$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: jBh+YhqkfRL2Zu/7819ZQnC0rLh7wwnbY/o+mnMWsXo= Subject key identifier: 20:AE:CA:FF:51:DB:3E:09:3F:A3:16:77:8D:85:AB:95:33:54:B9:02 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 03AB Signing time: Wed 23 Sep 2026 00:20:10 +0000 Manifest this update: Wed 23 Sep 2026 00:20:09 +0000 Manifest next update: Wed 30 Sep 2026 00:20:09 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: dfrRAb0BJhb/sV1ghnr9khR5YSvD7p5txHfSBqSrFMU=) 2: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=) 3: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=) 4: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=) 5: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=) 6: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Sep 23 00:20:09 2026 GMT Not After : Sep 30 00:20:09 2026 GMT Subject: CN=6ab31b39-71fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:c4:5e:7e:31:b3:36:35:2a:ec:7a:02:5e: 71:06:eb:f5:fa:a7:d8:4d:a1:49:f0:db:f9:1e:b5: 45:1f:b7:94:86:6d:83:db:15:90:5f:f6:64:0d:e9: 57:67:fd:37:11:b8:e1:6f:9b:02:e3:90:91:9a:23: ab:20:53:aa:ed:ed:51:c5:84:8f:07:af:32:ea:c2: 7c:66:0f:81:e6:c9:c8:1a:db:67:43:bc:c7:12:b7: 77:1f:77:a5:06:50:ba:b6:d0:15:7f:97:e8:79:53: c5:66:6f:39:af:cb:e2:34:85:db:c0:da:f9:de:2d: b1:8b:b5:89:ee:73:1e:ef:2c:31:a2:0d:56:e8:98: d3:67:f3:cb:b0:38:bb:ed:25:bc:58:ab:89:44:e4: 03:e9:17:a8:4d:ad:01:e9:8b:1c:ec:fd:ad:42:54: bc:33:4e:39:73:56:e3:3f:b9:f9:09:f3:39:0d:9a: 49:49:5e:9f:1c:ba:2c:0d:74:2d:9c:e0:04:83:19: 14:b4:07:89:3e:79:64:44:37:db:94:27:37:bb:18: 27:54:7a:0f:cf:94:ab:ea:73:f4:ed:54:00:fb:3d: ad:1e:4a:f8:01:ad:b4:99:35:00:db:54:94:61:a5: 0a:72:a2:ba:21:57:cb:5d:72:b1:6b:0e:67:1e:0f: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:CA:FF:51:DB:3E:09:3F:A3:16:77:8D:85:AB:95:33:54:B9:02 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d2:0a:84:c0:57:9d:85:7a:fb:00:20:73:c5:70:e2:ae:dd: d0:f6:b9:86:ed:d6:b5:6a:e7:02:c3:49:00:57:fe:cd:ec:cb: 83:7b:f5:ad:7a:7d:12:0f:62:de:6e:6b:d7:04:04:9b:87:24: 15:83:2f:d5:d5:f0:9d:3e:ef:2e:19:67:b4:f9:4b:96:3c:ff: 50:81:e9:c7:31:39:fd:61:42:09:b9:6b:1b:de:88:10:a4:13: 61:39:27:09:8c:a5:be:61:4e:c7:8b:d0:49:df:3b:cc:f6:27: 2f:1f:d1:f7:0d:82:71:03:24:6a:45:79:ee:83:b4:c2:60:2b: 41:60:88:06:a0:15:b5:59:50:24:86:f3:f2:be:4f:4a:68:53: f0:6f:4e:c7:53:75:c5:27:3c:21:19:01:b0:47:b7:31:67:18: f1:ac:df:ff:97:82:c7:da:00:2a:b7:30:bd:c2:f1:b0:1a:ce: 4b:c2:71:f2:94:74:97:e5:72:8b:18:7b:81:ec:c6:22:de:16: 68:f4:1a:7a:8c:bf:ef:26:b8:58:27:9c:d6:31:2e:63:64:1f: 2b:7e:62:75:3f:b5:58:e5:9b:f0:f7:a8:d3:57:68:13:54:ef: d9:2d:14:d8:10:da:08:a6:2d:d5:66:ac:16:34:c3:6b:87:57: 30:9e:1a:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwOTIzMDAyMDA5WhcNMjYwOTMwMDAyMDA5WjAYMRYwFAYD VQQDEw02YWIzMWIzOS03MWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS3EXn4xszY1Kux6Al5xBuv1+qfYTaFJ8Nv5HrVFH7eUhm2D2xWQX/ZkDelX Z/03Ebjhb5sC45CRmiOrIFOq7e1RxYSPB68y6sJ8Zg+B5snIGttnQ7zHErd3H3el BlC6ttAVf5foeVPFZm85r8viNIXbwNr53i2xi7WJ7nMe7ywxog1W6JjTZ/PLsDi7 7SW8WKuJROQD6ReoTa0B6Ysc7P2tQlS8M045c1bjP7n5CfM5DZpJSV6fHLosDXQt nOAEgxkUtAeJPnlkRDfblCc3uxgnVHoPz5Sr6nP07VQA+z2tHkr4Aa20mTUA21SU YaUKcqK6IVfLXXKxaw5nHg8yqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCuyv9R 2z4JP6MWd42Fq5UzVLkCMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiNIKhMBXnYV6+wAgc8Vw4q7d0Pa5hu3WtWrnAsNJAFf+zezLg3v1rXp9Eg9i 3m5r1wQEm4ckFYMv1dXwnT7vLhlntPlLljz/UIHpxzE5/WFCCblrG96IEKQTYTkn CYylvmFOx4vQSd87zPYnLx/R9w2CcQMkakV57oO0wmArQWCIBqAVtVlQJIbz8r5P SmhT8G9Ox1N1xSc8IRkBsEe3MWcY8azf/5eCx9oAKrcwvcLxsBrOS8Jx8pR0l+Vy ixh7gezGIt4WaPQaeoy/7ya4WCec1jEuY2QfK35idT+1WOWb8Peo01doE1Tv2S0U 2BDaCKYt1WasFjTDa4dXMJ4awA== -----END CERTIFICATE-----Generated at Thu Sep 24 15:17:26 2026 by rpki-client