$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json) Hash identifier: 1+yAPRZdwoR83BfyGzy3lzg7DoGfQZKWZmimUrUHfQ0= Subject key identifier: 07:E8:71:2B:1E:41:09:CC:64:9E:C2:26:17:DD:4F:A8:5F:9B:B3:CB Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft Manifest number: 03BA Signing time: Wed 23 Sep 2026 01:18:02 +0000 Manifest this update: Wed 23 Sep 2026 01:18:01 +0000 Manifest next update: Wed 30 Sep 2026 01:18:01 +0000 Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: fberk6Dtgiz6mWelzzPPNA6g4dzjTLaUYaV5eIPYF2Y=) 2: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: EhpTUDDHzY+fvrYZYj/pFiggKyojVq9obYmKAT1n3A0=) 3: 6CD1CCC2936511F1BD100F9E4D11F970.roa (hash: TCfovgmfhV4JubGfoFfkBMtA3nN7dXUsM6EMCQAL8Ts=) 4: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: aGUm8omo4ZFJXDjr4Xz+Jx5SdszNlZSFCVVvYUaDDDE=) 5: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: cE+N/sJmZXPwEqsr56rRVKadyFeojKXZbwqZsGJI3ow=) 6: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: Lr5oonGaOp/1JBezgStkgVrxPphf7c1k8rUXUUlH1HQ=) 7: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: mH9aDJls4Z4vdRc3n6JwAhEgaMfwmf9djBOACp2CztQ=) 8: FFCFFCFC756411F1BE4724178AA30FBC.roa (hash: K+M/GXpCv3Nhy9zZfN36sc5I9tx9qAwRUjDeflaFZJU=) 9: E879EE7C144111EFB247B936C4F9AE02.roa (hash: PJy1pOjFWbAmsotvikHiiGWZOz13/Q1Q3kqdzHzWoW8=) 10: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: tqHiB6MdNj5867Z3RrIXxNvtsP/WHrWgARnyhJP6ZUQ=) 11: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: +tqSxdBf9cs4OFgeQ2ZLbEvYIKIcLRjjRyzUUxp3EEQ=) 12: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: aTh/szGkbByCO+bl8x7ZpvLQYMqSV+pbAIP3Duch7WM=) 13: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: 4beFvb4hxPowcDYshVeExpQg/8txXAvZVZ0I7WzOu3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 23 01:18:01 2026 GMT Not After : Sep 30 01:18:01 2026 GMT Subject: CN=6ab328ca-f270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:a5:84:32:9e:9a:e4:48:6a:03:43:69:1c: df:09:95:96:47:06:a5:86:68:8a:02:82:39:79:42: 01:69:85:d5:06:54:b1:76:08:6b:1f:81:4a:d5:31: 5f:8b:8a:58:52:bf:cc:5b:74:19:68:f7:63:35:5c: 30:a7:82:90:45:6b:90:e6:29:15:72:74:b6:60:b8: fe:a9:30:94:72:dd:a3:14:b9:6e:ae:55:be:2f:98: d6:97:e2:65:da:41:4d:2b:3a:6e:7f:26:e2:86:14: 22:4f:08:b1:6c:e6:d6:e3:47:12:55:93:07:9d:08: af:b1:1b:06:0c:71:9b:c9:b9:3f:c1:70:8c:f8:6c: 18:42:17:43:49:8c:c6:cc:2c:74:cd:89:3c:b0:66: 