$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: p4UxHnDiGNIEPzS3cyUdAtwx9/N+H9CMlwgRAfb9UwE= Subject key identifier: 57:0D:82:41:3A:A2:3A:56:E6:AD:61:A4:36:26:D1:2D:BD:FE:4A:1A Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 0601 Signing time: Thu 24 Sep 2026 22:56:12 +0000 Manifest this update: Thu 24 Sep 2026 22:56:11 +0000 Manifest next update: Thu 01 Oct 2026 22:56:11 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: xaBk8L0Sz/fpJz0xAzR63jv59bvnkvBzTn9hFMKBjAk=) 2: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (hash: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A=) 3: F88F642285E411EEB951413BC4F9AE02.roa (hash: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=) 4: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=) 5: 74489676FBF711F0B6045B12716F56BC.roa (hash: PtmrY+a/4HZCqPq48R9VOsgkvL+9qoLlfHRXIydqoPY=) 6: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: loULOkxTyFtV5eU4JwAnNk7SaUEpMQGahUv+OEZBH2g=) 7: B8BE560A4A1311F1B8639EABC7833773.roa (hash: 0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=) 8: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: PGfOZ8aur6eFpfgp1qb3p6zkq3ccsWlLdh66JdofFDY=) 9: 74CECB38FBF711F0B6045B12716F56BC.roa (hash: DQhYrefFOI4w+qsMMTRGiZB2qVxuQnH+mEqRGikTB98=) 10: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Sep 24 22:56:11 2026 GMT Not After : Oct 1 22:56:11 2026 GMT Subject: CN=6ab5aa8c-ad76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:b8:d0:8d:df:8d:ff:21:63:69:64:7d:e3: c1:6d:b0:94:b2:6e:98:0c:1e:5e:9f:72:a9:b3:1e: b5:9f:89:85:d0:24:c5:50:47:37:25:9e:30:6c:bf: 7f:6e:32:6a:6b:fb:c9:4f:e3:91:b9:f8:42:06:b7: ec:43:9e:fb:d9:12:a8:c5:af:a7:58:20:4d:43:8a: 29:56:0e:71:6e:57:63:7f:4e:8e:db:97:c0:d6:ae: 3d:ee:01:ee:1a:7b:d3:42:98:d1:d9:d1:9f:2c:b0: cc:6f:89:28:7f:15:0a:c6:01:7d:5f:17:b6:8c:a3: c6:07:7d:60:d2:a0:0c:f2:11:38:fd:1c:e1:4f:08: 87:43:c0:e7:9c:ff:bd:f0:a1:2e:c8:11:1f:2b:05: f8:0b:90:84:56:c4:98:cd:d9:3f:2d:2f:ac:52:26: 22:f8:31:93:d4:7c:fd:3e:9f:8b:59:16:56:b6:a3: 0d:a8:a1:d9:8e:c1:c2:78:b3:ab:41:ec:de:8f:9b: 94:b2:69:38:01:c6:66:3b:b2:75:e0:e6:12:c8:ef: 9e:e4:30:c8:28:fb:d8:47:3d:31:53:9a:81:35:7d: f2:f1:78:ae:a1:e7:df:9a:09:87:72:65:f3:b3:b6: a0:40:f1:c5:86:05:6c:12:d6:19:00:04:c6:96:c2: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0D:82:41:3A:A2:3A:56:E6:AD:61:A4:36:26:D1:2D:BD:FE:4A:1A X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:0e:f4:ca:d8:4b:85:91:63:28:e1:e0:66:a9:d5:6e:1f:a9: 62:ea:1d:da:08:0d:cc:e1:ea:ce:a5:35:25:af:e1:50:79:60: 0a:66:ec:0d:80:a7:4d:92:2c:65:e3:aa:6f:f9:73:90:e0:de: 7c:ff:33:44:6f:d2:97:84:49:cb:97:90:43:77:15:fc:6d:b4: 94:0d:d6:58:24:82:88:29:c7:d6:fa:b8:20:c2:50:bc:1e:ad: 65:89:c9:6c:21:99:8d:89:59:b0:ee:2d:b9:4e:2f:0a:03:b1: 73:30:5a:8b:f6:71:11:ad:da:4c:22:c5:e8:0f:56:68:91:18: 19:d5:71:8c:6c:ae:4c:a4:9e:ef:27:1a:bd:10:84:77:ec:c7: c9:03:62:af:32:fe:52:4f:6f:fc:2c:05:b2:d0:fd:60:f7:63: e3:bf:3b:7e:c0:3a:a5:91:52:59:d0:fe:15:2d:11:7c:35:ea: b5:cb:43:65:b2:6e:86:11:5f:87:8a:06:dc:83:42:02:23:98: 39:ed:1a:48:3d:2d:e9:00:c7:ad:72:6f:fb:87:f8:10:3a:66: ed:0b:8b:64:15:a6:ee:ea:31:08:07:59:d6:8e:b9:7f:e9:84: 35:9b:17:d3:97:ba:4c:02:b3:3c:3a:6d:34:5a:69:91:ba:eb: fa:c8:b4:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjYwOTI0MjI1NjExWhcNMjYxMDAxMjI1NjExWjAYMRYwFAYD VQQDEw02YWI1YWE4Yy1hZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+u40I3fjf8hY2lkfePBbbCUsm6YDB5en3Kpsx61n4mF0CTFUEc3JZ4wbL9/ bjJqa/vJT+ORufhCBrfsQ5772RKoxa+nWCBNQ4opVg5xbldjf06O25fA1q497gHu GnvTQpjR2dGfLLDMb4kofxUKxgF9Xxe2jKPGB31g0qAM8hE4/RzhTwiHQ8DnnP+9 8KEuyBEfKwX4C5CEVsSYzdk/LS+sUiYi+DGT1Hz9Pp+LWRZWtqMNqKHZjsHCeLOr Qezej5uUsmk4AcZmO7J14OYSyO+e5DDIKPvYRz0xU5qBNX3y8XiuoeffmgmHcmXz s7agQPHFhgVsEtYZAATGlsJwfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcNgkE6 ojpW5q1hpDYm0S29/koaMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvw70ythLhZFjKOHgZqnVbh+pYuod2ggNzOHqzqU1Ja/hUHlgCmbsDYCnTZIs ZeOqb/lzkODefP8zRG/Sl4RJy5eQQ3cV/G20lA3WWCSCiCnH1vq4IMJQvB6tZYnJ bCGZjYlZsO4tuU4vCgOxczBai/ZxEa3aTCLF6A9WaJEYGdVxjGyuTKSe7ycavRCE d+zHyQNirzL+Uk9v/CwFstD9YPdj4787fsA6pZFSWdD+FS0RfDXqtctDZbJuhhFf h4oG3INCAiOYOe0aSD0t6QDHrXJv+4f4EDpm7QuLZBWm7uoxCAdZ1o65f+mENZsX 05e6TAKzPDptNFppkbrr+si0sg== -----END CERTIFICATE-----Generated at Sat Sep 26 17:23:05 2026 by rpki-client