$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft File: lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft (raw, json) Hash identifier: 4cUsUP10cTuLAqxkPI5Zdmmb5vqxIfYBxl/Cy933Lbc= Subject key identifier: A2:E4:74:63:45:F2:F7:02:10:5E:E1:0C:E5:EE:CC:30:F9:48:4C:CD Authority key identifier: 94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 Certificate issuer: /CN=A9185308/serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft Manifest number: 41 Signing time: Wed 23 Sep 2026 08:14:17 +0000 Manifest this update: Wed 23 Sep 2026 08:14:17 +0000 Manifest next update: Wed 30 Sep 2026 08:14:17 +0000 Files and hashes: 1: lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl (hash: XvA4a4zvlnVS5BJgARkrw1sRSJTdh2HN0MTseHxV89E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185308, serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Validity Not Before: Sep 23 08:14:17 2026 GMT Not After : Sep 30 08:14:17 2026 GMT Subject: CN=6ab38a59-fd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:a4:d4:20:1a:80:9a:af:19:ab:47:a4:69: 94:cf:73:e1:95:3e:35:3d:92:68:ae:c0:ac:a7:14: 5f:52:9c:33:0b:9d:49:f3:08:b8:15:1e:23:de:53: 0a:1f:01:7c:d0:ef:6a:2a:b5:0b:78:38:72:0c:20: 62:9d:06:6d:4a:b4:e8:0b:83:5e:77:f6:7e:0e:7f: 83:1f:e3:56:84:9a:7a:99:51:10:8f:dc:ac:79:1d: 4e:3b:db:42:3f:d8:a9:2e:98:62:3f:6b:cc:1a:72: 1d:af:ab:a5:e2:5e:cb:03:b9:4e:8f:a7:11:ef:34: 1f:7f:0b:d8:32:bc:d0:dc:7d:6f:fd:dd:5b:62:74: 7f:41:6b:da:91:a2:17:a5:0f:9d:46:e9:29:03:b6: 63:1e:52:6c:8d:49:5f:b6:bb:fe:02:77:9b:a0:be: d0:0d:1b:c9:72:42:06:1e:09:70:a4:46:6d:09:13: 3c:2d:e1:1f:aa:09:c8:1a:54:15:2a:af:0e:18:ed: 3e:0f:44:44:76:30:98:33:88:8d:0a:07:0d:3c:bd: 49:9f:df:72:7f:8d:df:eb:6c:72:76:9c:bd:27:cf: 58:e0:3d:f7:f2:cd:b5:cc:4e:79:13:e6:60:f1:b3: 32:1a:46:24:44:60:20:16:22:a4:ad:66:4e:bf:a4: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:74:63:45:F2:F7:02:10:5E:E1:0C:E5:EE:CC:30:F9:48:4C:CD X509v3 Authority Key Identifier: keyid:94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fc:bd:d9:71:77:cc:06:de:3f:18:42:e8:2d:a1:44:ff:74: 7b:90:0f:a1:46:d5:43:92:d9:a2:f7:de:6c:11:77:a8:65:f2: 3f:93:4a:d4:44:aa:14:63:7d:b3:3b:12:a9:ea:96:ef:63:14: 0f:a6:62:0f:cb:f7:b4:77:42:9a:05:4d:58:7a:85:00:b4:03: 21:40:1c:3a:01:d7:95:05:97:e2:81:fb:31:cd:ec:0c:6a:49: 34:4f:57:b6:e5:8b:2e:22:f2:8d:09:a1:36:66:d0:75:5d:f4: 73:9f:5f:40:38:30:02:31:37:4a:f1:36:60:cf:39:af:35:be: 53:30:1a:0f:ec:05:db:91:3f:2f:17:bf:db:d2:3d:58:85:b0: e3:d6:c0:6f:a6:2c:f3:30:cc:60:3a:08:fe:64:32:1d:1b:40: b2:82:3d:47:2b:86:b7:b0:63:bd:c2:f2:fb:16:8c:79:68:bc: 7d:1e:46:c9:22:d8:8e:9a:29:47:77:dc:eb:76:df:b8:a9:d9: 8b:dc:6d:59:ff:b4:e4:98:a3:a3:88:68:1a:14:ab:ca:8d:33: 94:f1:41:de:96:60:1d:8a:8c:69:09:db:ef:33:69:7a:64:c2: 3e:09:62:59:85:dd:f6:41:ba:13:a1:0f:dd:65:c2:97:80:a6: bd:d0:64:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTMwODExMC8GA1UEBRMoOTQwMTc1NzIxRTcwQjYyMDhDNUNBMDI5MzhCMzBFMDQ1 MUI5OUM0NDAeFw0yNjA5MjMwODE0MTdaFw0yNjA5MzAwODE0MTdaMBgxFjAUBgNV BAMTDTZhYjM4YTU5LWZkNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPmaTUIBqAmq8Zq0ekaZTPc+GVPjU9kmiuwKynFF9SnDMLnUnzCLgVHiPeUwof AXzQ72oqtQt4OHIMIGKdBm1KtOgLg1539n4Of4Mf41aEmnqZURCP3Kx5HU4720I/ 2KkumGI/a8wach2vq6XiXssDuU6PpxHvNB9/C9gyvNDcfW/93VtidH9Ba9qRohel D51G6SkDtmMeUmyNSV+2u/4Cd5ugvtANG8lyQgYeCXCkRm0JEzwt4R+qCcgaVBUq rw4Y7T4PRER2MJgziI0KBw08vUmf33J/jd/rbHJ2nL0nz1jgPffyzbXMTnkT5mDx szIaRiREYCAWIqStZk6/pK3RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUouR0Y0Xy 9wIQXuEM5e7MMPlITM0wHwYDVR0jBBgwFoAUlAF1ch5wtiCMXKApOLMOBFG5nEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MzA4L0VCQ0REMjc0NTU3 QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlDTVhLQXBPTE1PQkZHNW5F US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbEFGMWNoNXd0aUNNWEtBcE9MTU9CRkc1bkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MzA4L0VCQ0REMjc0NTU3QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlD TVhLQXBPTE1PQkZHNW5FUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBI/L3ZcXfMBt4/GELoLaFE/3R7kA+hRtVDktmi995sEXeoZfI/k0rURKoUY32z OxKp6pbvYxQPpmIPy/e0d0KaBU1YeoUAtAMhQBw6AdeVBZfigfsxzewMakk0T1e2 5YsuIvKNCaE2ZtB1XfRzn19AODACMTdK8TZgzzmvNb5TMBoP7AXbkT8vF7/b0j1Y hbDj1sBvpizzMMxgOgj+ZDIdG0Cygj1HK4a3sGO9wvL7Fox5aLx9HkbJItiOmilH d9zrdt+4qdmL3G1Z/7TkmKOjiGgaFKvKjTOU8UHelmAdioxpCdvvM2l6ZMI+CWJZ hd32QboToQ/dZcKXgKa90GQD -----END CERTIFICATE-----Generated at Thu Sep 24 19:06:07 2026 by rpki-client