$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft File: R-lr-DG7PMQ7TweEJj5ylYddVRY.mft (raw, json) Hash identifier: ynCiG9xWY/0M6YFf8dhfVnQtZjnq2ltaoSfPSfyP8fw= Subject key identifier: B4:61:92:90:4B:A5:DD:A3:67:B6:63:3C:38:71:57:EA:D4:EF:C4:28 Authority key identifier: 47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 Certificate issuer: /CN=A91C4204/serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft Manifest number: 0103 Signing time: Sun 27 Sep 2026 06:39:17 +0000 Manifest this update: Sun 27 Sep 2026 06:39:16 +0000 Manifest next update: Sun 04 Oct 2026 06:39:16 +0000 Files and hashes: 1: R-lr-DG7PMQ7TweEJj5ylYddVRY.crl (hash: ji1dkRZiLB6vcpHoVrMIdrJlEC6z5bFc26Qv1a14EiE=) 2: CA2D4952300911F0AB675D3EC4F9AE02.roa (hash: LQJzwkclBmwOmL2YkraTcankSfQmcjnSpIupRPPZZKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Validity Not Before: Sep 27 06:39:16 2026 GMT Not After : Oct 4 06:39:16 2026 GMT Subject: CN=6ab8ba15-3a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:c0:8e:91:ac:37:e8:bc:1a:79:c1:4b:15: e1:3c:f4:66:b3:90:5c:0d:a7:16:93:13:1c:3a:3d: 0d:91:dc:70:53:10:8d:39:b4:a8:74:a3:fb:fa:9d: c9:97:9b:73:6e:69:c4:5e:2a:fd:af:16:a5:68:8e: 0d:e2:0e:58:72:60:e7:d0:78:2f:ac:14:bb:d4:cd: a5:fb:20:c4:6a:c9:53:c5:fa:7d:1a:f3:8c:49:98: a2:0c:8d:6f:aa:94:9b:fa:b2:54:d2:d2:8f:f4:a7: fb:1b:3f:8d:28:ba:03:e3:1a:21:5c:f4:20:92:08: b8:96:77:a1:18:8e:11:af:53:35:f8:ac:2a:ad:84: bf:9b:d4:b4:e9:d8:c1:e9:35:de:fa:4b:ca:64:bd: b9:3c:37:89:e3:b7:94:43:83:73:a6:cd:52:34:21: ce:0b:a7:94:26:97:70:5c:94:a8:f4:f1:77:74:43: ee:f2:ca:90:20:0a:42:76:37:d1:f8:66:8e:37:05: a2:16:4e:19:88:df:a4:a2:73:f7:53:3c:c4:12:13: c3:4e:b2:7d:60:f2:a4:ec:7a:5a:07:d7:29:17:34: bd:e0:99:3a:c3:a3:67:37:9f:3e:f7:ce:ba:0c:27: 93:d2:19:bf:99:8c:0f:dd:5e:65:47:73:92:ee:69: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:61:92:90:4B:A5:DD:A3:67:B6:63:3C:38:71:57:EA:D4:EF:C4:28 X509v3 Authority Key Identifier: keyid:47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f0:68:c2:df:5b:b0:36:37:bd:a0:79:dc:0e:92:03:09:68: 10:95:c6:13:5c:dd:59:1e:88:89:0d:e8:3b:4c:9f:33:1e:13: 0e:9f:f4:40:99:1f:65:2b:a1:ef:f1:37:83:74:2a:46:cb:a0: 8c:67:e3:6e:f1:6b:65:ef:21:3c:4c:15:ce:50:86:fc:3b:de: f2:8c:4e:68:b4:b7:eb:f9:a0:d3:a6:64:80:1c:8c:2c:74:f2: 07:91:8f:80:2d:f6:21:33:12:88:c7:cd:d0:60:7a:6e:83:21: 7b:99:41:fc:18:01:2b:a8:06:18:7e:e8:95:5d:9e:76:f2:a4: c1:61:84:6e:40:fa:2e:db:15:91:ff:18:36:64:4f:60:42:34: 10:61:80:fa:ed:9b:bf:01:67:0a:94:86:82:27:84:61:ec:03: 08:9f:bb:2c:13:39:28:4b:39:70:43:e5:8c:ac:60:d2:4f:b1: 87:b7:30:4b:e6:24:b3:14:b0:22:0f:2d:97:f3:d4:a7:7e:c7: 92:13:89:6d:a2:e0:5a:e7:4a:bc:37:64:8a:9a:4a:e0:c4:10: d0:0e:22:3d:45:1b:03:f8:f0:11:56:94:b2:89:9a:0d:ff:b8: c5:b1:57:5c:e6:cf:11:04:bd:14:4e:e4:d3:36:65:7b:5a:77: e4:05:71:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQyMDQxMTAvBgNVBAUTKDQ3RTk2QkY4MzFCQjNDQzQzQjRGMDc4NDI2M0U3Mjk1 ODc1RDU1MTYwHhcNMjYwOTI3MDYzOTE2WhcNMjYxMDA0MDYzOTE2WjAYMRYwFAYD VQQDEw02YWI4YmExNS0zYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU3AjpGsN+i8GnnBSxXhPPRms5BcDacWkxMcOj0NkdxwUxCNObSodKP7+p3J l5tzbmnEXir9rxalaI4N4g5YcmDn0HgvrBS71M2l+yDEaslTxfp9GvOMSZiiDI1v qpSb+rJU0tKP9Kf7Gz+NKLoD4xohXPQgkgi4lnehGI4Rr1M1+KwqrYS/m9S06djB 6TXe+kvKZL25PDeJ47eUQ4Nzps1SNCHOC6eUJpdwXJSo9PF3dEPu8sqQIApCdjfR +GaONwWiFk4ZiN+konP3UzzEEhPDTrJ9YPKk7HpaB9cpFzS94Jk6w6NnN58+9866 DCeT0hm/mYwP3V5lR3OS7mk2ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRhkpBL pd2jZ7ZjPDhxV+rU78QoMB8GA1UdIwQYMBaAFEfpa/gxuzzEO08HhCY+cpWHXVUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDIwNC80NDFCNTA1MjMw MDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BNUTdUd2VFSmo1eWxZZGRW UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ItbHItREc3UE1RN1R3ZUVKajV5bFlkZFZSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDIwNC80NDFCNTA1MjMwMDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BN UTdUd2VFSmo1eWxZZGRWUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHPBowt9bsDY3vaB53A6SAwloEJXGE1zdWR6IiQ3oO0yfMx4TDp/0QJkfZSuh 7/E3g3QqRsugjGfjbvFrZe8hPEwVzlCG/Dve8oxOaLS36/mg06ZkgByMLHTyB5GP gC32ITMSiMfN0GB6boMhe5lB/BgBK6gGGH7olV2edvKkwWGEbkD6LtsVkf8YNmRP YEI0EGGA+u2bvwFnCpSGgieEYewDCJ+7LBM5KEs5cEPljKxg0k+xh7cwS+YksxSw Ig8tl/PUp37HkhOJbaLgWudKvDdkippK4MQQ0A4iPUUbA/jwEVaUsomaDf+4xbFX XObPEQS9FE7k0zZle1p35AVx6w== -----END CERTIFICATE-----Generated at Mon Sep 28 14:09:57 2026 by rpki-client