$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft File: lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json) Hash identifier: 8Hw0GIYToLjpquEzBcwWqTZk0pjNAFMVlMh2++kmRoc= Subject key identifier: 89:D3:A6:92:38:CD:33:B3:AA:7F:5A:38:2E:18:6A:AF:4B:44:38:EC Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft Manifest number: 01E4 Signing time: Sun 27 Sep 2026 04:01:17 +0000 Manifest this update: Sun 27 Sep 2026 04:01:16 +0000 Manifest next update: Sun 04 Oct 2026 04:01:16 +0000 Files and hashes: 1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: hwARD1CZ9E7avTYrgEcG5/i3mK7B1TLtM3C/TISxgdc=) 2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Sep 27 04:01:16 2026 GMT Not After : Oct 4 04:01:16 2026 GMT Subject: CN=6ab8950c-db6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:a2:44:2e:27:81:7c:b2:70:12:00:6f:d9: 05:ab:2f:f9:ad:34:f6:27:91:00:c9:cb:1b:c7:e8: ee:b2:fc:70:37:ef:0f:ec:79:7c:79:05:60:3b:c5: 53:43:74:8e:11:9e:ca:8d:a7:e0:75:5b:96:95:04: b0:d5:05:1d:5e:53:64:65:52:75:83:97:8b:44:59: ec:fe:e1:ed:a0:ce:9a:33:7d:30:c6:62:a0:27:9f: f2:18:61:62:a4:82:1b:eb:85:7f:28:8b:6e:41:02: 00:76:38:d9:05:3a:77:61:c8:3f:d2:b8:a0:07:93: 69:a7:ab:e7:98:42:7b:2e:b8:63:ec:0e:d1:2a:b4: 39:ee:be:fd:08:b6:2d:12:d1:ae:cb:9f:03:fe:a7: d1:c7:4d:38:4e:9e:28:9c:28:63:11:ff:0d:c9:1c: 1f:db:ec:21:b2:14:dd:c1:ed:1d:69:c3:92:31:97: 29:7f:cf:ca:16:f7:6c:35:36:5b:ac:bd:48:4b:f8: 59:e4:11:44:88:ce:9f:23:0b:70:a0:60:98:4e:f6: 82:2e:db:97:23:29:37:ae:2e:ff:1d:9e:d2:dc:07: a6:27:19:ea:80:51:dc:4b:8e:01:c1:d8:63:cb:c5: 50:f0:82:3e:35:57:d6:ca:bd:34:a2:68:29:45:3f: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D3:A6:92:38:CD:33:B3:AA:7F:5A:38:2E:18:6A:AF:4B:44:38:EC X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:57:ec:79:21:6c:84:75:63:ea:a8:75:7d:21:70:d3:55:c2: 03:99:8a:08:3e:18:65:a0:1e:ad:13:43:32:65:97:ae:4e:8e: db:b9:84:25:9f:9a:c0:1b:ff:82:18:5c:c6:b2:a4:6d:9a:4d: d7:ca:02:2a:07:9d:09:dc:b8:c1:3e:5f:b3:71:b5:f5:c5:02: b8:7c:b0:86:b6:95:2a:cd:8b:65:30:96:e1:31:00:fa:7f:0d: 5a:7b:1f:86:ce:e8:a7:89:a4:97:8e:6f:19:45:d2:de:a4:6a: 43:12:06:a8:e4:0d:e4:9c:b5:f9:3d:ec:2b:22:fe:d4:6e:08: ca:2e:c3:0b:fc:a5:d3:8b:e1:97:ec:fb:7a:f6:3d:fd:95:17: e0:7d:26:44:29:e6:e3:96:91:e0:50:22:fe:f8:ae:16:23:85: a0:21:ec:15:63:fd:1a:83:5e:a8:78:6a:12:69:40:36:52:1c: 1a:d2:61:8e:2c:b3:9f:55:ed:d5:df:d9:c8:24:7d:0d:a8:c3: 96:b2:b7:ce:92:ad:70:a3:43:3f:33:cc:33:9a:b0:00:7e:f0: b1:c8:21:60:92:07:c4:43:04:cc:09:57:2e:dd:a3:c2:45:3a: 8d:30:88:0c:91:13:3a:14:6d:56:6a:98:e8:3e:7b:78:a0:bd: 99:76:6f:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjYwOTI3MDQwMTE2WhcNMjYxMDA0MDQwMTE2WjAYMRYwFAYD VQQDEw02YWI4OTUwYy1kYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFWiRC4ngXyycBIAb9kFqy/5rTT2J5EAycsbx+jusvxwN+8P7Hl8eQVgO8VT Q3SOEZ7KjafgdVuWlQSw1QUdXlNkZVJ1g5eLRFns/uHtoM6aM30wxmKgJ5/yGGFi pIIb64V/KItuQQIAdjjZBTp3Ycg/0rigB5Npp6vnmEJ7Lrhj7A7RKrQ57r79CLYt EtGuy58D/qfRx004Tp4onChjEf8NyRwf2+whshTdwe0dacOSMZcpf8/KFvdsNTZb rL1IS/hZ5BFEiM6fIwtwoGCYTvaCLtuXIyk3ri7/HZ7S3AemJxnqgFHcS44Bwdhj y8VQ8II+NVfWyr00omgpRT+eKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInTppI4 zTOzqn9aOC4Yaq9LRDjsMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFR RGRXakJoQXd5SnBJbG9BNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPlfseSFshHVj6qh1fSFw01XCA5mKCD4YZaAerRNDMmWXrk6O27mEJZ+awBv/ ghhcxrKkbZpN18oCKgedCdy4wT5fs3G19cUCuHywhraVKs2LZTCW4TEA+n8NWnsf hs7op4mkl45vGUXS3qRqQxIGqOQN5Jy1+T3sKyL+1G4Iyi7DC/yl04vhl+z7evY9 /ZUX4H0mRCnm45aR4FAi/viuFiOFoCHsFWP9GoNeqHhqEmlANlIcGtJhjiyzn1Xt 1d/ZyCR9DajDlrK3zpKtcKNDPzPMM5qwAH7wscghYJIHxEMEzAlXLt2jwkU6jTCI DJETOhRtVmqY6D57eKC9mXZvWQ== -----END CERTIFICATE-----Generated at Mon Sep 28 20:10:27 2026 by rpki-client