$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json) Hash identifier: Aj/AmqAEsNivHhlB/QJqsVXhMKP7hzbRXXEhbt20Tgg= Subject key identifier: 07:8F:B7:5E:5D:4C:6C:80:EA:62:4F:E7:2D:2F:CD:F4:3A:10:26:B9 Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Certificate serial: 3594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft Manifest number: 358C Signing time: Thu 24 Sep 2026 14:36:45 +0000 Manifest this update: Thu 24 Sep 2026 14:36:45 +0000 Manifest next update: Thu 01 Oct 2026 14:36:45 +0000 Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: 0wB0blZlXVpPdtcUCMjbcPMo2QaFd3VeD6AzH575KLk=) 2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13716 (0x3594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Validity Not Before: Sep 24 14:36:45 2026 GMT Not After : Oct 1 14:36:45 2026 GMT Subject: CN=6ab5357d-b861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:88:ab:a2:b9:99:f5:72:4c:2d:d4:25:bf: 0c:81:20:93:25:99:7b:d9:6b:33:13:97:e8:bf:08: 1b:0b:2d:31:88:e8:fc:c3:ba:d3:8a:41:e0:4d:d2: 6b:9a:fd:72:01:64:25:d2:e8:53:a2:bb:93:f8:c4: c9:2d:13:60:78:77:31:fe:f0:d9:ea:44:27:b0:ef: 16:72:6b:f3:43:bd:64:bf:2d:87:33:96:b0:d9:4c: 1d:dc:c9:d8:8f:2a:c4:8d:da:2d:0c:d6:73:13:06: ab:2b:43:27:57:75:74:95:0a:ba:a3:0a:e1:46:2e: ca:a3:06:59:2a:9c:40:8d:68:0a:50:d8:5b:ac:32: a6:69:9a:42:0f:41:83:07:b4:90:6e:19:52:8b:a4: 6b:00:a0:32:7b:36:4f:c6:aa:88:81:9b:ea:b4:17: a1:0a:26:4a:af:a3:86:4f:ac:79:43:8d:38:4c:9f: c4:3e:d4:0c:2f:be:2d:93:0e:c1:e5:39:80:b1:91: 31:ce:dd:db:72:7d:90:4d:21:b7:00:83:e6:d7:ac: ff:da:eb:21:cb:f4:21:42:ad:37:d7:b1:02:dd:88: 3f:21:f1:b7:f9:79:82:65:f3:25:40:66:54:6e:69: 87:e0:c3:f6:4c:23:9a:04:b8:d5:7c:2c:7b:b0:dd: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8F:B7:5E:5D:4C:6C:80:EA:62:4F:E7:2D:2F:CD:F4:3A:10:26:B9 X509v3 Authority Key Identifier: keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:35:68:52:6d:99:55:52:c9:3c:ef:48:4c:2c:21:71:8a:66: bc:c0:77:49:e5:e0:92:68:49:ef:bb:f1:39:a5:91:43:ef:54: 28:74:78:9e:8a:dc:53:ad:84:dc:68:11:6d:e8:36:b0:af:b8: 58:f8:4c:c8:17:05:22:00:97:51:e5:3b:c7:38:fb:bf:cd:1b: 4c:83:56:09:69:cf:73:f9:19:88:25:7c:73:f8:5a:66:14:1d: 9f:e2:09:b6:d5:59:b5:62:6b:46:f3:cc:41:79:06:74:d7:c8: 78:e1:60:d3:c2:eb:90:7e:b6:6b:96:56:95:65:4d:31:58:ef: a2:6b:bc:fb:7e:76:88:68:8c:94:16:cd:d0:7c:73:de:d8:67: 84:a6:38:8e:3d:ae:31:31:e6:87:02:f9:8d:e7:52:7f:05:4f: 55:21:68:54:cd:a6:dd:bb:47:14:2a:f6:f1:ee:fb:6c:41:53: fb:42:5b:7c:78:19:09:74:3d:a6:30:fc:d4:79:01:a7:bb:dd: fe:2a:a4:1f:af:aa:d2:9a:d5:7e:39:ac:18:65:5a:41:60:3b: 6e:d8:d4:c2:6f:49:b8:04:de:ca:71:87:9e:f9:83:2d:c2:0b: 5d:eb:dc:3f:90:3e:bf:dc:a9:2d:97:d9:52:d9:80:61:ce:1b: 55:42:04:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC ODQxNEU4MzgwHhcNMjYwOTI0MTQzNjQ1WhcNMjYxMDAxMTQzNjQ1WjAYMRYwFAYD VQQDEw02YWI1MzU3ZC1iODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH+Iq6K5mfVyTC3UJb8MgSCTJZl72WszE5fovwgbCy0xiOj8w7rTikHgTdJr mv1yAWQl0uhToruT+MTJLRNgeHcx/vDZ6kQnsO8WcmvzQ71kvy2HM5aw2Uwd3MnY jyrEjdotDNZzEwarK0MnV3V0lQq6owrhRi7KowZZKpxAjWgKUNhbrDKmaZpCD0GD B7SQbhlSi6RrAKAyezZPxqqIgZvqtBehCiZKr6OGT6x5Q404TJ/EPtQML74tkw7B 5TmAsZExzt3bcn2QTSG3AIPm16z/2ushy/QhQq0317EC3Yg/IfG3+XmCZfMlQGZU bmmH4MP2TCOaBLjVfCx7sN1A0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAePt15d TGyA6mJP5y0vzfQ6ECa5MB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2 RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2 YmdIbXZNbDIzQXk0UVU2RGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUjVoUm2ZVVLJPO9ITCwhcYpmvMB3SeXgkmhJ77vxOaWRQ+9UKHR4norcU62E 3GgRbeg2sK+4WPhMyBcFIgCXUeU7xzj7v80bTINWCWnPc/kZiCV8c/haZhQdn+IJ ttVZtWJrRvPMQXkGdNfIeOFg08LrkH62a5ZWlWVNMVjvomu8+352iGiMlBbN0Hxz 3thnhKY4jj2uMTHmhwL5jedSfwVPVSFoVM2m3btHFCr28e77bEFT+0JbfHgZCXQ9 pjD81HkBp7vd/iqkH6+q0prVfjmsGGVaQWA7btjUwm9JuATeynGHnvmDLcILXevc P5A+v9ypLZfZUtmAYc4bVUIE/Q== -----END CERTIFICATE-----Generated at Fri Sep 25 23:27:51 2026 by rpki-client