$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: kbt31//bnEOE81lXvIu8ds8zQvt7TivkWxS3UpcCAPg= Subject key identifier: C5:30:BB:7C:44:65:F7:0E:78:69:78:BC:DD:93:41:3B:9C:A4:59:7A Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 08F2 Signing time: Tue 22 Sep 2026 20:10:00 +0000 Manifest this update: Tue 22 Sep 2026 20:10:00 +0000 Manifest next update: Tue 29 Sep 2026 20:10:00 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: HAP9fsMsNAsNThkngcltF0fFNUe65cWzCLrj+qAROBU=) 2: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=) 3: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Sep 22 20:10:00 2026 GMT Not After : Sep 29 20:10:00 2026 GMT Subject: CN=6ab2e098-404f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:e7:2a:16:32:2f:4b:4e:74:85:d2:3c:a8: 0d:62:b7:2f:26:34:cd:e4:cd:e5:15:ac:0a:b3:35: 58:4e:4d:f5:39:e7:cd:6f:10:b8:f3:9e:cd:67:a8: 37:cd:b2:b9:76:bd:60:c1:55:e3:f4:7f:75:91:09: 02:20:c4:9f:08:72:76:d2:48:21:75:79:ae:e5:a1: 90:e7:dd:d9:82:27:74:3b:dc:3d:a3:a3:b7:66:e1: 76:b0:4d:8e:ca:cf:bd:e5:70:ad:01:ae:56:ef:60: 61:14:24:02:ce:a2:69:ba:fc:aa:98:75:75:f7:dd: b8:43:2c:93:47:25:d0:e7:3d:d6:64:48:4a:c5:15: a1:a0:2c:c6:71:6a:7f:e8:29:80:8b:cb:35:d7:f5: 43:3c:62:ae:03:56:ce:c5:79:a0:fe:45:10:92:c6: e3:e9:0e:dd:55:80:37:d6:cd:1a:81:9b:c1:6e:3f: f3:66:23:37:b0:77:b4:71:5a:19:1a:ec:29:b4:db: 49:0c:cb:d8:37:32:eb:e9:ac:05:15:e9:7a:0e:88: 8b:38:1d:7f:32:7a:87:27:de:24:a1:ab:2a:65:9c: b2:17:6b:12:0d:50:80:a5:8e:15:cf:41:6f:ef:5f: 49:12:bb:83:f4:23:a2:75:71:3d:08:16:81:e4:a5: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:30:BB:7C:44:65:F7:0E:78:69:78:BC:DD:93:41:3B:9C:A4:59:7A X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:69:36:9f:41:2c:cc:79:57:3c:18:31:d0:19:67:9d:f8:ff: 9f:6f:a8:94:01:e7:18:8c:83:31:20:e4:3a:0b:a1:f6:de:9d: 3f:77:7b:0e:18:29:c5:b1:a8:8c:ce:60:5e:84:0f:28:1f:ba: 55:0f:1d:03:17:c6:ec:d5:7e:f4:52:4a:cd:93:8a:58:9b:3c: 15:7e:19:d1:f9:a9:47:6e:e4:0b:01:be:56:ac:fa:e0:0b:df: 17:a1:3f:af:c8:69:39:de:63:82:7e:f8:22:78:bf:38:16:1c: 39:47:9a:8f:9e:c5:17:1a:1a:1d:ef:43:ac:70:18:74:41:84: 07:51:0d:35:cd:58:7a:e5:bf:55:15:c6:ea:29:4b:99:55:29: 6c:87:95:ef:05:e9:c7:2a:c3:ad:81:07:c4:e8:53:e9:ad:cd: b0:92:07:e5:01:a1:19:73:e9:b5:d5:6d:d0:33:3e:ba:da:b9: 39:73:1a:0b:73:14:08:e1:a6:f3:41:99:37:cb:bf:81:12:0c: 6a:2e:1a:45:03:3d:3d:67:83:14:a5:1a:43:7e:c1:84:27:cb: 13:69:18:ac:66:43:be:40:7f:f0:68:4e:ba:fa:6c:19:58:99: 0c:cc:db:e0:3d:59:41:da:5c:81:98:c0:4a:eb:ae:ef:22:72: bb:56:28:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwOTIyMjAxMDAwWhcNMjYwOTI5MjAxMDAwWjAYMRYwFAYD VQQDEw02YWIyZTA5OC00MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ivnKhYyL0tOdIXSPKgNYrcvJjTN5M3lFawKszVYTk31OefNbxC4857NZ6g3 zbK5dr1gwVXj9H91kQkCIMSfCHJ20kghdXmu5aGQ593Zgid0O9w9o6O3ZuF2sE2O ys+95XCtAa5W72BhFCQCzqJpuvyqmHV19924QyyTRyXQ5z3WZEhKxRWhoCzGcWp/ 6CmAi8s11/VDPGKuA1bOxXmg/kUQksbj6Q7dVYA31s0agZvBbj/zZiM3sHe0cVoZ GuwptNtJDMvYNzLr6awFFel6DoiLOB1/MnqHJ94koasqZZyyF2sSDVCApY4Vz0Fv 719JEruD9COidXE9CBaB5KUEeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUwu3xE ZfcOeGl4vN2TQTucpFl6MB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWGk2n0EszHlXPBgx0Blnnfj/n2+olAHnGIyDMSDkOguh9t6dP3d7DhgpxbGo jM5gXoQPKB+6VQ8dAxfG7NV+9FJKzZOKWJs8FX4Z0fmpR27kCwG+Vqz64AvfF6E/ r8hpOd5jgn74Ini/OBYcOUeaj57FFxoaHe9DrHAYdEGEB1ENNc1YeuW/VRXG6ilL mVUpbIeV7wXpxyrDrYEHxOhT6a3NsJIH5QGhGXPptdVt0DM+utq5OXMaC3MUCOGm 80GZN8u/gRIMai4aRQM9PWeDFKUaQ37BhCfLE2kYrGZDvkB/8GhOuvpsGViZDMzb 4D1ZQdpcgZjASuuu7yJyu1YoQw== -----END CERTIFICATE-----Generated at Wed Sep 23 10:17:21 2026 by rpki-client