$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft File: l68SGHeJLIAH_k5xa4jjO-74AN8.mft (raw, json) Hash identifier: a4SgVwglOTJMSvE9cZjP5/oJXwKCgvHGeCoYBv9T2zs= Subject key identifier: 4B:96:FC:87:AE:F9:93:0B:8C:30:2C:FF:3C:3C:87:65:4D:DF:AB:6C Authority key identifier: 97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF Certificate issuer: /CN=A91B1F08/serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft Manifest number: 20 Signing time: Fri 25 Sep 2026 09:02:34 +0000 Manifest this update: Fri 25 Sep 2026 09:02:34 +0000 Manifest next update: Fri 02 Oct 2026 09:02:34 +0000 Files and hashes: 1: l68SGHeJLIAH_k5xa4jjO-74AN8.crl (hash: wXMC6RsI6pv96TKYItWV1OAC0h6hJ4que7L6YeMxYVc=) 2: CF6E968E8B2811F18D2B202C3D11F970.roa (hash: nKbDtnjj8624VgFqL+Q3DAFfPVFpI7iStLeG1RhUWGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F08, serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Validity Not Before: Sep 25 09:02:34 2026 GMT Not After : Oct 2 09:02:34 2026 GMT Subject: CN=6ab638aa-af44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:8f:c7:87:36:f6:52:d6:90:14:e0:72:c7: 33:77:4e:c2:d6:df:39:f4:1a:fe:ca:e4:72:ec:0e: 5b:d2:83:d0:fc:49:61:61:28:1a:a7:dd:7c:91:67: 2f:64:7e:ca:98:3f:98:43:84:a0:1a:bc:2c:b8:bc: 85:8c:83:bb:93:81:d7:34:53:69:86:5e:94:c2:66: 68:35:f4:8d:31:6f:3f:2d:ac:dd:3a:62:26:74:80: 4a:64:b8:e2:0b:6e:e4:f5:8c:ba:c3:1f:8e:d6:e5: 68:c0:02:6f:82:65:a0:71:a1:81:dd:3e:43:f4:c2: 5d:51:dc:98:cd:dd:ab:ea:f7:5a:57:1d:82:05:c1: 00:49:6e:77:7d:5b:51:83:d5:38:4c:9f:e4:a2:64: cb:ff:f3:f9:52:55:5f:d5:07:ee:d0:17:71:af:92: 65:8f:b0:46:17:bb:ca:18:7f:37:41:ad:8d:6e:4b: c8:5a:46:55:d5:e7:a2:dc:ce:bf:e5:bf:3d:42:67: e4:9f:c7:6f:47:52:01:86:1c:e0:eb:c2:92:46:43: b8:ea:5b:59:fa:8a:76:7d:ad:e9:49:ac:a4:60:f5: 98:33:7e:a7:81:8b:d5:65:e8:ec:ba:f6:85:e3:ba: 34:57:57:85:79:cf:64:45:31:48:a5:f5:17:23:80: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:96:FC:87:AE:F9:93:0B:8C:30:2C:FF:3C:3C:87:65:4D:DF:AB:6C X509v3 Authority Key Identifier: keyid:97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:90:fe:83:57:2a:1b:2f:49:8d:22:22:da:c8:f9:34:eb:ae: cb:e3:87:e1:7b:86:d3:7b:19:dd:89:44:46:3a:58:62:31:8c: 01:77:7f:ae:ae:74:4f:0a:7a:bb:6e:5c:19:b1:3a:f6:9e:ac: b4:5a:92:77:0d:71:d7:12:ae:11:15:5a:7a:5d:c1:34:6d:36: d0:ac:39:2e:3b:f0:5e:d6:06:f5:10:2f:a5:61:7b:d5:1c:31: ab:98:62:c4:a4:b9:a6:44:a7:de:cf:c3:23:b8:06:16:c8:6a: 2d:02:fa:56:e8:37:5d:4d:f7:4a:29:f7:c2:27:ee:82:2b:e0: 18:95:1e:4d:d4:67:7b:1c:9e:26:08:55:53:43:63:f3:bc:39: 03:1c:6d:b4:15:9b:52:10:81:47:68:9a:b0:de:6b:8f:14:8a: 04:01:d3:14:06:3a:f8:fd:2d:6d:37:ca:89:cb:36:ce:fb:be: cc:a9:10:18:d4:5e:ba:d4:7a:b3:29:8b:fe:10:04:82:ec:00: fa:e2:5a:ff:3f:e2:24:aa:98:b7:d7:50:6d:a7:66:9b:f0:a4: 77:ef:53:50:bc:3a:df:c6:bd:f2:14:f4:88:d3:f3:53:b9:6a: 63:6e:fa:36:8a:b6:87:68:0a:da:1f:e8:fb:0f:b0:b6:f1:dd: eb:a7:5a:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUYwODExMC8GA1UEBRMoOTdBRjEyMTg3Nzg5MkM4MDA3RkU0RTcxNkI4OEUzM0JF RUY4MDBERjAeFw0yNjA5MjUwOTAyMzRaFw0yNjEwMDIwOTAyMzRaMBgxFjAUBgNV BAMTDTZhYjYzOGFhLWFmNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkpY/Hhzb2UtaQFOByxzN3TsLW3zn0Gv7K5HLsDlvSg9D8SWFhKBqn3XyRZy9k fsqYP5hDhKAavCy4vIWMg7uTgdc0U2mGXpTCZmg19I0xbz8trN06YiZ0gEpkuOIL buT1jLrDH47W5WjAAm+CZaBxoYHdPkP0wl1R3JjN3avq91pXHYIFwQBJbnd9W1GD 1ThMn+SiZMv/8/lSVV/VB+7QF3GvkmWPsEYXu8oYfzdBrY1uS8haRlXV56Lczr/l vz1CZ+Sfx29HUgGGHODrwpJGQ7jqW1n6inZ9relJrKRg9ZgzfqeBi9Vl6Oy69oXj ujRXV4V5z2RFMUil9RcjgIHXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS5b8h675 kwuMMCz/PDyHZU3fq2wwHwYDVR0jBBgwFoAUl68SGHeJLIAH/k5xa4jjO+74AN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRjA4LzBBMjI4OEUwOEIy ODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElBSF9rNXhhNGpqTy03NEFO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDY4U0dIZUpMSUFIX2s1eGE0ampPLTc0QU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RjA4LzBBMjI4OEUwOEIyODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElB SF9rNXhhNGpqTy03NEFOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArkP6DVyobL0mNIiLayPk0667L44fhe4bTexndiURGOlhiMYwBd3+urnRPCnq7 blwZsTr2nqy0WpJ3DXHXEq4RFVp6XcE0bTbQrDkuO/Be1gb1EC+lYXvVHDGrmGLE pLmmRKfez8MjuAYWyGotAvpW6DddTfdKKffCJ+6CK+AYlR5N1Gd7HJ4mCFVTQ2Pz vDkDHG20FZtSEIFHaJqw3muPFIoEAdMUBjr4/S1tN8qJyzbO+77MqRAY1F661Hqz KYv+EASC7AD64lr/P+Ikqpi311Btp2ab8KR371NQvDrfxr3yFPSI0/NTuWpjbvo2 iraHaAraH+j7D7C28d3rp1r/ -----END CERTIFICATE-----Generated at Sun Sep 27 10:39:55 2026 by rpki-client