$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: KxO6Q/FFcWnStWhZIQMGT6e54zU46OpzkmGi5tpUfAk= Subject key identifier: 25:B5:27:C6:2E:9D:E9:28:4A:38:2F:1E:4C:81:A8:C9:50:4A:B6:60 Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 07B1 Signing time: Fri 02 Oct 2026 21:47:00 +0000 Manifest this update: Fri 02 Oct 2026 21:46:59 +0000 Manifest next update: Fri 09 Oct 2026 21:46:59 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: YT7gSciXTH3SYPMQkmctPwnTKR8UcRizezuwCikRJfs=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Oct 2 21:46:59 2026 GMT Not After : Oct 9 21:46:59 2026 GMT Subject: CN=6ac02654-7eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:46:ac:98:4c:47:9e:7a:d7:67:96:67:30: 86:bc:8b:02:74:82:41:70:19:08:da:ec:0e:09:76: 3d:d8:4c:6c:0f:a0:a4:5a:66:9a:29:a7:11:c4:b2: 8b:f4:c3:fd:19:d6:63:e2:aa:12:a8:e0:d8:f7:ea: 59:bf:bd:5c:95:5a:9d:47:c8:d7:e8:96:3c:48:aa: c1:7f:c7:8b:d4:2f:e8:74:bc:15:29:1d:64:01:f9: b2:61:17:46:d7:78:e3:bd:3a:c2:0b:62:19:ee:fd: e2:64:a5:cb:09:5d:90:9b:d5:e5:ea:71:c2:ed:85: 65:a8:ff:6f:00:3b:d3:fb:bc:01:92:ea:97:d1:b7: 94:4a:e1:0e:8e:83:67:d6:f3:b7:d7:25:b9:96:3c: ec:94:89:92:c8:83:1d:d1:49:05:a9:89:80:b0:1f: c7:c8:cb:e3:06:a4:42:7f:78:58:a8:55:cc:45:7f: 30:7f:a9:82:7a:d1:9f:c4:5e:1d:09:42:85:94:f4: 83:0c:46:51:9a:c9:9a:d5:93:bc:77:1d:0b:e9:41: 66:b2:cb:51:56:64:57:07:37:b2:7c:00:23:81:3f: cd:5f:28:73:a6:2b:0a:84:3b:95:34:af:73:6a:d5: fc:fb:8b:11:03:b6:29:25:47:e8:57:cf:31:9b:4d: 77:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B5:27:C6:2E:9D:E9:28:4A:38:2F:1E:4C:81:A8:C9:50:4A:B6:60 X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d7:ff:a1:b0:10:32:91:57:0b:26:b8:b1:f9:70:d5:de:05: 87:56:c9:54:12:e0:01:aa:b8:ab:08:e8:c8:bd:66:e0:16:9e: 32:78:43:d0:be:81:61:03:fd:2e:34:7e:91:ef:f3:ff:99:78: 5e:93:a3:14:26:ac:92:d3:b3:90:bc:9d:ab:3f:54:0a:15:b3: 9c:27:4c:f7:05:fa:f4:b0:22:45:11:d7:66:31:57:0d:27:ed: b3:cd:28:73:1b:fc:ca:5e:8c:1c:e7:ac:ab:b5:0b:5c:19:a6: 81:d4:a3:f4:78:0a:62:14:9d:24:d1:e4:2a:c8:3a:8f:ea:a8: 92:bf:e5:ff:8c:4d:c3:f5:4d:60:ee:71:03:f7:f0:9b:52:7a: 56:7c:4b:50:e7:a0:75:b2:64:55:ec:94:a0:d9:7b:c7:1e:e2: 32:01:71:c5:b6:64:80:7e:bc:55:06:5f:bb:1e:8a:7d:d0:f3: 05:3e:57:fb:93:d1:e9:41:7a:8b:b6:a1:ec:56:8f:14:b1:53: 67:b3:1e:f9:37:11:df:bb:16:74:7d:6e:e7:5a:aa:fa:e2:0b: db:e6:4f:99:62:e6:fd:f1:02:75:0f:7d:23:15:3c:65:08:8d: ba:62:57:99:59:b9:7d:6f:14:4a:b4:d6:2d:95:bf:95:7f:b2: da:64:f0:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjYxMDAyMjE0NjU5WhcNMjYxMDA5MjE0NjU5WjAYMRYwFAYD VQQDEw02YWMwMjY1NC03ZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWpGrJhMR55612eWZzCGvIsCdIJBcBkI2uwOCXY92ExsD6CkWmaaKacRxLKL 9MP9GdZj4qoSqODY9+pZv71clVqdR8jX6JY8SKrBf8eL1C/odLwVKR1kAfmyYRdG 13jjvTrCC2IZ7v3iZKXLCV2Qm9Xl6nHC7YVlqP9vADvT+7wBkuqX0beUSuEOjoNn 1vO31yW5ljzslImSyIMd0UkFqYmAsB/HyMvjBqRCf3hYqFXMRX8wf6mCetGfxF4d CUKFlPSDDEZRmsma1ZO8dx0L6UFmsstRVmRXBzeyfAAjgT/NXyhzpisKhDuVNK9z atX8+4sRA7YpJUfoV88xm013ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCW1J8Yu nekoSjgvHkyBqMlQSrZgMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNf/obAQMpFXCya4sflw1d4Fh1bJVBLgAaq4qwjoyL1m4BaeMnhD0L6BYQP9 LjR+ke/z/5l4XpOjFCasktOzkLydqz9UChWznCdM9wX69LAiRRHXZjFXDSfts80o cxv8yl6MHOesq7ULXBmmgdSj9HgKYhSdJNHkKsg6j+qokr/l/4xNw/VNYO5xA/fw m1J6VnxLUOegdbJkVeyUoNl7xx7iMgFxxbZkgH68VQZfux6KfdDzBT5X+5PR6UF6 i7ah7FaPFLFTZ7Me+TcR37sWdH1u51qq+uIL2+ZPmWLm/fECdQ99IxU8ZQiNumJX mVm5fW8USrTWLZW/lX+y2mTw2g== -----END CERTIFICATE-----Generated at Sun Oct 4 03:19:03 2026 by rpki-client