$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft File: lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json) Hash identifier: wijzqpCzLtdaiwiagxzlALyA4W9+op3Lgi8iJIngFvM= Subject key identifier: E0:74:D2:55:B1:6B:13:AD:AC:D1:2F:B7:03:CC:A8:07:C6:2B:C4:9A Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft Manifest number: 8A Signing time: Fri 25 Sep 2026 07:42:31 +0000 Manifest this update: Fri 25 Sep 2026 07:42:31 +0000 Manifest next update: Fri 02 Oct 2026 07:42:31 +0000 Files and hashes: 1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: KnlC2CdY+++ksB+dnM8KGDd49BWfkMhBY8C7SzOmGro=) 2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=) 3: 6233066868B411F1A7FCE07D7E47A888.roa (hash: cLHTOzBDSvX2r1cQexaW7fZ273SuMXzR4+rLK7jUiPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Validity Not Before: Sep 25 07:42:31 2026 GMT Not After : Oct 2 07:42:31 2026 GMT Subject: CN=6ab625e7-fa7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:04:ca:ee:64:2d:12:7b:06:9e:ac:e4:ca: 74:5a:37:30:ba:b4:dd:30:3e:c5:95:05:82:73:44: 44:4d:1d:a4:29:48:13:71:ec:a3:85:68:0c:71:85: 79:35:23:b9:a4:59:88:1e:69:e3:2d:73:e0:e2:c6: e3:06:9c:43:12:e3:3a:e6:0d:c5:7d:8f:59:53:c7: 84:f6:e7:2c:08:f4:2a:58:ba:22:4b:bd:5d:32:94: 79:4f:71:6a:3c:eb:ed:09:0d:8a:75:03:e9:7b:85: ac:04:2e:ad:44:4f:27:a5:7e:87:1a:0c:1c:83:78: 7b:99:6b:77:17:92:09:d2:ca:2b:0e:6f:89:1d:e3: 00:1e:4e:bd:64:4a:c5:06:da:2d:cb:d9:fa:31:e0: 9f:92:80:ba:19:48:f3:d2:d5:3c:c5:d2:cb:23:45: 2e:e3:43:4d:f6:f7:dd:09:5c:65:71:54:45:88:03: a2:68:03:30:25:66:8d:2e:ae:21:a9:a3:af:e1:a5: 74:99:f6:e5:2f:61:66:01:87:f8:11:e8:45:77:52: 87:fe:aa:dd:61:60:79:82:e5:53:e2:81:e1:e9:61: 89:66:8b:18:dd:fc:d7:54:69:98:6e:0b:cd:cc:77: 53:39:78:0b:f7:6b:08:72:64:98:cf:9a:82:ae:1d: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:D2:55:B1:6B:13:AD:AC:D1:2F:B7:03:CC:A8:07:C6:2B:C4:9A X509v3 Authority Key Identifier: keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d2:ef:98:d5:23:6c:7e:e8:e6:0a:dc:37:0d:7b:74:44:a9: 0c:fd:87:7e:4b:33:62:b7:4c:ed:49:d7:13:e0:18:bd:d5:c2: 1b:a5:ab:e4:4c:5b:3a:fc:27:e6:23:ea:ea:a9:24:3f:b7:de: 45:4a:6d:44:dc:95:96:ef:48:aa:d9:b6:c8:07:18:dd:51:28: 81:f7:40:57:71:22:63:10:c8:8e:fc:71:99:40:71:be:29:04: 11:f3:03:2a:28:cd:e2:4a:08:28:da:02:ac:d0:9f:1d:75:aa: 97:0a:6d:4b:b4:db:b2:0c:7d:c0:c7:eb:36:f6:3b:fa:a8:68: 81:ee:bd:91:a4:96:8b:2c:d4:50:4c:d4:5d:01:ed:96:ee:89: a8:49:d8:36:28:d9:b0:d7:48:88:ef:c5:2b:11:bf:fd:73:09: 8b:c5:1a:b8:4e:3d:66:e1:eb:54:b5:54:67:ee:66:33:fd:68: 53:1a:47:08:58:8d:dd:09:1f:10:f4:6e:66:5d:3d:bc:46:53: 26:37:7a:7b:a3:8d:06:28:ac:be:5b:43:92:a0:cd:24:a8:9e: 5c:69:d3:93:42:97:a9:d2:3b:42:b8:82:28:e7:6b:d7:39:63: be:46:58:d5:ce:6b:9a:3a:ae:5e:a6:cd:da:9a:27:96:dc:89: 9c:42:28:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI0NjAxMTAvBgNVBAUTKDk0MEQyN0FFMTQ0QUFEQ0E5RTM0NTJDQjM4QzMyMzZB Q0JGNzAyNUIwHhcNMjYwOTI1MDc0MjMxWhcNMjYxMDAyMDc0MjMxWjAYMRYwFAYD VQQDEw02YWI2MjVlNy1mYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJAEyu5kLRJ7Bp6s5Mp0WjcwurTdMD7FlQWCc0RETR2kKUgTceyjhWgMcYV5 NSO5pFmIHmnjLXPg4sbjBpxDEuM65g3FfY9ZU8eE9ucsCPQqWLoiS71dMpR5T3Fq POvtCQ2KdQPpe4WsBC6tRE8npX6HGgwcg3h7mWt3F5IJ0sorDm+JHeMAHk69ZErF Btoty9n6MeCfkoC6GUjz0tU8xdLLI0Uu40NN9vfdCVxlcVRFiAOiaAMwJWaNLq4h qaOv4aV0mfblL2FmAYf4EehFd1KH/qrdYWB5guVT4oHh6WGJZosY3fzXVGmYbgvN zHdTOXgL92sIcmSYz5qCrh0DYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOB00lWx axOtrNEvtwPMqAfGK8SaMB8GA1UdIwQYMBaAFJQNJ64USq3KnjRSyzjDI2rL9wJb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjQ2MC8wMkFFNDY3MkVE MkExMUYwOThDNjMxMjE0NTZGNTZCQy9sQTBucmhSS3JjcWVORkxMT01NamFzdjNB bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjQ2MC8wMkFFNDY3MkVEMkExMUYwOThDNjMxMjE0NTZGNTZCQy9sQTBucmhSS3Jj cWVORkxMT01NamFzdjNBbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAndLvmNUjbH7o5grcNw17dESpDP2HfkszYrdM7UnXE+AYvdXCG6Wr5ExbOvwn 5iPq6qkkP7feRUptRNyVlu9Iqtm2yAcY3VEogfdAV3EiYxDIjvxxmUBxvikEEfMD KijN4koIKNoCrNCfHXWqlwptS7Tbsgx9wMfrNvY7+qhoge69kaSWiyzUUEzUXQHt lu6JqEnYNijZsNdIiO/FKxG//XMJi8UauE49ZuHrVLVUZ+5mM/1oUxpHCFiN3Qkf EPRuZl09vEZTJjd6e6ONBiisvltDkqDNJKieXGnTk0KXqdI7QriCKOdr1zljvkZY 1c5rmjquXqbN2ponltyJnEIoCA== -----END CERTIFICATE-----Generated at Fri Sep 25 16:36:22 2026 by rpki-client