$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: d0nlHgxzdOTZsklSzCJlHn5uGA0Rh0+yhTN3V0IOd0c= Subject key identifier: 9A:F1:C5:EC:64:F2:03:86:7C:82:65:4A:32:51:51:D3:A2:75:69:0D Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0F5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0F47 Signing time: Thu 24 Sep 2026 17:31:58 +0000 Manifest this update: Thu 24 Sep 2026 17:31:58 +0000 Manifest next update: Thu 01 Oct 2026 17:31:58 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: Sss6RlHAE6s/HCJ34mc82nEMah/dx6ViZNNHFnK2Y6E=) 2: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: iGmNhe2U/JgHU115UXZMlUMKdd/xk6VCuDolUguecP8=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: idv/2IXVQV4s0FcPaBXiyKtcotl1AiWEqCu1Wl2Gwy8=) 4: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: JoDyF1+0/uHXUe4b6JwZuFvOHh5ZoEWfFz+rLvuX/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Sep 24 17:31:58 2026 GMT Not After : Oct 1 17:31:58 2026 GMT Subject: CN=6ab55e8e-a990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:1c:b5:e0:93:8a:27:f0:90:15:4a:83:ed: 13:08:4b:8f:e2:8e:d3:ec:aa:1e:59:1e:2d:d1:e1: b1:65:a9:e4:7d:b3:ae:f9:c8:6a:73:7a:ff:96:a1: 66:36:eb:5a:62:f9:d5:67:f4:5d:02:71:99:0f:65: 99:1c:46:43:ba:f4:18:a6:cc:b0:9f:16:1e:d6:13: 7a:0d:8b:9d:30:ec:09:d4:34:56:9b:06:56:22:6a: bc:41:2c:ee:5c:8e:2a:f0:e8:97:5d:59:c4:56:f2: 38:95:11:3e:27:7c:a1:d7:45:2f:13:b1:36:16:37: 5c:8c:8d:7c:b0:cd:db:1f:79:f6:a9:91:43:4c:bd: e2:99:d9:27:bc:9d:40:90:ce:24:09:73:a0:9b:45: b1:25:70:c7:57:af:df:10:1f:fd:a3:fa:a8:51:5c: f3:32:0b:c7:5b:89:7d:2e:6e:28:54:d9:72:a2:d2: b5:ca:5e:53:63:71:a2:b7:9a:36:fd:f0:17:5a:f6: 49:25:9b:fd:3e:2f:53:0b:cf:ef:9e:bc:e8:71:d4: 99:83:2f:6d:97:14:47:77:cc:57:33:18:de:1d:aa: 82:34:44:76:c4:5a:24:4b:2a:54:3a:93:2c:6d:2b: 92:05:65:4b:bf:99:25:28:66:a1:ee:ee:58:13:8c: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:C5:EC:64:F2:03:86:7C:82:65:4A:32:51:51:D3:A2:75:69:0D X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:75:84:98:71:11:ef:8d:4a:87:c3:73:16:f1:26:f9:e7:20: f6:64:e1:e9:1f:85:05:5b:f5:0b:01:60:af:15:6d:06:af:66: c0:02:1e:0a:47:af:60:8c:17:e7:db:69:26:f9:f4:91:d8:cc: b0:81:55:86:b0:ed:00:96:0f:bf:df:56:fe:67:b6:b1:3f:3d: 91:6a:16:eb:2c:ff:05:55:b0:d6:9f:b5:fa:66:43:a6:23:35: 0d:71:a7:99:47:12:d0:d2:c6:43:31:3d:e5:3e:0e:20:4b:60: 87:0a:a6:31:8b:9e:15:2c:f2:74:2d:d6:7e:75:90:34:81:7c: 22:5a:84:57:68:1d:c3:20:d7:51:e7:06:7b:ec:ae:24:ca:17: 1a:d4:b0:98:a6:b1:59:4c:cb:1b:9f:1b:68:ba:43:f4:15:08: 87:05:f4:f1:65:3b:71:fc:c5:3b:e5:8b:f5:8e:19:34:a8:21: 00:9b:03:79:67:9c:db:59:df:9f:82:dc:8d:ca:2d:e6:2c:72: ee:3f:25:60:1c:f2:58:1c:8c:f1:d8:86:46:c4:79:1a:03:5c: f6:dc:4d:41:cd:b4:88:d6:ed:b4:a0:cf:3b:5f:19:bc:d9:25: 9f:f8:cd:18:3e:7b:81:4d:26:57:75:47:80:a0:f3:c1:13:4b: 3d:0e:bb:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjYwOTI0MTczMTU4WhcNMjYxMDAxMTczMTU4WjAYMRYwFAYD VQQDEw02YWI1NWU4ZS1hOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h8cteCTiifwkBVKg+0TCEuP4o7T7KoeWR4t0eGxZankfbOu+chqc3r/lqFm NutaYvnVZ/RdAnGZD2WZHEZDuvQYpsywnxYe1hN6DYudMOwJ1DRWmwZWImq8QSzu XI4q8OiXXVnEVvI4lRE+J3yh10UvE7E2FjdcjI18sM3bH3n2qZFDTL3imdknvJ1A kM4kCXOgm0WxJXDHV6/fEB/9o/qoUVzzMgvHW4l9Lm4oVNlyotK1yl5TY3Git5o2 /fAXWvZJJZv9Pi9TC8/vnrzocdSZgy9tlxRHd8xXMxjeHaqCNER2xFokSypUOpMs bSuSBWVLv5klKGah7u5YE4w9rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrxxexk 8gOGfIJlSjJRUdOidWkNMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHWEmHER741Kh8NzFvEm+ecg9mTh6R+FBVv1CwFgrxVtBq9mwAIeCkevYIwX 59tpJvn0kdjMsIFVhrDtAJYPv99W/me2sT89kWoW6yz/BVWw1p+1+mZDpiM1DXGn mUcS0NLGQzE95T4OIEtghwqmMYueFSzydC3WfnWQNIF8IlqEV2gdwyDXUecGe+yu JMoXGtSwmKaxWUzLG58baLpD9BUIhwX08WU7cfzFO+WL9Y4ZNKghAJsDeWec21nf n4Lcjcot5ixy7j8lYBzyWByM8diGRsR5GgNc9txNQc20iNbttKDPO18ZvNkln/jN GD57gU0mV3VHgKDzwRNLPQ67Ww== -----END CERTIFICATE-----Generated at Fri Sep 25 20:16:11 2026 by rpki-client