$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: 7pPheI5ODYbrgGS4wJXoP3/GmZPpa88INkTGrNwU6q8= Subject key identifier: 22:BC:5A:40:0E:AC:5F:7C:2F:A3:1F:E4:2F:39:05:6E:98:57:03:C3 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 018D Signing time: Fri 25 Sep 2026 04:38:07 +0000 Manifest this update: Fri 25 Sep 2026 04:38:06 +0000 Manifest next update: Fri 02 Oct 2026 04:38:06 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: s/QKW4iyvi8kuhHRGKMbWGq1zqxTJrIkxsHWq5FZXcU=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: /fpFKtFcwh7KjBndTGfGIO4WW4Bx9KlPmCwqANIq6FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Sep 25 04:38:06 2026 GMT Not After : Oct 2 04:38:06 2026 GMT Subject: CN=6ab5faaf-9f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:f8:94:39:e6:33:5a:8a:44:e1:8d:04:50: d1:dd:7d:66:5e:8f:ca:b1:07:28:51:7e:4a:ee:5e: e3:46:8b:96:a8:45:52:25:66:73:af:c5:b9:09:b3: 71:d7:e5:35:6c:7d:4e:0f:51:55:d0:00:de:23:98: 31:e4:28:7f:bf:26:aa:e7:09:32:a1:bf:cd:1a:22: cc:7a:81:2c:17:f1:0b:3b:a8:d1:06:69:92:a9:bb: 32:90:5e:79:2d:8a:e9:1d:31:cf:37:9a:3d:bf:9c: dc:a7:cb:1b:0c:ba:35:f4:99:47:ff:00:5e:bd:e3: 5b:07:bb:7c:b4:31:6a:e2:b3:f5:43:f6:cb:38:0c: b0:65:7b:dc:bd:66:3b:42:3f:05:a7:04:80:35:f8: 6e:7d:03:c1:c5:33:99:38:96:8c:49:c6:04:de:a7: d7:c2:ab:3e:a7:73:b0:8a:46:4c:b0:1c:63:18:42: 29:45:fc:3f:86:b8:a4:7c:25:9c:9d:2b:7e:01:82: 3a:d4:94:97:c2:5f:9b:81:a0:93:7a:88:b0:49:5a: 27:db:f2:34:4b:00:b5:7c:90:01:e3:47:a1:3d:28: 17:79:a2:18:cb:59:d7:b8:dd:3a:65:04:cc:15:d3: 95:a7:61:e4:8b:f9:93:59:1d:cf:b5:1b:c8:d9:5d: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BC:5A:40:0E:AC:5F:7C:2F:A3:1F:E4:2F:39:05:6E:98:57:03:C3 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f7:98:1c:e7:18:4f:38:2d:47:f5:cf:e4:ef:00:ad:ce:9f: 7c:61:aa:3d:cb:07:51:05:d1:a4:a3:b5:f1:b4:0e:2d:e3:c0: 96:ad:df:be:57:f2:85:25:c8:7b:9e:32:3b:af:04:ff:fd:d3: 15:05:0e:23:da:12:3c:df:cc:97:27:be:ee:df:55:dc:31:b0: b2:8f:53:7a:05:61:99:46:de:8a:06:fd:ee:49:6c:b1:b5:39: 6c:c0:f0:93:1a:73:b8:e5:82:e4:31:32:bd:11:ae:8f:f9:5b: 2b:0f:54:38:88:86:63:a1:be:1c:4a:71:4c:1c:73:65:5e:13: 4e:e3:e2:96:51:42:26:45:86:ca:12:03:ad:d3:7b:52:72:e6: cb:ec:4c:99:8d:2f:f0:1a:0c:cf:fe:b0:af:9b:67:a6:c5:c5: 34:4b:8a:65:ce:23:46:ad:b0:9e:f6:29:c9:b1:af:b9:b0:6e: 97:f2:11:a6:0e:49:93:4d:6a:ed:6b:03:96:db:e9:38:ed:44: 36:67:af:2c:31:10:18:63:38:9b:5c:80:9c:12:8f:40:80:5a: e1:95:ae:64:2a:98:de:a4:e7:90:a3:86:eb:ae:2d:ad:ce:f5: 09:46:19:8e:36:b2:8f:20:00:08:80:32:6b:a3:7c:5f:b6:80: 55:b0:aa:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjYwOTI1MDQzODA2WhcNMjYxMDAyMDQzODA2WjAYMRYwFAYD VQQDEw02YWI1ZmFhZi05ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Qf4lDnmM1qKROGNBFDR3X1mXo/KsQcoUX5K7l7jRouWqEVSJWZzr8W5CbNx 1+U1bH1OD1FV0ADeI5gx5Ch/vyaq5wkyob/NGiLMeoEsF/ELO6jRBmmSqbsykF55 LYrpHTHPN5o9v5zcp8sbDLo19JlH/wBeveNbB7t8tDFq4rP1Q/bLOAywZXvcvWY7 Qj8FpwSANfhufQPBxTOZOJaMScYE3qfXwqs+p3OwikZMsBxjGEIpRfw/hrikfCWc nSt+AYI61JSXwl+bgaCTeoiwSVon2/I0SwC1fJAB40ehPSgXeaIYy1nXuN06ZQTM FdOVp2Hki/mTWR3PtRvI2V3iOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCK8WkAO rF98L6Mf5C85BW6YVwPDMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASPeYHOcYTzgtR/XP5O8Arc6ffGGqPcsHUQXRpKO18bQOLePAlq3fvlfyhSXI e54yO68E//3TFQUOI9oSPN/Mlye+7t9V3DGwso9TegVhmUbeigb97klssbU5bMDw kxpzuOWC5DEyvRGuj/lbKw9UOIiGY6G+HEpxTBxzZV4TTuPillFCJkWGyhIDrdN7 UnLmy+xMmY0v8BoMz/6wr5tnpsXFNEuKZc4jRq2wnvYpybGvubBul/IRpg5Jk01q 7WsDltvpOO1ENmevLDEQGGM4m1yAnBKPQIBa4ZWuZCqY3qTnkKOG664trc71CUYZ jjayjyAACIAya6N8X7aAVbCq3Q== -----END CERTIFICATE-----Generated at Sat Sep 26 14:08:17 2026 by rpki-client