$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json) Hash identifier: 1jrVvIp0P4IJIDw+ACw5s49cYwETmnbi3y7F0bUIzMQ= Subject key identifier: 95:7C:AB:EA:E4:9F:F8:F2:12:59:1F:AC:44:4A:BB:57:90:30:82:3B Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft Manifest number: 0338 Signing time: Wed 23 Sep 2026 00:37:31 +0000 Manifest this update: Wed 23 Sep 2026 00:37:30 +0000 Manifest next update: Wed 30 Sep 2026 00:37:30 +0000 Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: JyW7iQQDF+L3rWV9h1piYcMobXtUFqM/Hkh37cpAjEM=) 2: B409E49CA39D11F1B4F7754D4411F970.roa (hash: GzaCZWp1dndFD7g7emTXpIICurmoortE6hD0cpGMniI=) 3: B2D7FC4EA39D11F1B4F7754D4411F970.roa (hash: teuQoAGK0QvhhfPPm5rBMYWO1aEcU1nB5hIfx3+5PAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Validity Not Before: Sep 23 00:37:30 2026 GMT Not After : Sep 30 00:37:30 2026 GMT Subject: CN=6ab31f4a-9a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:bc:15:a1:8d:19:9c:83:7b:cb:fd:45:99: 37:da:fd:b8:52:20:b1:bf:1b:ca:8a:94:f0:ed:e7: 56:6f:1c:65:e7:17:7c:75:b5:4e:3d:e2:ca:83:7d: d5:3d:6a:84:08:71:b8:8d:16:fe:66:a1:fc:ee:4d: a4:e9:4e:ab:fe:1c:e1:01:f6:aa:d3:26:50:eb:58: 50:ed:b1:64:4c:f0:50:cb:84:55:fc:0b:58:82:af: 73:81:5f:ed:e6:2e:3f:d6:47:6e:12:0a:14:a3:7b: d1:b7:86:94:92:ae:a8:8f:48:ec:96:90:bd:9d:83: 86:62:1f:c5:7d:61:e9:59:df:b1:88:90:15:e7:81: ed:9e:58:54:71:3d:79:07:5b:20:f4:d4:05:6a:df: fe:8a:db:80:48:2d:88:b0:9c:95:2e:ee:56:f6:77: be:f5:c2:79:81:0b:32:e5:2f:b2:47:0e:a6:ff:55: 6d:8d:62:33:44:69:e9:db:01:c7:63:3e:34:c4:71: ba:91:60:20:c2:eb:88:50:09:8f:3d:3f:70:51:79: d5:5d:29:de:3c:d3:11:51:69:ad:86:88:0c:11:ff: e3:af:e3:ef:f9:7d:3b:4a:90:c5:c0:ac:fe:4e:8e: d2:1a:88:8f:45:b6:34:cc:bb:40:f2:83:4e:1e:74: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:AB:EA:E4:9F:F8:F2:12:59:1F:AC:44:4A:BB:57:90:30:82:3B X509v3 Authority Key Identifier: keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7a:50:e6:3e:c5:ce:22:9d:c0:ac:3e:17:c4:3f:f5:33:64: 6b:55:67:70:7b:c7:6a:96:b2:73:0f:9e:a0:f9:f5:91:dc:a3: 79:6c:5a:17:03:c1:f2:9f:8b:24:bb:24:a9:c4:9a:68:d3:5f: f7:74:bd:c3:2d:31:30:61:0b:24:a6:37:83:7f:03:e4:38:ff: d7:de:1d:67:3f:db:bb:0b:e6:7d:5d:38:6a:98:65:16:5c:40: 60:7a:cc:2d:73:4f:c9:d2:9f:15:ae:c6:01:fd:bc:37:6c:75: 7c:07:1f:e4:c3:91:f0:77:ce:ab:3a:6c:97:1a:70:68:ea:e8: d7:db:a0:79:39:03:b3:ea:64:aa:58:0d:77:78:b7:1f:22:53: ef:07:c6:80:ad:d6:61:fb:61:da:2f:63:dd:54:93:fd:7b:d3: a0:15:a9:60:a6:e1:0d:b5:b6:85:e8:52:b0:d8:76:9c:5c:0a: 0a:93:65:9e:f9:a6:2d:1f:f0:2f:f0:fa:c4:5c:ad:39:87:69: 42:35:1a:91:09:3e:1d:9c:39:59:ab:aa:20:1c:a4:a9:b9:80: 55:10:52:7f:4c:7f:b1:fd:3c:bc:3c:1f:bd:1d:86:97:90:2b: 8c:e7:ef:11:ff:16:cb:72:a0:89:22:b4:f9:32:77:22:bf:15: 6a:4a:76:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5 NjM1NUJENTMwHhcNMjYwOTIzMDAzNzMwWhcNMjYwOTMwMDAzNzMwWjAYMRYwFAYD VQQDEw02YWIzMWY0YS05YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7K8FaGNGZyDe8v9RZk32v24UiCxvxvKipTw7edWbxxl5xd8dbVOPeLKg33V PWqECHG4jRb+ZqH87k2k6U6r/hzhAfaq0yZQ61hQ7bFkTPBQy4RV/AtYgq9zgV/t 5i4/1kduEgoUo3vRt4aUkq6oj0jslpC9nYOGYh/FfWHpWd+xiJAV54HtnlhUcT15 B1sg9NQFat/+ituASC2IsJyVLu5W9ne+9cJ5gQsy5S+yRw6m/1VtjWIzRGnp2wHH Yz40xHG6kWAgwuuIUAmPPT9wUXnVXSnePNMRUWmthogMEf/jr+Pv+X07SpDFwKz+ To7SGoiPRbY0zLtA8oNOHnTzAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJV8q+rk n/jyElkfrERKu1eQMII7MB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0 MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnpQ5j7FziKdwKw+F8Q/9TNka1VncHvHapaycw+eoPn1kdyjeWxaFwPB8p+L JLskqcSaaNNf93S9wy0xMGELJKY3g38D5Dj/194dZz/buwvmfV04aphlFlxAYHrM LXNPydKfFa7GAf28N2x1fAcf5MOR8HfOqzpslxpwaOro19ugeTkDs+pkqlgNd3i3 HyJT7wfGgK3WYfth2i9j3VST/XvToBWpYKbhDbW2hehSsNh2nFwKCpNlnvmmLR/w L/D6xFytOYdpQjUakQk+HZw5WauqIBykqbmAVRBSf0x/sf08vDwfvR2Gl5ArjOfv Ef8Wy3KgiSK0+TJ3Ir8Vakp2iw== -----END CERTIFICATE-----Generated at Thu Sep 24 02:02:21 2026 by rpki-client