$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: bNHWB8pmXx+3OsOh3QAs2sh30zLCR8lc/KFXQVemjLo= Subject key identifier: C1:AE:F2:C3:84:EB:83:46:02:35:44:08:FA:B3:28:B4:B0:F6:26:7D Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: E5 Signing time: Wed 23 Sep 2026 06:24:38 +0000 Manifest this update: Wed 23 Sep 2026 06:24:38 +0000 Manifest next update: Wed 30 Sep 2026 06:24:38 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: 12vRSITf+kDzuU8dk1kgUkoQhpxPXh8QSUIovH04fJ4=) 2: 76B542B0A84011F194FA91243A11F970.roa (hash: Ikz0D3kqkyqo0E9vWshLiMP6ATZdwtVz365rPjNjhYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Sep 23 06:24:38 2026 GMT Not After : Sep 30 06:24:38 2026 GMT Subject: CN=6ab370a6-0f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:8d:4a:de:29:6b:62:5c:e3:5c:af:b6:65: c4:48:0a:a4:27:3c:52:57:28:a2:31:c3:ae:97:6c: ea:bb:f9:bd:ea:d4:ce:c7:0a:87:c4:7b:37:18:61: da:94:2a:4e:d4:83:ad:94:01:06:5f:30:cd:95:4c: f3:2e:41:b1:70:7c:21:8b:25:c0:e6:10:7b:fc:f9: 53:8d:4e:5e:a7:cd:39:15:65:40:68:22:c9:6f:95: 5e:8b:5b:c4:4b:11:d6:38:4d:f8:81:cc:f5:7c:f8: 29:f7:2b:a8:7f:33:9a:90:72:a9:94:fc:56:8a:12: 81:c6:02:0e:8f:4b:15:28:00:bc:07:73:43:18:98: e5:5b:56:f9:ee:76:00:7d:07:62:a7:09:2d:96:11: e5:d8:fb:29:0c:18:50:f7:7f:ed:f8:ad:ff:5a:f6: c6:b2:1e:49:b9:0f:4d:6a:8d:0c:84:b8:a8:f0:f5: d1:b9:e3:ad:fe:8f:67:6b:70:ec:08:86:fd:1c:30: 76:28:f2:cd:0a:e4:bf:58:04:e5:16:42:77:fb:29: 2d:97:6a:b1:37:4c:90:a5:10:b4:88:a0:01:89:0b: fe:6d:65:d4:e8:dc:cb:7e:69:a9:c8:12:24:10:0b: e5:64:e1:d8:24:9a:5c:d2:e4:38:49:bb:00:25:82: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AE:F2:C3:84:EB:83:46:02:35:44:08:FA:B3:28:B4:B0:F6:26:7D X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b5:92:01:21:e2:5b:7f:59:0c:fe:3d:99:1c:9a:c5:c1:66: 65:bb:24:d7:bc:d5:00:25:5b:31:43:84:c7:18:1d:69:9b:8c: 16:8c:d4:ed:7e:e8:b3:c7:da:30:e0:b0:9e:50:df:41:3e:ff: ae:e0:9b:ed:87:f8:5a:b7:b4:a6:9b:92:c3:60:dc:8e:3c:98: 00:93:16:38:44:ce:c9:8a:21:be:28:aa:05:b8:ee:f9:1e:6d: 75:45:a3:60:be:cf:ea:0a:c4:13:fa:ac:f8:30:e4:10:d7:1b: 12:d5:87:0b:13:09:7f:f7:87:c9:9e:2a:81:d3:b8:c0:62:64: dd:d8:e6:18:b7:53:8e:23:78:b3:e5:6c:cc:e4:0c:4a:c8:82: af:26:6b:e8:e4:99:3e:7b:55:c7:ed:ad:c4:93:c5:ee:a6:1b: d6:d2:76:87:fa:a2:db:40:c3:94:05:ea:c6:7f:5f:82:5d:10: 1e:30:ab:81:bc:7e:e8:3f:ac:1a:32:dc:47:f8:a4:c6:6b:3c: 45:25:88:02:50:ef:18:0d:01:be:23:f6:ef:46:b8:a0:20:a5: 8f:e8:eb:54:79:95:08:e6:47:a4:8d:19:2c:d9:30:31:b1:03: d5:2b:52:f6:c7:40:88:ca:f2:25:d2:7e:23:0e:3a:f8:0a:3e: fc:9a:b5:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMDExMTAvBgNVBAUTKDk0MzM0OUZEQjZEQzBBRjE1Q0Q1NzREQTQyRjhFQzdC NDlEQzBEQjcwHhcNMjYwOTIzMDYyNDM4WhcNMjYwOTMwMDYyNDM4WjAYMRYwFAYD VQQDEw02YWIzNzBhNi0wZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDiNSt4pa2Jc41yvtmXESAqkJzxSVyiiMcOul2zqu/m96tTOxwqHxHs3GGHa lCpO1IOtlAEGXzDNlUzzLkGxcHwhiyXA5hB7/PlTjU5ep805FWVAaCLJb5Vei1vE SxHWOE34gcz1fPgp9yuofzOakHKplPxWihKBxgIOj0sVKAC8B3NDGJjlW1b57nYA fQdipwktlhHl2PspDBhQ93/t+K3/WvbGsh5JuQ9Nao0MhLio8PXRueOt/o9na3Ds CIb9HDB2KPLNCuS/WATlFkJ3+yktl2qxN0yQpRC0iKABiQv+bWXU6NzLfmmpyBIk EAvlZOHYJJpc0uQ4SbsAJYI2gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGu8sOE 64NGAjVECPqzKLSw9iZ9MB8GA1UdIwQYMBaAFJQzSf223ArxXNV02kL47HtJ3A23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS9GNkE2NDVENjY3 QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2RmMxWFRhUXZqc2UwbmNE YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0RiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIwMS9GNkE2NDVENjY3QTExMUYwQkJFQkRGMDlDNEY5QUUwMi9sRE5KX2JiY0N2 RmMxWFRhUXZqc2UwbmNEYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAbWSASHiW39ZDP49mRyaxcFmZbsk17zVACVbMUOExxgdaZuMFozU7X7os8fa MOCwnlDfQT7/ruCb7Yf4Wre0ppuSw2DcjjyYAJMWOETOyYohviiqBbju+R5tdUWj YL7P6grEE/qs+DDkENcbEtWHCxMJf/eHyZ4qgdO4wGJk3djmGLdTjiN4s+VszOQM SsiCryZr6OSZPntVx+2txJPF7qYb1tJ2h/qi20DDlAXqxn9fgl0QHjCrgbx+6D+s GjLcR/ikxms8RSWIAlDvGA0BviP270a4oCClj+jrVHmVCOZHpI0ZLNkwMbED1StS 9sdAiMryJdJ+Iw46+Ao+/Jq1fQ== -----END CERTIFICATE-----Generated at Wed Sep 23 10:02:31 2026 by rpki-client