$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: IdhxAbUFeC60F/sZD+K7m5HuhPDKG9Z3T5svjqJkGgs= Subject key identifier: 0C:3D:EB:55:36:16:97:25:AB:38:CE:7A:6A:D8:85:12:35:06:EC:A0 Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 02CE Signing time: Wed 23 Sep 2026 01:07:07 +0000 Manifest this update: Wed 23 Sep 2026 01:07:06 +0000 Manifest next update: Wed 30 Sep 2026 01:07:06 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: 7LGN+jzv6NykKfIZjc0fMvmWfhusqxZCXlDWXyF0AL0=) 2: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=) 3: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=) 4: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=) 5: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Sep 23 01:07:06 2026 GMT Not After : Sep 30 01:07:06 2026 GMT Subject: CN=6ab3263b-b96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:e1:1d:e2:5a:c4:2b:95:f3:77:c4:cb:98: 47:d7:8b:93:eb:48:e5:45:60:b4:d4:71:17:65:ac: 26:00:2d:f2:c8:2a:f2:64:7f:da:33:54:ad:14:21: a6:d7:25:d5:f5:b8:55:60:c9:4a:58:93:6a:33:01: 91:39:70:f8:5b:b8:1a:bb:15:d7:aa:5d:f2:6e:96: aa:d4:fd:83:68:02:7b:6c:58:44:eb:01:c5:33:9b: 51:a2:3a:30:4f:cc:d6:7a:e8:5e:ec:90:a2:9c:4e: c3:83:8b:fe:22:0f:fd:ca:14:81:4c:a5:03:fb:18: 25:8e:fc:a0:0c:cd:e2:73:a3:28:b9:97:e9:88:36: 7b:e6:67:74:db:90:1f:cc:8c:4a:96:f2:e8:c2:79: 94:64:ab:c2:19:85:f6:19:e6:e9:f2:d4:b2:06:80: 56:10:3f:b6:84:19:e6:bd:5f:60:54:a7:a9:f7:be: a9:a9:1b:b3:a9:76:1e:ec:12:c6:a8:bb:17:c7:57: 2c:c8:1c:fc:83:ff:1c:cb:a4:de:b3:de:f1:5e:8f: 19:92:5b:db:24:bc:e4:15:1a:68:36:4d:ea:3f:f7: 37:ac:1c:5f:8d:b8:79:f5:be:52:10:19:c6:27:a7: 68:c6:fd:76:f0:1b:7c:31:79:7a:cc:aa:39:09:58: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3D:EB:55:36:16:97:25:AB:38:CE:7A:6A:D8:85:12:35:06:EC:A0 X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:55:7e:ca:25:e5:53:c1:33:6c:bf:69:19:27:06:4f:19:09: 5b:e0:0f:6c:11:28:9c:86:c2:b6:33:92:08:6e:10:dc:91:73: fc:82:b5:3b:8c:3d:f9:45:5c:8e:76:ef:a8:ac:0d:1f:e8:08: b0:4d:c6:cf:5a:ea:fc:49:44:2d:23:c0:20:f6:21:3d:17:b6: 9b:5b:41:59:2d:c9:80:ee:4f:0e:fe:bf:52:a9:62:76:59:80: ab:4e:c3:5f:3c:97:99:d0:0a:63:08:6d:43:24:28:5b:6c:a7: 82:6c:8d:9e:3e:3f:c1:e2:04:70:4b:b6:07:40:de:3f:2a:b9: 1e:c6:02:75:fb:60:a4:b6:a9:c5:55:15:cd:b0:27:76:35:d9: 31:b3:aa:24:3a:d1:8f:10:50:8f:6c:b7:8d:72:b7:e0:60:22: fa:6e:ff:43:35:01:57:6b:3d:5b:85:96:ce:49:9e:49:0d:e4: 61:55:8b:59:06:f2:74:81:57:ee:e7:5c:ef:48:d9:87:2b:f2: 21:48:1d:fe:25:86:1b:42:75:14:e3:95:7e:ce:c4:ab:89:98: ac:31:cf:d4:1d:17:8f:07:61:db:b5:06:c8:69:d2:8e:52:07: 1b:09:b4:bd:8f:83:b2:30:b9:c5:98:0f:e7:1c:1f:03:60:93: 08:58:17:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjYwOTIzMDEwNzA2WhcNMjYwOTMwMDEwNzA2WjAYMRYwFAYD VQQDEw02YWIzMjYzYi1iOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn13hHeJaxCuV83fEy5hH14uT60jlRWC01HEXZawmAC3yyCryZH/aM1StFCGm 1yXV9bhVYMlKWJNqMwGROXD4W7gauxXXql3ybpaq1P2DaAJ7bFhE6wHFM5tRojow T8zWeuhe7JCinE7Dg4v+Ig/9yhSBTKUD+xgljvygDM3ic6MouZfpiDZ75md025Af zIxKlvLownmUZKvCGYX2Gebp8tSyBoBWED+2hBnmvV9gVKep976pqRuzqXYe7BLG qLsXx1csyBz8g/8cy6Tes97xXo8ZklvbJLzkFRpoNk3qP/c3rBxfjbh59b5SEBnG J6doxv128Bt8MXl6zKo5CVgYyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAw961U2 FpclqzjOemrYhRI1BuygMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKFV+yiXlU8EzbL9pGScGTxkJW+APbBEonIbCtjOSCG4Q3JFz/IK1O4w9+UVc jnbvqKwNH+gIsE3Gz1rq/ElELSPAIPYhPRe2m1tBWS3JgO5PDv6/UqlidlmAq07D XzyXmdAKYwhtQyQoW2yngmyNnj4/weIEcEu2B0DePyq5HsYCdftgpLapxVUVzbAn djXZMbOqJDrRjxBQj2y3jXK34GAi+m7/QzUBV2s9W4WWzkmeSQ3kYVWLWQbydIFX 7udc70jZhyvyIUgd/iWGG0J1FOOVfs7Eq4mYrDHP1B0Xjwdh27UGyGnSjlIHGwm0 vY+DsjC5xZgP5xwfA2CTCFgX9g== -----END CERTIFICATE-----Generated at Wed Sep 23 16:45:33 2026 by rpki-client