$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: sDlgnZDqPus6lij5ORgYT3yEmBpNj9/zZnMkUTxHql8= Subject key identifier: 65:2C:AA:80:31:3E:36:68:7F:11:84:84:AF:68:D2:E4:55:CC:20:80 Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: EB Signing time: Wed 23 Sep 2026 06:23:04 +0000 Manifest this update: Wed 23 Sep 2026 06:23:03 +0000 Manifest next update: Wed 30 Sep 2026 06:23:03 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: WE8nK8WuTGGdsF5/FqoBBg6Eclescvbn+UlmfreR+Xo=) 2: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) 3: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Sep 23 06:23:03 2026 GMT Not After : Sep 30 06:23:03 2026 GMT Subject: CN=6ab37048-ed25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:c8:5f:0a:77:bf:c3:84:c2:d1:76:70:a8: ff:40:60:b4:76:af:47:85:a4:71:4e:bc:95:11:18: 39:66:1d:54:0d:6a:b8:de:83:c3:43:13:70:98:77: 08:4f:d5:ff:c3:41:0d:80:21:03:46:32:80:4e:cd: 67:d5:fa:e8:ce:1c:b3:55:79:5d:d3:bc:f6:68:9e: 17:e5:1b:e3:ea:fd:c5:e6:8b:fc:c2:13:07:06:6e: 5d:e0:06:72:09:8f:52:6c:1a:b0:ef:fa:a2:d7:52: c9:8f:89:24:f7:b2:c0:68:6a:d9:00:8c:01:d0:1a: 3b:13:73:32:77:40:14:12:b5:b6:47:80:f1:0f:31: 36:43:c7:1a:94:9c:cf:15:4c:6d:12:6e:e2:bf:87: 7b:56:f5:ef:dd:2c:1d:d2:00:8a:79:dc:45:a2:5c: d1:49:87:e4:2d:ee:06:27:04:9d:c1:8a:2e:9d:2a: 03:0c:50:7a:11:61:c3:91:81:0d:8f:27:55:23:6a: 92:a2:6e:73:b6:4a:43:7a:24:20:49:72:71:a0:47: 5e:dc:5a:86:14:25:8a:93:cc:d1:ce:8b:8c:6b:fd: 0c:5c:bc:16:22:db:22:f9:5e:b2:ac:eb:2e:53:11: 2d:cf:65:4f:de:4e:17:f4:67:ed:1f:31:91:01:b8: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:AA:80:31:3E:36:68:7F:11:84:84:AF:68:D2:E4:55:CC:20:80 X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7e:3e:62:74:40:78:4d:0b:bd:ab:b9:21:fc:e0:4d:b6:2b: 72:e3:b1:01:e0:24:13:15:09:af:0c:c5:23:d4:41:d2:7d:3c: d6:63:c3:4c:9e:41:d5:ef:d3:da:e4:83:6f:1d:d2:ea:55:69: a1:9e:80:39:dc:a5:1d:99:86:45:c7:15:a0:27:e3:ce:60:15: d2:ce:dc:5f:bf:1f:51:b5:8f:1f:a9:d9:9a:2a:37:ea:3d:1f: 30:24:59:9f:03:92:ae:61:86:1c:21:05:6f:45:d6:c5:ad:ae: 7e:53:31:c0:7e:ba:4e:7a:e8:f4:5a:b1:8d:12:89:fa:bb:44: af:3c:a2:79:73:c0:16:20:93:cc:0a:11:99:4d:3b:74:55:65: 04:0c:a3:1d:32:64:d9:ee:df:8b:f7:89:61:c3:fb:2a:b3:08: c1:59:67:e1:94:dc:61:46:d4:00:17:3d:26:60:49:ed:01:4b: 3a:1b:4e:54:13:50:0f:10:83:38:a8:a3:c1:81:d8:c8:06:02: 74:ce:9a:62:44:be:6c:f4:9e:e6:25:89:83:3f:3a:ff:b8:78: b0:57:77:15:f8:84:55:57:ae:00:a5:a1:b5:ca:ee:cb:8b:6a: f7:91:07:0c:df:f1:5c:97:b4:bf:21:32:80:7b:26:0f:c8:a6: 00:38:ea:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYwOTIzMDYyMzAzWhcNMjYwOTMwMDYyMzAzWjAYMRYwFAYD VQQDEw02YWIzNzA0OC1lZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuePIXwp3v8OEwtF2cKj/QGC0dq9HhaRxTryVERg5Zh1UDWq43oPDQxNwmHcI T9X/w0ENgCEDRjKATs1n1frozhyzVXld07z2aJ4X5Rvj6v3F5ov8whMHBm5d4AZy CY9SbBqw7/qi11LJj4kk97LAaGrZAIwB0Bo7E3Myd0AUErW2R4DxDzE2Q8calJzP FUxtEm7iv4d7VvXv3Swd0gCKedxFolzRSYfkLe4GJwSdwYounSoDDFB6EWHDkYEN jydVI2qSom5ztkpDeiQgSXJxoEde3FqGFCWKk8zRzouMa/0MXLwWItsi+V6yrOsu UxEtz2VP3k4X9GftHzGRAbiINQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUsqoAx PjZofxGEhK9o0uRVzCCAMB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALH4+YnRAeE0Lvau5IfzgTbYrcuOxAeAkExUJrwzFI9RB0n081mPDTJ5B1e/T 2uSDbx3S6lVpoZ6AOdylHZmGRccVoCfjzmAV0s7cX78fUbWPH6nZmio36j0fMCRZ nwOSrmGGHCEFb0XWxa2uflMxwH66Tnro9FqxjRKJ+rtErzyieXPAFiCTzAoRmU07 dFVlBAyjHTJk2e7fi/eJYcP7KrMIwVln4ZTcYUbUABc9JmBJ7QFLOhtOVBNQDxCD OKijwYHYyAYCdM6aYkS+bPSe5iWJgz86/7h4sFd3FfiEVVeuAKWhtcruy4tq95EH DN/xXJe0vyEygHsmD8imADjq8A== -----END CERTIFICATE-----Generated at Fri Sep 25 07:00:36 2026 by rpki-client