:c3:b3:44:32:8c:1d:70:e6:31: 87:8d:d7:7c:e9:73:b4:f4:4c:d7:80:bd:57:81:40: 44:9c:d8:f0:c3:62:92:97:b1:26:20:cf:fe:d6:8c: b8:91:fd:92:48:41:33:de:72:f6:d8:ef:25:67:06: c6:ce:98:1b:d1:de:44:8d:53:91:4c:0a:53:08:3a: 38:fa:16:22:ec:1d:63:a2:74:36:6d:73:60:6f:97: b2:0a:59:6d:7f:b6:be:05:08:ef:e9:fd:10:c3:2a: 71:6c:52:15:69:5a:ee:f8:89:c3:e5:23:ae:ad:3a: 58:d2:d7:82:53:f9:69:81:20:ec:56:0e:70:4c:1c: 01:bc:77:88:06:53:17:fe:61:65:9f:c4:fc:50:82: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:16:F2:97:F0:1C:04:BB:AA:72:35:D8:93:00:3A:2A:EA:26:10 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:54:77:9b:b8:5e:8f:7b:a9:ae:a0:38:b3:cc:00:57:4e:2b: 65:04:66:7c:f4:90:18:44:0b:fc:6d:fc:b1:06:88:2f:bc:53: c4:98:df:e8:7f:6f:80:32:b1:d9:34:55:29:d5:eb:5b:00:65: 8c:fc:b4:7d:cb:7b:49:6b:12:b3:cf:0f:7c:da:28:50:f0:c4: 1d:c3:26:b5:5f:a7:f6:4f:5a:69:3d:8c:b8:5f:55:d6:05:fc: 7f:3a:72:bc:e5:24:57:01:4d:e2:aa:5d:6e:26:96:98:8f:14: cd:27:fb:85:84:b6:bf:9e:3f:24:10:94:59:7b:90:8c:66:88: 52:c1:bc:b9:42:bd:18:20:74:04:1a:4d:5e:da:ae:df:f8:1b: 55:bc:55:ea:b3:90:15:9e:8a:01:31:5a:37:f3:a3:c6:75:37: ed:81:90:53:f4:a8:2f:a8:fc:6c:19:d6:24:4b:04:16:e0:8b: d8:4a:4c:15:d3:f8:a3:24:bb:3e:9f:d3:e6:ac:66:aa:61:cb: 3b:4d:37:c1:be:2d:a9:1c:05:fe:0e:c5:11:f5:04:fe:b2:e2: fa:73:03:0d:b5:5c:28:09:3d:35:54:b6:4f:48:68:a1:83:1b: 96:3c:d2:6c:c1:69:db:1a:fc:1a:35:cb:59:a7:bb:8b:f6:f7: 99:0f:41:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjYwOTIzMDAwMDE4WhcNMjYwOTMwMDAwMDE4WjAYMRYwFAYD VQQDEw02YWIzMTY5My0yZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fhykCcRgcug5zLuqnD0U5RynVOiGJL8ltKEVfScRMcCNjVsEV4aZw9FdpI+ qP39DoHpcvmnvlbv9iIjtT/B9aJbjgbFJx42ud9XoeFHaoEQwHYX5pDIKA7yzxWV d5FeGtE61762ce7KYuYQTrPDs0QyjB1w5jGHjdd86XO09EzXgL1XgUBEnNjww2KS l7EmIM/+1oy4kf2SSEEz3nL22O8lZwbGzpgb0d5EjVORTApTCDo4+hYi7B1jonQ2 bXNgb5eyClltf7a+BQjv6f0QwypxbFIVaVru+InD5SOurTpY0teCU/lpgSDsVg5w TBwBvHeIBlMX/mFln8T8UIItzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlDFvKX 8BwEu6pyNdiTADoq6iYQMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAolR3m7hej3uprqA4s8wAV04rZQRmfPSQGEQL/G38sQaIL7xTxJjf6H9vgDKx 2TRVKdXrWwBljPy0fct7SWsSs88PfNooUPDEHcMmtV+n9k9aaT2MuF9V1gX8fzpy vOUkVwFN4qpdbiaWmI8UzSf7hYS2v54/JBCUWXuQjGaIUsG8uUK9GCB0BBpNXtqu 3/gbVbxV6rOQFZ6KATFaN/OjxnU37YGQU/SoL6j8bBnWJEsEFuCL2EpMFdP4oyS7 Pp/T5qxmqmHLO003wb4tqRwF/g7FEfUE/rLi+nMDDbVcKAk9NVS2T0hooYMbljzS bMFp2xr8GjXLWae7i/b3mQ9Blg== -----END CERTIFICATE-----Generated at Thu Sep 24 08:32:08 2026 by rpki-client