$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: JfJ23Yw9F8WkCWGuD6SYEZ56ZbGriZU+JZn9ZwA7kV4= Subject key identifier: DE:03:8F:3C:FD:C9:11:74:95:20:08:64:67:95:93:3D:07:DD:84:46 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0519 Signing time: Tue 22 Sep 2026 23:19:27 +0000 Manifest this update: Tue 22 Sep 2026 23:19:26 +0000 Manifest next update: Tue 29 Sep 2026 23:19:26 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: lWYuB0L+hLrnU84iR8MGK2Jz4K5YY7i+BceSHncHM7c=) 2: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Hy/M1SuzjjtwQCWZGLtJSooNfC63JGvrwCvSA8jmPig=) 3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: aoDfXs/+Zo3bM4TZQqdH42AnP+MxbUZEFcCO4REaPpo=) 4: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: pFySgYfQ+xZ6rwACdfd3mWWdJ/XmIO+H3i8NnPDCsAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Sep 22 23:19:26 2026 GMT Not After : Sep 29 23:19:26 2026 GMT Subject: CN=6ab30cff-8e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:ec:8e:2d:b2:76:4a:49:d5:e5:57:9b:d9: 04:8a:28:0f:b0:05:00:a6:5f:cb:56:e1:bb:1f:48: 52:0e:59:17:e2:25:06:be:00:38:43:0a:c8:72:e9: 8f:35:7c:25:c2:90:1d:a6:30:62:84:1c:72:38:8a: 31:a8:b8:6f:f6:77:1c:f2:9c:47:75:69:b4:fb:bf: d8:5e:4a:12:94:a5:ca:27:76:74:ff:e6:19:de:59: 30:f4:1d:dd:b5:86:09:bc:1d:ff:5a:b4:b2:62:b9: 78:60:9c:65:93:9d:7c:4b:db:04:b8:cb:f6:35:2e: 0a:a0:b4:18:a4:0d:d0:e5:85:5e:bd:19:8e:42:44: 44:36:58:c4:83:72:ad:df:27:9c:8d:a3:c3:a6:01: 1a:5a:d4:55:ed:6b:e7:05:eb:ef:f1:07:38:25:d3: 6b:31:6f:8e:93:ae:02:21:49:2e:02:a3:9b:2b:2c: 36:11:31:b6:50:b7:e1:86:54:e8:17:32:cb:a3:7b: b7:1e:af:3b:69:73:d8:66:0d:49:59:50:26:ed:e7: b8:30:b4:bd:2b:7c:08:95:dd:67:05:3d:42:31:14: 88:4b:8c:30:98:c7:7d:4e:35:f8:0c:df:c6:a2:83: f6:63:29:63:aa:7a:d4:e9:0f:76:ce:e1:d1:07:8b: 37:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:03:8F:3C:FD:C9:11:74:95:20:08:64:67:95:93:3D:07:DD:84:46 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:70:e2:47:4c:f5:14:eb:23:a4:63:85:0f:fc:c2:f9:2d: eb:c5:40:6a:3a:66:d5:53:f1:46:35:e1:b6:04:0b:29:d9:dd: 67:7d:cd:8e:93:f9:7e:f3:43:9b:de:fc:1c:e3:e2:28:05:b7: 36:9f:1d:d6:5c:81:73:58:25:15:63:fc:a7:f8:4d:92:25:3e: d7:6c:42:fe:e5:62:08:42:59:31:fc:19:97:d0:77:b9:69:45: 01:c8:58:bd:4e:63:ce:fa:4f:1b:c0:00:e0:25:b4:97:4d:38: 21:f2:fc:3c:42:f8:13:64:02:ed:d7:05:0f:20:cb:0f:8d:6b: 99:2c:ef:45:c1:0c:1b:ff:a9:8d:82:59:10:7c:3a:ba:46:84: 5c:19:bc:65:1a:fe:55:ad:64:86:d4:de:eb:45:97:18:ff:33: b2:5a:5c:3b:a0:ad:4d:c9:4c:85:53:aa:a1:a0:80:e1:2f:1b: 89:9d:c0:70:37:20:46:6f:0f:34:02:6c:1f:cc:65:d0:2c:6b: 58:6a:12:10:47:b6:47:a5:67:c3:4e:8e:05:6c:6a:6e:1d:ef: 0a:92:24:84:ec:e1:eb:bb:97:67:17:72:fc:8e:02:cb:d4:26: 2b:dd:5f:a6:d8:3c:1e:38:01:ef:76:b6:35:7a:32:2d:47:1c: 85:e1:49:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjYwOTIyMjMxOTI2WhcNMjYwOTI5MjMxOTI2WjAYMRYwFAYD VQQDEw02YWIzMGNmZi04ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubfsji2ydkpJ1eVXm9kEiigPsAUApl/LVuG7H0hSDlkX4iUGvgA4QwrIcumP NXwlwpAdpjBihBxyOIoxqLhv9ncc8pxHdWm0+7/YXkoSlKXKJ3Z0/+YZ3lkw9B3d tYYJvB3/WrSyYrl4YJxlk518S9sEuMv2NS4KoLQYpA3Q5YVevRmOQkRENljEg3Kt 3yecjaPDpgEaWtRV7WvnBevv8Qc4JdNrMW+Ok64CIUkuAqObKyw2ETG2ULfhhlTo FzLLo3u3Hq87aXPYZg1JWVAm7ee4MLS9K3wIld1nBT1CMRSIS4wwmMd9TjX4DN/G ooP2YyljqnrU6Q92zuHRB4s3PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4Djzz9 yRF0lSAIZGeVkz0H3YRGMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7dw4kdM9RTrI6RjhQ/8wvkt68VAajpm1VPxRjXhtgQLKdndZ33NjpP5fvND m978HOPiKAW3Np8d1lyBc1glFWP8p/hNkiU+12xC/uViCEJZMfwZl9B3uWlFAchY vU5jzvpPG8AA4CW0l004IfL8PEL4E2QC7dcFDyDLD41rmSzvRcEMG/+pjYJZEHw6 ukaEXBm8ZRr+Va1khtTe60WXGP8zslpcO6CtTclMhVOqoaCA4S8biZ3AcDcgRm8P NAJsH8xl0CxrWGoSEEe2R6Vnw06OBWxqbh3vCpIkhOzh67uXZxdy/I4Cy9QmK91f ptg8HjgB73a2NXoyLUccheFJLg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:21:21 2026 by rpki-client