$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json) Hash identifier: uCSKqHdoLXoJoAPomjTp2Kk2nk5Q2GH/6VIbu1Rs65A= Subject key identifier: 75:D4:FA:6C:D6:58:C9:A7:C3:C7:31:14:CA:B6:11:45:9B:1F:E6:98 Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft Manifest number: 0177 Signing time: Wed 23 Sep 2026 04:35:22 +0000 Manifest this update: Wed 23 Sep 2026 04:35:21 +0000 Manifest next update: Wed 30 Sep 2026 04:35:21 +0000 Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: D5DhfF5s3H1yo9nf3APr7hCG+0FLfY+K7c5y4YksLXk=) 2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: /6Pq80Gx56ZFBPBtnhjbMbxhhA7hiQGMfNWAnIYq0MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Validity Not Before: Sep 23 04:35:21 2026 GMT Not After : Sep 30 04:35:21 2026 GMT Subject: CN=6ab3570a-3487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:04:c6:18:29:4e:8f:5a:0c:80:d4:29:db:04: 6d:e4:ad:31:1a:1a:41:71:00:3c:31:11:1a:ee:45: c3:63:55:91:41:ca:fc:8e:c2:d4:8c:17:71:48:6c: 2a:09:f7:b0:02:9d:b8:c1:cb:0f:c3:b4:77:a5:5f: b3:26:d3:c1:bd:86:22:8d:dd:9b:02:58:fb:ce:2a: 9f:cf:60:84:b9:d3:a0:47:1c:23:4b:a6:54:81:87: a5:ad:cb:77:ab:ed:fa:b6:08:d4:00:7c:e1:e7:70: bf:4d:19:6f:be:99:62:35:68:b4:54:c8:81:0e:66: 46:fe:39:57:88:50:e2:fd:66:d7:ba:6f:72:59:6e: 85:16:e1:08:26:76:f3:5b:eb:b1:bf:99:ef:8b:06: 60:d0:d7:a1:3b:7a:1f:b1:65:b8:fd:4c:64:28:36: da:d2:be:f1:ef:af:0f:78:ec:9e:d4:9d:c7:e7:44: d8:6d:9e:b0:27:57:df:17:92:64:62:a2:7c:76:7c: ee:f1:32:d5:5e:cb:2a:72:20:90:bc:f0:7a:4b:5d: 75:b6:6c:cb:c7:ef:07:2f:ab:36:a7:47:37:99:e5: b3:ba:9e:9c:07:9e:8d:00:1f:5a:3c:79:56:ae:aa: 8d:b6:4d:cf:26:64:62:d8:83:08:c9:52:ed:1f:c0: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:FA:6C:D6:58:C9:A7:C3:C7:31:14:CA:B6:11:45:9B:1F:E6:98 X509v3 Authority Key Identifier: keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:68:62:3f:fb:10:52:d7:34:f2:5f:c8:38:31:51:c9:27:00: 30:a8:64:d6:34:59:3f:68:13:89:d3:d3:dc:05:d8:b6:b7:52: 4e:f4:d1:0f:19:41:7d:72:08:61:b5:d9:f6:48:94:48:e4:d8: 7d:27:ce:bf:e9:bb:60:cf:3f:fa:3d:82:a4:fa:03:c6:f5:4f: ec:b3:a0:fd:29:66:97:01:0c:19:7a:b2:2a:85:96:cd:84:97: 57:44:a8:e6:57:52:c5:1d:6d:77:a2:7c:77:be:ca:87:63:4b: e4:7a:85:28:a6:ff:03:16:8c:a0:88:ae:2c:f5:e4:20:3e:7f: b1:27:68:59:1a:c1:ee:9f:4f:be:40:9e:53:97:e5:30:11:16: 78:db:7a:31:79:5b:13:9b:a2:e9:34:52:b5:57:32:68:2c:63: b0:23:0d:6a:27:e6:04:83:4c:74:36:bb:40:71:dc:e5:09:13: 26:2e:58:02:eb:55:d9:93:1d:f5:f8:2c:bf:76:04:94:d7:09: 0c:e1:ff:b1:fa:be:38:dc:e5:d0:97:ff:f7:28:ce:ad:07:22: 94:4c:87:a2:b5:c5:59:84:8b:ad:15:5e:f1:38:49:82:07:e7: cb:d3:1e:89:40:0f:fc:3e:9c:e2:7a:29:65:29:b4:29:f3:96: ea:bd:42:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMEUxMTAvBgNVBAUTKDk1N0U1MEE3NUZCRTUwMkYzOEUzRURCRjNGNEFBQUU2 NjVBRTE0OEIwHhcNMjYwOTIzMDQzNTIxWhcNMjYwOTMwMDQzNTIxWjAYMRYwFAYD VQQDEw02YWIzNTcwYS0zNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wTGGClOj1oMgNQp2wRt5K0xGhpBcQA8MREa7kXDY1WRQcr8jsLUjBdxSGwq CfewAp24wcsPw7R3pV+zJtPBvYYijd2bAlj7ziqfz2CEudOgRxwjS6ZUgYelrct3 q+36tgjUAHzh53C/TRlvvpliNWi0VMiBDmZG/jlXiFDi/WbXum9yWW6FFuEIJnbz W+uxv5nviwZg0NehO3ofsWW4/UxkKDba0r7x768PeOye1J3H50TYbZ6wJ1ffF5Jk YqJ8dnzu8TLVXssqciCQvPB6S111tmzLx+8HL6s2p0c3meWzup6cB56NAB9aPHlW rqqNtk3PJmRi2IMIyVLtH8COAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXU+mzW WMmnw8cxFMq2EUWbH+aYMB8GA1UdIwQYMBaAFJV+UKdfvlAvOOPtvz9KquZlrhSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80RTZDQjRGNjgw NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVDODQ0LTJfUDBxcTVtV3VG SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYNVFwMS0tVUM4NDQtMl9QMHFxNW1XdUZJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIwRS80RTZDQjRGNjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVD ODQ0LTJfUDBxcTVtV3VGSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASmhiP/sQUtc08l/IODFRyScAMKhk1jRZP2gTidPT3AXYtrdSTvTRDxlBfXII YbXZ9kiUSOTYfSfOv+m7YM8/+j2CpPoDxvVP7LOg/SlmlwEMGXqyKoWWzYSXV0So 5ldSxR1td6J8d77Kh2NL5HqFKKb/AxaMoIiuLPXkID5/sSdoWRrB7p9PvkCeU5fl MBEWeNt6MXlbE5ui6TRStVcyaCxjsCMNaifmBINMdDa7QHHc5QkTJi5YAutV2ZMd 9fgsv3YElNcJDOH/sfq+ONzl0Jf/9yjOrQcilEyHorXFWYSLrRVe8ThJggfny9Me iUAP/D6c4nopZSm0KfOW6r1Cjg== -----END CERTIFICATE-----Generated at Thu Sep 24 20:13:07 2026 by rpki-client