$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft File: lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json) Hash identifier: +obC6y66bTtaYvRWGeXn3BwTHh6kUv3wp45CqiRMG1o= Subject key identifier: 42:EC:01:B6:74:1F:38:0B:54:08:EF:97:BC:D6:76:6C:4D:23:3A:68 Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 Certificate issuer: /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft Manifest number: 85 Signing time: Wed 23 Sep 2026 07:26:35 +0000 Manifest this update: Wed 23 Sep 2026 07:26:35 +0000 Manifest next update: Wed 30 Sep 2026 07:26:35 +0000 Files and hashes: 1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: blFf7glnv1AileKkZW1yM4znjNismo9MkCiMf9QPTAI=) 2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: s2faR/BPs0e9l2J2jTA2X6q8H0jSwkE9aF0b9GI1C9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013 Validity Not Before: Sep 23 07:26:35 2026 GMT Not After : Sep 30 07:26:35 2026 GMT Subject: CN=6ab37f2b-da7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:37:25:06:6f:0b:4b:44:a4:47:43:2a:24: 18:ff:ab:02:ae:df:3b:1b:e6:fd:ca:d5:a6:4a:a0: 1c:5e:eb:a5:57:ca:02:84:87:39:60:42:f2:13:9a: 35:aa:6c:65:5b:64:e3:94:c2:93:90:45:53:62:1c: 36:fd:c0:fc:a1:c9:aa:f8:27:55:0e:e3:7d:ac:21: e7:c8:26:78:d8:83:7c:02:a8:fb:28:93:e8:bf:52: 5e:f3:b3:64:36:0c:c4:9f:91:54:2c:fe:ca:37:76: 98:1c:cc:40:c6:55:ea:0d:c9:8d:8b:bc:a9:19:a5: 6c:a1:fa:e1:6e:3d:15:7e:e2:a7:04:a7:d5:4b:22: e4:76:e0:3e:c5:33:c8:c8:52:83:8a:de:97:0a:ed: 28:30:27:6b:b7:96:e0:9a:53:89:1a:74:15:ca:88: ca:ec:88:ad:84:00:d9:62:4f:c6:9c:16:2d:d5:63: c2:b9:1e:21:5d:24:cb:51:c5:d5:f1:04:cf:74:3e: d3:8b:bf:b1:82:a7:1d:c0:9b:73:1d:88:c4:39:95: cd:dc:d2:66:b4:ac:70:ac:58:2a:4c:15:9b:65:4a: 66:c9:59:40:a6:74:da:58:a4:28:9a:cf:cb:16:db: a3:e4:e4:78:a6:17:d4:c4:ef:ad:96:17:96:51:71: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EC:01:B6:74:1F:38:0B:54:08:EF:97:BC:D6:76:6C:4D:23:3A:68 X509v3 Authority Key Identifier: keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:84:b1:3c:43:46:10:64:6f:7d:8a:1c:ca:0e:a8:04:5b:b7: 80:0a:4a:d4:0e:a3:2a:1b:87:14:cb:14:ab:38:6e:83:17:79: 18:4b:ac:3e:56:2a:cc:ca:2d:38:35:ea:3a:8a:e7:d3:b2:aa: 06:23:70:ef:52:69:31:94:f1:f1:8b:56:48:4d:93:1e:3d:78: 51:f2:86:56:76:41:54:74:06:5d:52:19:93:10:cc:e9:cc:e7: 3d:4c:c4:31:09:67:ea:34:81:09:e6:12:88:41:25:bb:77:02: e4:c2:f7:f0:44:70:d1:b5:4f:a1:1a:76:68:b1:0a:24:3e:6e: de:b4:f2:70:e1:a6:40:ca:bd:34:09:9c:af:15:ae:1e:27:bd: 39:eb:6c:ca:52:55:37:19:ea:f7:55:88:27:a3:c5:ff:1e:2e: d6:f8:ca:4b:90:f4:78:ad:9f:4e:43:b5:e4:92:c2:08:f6:62: bb:94:0b:e9:9a:9d:f1:97:e6:bc:2c:63:62:13:a9:d9:d6:28: f5:4c:47:59:90:ef:d6:b2:c1:f4:37:9f:57:a0:68:d4:96:74: 87:e6:dc:89:31:51:03:94:c8:87:66:fc:dd:bc:44:b2:9c:7b: e1:46:2f:e8:5a:0b:81:82:da:ca:9e:5c:63:cf:93:0b:6d:98: 8f:b6:c2:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBOEExMTAvBgNVBAUTKDk0QzY0M0UxNkQwNEE3NzM4QkM3MkI1QjEwN0UwNUIx NjE2MTQwMTMwHhcNMjYwOTIzMDcyNjM1WhcNMjYwOTMwMDcyNjM1WjAYMRYwFAYD VQQDEw02YWIzN2YyYi1kYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaM3JQZvC0tEpEdDKiQY/6sCrt87G+b9ytWmSqAcXuulV8oChIc5YELyE5o1 qmxlW2TjlMKTkEVTYhw2/cD8ocmq+CdVDuN9rCHnyCZ42IN8Aqj7KJPov1Je87Nk NgzEn5FULP7KN3aYHMxAxlXqDcmNi7ypGaVsofrhbj0VfuKnBKfVSyLkduA+xTPI yFKDit6XCu0oMCdrt5bgmlOJGnQVyojK7IithADZYk/GnBYt1WPCuR4hXSTLUcXV 8QTPdD7Ti7+xgqcdwJtzHYjEOZXN3NJmtKxwrFgqTBWbZUpmyVlApnTaWKQoms/L Ftuj5OR4phfUxO+tlheWUXHMswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELsAbZ0 HzgLVAjvl7zWdmxNIzpoMB8GA1UdIwQYMBaAFJTGQ+FtBKdzi8crWxB+BbFhYUAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE4QS85NkMyRkIwOEYy RDExMUYwOTg5QUQ4Q0UzQzZGNTZCQy9sTVpENFcwRXAzT0x4eXRiRUg0RnNXRmhR Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xNWkQ0VzBFcDNPTHh5dGJFSDRGc1dGaFFCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE4QS85NkMyRkIwOEYyRDExMUYwOTg5QUQ4Q0UzQzZGNTZCQy9sTVpENFcwRXAz T0x4eXRiRUg0RnNXRmhRQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFYSxPENGEGRvfYocyg6oBFu3gApK1A6jKhuHFMsUqzhugxd5GEusPlYqzMot ODXqOorn07KqBiNw71JpMZTx8YtWSE2THj14UfKGVnZBVHQGXVIZkxDM6cznPUzE MQln6jSBCeYSiEElu3cC5ML38ERw0bVPoRp2aLEKJD5u3rTycOGmQMq9NAmcrxWu Hie9OetsylJVNxnq91WIJ6PF/x4u1vjKS5D0eK2fTkO15JLCCPZiu5QL6Zqd8Zfm vCxjYhOp2dYo9UxHWZDv1rLB9DefV6Bo1JZ0h+bciTFRA5TIh2b83bxEspx74UYv 6FoLgYLayp5cY8+TC22Yj7bC2w== -----END CERTIFICATE-----Generated at Wed Sep 23 14:21:33 2026 by rpki-client