41:93:7c:63:79:93:ac:20:24:2e:a2:f7:77:d1:53: d1:ff:94:ea:2a:cd:8f:14:05:50:cc:85:1f:57:48: f6:95:2a:cc:8d:b7:f1:62:8c:7d:f5:4e:e8:f7:4a: 01:19:87:e3:b1:7f:fc:cc:63:92:ff:15:df:45:9c: 4d:19:e4:5e:7e:5d:d7:c2:fa:1c:5b:07:0f:31:bf: 7d:40:29:04:1c:79:5c:c7:34:c5:ef:40:d0:b1:1d: ff:a4:7a:5e:d2:29:18:80:f7:52:3f:1e:69:7e:24: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:71:2B:1E:41:09:CC:64:9E:C2:26:17:DD:4F:A8:5F:9B:B3:CB X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:18:66:34:d7:2b:53:7a:e0:9e:07:ec:c6:54:59:06:87:1c: 94:cb:4e:ce:c0:28:6a:a3:f5:32:b8:da:3f:35:ef:49:14:73: 0f:99:d6:59:8b:50:44:f7:5d:9f:05:af:e5:ff:75:bd:1f:21: 57:d8:7a:96:a2:cc:8b:91:e2:f3:ac:0a:4c:9c:5f:8f:81:bc: 3b:62:af:a8:cb:8f:8c:f1:34:27:6b:9b:de:e8:4e:0d:a6:72: 42:30:57:a1:60:77:f6:b8:3a:31:43:40:fd:84:84:1a:76:ad: 86:4b:fc:07:f7:c7:46:41:96:46:6f:fe:28:6c:30:9c:86:e2: ee:c5:9e:f4:c0:72:1f:8b:63:0f:ce:a3:17:b3:86:0a:00:13: 33:c0:ff:ea:b8:01:c9:0a:16:e5:01:ef:2b:46:41:1c:6e:d4: 8a:d8:d8:ad:d2:a2:ae:3f:ef:8a:f1:7b:8f:8c:3d:5f:b7:25: 20:41:4d:9d:cc:17:dd:df:c1:13:7f:31:8f:ef:b4:f5:81:5e: c2:bf:25:c2:d7:a8:68:e1:77:0c:23:1b:2e:d0:29:59:05:ae: ce:ce:f2:e7:ff:01:88:30:83:4c:b6:7c:cb:78:fc:d9:74:24: 29:e4:27:b1:9d:b7:0f:9c:71:24:1d:29:bf:78:8a:58:e4:ba: 40:41:db:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwOTIzMDExODAxWhcNMjYwOTMwMDExODAxWjAYMRYwFAYD VQQDEw02YWIzMjhjYS1mMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NSlhDKemuRIagNDaRzfCZWWRwalhmiKAoI5eUIBaYXVBlSxdghrH4FK1TFf i4pYUr/MW3QZaPdjNVwwp4KQRWuQ5ikVcnS2YLj+qTCUct2jFLlurlW+L5jWl+Jl 2kFNKzpufybihhQiTwixbObW40cSVZMHnQivsRsGDHGbybk/wXCM+GwYQhdDSYzG zCx0zYk8sGZBk3xjeZOsICQuovd30VPR/5TqKs2PFAVQzIUfV0j2lSrMjbfxYox9 9U7o90oBGYfjsX/8zGOS/xXfRZxNGeRefl3XwvocWwcPMb99QCkEHHlcxzTF70DQ sR3/pHpe0ikYgPdSPx5pfiSW5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfocSse QQnMZJ7CJhfdT6hfm7PLMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx blVCSTFENEVzekNXbVA1amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPBhmNNcrU3rgngfsxlRZBocclMtOzsAoaqP1MrjaPzXvSRRzD5nWWYtQRPdd nwWv5f91vR8hV9h6lqLMi5Hi86wKTJxfj4G8O2KvqMuPjPE0J2ub3uhODaZyQjBX oWB39rg6MUNA/YSEGnathkv8B/fHRkGWRm/+KGwwnIbi7sWe9MByH4tjD86jF7OG CgATM8D/6rgByQoW5QHvK0ZBHG7UitjYrdKirj/vivF7j4w9X7clIEFNncwX3d/B E38xj++09YFewr8lwteoaOF3DCMbLtApWQWuzs7y5/8BiDCDTLZ8y3j82XQkKeQn sZ23D5xxJB0pv3iKWOS6QEHbpw== -----END CERTIFICATE-----Generated at Wed Sep 23 08:37:30 2026 by rpki-client