$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: Mb82Ns6pQue7xSpUl2wk1FBdvaCTFWg8dERMoai8bkU= Subject key identifier: 7F:43:A3:C2:55:F3:D1:92:0B:99:0F:40:A5:25:34:48:9A:99:B9:42 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 0190 Signing time: Wed 23 Sep 2026 04:21:12 +0000 Manifest this update: Wed 23 Sep 2026 04:21:11 +0000 Manifest next update: Wed 30 Sep 2026 04:21:11 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: ayqBjtv1Fp82gCcXTUbiMUuYag98raJ1tR0UYjdxkBQ=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) 3: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) 4: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Sep 23 04:21:11 2026 GMT Not After : Sep 30 04:21:11 2026 GMT Subject: CN=6ab353b8-5725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:c7:38:1d:6f:e4:df:30:50:4e:82:ae:63: 25:b8:f0:51:86:41:82:b3:e7:2c:3f:a6:f7:eb:e5: 2a:23:bc:26:7a:9f:b7:b7:26:e2:1d:16:52:64:09: 96:47:35:d6:ae:eb:fc:ab:b9:c6:fd:ef:3c:ee:9c: f2:22:8c:c6:54:26:1f:69:95:21:a5:d0:98:f1:51: 41:8e:67:6d:b5:b3:29:a1:8f:cc:6e:75:49:b9:d9: fc:1f:04:0e:c2:91:32:8b:4e:94:69:35:25:df:ae: 41:ab:eb:9e:d7:65:66:e7:37:d1:b1:bf:cf:47:a0: b5:a0:52:55:ba:79:3d:11:53:fc:a3:4c:b6:af:3a: fc:05:0a:72:8b:b9:53:37:b2:10:74:fc:9c:d5:c1: 19:24:b6:3e:05:85:4f:18:16:05:7e:a5:7f:b7:2c: aa:d0:45:77:eb:9d:ee:55:36:b2:7c:d9:1c:0c:6d: de:1e:c3:e4:02:eb:0c:6c:e0:58:02:15:d0:b2:29: 2e:59:0a:67:d0:7a:70:c7:3d:e2:de:87:fd:25:4c: 29:be:24:05:f3:5a:1e:f8:94:ce:03:8d:16:29:61: 06:a7:0b:f2:c4:7a:96:89:d8:dd:59:dc:2e:0d:1c: 80:82:c1:4f:04:c9:01:4c:17:d7:d8:b1:d3:72:7d: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:43:A3:C2:55:F3:D1:92:0B:99:0F:40:A5:25:34:48:9A:99:B9:42 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:75:88:13:de:ef:24:66:05:eb:79:fa:e9:bc:ad:b8:4a:e9: ae:c7:08:bb:8c:da:39:e1:0d:e1:7d:03:42:ba:ce:4d:6b:13: 37:7e:31:a4:67:57:48:d7:bc:aa:4c:96:d2:d1:27:fb:1e:8a: ba:42:65:9f:74:f9:1f:4a:a3:f7:8a:65:56:e4:93:9b:fa:ca: f0:13:d1:cc:3b:ed:ae:ee:ee:9f:de:6f:06:d9:b5:e2:15:5e: 00:3b:0b:10:0b:a6:53:c6:69:7c:aa:05:d4:6d:00:1e:d3:10: 57:54:f9:fa:a2:ea:aa:8c:29:a2:14:ec:ca:a6:6d:48:ef:db: 93:ec:2a:14:8e:ad:af:c9:69:54:5e:bb:f7:3c:00:99:64:3c: 1b:2b:d6:0c:41:f6:41:d7:58:cf:83:5d:64:5c:75:66:c5:67: 43:c3:5c:9b:e1:66:db:75:04:b8:75:c1:84:f9:bd:0a:c3:66: 67:c9:73:36:14:b6:70:86:b4:74:e1:74:01:fb:e5:09:a7:63: cb:c9:5c:56:c0:31:8e:ce:1b:f7:54:f5:71:91:3a:f9:bc:2a: 4e:6c:3b:ba:20:f3:fb:16:46:14:83:6b:aa:66:24:7c:e7:63: c0:2f:6e:ed:3d:84:03:58:dc:5b:3b:45:37:28:88:11:92:dc: a8:df:37:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwOTIzMDQyMTExWhcNMjYwOTMwMDQyMTExWjAYMRYwFAYD VQQDEw02YWIzNTNiOC01NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+7HOB1v5N8wUE6CrmMluPBRhkGCs+csP6b36+UqI7wmep+3tybiHRZSZAmW RzXWruv8q7nG/e887pzyIozGVCYfaZUhpdCY8VFBjmdttbMpoY/MbnVJudn8HwQO wpEyi06UaTUl365Bq+ue12Vm5zfRsb/PR6C1oFJVunk9EVP8o0y2rzr8BQpyi7lT N7IQdPyc1cEZJLY+BYVPGBYFfqV/tyyq0EV3653uVTayfNkcDG3eHsPkAusMbOBY AhXQsikuWQpn0Hpwxz3i3of9JUwpviQF81oe+JTOA40WKWEGpwvyxHqWidjdWdwu DRyAgsFPBMkBTBfX2LHTcn3rwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9Do8JV 89GSC5kPQKUlNEiamblCMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEnWIE97vJGYF63n66bytuErprscIu4zaOeEN4X0DQrrOTWsTN34xpGdXSNe8 qkyW0tEn+x6KukJln3T5H0qj94plVuSTm/rK8BPRzDvtru7un95vBtm14hVeADsL EAumU8ZpfKoF1G0AHtMQV1T5+qLqqowpohTsyqZtSO/bk+wqFI6tr8lpVF679zwA mWQ8GyvWDEH2QddYz4NdZFx1ZsVnQ8Ncm+Fm23UEuHXBhPm9CsNmZ8lzNhS2cIa0 dOF0AfvlCadjy8lcVsAxjs4b91T1cZE6+bwqTmw7uiDz+xZGFINrqmYkfOdjwC9u 7T2EA1jcWztFNyiIEZLcqN83Kw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:06:24 2026 by rpki-client