$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: mQFKpv56QbrtADG7OZT+8ZpU/gyaUHv2VB+mq8LRnFE= Subject key identifier: 31:7F:26:C6:8B:B7:16:79:7B:A9:E7:39:6D:DC:0E:60:B4:60:C3:51 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: A6 Signing time: Wed 23 Sep 2026 07:03:29 +0000 Manifest this update: Wed 23 Sep 2026 07:03:28 +0000 Manifest next update: Wed 30 Sep 2026 07:03:28 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: 4U91KV4aWlhWkUildr46wKFlZQYqD2+k3WX3fGizacQ=) 2: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) 3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) 4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Sep 23 07:03:28 2026 GMT Not After : Sep 30 07:03:28 2026 GMT Subject: CN=6ab379c1-d1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:7b:b8:e2:a4:76:f8:f0:c3:8c:9b:84:3b: c1:04:b9:72:d8:c0:7b:04:1a:38:64:8a:dc:70:b3: 2f:57:e2:e4:92:1a:d7:eb:67:88:c1:96:77:b8:ac: 45:03:c8:8e:bd:b1:a8:99:16:a8:89:4f:21:f8:66: 01:3c:07:3e:2f:f5:2a:23:10:78:e4:4b:88:4e:20: e8:f9:0d:fe:03:e0:a1:f0:c4:64:1a:9f:b0:40:27: c9:1d:36:b6:63:80:9b:cd:53:e7:25:51:65:53:fd: 1f:44:0c:11:03:1d:e6:7f:a7:04:f6:a6:c5:f0:f5: a2:64:8c:a6:94:ff:ba:0a:c3:22:31:ba:aa:d1:ca: 60:74:c1:58:de:31:95:62:77:87:c5:48:c9:fe:83: de:06:c4:b5:ac:dc:a6:70:01:e5:b2:64:5d:45:00: db:c7:c6:db:99:eb:f1:c8:19:f1:14:f1:2f:90:fe: 2e:2e:67:f2:26:0b:71:cc:1c:5c:38:10:86:73:bb: b8:f2:f0:cc:d4:3a:b6:1b:bb:26:48:35:4f:a8:e1: 60:0c:ed:c0:b8:80:7d:b6:f2:93:73:1c:b4:0b:c2: b2:f4:14:a5:33:9a:d8:3e:c2:93:87:c7:06:48:33: a4:8e:08:1d:bc:65:8f:d8:ac:a3:ee:01:ca:91:b0: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:26:C6:8B:B7:16:79:7B:A9:E7:39:6D:DC:0E:60:B4:60:C3:51 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b3:b0:5d:18:dc:ca:88:71:2a:1e:8b:54:63:fd:f6:27:d8: 03:8d:c1:fe:c5:dc:4c:63:30:d2:f5:88:c9:88:32:3c:9f:d5: 71:3d:aa:2b:26:5a:48:72:74:96:e9:02:0e:6b:41:fd:51:0b: d6:b8:e0:55:a9:35:d5:28:c1:a6:61:0e:57:5f:8e:98:89:3c: c2:8a:6f:14:04:08:a0:00:4a:ab:98:c2:dd:17:ee:b8:46:ef: 77:92:ed:d9:05:a8:5a:b5:30:11:bd:60:87:e7:32:dd:32:3a: b5:79:21:af:f2:76:e7:e8:da:0c:4f:c8:ce:6f:94:4a:19:80: 20:0b:25:69:4a:c1:d6:28:a4:0e:ae:55:c9:50:2a:9c:46:fb: 88:c5:63:40:59:2d:60:62:58:ca:c9:82:dd:1b:a8:8b:df:d9: 2a:99:63:62:36:8a:14:dc:c3:c5:f6:4b:71:dc:50:32:a5:10: 06:db:99:d7:2f:a6:f1:ef:f1:e5:ec:9f:46:42:06:71:18:bf: 0d:bb:69:95:fb:6e:28:ec:51:54:fd:0e:20:fc:25:4d:d8:6d: 17:95:e5:80:74:21:89:c9:76:79:d0:50:ae:ed:d3:1f:3a:52: 4f:ce:ab:28:80:a9:7f:cc:5e:8c:85:4c:c8:f2:0d:cd:10:e4: 31:72:52:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEQUUxMTAvBgNVBAUTKDJEQkZDN0IyODYxNUIxRkY3OEQ3Q0Y0Njg4NkFGOTIx MzlGRjk2OEEwHhcNMjYwOTIzMDcwMzI4WhcNMjYwOTMwMDcwMzI4WjAYMRYwFAYD VQQDEw02YWIzNzljMS1kMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYt7uOKkdvjww4ybhDvBBLly2MB7BBo4ZIrccLMvV+LkkhrX62eIwZZ3uKxF A8iOvbGomRaoiU8h+GYBPAc+L/UqIxB45EuITiDo+Q3+A+Ch8MRkGp+wQCfJHTa2 Y4CbzVPnJVFlU/0fRAwRAx3mf6cE9qbF8PWiZIymlP+6CsMiMbqq0cpgdMFY3jGV YneHxUjJ/oPeBsS1rNymcAHlsmRdRQDbx8bbmevxyBnxFPEvkP4uLmfyJgtxzBxc OBCGc7u48vDM1Dq2G7smSDVPqOFgDO3AuIB9tvKTcxy0C8Ky9BSlM5rYPsKTh8cG SDOkjggdvGWP2Kyj7gHKkbAYOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDF/JsaL txZ5e6nnOW3cDmC0YMNRMB8GA1UdIwQYMBaAFC2/x7KGFbH/eNfPRohq+SE5/5aK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RBRS8yRkJFQTQwMkM4 NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNmOTQxODlHaUdyNUlUbl9s b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RBRS8yRkJFQTQwMkM4NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNm OTQxODlHaUdyNUlUbl9sb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV7OwXRjcyohxKh6LVGP99ifYA43B/sXcTGMw0vWIyYgyPJ/VcT2qKyZaSHJ0 lukCDmtB/VEL1rjgVak11SjBpmEOV1+OmIk8wopvFAQIoABKq5jC3RfuuEbvd5Lt 2QWoWrUwEb1gh+cy3TI6tXkhr/J25+jaDE/Izm+UShmAIAslaUrB1iikDq5VyVAq nEb7iMVjQFktYGJYysmC3Ruoi9/ZKpljYjaKFNzDxfZLcdxQMqUQBtuZ1y+m8e/x 5eyfRkIGcRi/DbtplftuKOxRVP0OIPwlTdhtF5XlgHQhicl2edBQru3THzpST86r KICpf8xejIVMyPINzRDkMXJSSQ== -----END CERTIFICATE-----Generated at Thu Sep 24 22:46:38 2026 by rpki-client