$ rpki-client -vvvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: WYrvsuzlkX4IOWVnfvM8SsMtL4C3hC1UwXq0bOkTQYE= Subject key identifier: AD:2F:FE:7A:49:D7:09:CA:96:92:C8:A9:88:14:AB:FB:57:06:61:98 Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 039E Signing time: Fri 25 Sep 2026 00:29:43 +0000 Manifest this update: Fri 25 Sep 2026 00:29:43 +0000 Manifest next update: Fri 02 Oct 2026 00:29:43 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: 6ZUByQXIgkdLQ8wOWxhWPVSIWSUoOAVzTU4RIlNcj/g=) 2: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: qwPyRzKdt7F2prPIJu2RV96XdN340vghb2ALVy3uoMo=) 3: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: kbj/qZCCFFcNhZw3sqrJDaXIf5h+0nQW4F9uuXPmNWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: Sep 25 00:29:43 2026 GMT Not After : Oct 2 00:29:43 2026 GMT Subject: CN=6ab5c077-502a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:e7:94:85:6f:55:de:51:f2:fa:45:56:e9: 9d:59:1d:e5:b2:f3:2b:be:23:da:65:33:8e:59:98: 55:fe:6d:df:9f:61:f1:b1:41:f5:68:dd:df:9b:5d: c0:d6:3c:af:8d:5a:d9:19:f6:eb:c7:f6:6e:1b:a3: c9:d3:20:eb:9d:d6:4b:1c:69:c4:ab:3c:c0:a9:be: ee:22:cd:c5:6b:9f:c3:04:b8:e6:c8:ef:fe:1e:ad: 3b:79:fc:67:cc:f2:cd:8c:89:a2:5f:14:16:f9:ee: 1e:92:8b:d8:02:a9:08:c0:66:ec:5e:c9:2d:7b:7c: 6c:39:06:71:f4:64:cb:1c:24:7e:f6:7f:ac:26:c7: a3:c1:15:20:f8:b9:29:77:9c:5d:82:19:64:24:dd: 6f:a8:ab:36:9f:c0:d4:75:86:38:f0:ee:df:0a:7d: cb:ea:87:35:cc:57:1c:6c:7e:40:16:90:3d:d9:04: 41:ab:2a:3f:be:1e:97:09:52:f8:6a:55:38:c9:79: a2:06:c0:66:0c:f0:fc:14:5c:a5:65:8a:96:67:14: e1:01:23:9b:fd:cd:6a:17:dd:cf:61:7f:d2:3c:cd: ed:01:47:cd:d0:c2:b1:6a:d5:d7:b5:b5:80:93:ed: 85:fc:7c:a0:9a:ef:0c:e0:c0:a8:20:86:db:8b:ee: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2F:FE:7A:49:D7:09:CA:96:92:C8:A9:88:14:AB:FB:57:06:61:98 X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:1d:a4:24:bc:18:a9:70:67:54:bd:35:1a:bb:a5:c7:f5: e1:b5:6c:63:2d:db:0c:6f:be:d5:09:44:6a:0e:89:dc:e4:95: db:bc:ff:57:c6:3a:0c:bd:38:d3:db:6f:b2:65:c4:3b:91:f0: 15:7b:8b:cb:db:28:ef:90:e5:c1:da:f1:d3:17:8c:3a:af:7c: 83:a5:41:d7:9b:b0:64:73:59:9a:a2:10:9e:db:b1:18:ae:ff: 0e:af:f5:e0:85:f3:65:d9:38:1a:0f:11:90:5d:3f:c5:6c:37: be:ee:86:66:ec:b0:79:f0:c7:26:18:04:57:77:b5:de:f9:7a: f3:70:0d:fc:aa:41:4b:90:94:ee:5f:09:8a:94:cf:91:84:6a: 42:b3:ed:f7:73:d1:63:c4:34:01:ed:fe:79:f5:0a:fd:a0:0a: 97:bd:3d:65:02:ce:3c:f3:8d:df:ac:e6:81:9c:78:bc:76:5c: dc:c9:f0:3d:33:6e:33:fc:20:82:0c:c9:ad:3d:27:6f:9f:6e: 4e:0c:74:7b:31:43:12:f1:61:8d:32:f7:89:f3:e5:32:85:a7: 3b:b2:c8:82:29:c4:1c:c5:b7:6d:53:7c:72:d9:15:2d:84:ca: 12:86:6b:9e:88:57:84:ba:ff:55:db:84:d1:54:eb:1e:b8:df: eb:bb:60:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjYwOTI1MDAyOTQzWhcNMjYxMDAyMDAyOTQzWjAYMRYwFAYD VQQDEw02YWI1YzA3Ny01MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp/nlIVvVd5R8vpFVumdWR3lsvMrviPaZTOOWZhV/m3fn2HxsUH1aN3fm13A 1jyvjVrZGfbrx/ZuG6PJ0yDrndZLHGnEqzzAqb7uIs3Fa5/DBLjmyO/+Hq07efxn zPLNjImiXxQW+e4ekovYAqkIwGbsXskte3xsOQZx9GTLHCR+9n+sJsejwRUg+Lkp d5xdghlkJN1vqKs2n8DUdYY48O7fCn3L6oc1zFccbH5AFpA92QRBqyo/vh6XCVL4 alU4yXmiBsBmDPD8FFylZYqWZxThASOb/c1qF93PYX/SPM3tAUfN0MKxatXXtbWA k+2F/Hygmu8M4MCoIIbbi+738wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0v/npJ 1wnKlpLIqYgUq/tXBmGYMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkvwdpCS8GKlwZ1S9NRq7pcf14bVsYy3bDG++1QlEag6J3OSV27z/V8Y6DL04 09tvsmXEO5HwFXuLy9so75Dlwdrx0xeMOq98g6VB15uwZHNZmqIQntuxGK7/Dq/1 4IXzZdk4Gg8RkF0/xWw3vu6GZuywefDHJhgEV3e13vl683AN/KpBS5CU7l8JipTP kYRqQrPt93PRY8Q0Ae3+efUK/aAKl709ZQLOPPON36zmgZx4vHZc3MnwPTNuM/wg ggzJrT0nb59uTgx0ezFDEvFhjTL3ifPlMoWnO7LIginEHMW3bVN8ctkVLYTKEoZr nohXhLr/VduE0VTrHrjf67tg2Q== -----END CERTIFICATE-----Generated at Fri Sep 25 23:12:10 2026 by rpki-client