$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: xN0TNyi86nDqoizbcyS/+J8ijreWFne6SByUY1kCfKM= Subject key identifier: 4D:22:1E:A9:97:87:77:15:19:A2:9B:53:FC:05:98:85:65:81:52:56 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 68 Signing time: Mon 05 Oct 2026 08:32:49 +0000 Manifest this update: Mon 05 Oct 2026 08:32:49 +0000 Manifest next update: Mon 12 Oct 2026 08:32:49 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: UcVOe6cbVoTxRD88K4YLDfUg/FsYQWt7/vXoFwLb6e8=) 2: 0A1C4E5C53AC11F19DB1C139B4833773.roa (hash: u+mOL6p14fYJ42VLhe7ZTS6oNzz6YUYqHu2z8DUWqD4=) 3: 3987426E53AC11F1A96C853AB4833773.roa (hash: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Oct 5 08:32:49 2026 GMT Not After : Oct 12 08:32:49 2026 GMT Subject: CN=6ac360b1-9b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:78:a7:66:25:c4:25:43:ac:37:7c:87:6e: 18:c6:9e:ba:40:73:f0:86:7d:4c:9f:47:b2:4c:cd: 5e:2f:0b:2f:2c:bb:35:58:f0:ca:a1:9a:a9:dd:49: d2:9c:a5:d5:5d:8f:c9:13:dc:e4:0f:74:63:ff:44: 2a:66:36:1d:3d:9c:f2:ce:70:1b:63:92:3a:ac:c1: 76:63:a8:db:98:28:31:d0:66:ac:a3:e4:a2:2d:05: a6:06:00:a3:40:db:f0:98:04:1e:b3:24:cc:71:e7: 3b:76:f3:b1:22:5e:0f:18:f9:0f:fd:09:8d:16:92: 9e:4d:6a:87:b6:fd:44:d2:0c:de:54:bc:ba:a2:77: 30:00:ce:23:76:3d:73:d7:2f:1e:42:9a:79:56:bd: fe:3d:19:ab:03:18:02:c6:92:71:55:3d:9a:8b:f1: 36:42:91:8a:a2:0d:61:cf:12:ed:12:47:9d:40:16: 44:fc:7d:75:e5:43:a6:21:7d:98:8b:0f:4e:0b:37: e5:52:d6:99:02:a6:8e:c7:e4:0e:07:e2:58:9c:da: db:18:2a:8b:cd:85:d9:d4:1c:ca:da:05:63:34:ff: e8:4b:55:a7:8c:26:a1:35:33:6d:1b:8f:af:55:86: 2d:7f:13:e8:fe:af:35:c4:4c:4f:a2:13:b3:04:b6: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:1E:A9:97:87:77:15:19:A2:9B:53:FC:05:98:85:65:81:52:56 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b6:a4:1f:d3:7f:13:c8:69:32:b4:9e:7f:bb:a1:f5:25:94: a3:97:26:1a:5f:06:90:c4:de:55:f3:65:91:12:cf:79:ef:d1: 7f:bd:ab:53:f0:7d:cf:ef:84:70:9a:58:0c:4d:b9:b1:b9:c6: 23:c0:a4:c0:4e:18:9f:a7:05:d8:98:48:38:3a:20:33:85:78: c9:6b:52:dc:50:72:84:62:43:a2:e7:c2:26:f1:9e:fe:e6:65: f5:2e:93:f2:09:fa:23:2b:a3:62:0a:12:eb:0a:c0:66:89:65: 96:d5:75:29:ae:f0:a8:2e:3f:af:e2:2c:eb:32:00:fd:b1:4e: d7:79:f1:ff:ff:c9:79:d4:24:8d:cf:a2:d4:1b:c9:45:02:36: f5:2a:ca:49:0a:de:72:26:7c:d3:31:b2:ef:23:b2:b2:d8:54: 6b:d1:7c:a3:74:6e:c2:f1:bc:51:ec:8c:6d:fe:37:da:d0:09: 51:18:12:1d:33:3e:6b:26:53:95:60:b5:b6:02:1b:c6:16:e5: 5f:ab:7c:81:77:cf:8d:f5:31:69:32:50:f4:46:c9:46:23:c4: d1:02:6f:89:27:78:77:88:11:b8:9f:7b:cc:37:d6:f5:66:82: 16:54:93:51:ff:b1:25:a9:8d:e7:48:ae:c9:c2:a9:42:b6:26: da:c5:72:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjEwMDUwODMyNDlaFw0yNjEwMTIwODMyNDlaMBgxFjAUBgNV BAMTDTZhYzM2MGIxLTliM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpCHinZiXEJUOsN3yHbhjGnrpAc/CGfUyfR7JMzV4vCy8suzVY8MqhmqndSdKc pdVdj8kT3OQPdGP/RCpmNh09nPLOcBtjkjqswXZjqNuYKDHQZqyj5KItBaYGAKNA 2/CYBB6zJMxx5zt287EiXg8Y+Q/9CY0Wkp5Naoe2/UTSDN5UvLqidzAAziN2PXPX Lx5CmnlWvf49GasDGALGknFVPZqL8TZCkYqiDWHPEu0SR51AFkT8fXXlQ6YhfZiL D04LN+VS1pkCpo7H5A4H4lic2tsYKovNhdnUHMraBWM0/+hLVaeMJqE1M20bj69V hi1/E+j+rzXETE+iE7MEtoltAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTSIeqZeH dxUZoptT/AWYhWWBUlYwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwtqQf038TyGkytJ5/u6H1JZSjlyYaXwaQxN5V82WREs9579F/vatT8H3P74Rw mlgMTbmxucYjwKTAThifpwXYmEg4OiAzhXjJa1LcUHKEYkOi58Im8Z7+5mX1LpPy CfojK6NiChLrCsBmiWWW1XUprvCoLj+v4izrMgD9sU7XefH//8l51CSNz6LUG8lF Ajb1KspJCt5yJnzTMbLvI7Ky2FRr0XyjdG7C8bxR7Ixt/jfa0AlRGBIdMz5rJlOV YLW2AhvGFuVfq3yBd8+N9TFpMlD0RslGI8TRAm+JJ3h3iBG4n3vMN9b1ZoIWVJNR /7ElqY3nSK7JwqlCtibaxXKS -----END CERTIFICATE-----Generated at Tue Oct 6 21:16:34 2026 by rpki-client