$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft File: LD0jWhshn0FmEJALADuKv9wXAqI.mft (raw, json) Hash identifier: ynAQSmQvHjA8BwVY/b+v77f4XKWkQRo+SEu6oPsDQ9I= Subject key identifier: CE:B8:70:9A:04:3B:CB:0D:98:FA:FD:52:71:9C:96:40:B3:50:88:9E Authority key identifier: 2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 Certificate issuer: /CN=A91CEA40/serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft Manifest number: 0705 Signing time: Sat 26 Sep 2026 22:18:08 +0000 Manifest this update: Sat 26 Sep 2026 22:18:07 +0000 Manifest next update: Sat 03 Oct 2026 22:18:07 +0000 Files and hashes: 1: LD0jWhshn0FmEJALADuKv9wXAqI.crl (hash: I5au83CzWGy+S1nSyNSRZ6QCC1+Uk2TMRfm1vK9hQPs=) 2: 96F093D4BEA011EB8CAD965FC4F9AE02.roa (hash: iGuCHDAUL0PXZn0ORHKJTEzzVOLk9UA+q1lRAx9/x7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 22:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Validity Not Before: Sep 26 22:18:07 2026 GMT Not After : Oct 3 22:18:07 2026 GMT Subject: CN=6ab844a0-6eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:9f:ff:4c:91:23:0d:d9:5a:08:70:30:29: 48:94:dc:05:03:24:a1:a6:94:4a:c5:2d:89:df:33: 99:0d:72:f5:01:61:f7:d7:cc:2b:c7:00:6b:eb:fd: d2:35:b5:63:fb:b2:6f:25:ba:33:85:53:0c:eb:42: 59:42:f6:50:9b:5d:d8:99:e2:dc:c3:e3:1f:1f:da: 36:40:cb:34:65:2d:54:96:0f:74:a1:ac:3b:e6:c4: 25:16:46:d1:3b:a7:76:b1:9c:3a:46:d1:a1:d3:37: 3b:bf:70:66:94:c4:a1:ce:fb:b2:6e:ad:73:72:63: f2:00:a8:b6:1e:ca:e4:d8:ce:65:87:1c:e2:ac:67: 44:ef:47:30:84:b8:a6:40:07:0e:e5:bb:a1:9f:68: 99:65:9c:c7:7f:b7:c4:bc:ff:7a:26:4d:5f:c9:c2: f6:2d:d6:24:ad:3b:db:92:86:6b:ea:78:34:18:5c: a1:cc:8e:5d:bd:07:19:41:4a:47:07:51:31:d5:d9: 1e:89:f7:19:17:4c:9d:25:08:b1:86:cf:51:a9:03: 54:6f:25:71:41:2b:f9:b7:01:2d:2e:cb:e9:6b:e9: ce:15:04:74:31:f4:16:81:9a:b8:14:dc:63:d7:27: e3:eb:67:dd:23:90:67:2e:da:76:48:db:74:2a:1f: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:70:9A:04:3B:CB:0D:98:FA:FD:52:71:9C:96:40:B3:50:88:9E X509v3 Authority Key Identifier: keyid:2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c8:36:76:9a:2d:cb:bf:cc:85:2d:a2:41:d1:fb:fd:41:f8: 9d:27:ef:18:38:64:d3:42:30:31:38:68:5d:86:58:f8:82:95: d0:2f:0d:8b:f3:74:73:c0:8d:cd:23:29:3f:58:69:99:18:2e: f3:b4:ea:0b:0a:80:f5:0d:66:d4:cb:60:86:3e:17:e9:17:80: 2e:3b:61:58:bb:42:2a:91:99:f7:cb:8b:01:f2:b6:52:ea:0e: 44:19:fb:70:45:c1:8a:64:04:65:a4:87:f4:1b:13:e1:07:e5: 14:1a:59:55:a5:8b:8c:1c:59:e1:05:90:39:5a:ec:00:c8:18: 3b:5d:f7:cc:83:f9:22:54:06:e0:18:2e:5d:18:05:49:b7:03: a1:2f:ea:5d:2d:6f:d8:30:64:4e:da:3d:ae:31:b3:67:ce:49: e5:56:bf:78:e6:8e:2d:83:71:05:fd:3f:92:8d:1f:15:3e:34: fd:8b:bc:ee:03:d8:e2:31:f7:70:f3:ac:6b:73:2f:6f:62:f0: ff:29:b0:37:13:28:22:f0:3c:f8:1b:b7:cc:1e:3a:dc:d6:44: fb:46:fc:c4:5b:6b:37:1c:93:c3:1a:c0:df:98:fd:56:53:b3: 10:ca:fc:c0:15:b8:a6:20:76:be:ae:6d:1a:82:94:4b:df:79: d2:d8:31:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBNDAxMTAvBgNVBAUTKDJDM0QyMzVBMUIyMTlGNDE2NjEwOTAwQjAwM0I4QUJG REMxNzAyQTIwHhcNMjYwOTI2MjIxODA3WhcNMjYxMDAzMjIxODA3WjAYMRYwFAYD VQQDEw02YWI4NDRhMC02ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/Kf/0yRIw3ZWghwMClIlNwFAyShppRKxS2J3zOZDXL1AWH318wrxwBr6/3S NbVj+7JvJbozhVMM60JZQvZQm13YmeLcw+MfH9o2QMs0ZS1Ulg90oaw75sQlFkbR O6d2sZw6RtGh0zc7v3BmlMShzvuybq1zcmPyAKi2Hsrk2M5lhxzirGdE70cwhLim QAcO5buhn2iZZZzHf7fEvP96Jk1fycL2LdYkrTvbkoZr6ng0GFyhzI5dvQcZQUpH B1Ex1dkeifcZF0ydJQixhs9RqQNUbyVxQSv5twEtLsvpa+nOFQR0MfQWgZq4FNxj 1yfj62fdI5BnLtp2SNt0Kh8R7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM64cJoE O8sNmPr9UnGclkCzUIieMB8GA1UdIwQYMBaAFCw9I1obIZ9BZhCQCwA7ir/cFwKi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUE0MC84RTk2NEJDRUFG NzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4wRm1FSkFMQUR1S3Y5d1hB cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEMGpXaHNobjBGbUVKQUxBRHVLdjl3WEFxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUE0MC84RTk2NEJDRUFGNzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4w Rm1FSkFMQUR1S3Y5d1hBcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQcg2dpoty7/MhS2iQdH7/UH4nSfvGDhk00IwMThoXYZY+IKV0C8Ni/N0c8CN zSMpP1hpmRgu87TqCwqA9Q1m1Mtghj4X6ReALjthWLtCKpGZ98uLAfK2UuoORBn7 cEXBimQEZaSH9BsT4QflFBpZVaWLjBxZ4QWQOVrsAMgYO133zIP5IlQG4BguXRgF SbcDoS/qXS1v2DBkTto9rjGzZ85J5Va/eOaOLYNxBf0/ko0fFT40/Yu87gPY4jH3 cPOsa3Mvb2Lw/ymwNxMoIvA8+Bu3zB463NZE+0b8xFtrNxyTwxrA35j9VlOzEMr8 wBW4piB2vq5tGoKUS9950tgxMw== -----END CERTIFICATE-----Generated at Sun Sep 27 08:14:55 2026 by rpki-client