$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: PlW2OX/t/z4f00NT6Ht5mHDQnC/RWawnJRAo9qAVrW4= Subject key identifier: 2E:DA:1E:41:6B:84:89:A0:58:A6:EE:DD:F1:04:38:5A:96:E7:06:A4 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 04BA Signing time: Tue 22 Sep 2026 23:31:20 +0000 Manifest this update: Tue 22 Sep 2026 23:31:20 +0000 Manifest next update: Tue 29 Sep 2026 23:31:20 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: LuB8HewgqbhJVofe5Jde/NdLMTKAnFYth2L0BQiKpCE=) 2: 38DF2BD687FC11F1B0916B103C11F970.roa (hash: ip1X2/FTCxaSzI+j0d1dDsTrjfqFA/qkApNONDzS/MA=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=) 4: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Sep 22 23:31:20 2026 GMT Not After : Sep 29 23:31:20 2026 GMT Subject: CN=6ab30fc8-df06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:bb:03:ef:75:92:7c:c3:e6:a8:be:25:be: 99:32:f4:5d:f9:1b:2a:68:65:5e:e8:90:6a:dc:04: 8b:eb:77:a4:c8:b7:eb:5b:08:37:99:96:e7:b6:fe: 19:33:b9:af:95:cc:cc:4b:2c:29:f8:49:95:73:d2: eb:6e:5b:4c:d9:11:b2:41:02:2a:2b:44:10:0d:b8: 04:50:18:81:bf:a4:9f:cd:4a:d7:52:4c:34:2f:a1: 63:e1:79:9a:62:9e:b5:af:39:09:70:5d:23:53:63: fe:a7:6d:5a:48:5a:c4:9b:f4:a1:51:ae:97:90:05: 82:e8:24:0f:2a:6b:c7:a4:b9:73:84:8e:79:67:5b: fb:a8:21:98:85:21:e2:f6:19:27:31:a1:c3:d6:9c: 52:2b:78:10:83:6c:19:7d:79:59:da:a5:fb:c1:e3: dc:57:27:63:68:65:88:11:f0:8b:7b:21:f3:c8:4d: 1c:4f:e6:a8:2a:55:6e:a5:15:a4:ba:b7:f4:bd:dc: fa:ed:2f:53:7a:58:bd:3d:8d:4d:d8:5e:14:d1:99: 7d:33:39:63:1f:9c:68:9d:8a:40:a1:7a:45:08:95: 5f:37:65:23:f0:4f:68:b7:1b:c7:c3:d7:86:87:f9: 09:c2:5d:8c:1e:f7:10:a3:67:14:07:d7:cd:4f:6e: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:1E:41:6B:84:89:A0:58:A6:EE:DD:F1:04:38:5A:96:E7:06:A4 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2c:ff:8d:94:bd:59:93:2b:9c:6c:03:60:af:d3:e9:96:83: 62:2e:1e:7e:5e:93:bb:b2:1c:28:48:32:cb:aa:41:32:06:21: 06:0a:79:52:cb:c0:af:ad:69:e6:3b:61:7e:d5:e8:35:58:ca: d7:c1:1d:8a:87:9c:b6:10:6d:f6:48:5c:9e:90:c1:7a:64:41: f3:26:9f:79:ad:56:74:d1:8c:e5:d7:f9:62:5c:d8:a0:21:a5: 7c:29:4f:97:0f:24:89:46:eb:dd:7d:ab:bb:03:cd:28:70:82: 90:0d:23:b4:91:a1:96:42:a9:3c:71:94:78:0c:a0:6a:36:01: a7:da:8b:5d:4e:d3:4d:89:36:b4:d9:2c:cd:16:c2:fa:c9:60: 12:ae:ab:90:7d:2b:56:00:cc:54:fe:da:69:fd:8f:4f:7a:03: b2:a9:d4:62:43:16:c4:1a:6d:db:54:39:e9:b0:93:bc:d9:c1: 07:89:74:cd:14:63:da:69:b6:76:0f:10:eb:da:62:73:85:02: 60:e5:5a:12:37:8d:8f:25:6c:f7:ae:8c:a3:87:c7:a7:bf:27: c8:b2:87:8b:fd:82:31:5f:bd:14:c6:b1:63:54:b1:76:10:57: c7:43:1d:91:56:49:a3:f3:f1:49:bb:79:53:4e:3f:86:b0:37: a4:4d:df:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjYwOTIyMjMzMTIwWhcNMjYwOTI5MjMzMTIwWjAYMRYwFAYD VQQDEw02YWIzMGZjOC1kZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaO7A+91knzD5qi+Jb6ZMvRd+RsqaGVe6JBq3ASL63ekyLfrWwg3mZbntv4Z M7mvlczMSywp+EmVc9LrbltM2RGyQQIqK0QQDbgEUBiBv6SfzUrXUkw0L6Fj4Xma Yp61rzkJcF0jU2P+p21aSFrEm/ShUa6XkAWC6CQPKmvHpLlzhI55Z1v7qCGYhSHi 9hknMaHD1pxSK3gQg2wZfXlZ2qX7wePcVydjaGWIEfCLeyHzyE0cT+aoKlVupRWk urf0vdz67S9Teli9PY1N2F4U0Zl9MzljH5xonYpAoXpFCJVfN2Uj8E9otxvHw9eG h/kJwl2MHvcQo2cUB9fNT26REwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7aHkFr hImgWKbu3fEEOFqW5wakMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvSz/jZS9WZMrnGwDYK/T6ZaDYi4efl6Tu7IcKEgyy6pBMgYhBgp5UsvAr61p 5jthftXoNVjK18EdioecthBt9khcnpDBemRB8yafea1WdNGM5df5YlzYoCGlfClP lw8kiUbr3X2ruwPNKHCCkA0jtJGhlkKpPHGUeAygajYBp9qLXU7TTYk2tNkszRbC +slgEq6rkH0rVgDMVP7aaf2PT3oDsqnUYkMWxBpt21Q56bCTvNnBB4l0zRRj2mm2 dg8Q69pic4UCYOVaEjeNjyVs966Mo4fHp78nyLKHi/2CMV+9FMaxY1SxdhBXx0Md kVZJo/PxSbt5U04/hrA3pE3fBA== -----END CERTIFICATE-----Generated at Wed Sep 23 20:41:29 2026 by rpki-client