$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: wYDTihdlB9Es9a088jtcfT0CirLC5eb7ityjQ3D2alw= Subject key identifier: 2C:7F:85:8A:DA:D5:85:8B:39:6F:7B:9B:13:E0:B2:CE:25:85:4C:B3 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0C41 Signing time: Tue 22 Sep 2026 18:38:09 +0000 Manifest this update: Tue 22 Sep 2026 18:38:08 +0000 Manifest next update: Tue 29 Sep 2026 18:38:08 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: EjnyrjfjLT7SuCHHADq6k1Qd09B3IUBRztYTKwPgV5k=) 2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: EtWPVe46Z6YD/Gko0Vzg+XYe7+MF4xJzoOYHJ+2jqX8=) 3: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: Mz6TVl8d97rl0T5Sgcb40knK3DLPqLH5f8e3CzLuT7A=) 4: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: j2CWh2M1Zubhu80nB8Ke1i2o0Pn0OuTxS4mQsSIpork=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Sep 22 18:38:08 2026 GMT Not After : Sep 29 18:38:08 2026 GMT Subject: CN=6ab2cb11-fab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:18:c4:3a:f6:76:2b:de:cc:45:00:29:c5: f6:ac:de:9d:1e:43:8a:17:00:9a:e3:d4:4b:ec:44: c2:17:8e:dc:86:9f:00:af:18:78:3b:f9:24:22:0a: 9c:aa:3e:e6:6f:80:c4:fc:2e:b8:36:ab:6a:b8:b7: b9:29:a9:42:2d:71:50:aa:ea:3e:ee:c3:8a:ae:0d: 70:44:ca:a2:b7:ea:05:95:5a:42:e8:7a:91:b5:77: 88:68:a3:88:aa:a0:03:2f:e8:ea:33:95:e0:ad:bc: 98:8c:2a:7d:c6:67:c1:01:10:cf:4d:5a:c7:6c:2b: f1:5d:95:88:6c:47:6c:b0:74:95:1f:2e:46:1b:63: 86:44:d3:9f:ae:82:ac:67:cf:2b:f5:ae:2b:c5:92: 59:8e:2d:4a:da:fc:88:c3:52:e7:44:0e:d5:2e:ac: 98:08:df:b5:81:2d:94:1a:c9:73:f0:a4:f5:e8:dd: 33:2f:fc:9d:53:f7:14:74:e6:af:b6:ed:6e:ac:08: 61:07:dd:ed:be:b3:4a:18:01:96:00:73:f0:2b:3f: 55:d0:56:4a:8b:cf:7a:b9:8d:1f:54:dd:42:72:0b: a5:17:9d:04:d9:21:d1:85:9a:aa:c1:6a:b6:c9:7a: 98:dd:0e:3a:84:f1:8a:9d:6b:a0:1c:4a:2e:38:03: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:85:8A:DA:D5:85:8B:39:6F:7B:9B:13:E0:B2:CE:25:85:4C:B3 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8a:66:da:b2:10:86:58:b4:94:58:7c:5a:50:67:c6:30:93: 0a:e5:2e:81:7f:5d:85:87:1b:72:89:59:22:a7:8e:4d:30:08: 86:5a:f1:67:a4:4f:3e:ba:34:1d:5f:c8:cd:29:b3:15:ba:03: dd:4e:a3:2a:3b:99:ef:c3:a1:d0:34:19:92:e3:23:f8:11:06: b5:f2:97:d2:5a:11:e6:d1:d1:3d:91:69:12:17:dd:df:be:7f: ed:24:b8:0f:55:9b:0a:56:04:52:f1:41:ea:5b:26:cb:15:12: d9:a4:c9:b2:5f:49:d2:e6:95:84:4a:d4:10:0a:10:a7:45:7a: ae:82:ec:f9:d3:15:b8:fe:1d:9c:35:9a:c4:f8:9b:7c:96:56: 1e:ce:c6:1d:c5:5f:68:fc:67:10:8d:e0:38:74:54:90:f0:4e: 76:2f:5a:f7:ac:ca:81:81:34:4a:40:3b:d8:24:d7:86:c3:a6: ee:64:8d:53:d4:50:4b:a9:8d:ce:8c:cb:25:48:01:6d:38:5b: a9:5a:ba:04:ac:6c:a8:9c:b9:d1:a7:2b:16:a3:2b:1e:fe:42: c1:2d:7e:de:59:34:7e:d9:d9:74:1c:01:f0:9f:dd:b2:f5:bf: 8c:03:b0:cc:bc:fd:fb:f3:c6:95:7b:20:b7:1f:61:29:79:61: d0:14:4f:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYwOTIyMTgzODA4WhcNMjYwOTI5MTgzODA4WjAYMRYwFAYD VQQDEw02YWIyY2IxMS1mYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CYYxDr2divezEUAKcX2rN6dHkOKFwCa49RL7ETCF47chp8Arxh4O/kkIgqc qj7mb4DE/C64NqtquLe5KalCLXFQquo+7sOKrg1wRMqit+oFlVpC6HqRtXeIaKOI qqADL+jqM5XgrbyYjCp9xmfBARDPTVrHbCvxXZWIbEdssHSVHy5GG2OGRNOfroKs Z88r9a4rxZJZji1K2vyIw1LnRA7VLqyYCN+1gS2UGslz8KT16N0zL/ydU/cUdOav tu1urAhhB93tvrNKGAGWAHPwKz9V0FZKi896uY0fVN1CcgulF50E2SHRhZqqwWq2 yXqY3Q46hPGKnWugHEouOAP+GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx/hYra 1YWLOW97mxPgss4lhUyzMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJYpm2rIQhli0lFh8WlBnxjCTCuUugX9dhYcbcolZIqeOTTAIhlrxZ6RPPro0 HV/IzSmzFboD3U6jKjuZ78Oh0DQZkuMj+BEGtfKX0loR5tHRPZFpEhfd375/7SS4 D1WbClYEUvFB6lsmyxUS2aTJsl9J0uaVhErUEAoQp0V6roLs+dMVuP4dnDWaxPib fJZWHs7GHcVfaPxnEI3gOHRUkPBOdi9a96zKgYE0SkA72CTXhsOm7mSNU9RQS6mN zozLJUgBbThbqVq6BKxsqJy50acrFqMrHv5CwS1+3lk0ftnZdBwB8J/dsvW/jAOw zLz9+/PGlXsgtx9hKXlh0BRPGQ== -----END CERTIFICATE-----Generated at Thu Sep 24 17:13:52 2026 by rpki-client