$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: XEPn1lFH8+jEOyZgklQx2gFv0qMFNwyUOXK4e3709nk= Subject key identifier: 23:13:20:71:76:27:83:85:FE:AF:D9:66:70:12:2F:57:1C:8F:97:78 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: C0 Signing time: Fri 13 Nov 2026 07:11:17 +0000 Manifest this update: Fri 13 Nov 2026 07:11:17 +0000 Manifest next update: Fri 20 Nov 2026 07:11:17 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: ekTAP9odwTEUpptHTk8JFzuMRH2wqNbj2sf1WMzJxKM=) 2: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) 3: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) 4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 07:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Nov 13 07:11:17 2026 GMT Not After : Nov 20 07:11:17 2026 GMT Subject: CN=6af6b815-b1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:5d:3d:d8:4d:aa:ef:5f:5e:08:32:36:59: b6:58:d4:35:b4:6b:55:6f:90:48:7f:c9:f7:75:6a: 3b:f1:4a:c5:77:02:e9:70:b4:7d:1e:14:12:5d:3d: 7b:15:e8:43:d8:af:4a:8f:f3:93:f9:2e:a8:d7:eb: 76:28:b1:2c:5b:6c:db:07:53:84:26:05:78:38:b4: a0:2a:ad:85:4e:2d:8e:de:2a:1f:99:6a:cc:ba:8e: d1:d0:c4:22:6f:89:27:d5:84:0a:28:d6:d0:1f:6e: d7:8d:ce:89:25:af:2d:ff:7b:14:d9:2d:10:08:2d: a0:d3:6f:dd:e0:cc:b6:ac:47:37:d2:d4:6d:b5:e3: 70:e4:40:da:85:93:d3:03:b6:0b:56:14:13:b2:cb: 5d:ad:f9:36:34:b0:6b:cb:49:13:fd:78:cd:3b:59: 47:3d:7f:74:e0:bf:10:66:97:64:91:f6:c3:bc:61: 61:80:17:e5:4d:66:c3:d9:89:32:29:2d:ab:c4:03: dc:41:b8:69:e0:f6:8b:8e:bc:6e:2b:4b:7e:f4:3d: 46:49:42:16:e0:9f:a1:8f:30:4e:54:1e:7b:86:58: 3c:b4:e2:b0:d2:3f:42:fe:fb:a8:79:13:ff:3a:84: 7f:e6:c3:dc:10:98:95:b4:21:2b:87:f0:fa:9c:81: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:13:20:71:76:27:83:85:FE:AF:D9:66:70:12:2F:57:1C:8F:97:78 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5a:c8:c1:e8:52:04:12:24:c8:e7:d1:4a:2e:de:0b:1d:7c: a3:23:0a:a2:75:ca:11:76:37:85:ed:30:4d:1b:9c:98:4b:0b: 22:03:d5:38:75:e6:56:5b:9c:a3:03:fa:cc:c7:48:69:e7:0b: 79:da:fb:38:07:23:6e:b0:cb:2f:58:b6:4f:e8:ea:d6:d0:8c: 0f:dc:8d:1a:aa:d4:b4:92:62:50:c2:f1:5d:bf:ca:9c:bd:2e: e8:b5:06:6c:d3:54:38:f5:d7:dd:15:a7:f3:a2:15:ce:5b:9f: 2d:9b:aa:9a:cd:71:58:3b:b7:da:b1:02:cb:1b:4f:ec:72:86: 2c:61:05:10:26:22:61:ca:13:43:5a:b9:8b:8d:81:fc:9d:09: 27:6d:14:5e:38:a7:c5:b6:80:00:92:3d:27:7a:67:c6:0a:fa: d1:d8:c8:17:f0:df:d9:b4:c2:3a:cc:49:78:51:bf:07:b1:2c: 41:65:b6:74:c1:17:db:46:27:92:91:4c:6b:4c:ca:ec:f4:c5: 7d:bf:9e:25:ca:9d:49:b8:1e:86:37:d7:65:b1:7c:8a:b5:48: e3:c0:19:7c:2b:84:e7:86:0b:81:74:16:30:90:f0:61:dd:a9: 2a:38:e8:2f:e8:44:b3:2e:a6:87:49:81:5c:30:81:24:8e:38: df:9f:53:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEQUUxMTAvBgNVBAUTKDJEQkZDN0IyODYxNUIxRkY3OEQ3Q0Y0Njg4NkFGOTIx MzlGRjk2OEEwHhcNMjYxMTEzMDcxMTE3WhcNMjYxMTIwMDcxMTE3WjAYMRYwFAYD VQQDEw02YWY2YjgxNS1iMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAit5dPdhNqu9fXggyNlm2WNQ1tGtVb5BIf8n3dWo78UrFdwLpcLR9HhQSXT17 FehD2K9Kj/OT+S6o1+t2KLEsW2zbB1OEJgV4OLSgKq2FTi2O3iofmWrMuo7R0MQi b4kn1YQKKNbQH27Xjc6JJa8t/3sU2S0QCC2g02/d4My2rEc30tRtteNw5EDahZPT A7YLVhQTsstdrfk2NLBry0kT/XjNO1lHPX904L8QZpdkkfbDvGFhgBflTWbD2Yky KS2rxAPcQbhp4PaLjrxuK0t+9D1GSUIW4J+hjzBOVB57hlg8tOKw0j9C/vuoeRP/ OoR/5sPcEJiVtCErh/D6nIGfQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMTIHF2 J4OF/q/ZZnASL1ccj5d4MB8GA1UdIwQYMBaAFC2/x7KGFbH/eNfPRohq+SE5/5aK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RBRS8yRkJFQTQwMkM4 NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNmOTQxODlHaUdyNUlUbl9s b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RBRS8yRkJFQTQwMkM4NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNm OTQxODlHaUdyNUlUbl9sb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg1rIwehSBBIkyOfRSi7eCx18oyMKonXKEXY3he0wTRucmEsLIgPVOHXmVluc owP6zMdIaecLedr7OAcjbrDLL1i2T+jq1tCMD9yNGqrUtJJiUMLxXb/KnL0u6LUG bNNUOPXX3RWn86IVzlufLZuqms1xWDu32rECyxtP7HKGLGEFECYiYcoTQ1q5i42B /J0JJ20UXjinxbaAAJI9J3pnxgr60djIF/Df2bTCOsxJeFG/B7EsQWW2dMEX20Yn kpFMa0zK7PTFfb+eJcqdSbgehjfXZbF8irVI48AZfCuE54YLgXQWMJDwYd2pKjjo L+hEsy6mh0mBXDCBJI44359TbQ== -----END CERTIFICATE-----Generated at Sat Nov 14 22:21:44 2026 by rpki-client