$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft File: lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json) Hash identifier: h5CChsiaqGi5mKopVx3ordlXdCwPmma8lb3XJgv9p98= Subject key identifier: FE:21:B0:DB:0B:7C:F0:A5:AF:01:50:D4:F2:2F:38:B0:E3:3C:06:7E Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft Manifest number: 067A Signing time: Tue 22 Sep 2026 22:17:35 +0000 Manifest this update: Tue 22 Sep 2026 22:17:34 +0000 Manifest next update: Tue 29 Sep 2026 22:17:34 +0000 Files and hashes: 1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: wkqApeW7ceGV5od2m8aCeN/JiyYxAV5kms6Qql0x5gg=) 2: 368F5308A27311EFA8731822C4F9AE02.roa (hash: nHjk6ycOjw5Wpke07bx/YMXOlW9tR7e2S+Z0rd77qg0=) 3: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: 4GfE/iu3zUpbZgXj55GFVV4bLAMptic0csSAGEfinAc=) 4: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: q1CDVIUDzbHZ2EEoYDXk7ZVUl9f4fiBWEYZ1wyR1YGM=) 5: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: isBZNB2qni+n28qvlewtSZ2yvgYjLDrr3WrGtGkQ8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Sep 22 22:17:34 2026 GMT Not After : Sep 29 22:17:34 2026 GMT Subject: CN=6ab2fe7e-aa2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:eb:f1:d6:02:7c:08:82:09:07:e1:88:83: 10:f1:36:2d:cf:0e:c9:1e:c6:fd:46:9c:e6:39:59: ff:72:f1:5f:3c:a0:ed:cd:6b:d3:54:30:c7:60:49: b9:ba:0f:1e:86:7b:89:89:a1:dc:8c:3f:c5:b5:b5: 01:58:ce:4b:3a:75:7e:36:67:c8:e3:43:3f:d1:99: 70:64:c2:a3:0f:ee:33:76:81:91:8b:28:74:ab:5b: 24:64:06:41:8c:2b:4f:14:0d:a8:06:a6:14:3f:74: 3a:1a:b7:62:5d:92:90:55:d5:d1:ac:f9:08:a2:be: 3b:76:15:6f:b8:f0:e0:8f:5b:9c:12:ea:2a:c2:19: 13:a9:29:7c:5f:9d:11:8b:dd:a8:59:02:70:ef:f8: 64:68:a2:07:f1:c9:65:93:c4:e4:6f:af:b8:8b:a8: ce:12:ac:05:c3:d0:c4:3b:2c:81:03:80:ce:64:e6: 6e:e6:00:d0:8f:35:47:e7:5a:dc:1f:f7:40:e1:06: c4:34:2a:e1:a2:d1:72:4f:10:97:5e:cc:bc:bd:de: 1b:78:6b:de:ba:e8:23:a8:4d:29:57:86:a3:97:6f: 79:d0:0b:f2:ab:40:cc:b9:45:c0:43:ca:98:04:50: ed:42:8d:b0:c3:af:91:a2:2c:b3:2e:f5:94:97:9e: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:B0:DB:0B:7C:F0:A5:AF:01:50:D4:F2:2F:38:B0:E3:3C:06:7E X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:1f:f8:7d:4c:76:6e:ec:9c:c7:3e:09:3f:b7:01:fd:96:e2: 98:c7:ce:7e:8d:38:23:88:23:84:0e:c1:78:62:c4:6e:95:64: 09:26:52:84:83:8a:29:a6:68:9c:9c:2f:eb:3e:7e:c3:67:58: 48:26:1a:07:1f:55:31:37:b9:f4:54:23:ce:1d:f2:77:f3:1f: 00:b5:8b:76:d6:c0:8c:af:6c:cf:f3:ae:aa:36:5d:f0:3f:cd: d3:b7:be:0c:e0:ff:72:6d:1f:65:01:fa:51:ab:66:bc:21:2b: 50:33:ee:9a:a2:9a:89:8d:11:d4:39:16:9f:cb:b4:64:02:b7: 92:1c:37:bf:bd:fd:ed:d9:6c:e6:74:ef:0e:ba:99:c2:81:70: 51:4a:38:32:dc:b8:33:95:86:84:2e:be:68:ba:96:3e:22:d7: f5:4b:ba:c8:fc:44:4e:18:9e:e3:17:33:fd:a4:20:4e:29:ad: 15:8d:cf:f1:60:96:26:40:ff:1f:74:79:82:31:6d:ef:ae:67: a6:83:b7:c8:fb:1a:76:40:cc:07:0e:f1:5c:ab:64:19:c4:eb: 31:d3:fc:43:76:9f:98:ac:88:d5:4f:06:25:87:89:20:a7:89: 58:37:90:97:05:e4:34:56:23:92:ab:71:2b:9d:64:94:21:6d: 6b:cc:0f:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjYwOTIyMjIxNzM0WhcNMjYwOTI5MjIxNzM0WjAYMRYwFAYD VQQDEw02YWIyZmU3ZS1hYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGHr8dYCfAiCCQfhiIMQ8TYtzw7JHsb9RpzmOVn/cvFfPKDtzWvTVDDHYEm5 ug8ehnuJiaHcjD/FtbUBWM5LOnV+NmfI40M/0ZlwZMKjD+4zdoGRiyh0q1skZAZB jCtPFA2oBqYUP3Q6GrdiXZKQVdXRrPkIor47dhVvuPDgj1ucEuoqwhkTqSl8X50R i92oWQJw7/hkaKIH8cllk8Tkb6+4i6jOEqwFw9DEOyyBA4DOZOZu5gDQjzVH51rc H/dA4QbENCrhotFyTxCXXsy8vd4beGveuugjqE0pV4ajl2950Avyq0DMuUXAQ8qY BFDtQo2ww6+RoiyzLvWUl54hewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4hsNsL fPClrwFQ1PIvOLDjPAZ+MB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ cDRranZtWm40VTlzVER0SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFB/4fUx2buycxz4JP7cB/ZbimMfOfo04I4gjhA7BeGLEbpVkCSZShIOKKaZo nJwv6z5+w2dYSCYaBx9VMTe59FQjzh3yd/MfALWLdtbAjK9sz/OuqjZd8D/N07e+ DOD/cm0fZQH6UatmvCErUDPumqKaiY0R1DkWn8u0ZAK3khw3v7397dls5nTvDrqZ woFwUUo4Mty4M5WGhC6+aLqWPiLX9Uu6yPxEThie4xcz/aQgTimtFY3P8WCWJkD/ H3R5gjFt765npoO3yPsadkDMBw7xXKtkGcTrMdP8Q3afmKyI1U8GJYeJIKeJWDeQ lwXkNFYjkqtxK51klCFta8wPZQ== -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:18 2026 by rpki-client