$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: AipiIFkzJQ8Z4yHFfW6lYN6cxfffvWsHvZ1wiIZnIhw= Subject key identifier: 88:E9:99:83:07:C0:34:A6:1C:C5:47:FE:5A:26:F7:96:E1:4D:AD:EE Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 12D3 Signing time: Thu 24 Sep 2026 16:59:39 +0000 Manifest this update: Thu 24 Sep 2026 16:59:39 +0000 Manifest next update: Thu 01 Oct 2026 16:59:39 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: In+SdltHICkeKDfnSowRC2bmFOBMSUJl1voP5WBqdmk=) 2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Sep 24 16:59:39 2026 GMT Not After : Oct 1 16:59:39 2026 GMT Subject: CN=6ab556fb-36e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:81:20:0d:7b:86:f0:17:2d:f8:34:61:f9: a7:21:aa:ad:25:41:29:44:7f:bf:1a:db:21:3a:85: ab:19:b6:72:c2:ce:05:b2:37:eb:c6:ae:61:05:40: 0b:f0:cc:d2:b6:89:83:8e:5e:23:ff:6a:30:d3:8d: 1f:17:a3:89:d5:51:34:de:c9:7e:76:27:a7:2f:ef: 9e:e3:47:da:e4:79:f7:32:87:56:e5:89:5d:54:b5: 6d:a8:0a:63:a4:b6:c3:6c:75:a9:93:53:52:ad:ba: 2a:06:f4:ed:b6:27:3e:a5:cf:8c:24:e8:72:19:72: 1a:b7:89:f7:59:9a:48:f6:19:85:1c:50:23:b6:7d: b7:bd:c3:e4:74:9b:a6:8a:61:07:89:6d:50:fd:2b: 11:b1:35:f0:ff:8d:c3:b7:16:e2:ae:8b:98:43:64: c6:0a:69:c6:7c:e9:b3:ea:e4:79:19:2b:a6:83:44: 65:6e:74:eb:d0:fa:05:d3:a0:4b:89:53:da:c9:2a: 17:1e:5b:92:00:1a:63:61:af:a3:99:e9:3b:64:27: 0b:a9:bd:8e:a2:aa:1a:d8:64:2d:ea:ae:ed:88:bf: 36:cb:3f:2a:bb:a4:e7:ac:13:6b:8f:04:83:70:3d: 8d:6b:b1:36:32:ab:f7:06:0a:36:af:c5:f9:ec:ec: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:99:83:07:C0:34:A6:1C:C5:47:FE:5A:26:F7:96:E1:4D:AD:EE X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:14:b3:22:b4:74:e6:b2:60:1a:07:c2:e0:e7:32:c4:b1:ad: 62:20:b8:08:2e:b8:af:a1:a4:3b:ea:a9:ea:ab:5d:a2:bc:2c: 17:1b:67:c1:85:99:4f:89:6b:08:63:14:24:b4:a2:89:63:3d: 91:0c:24:50:ec:ad:6d:bb:ea:6e:85:dd:f1:53:04:a5:2d:11: 43:c4:98:66:6e:f5:43:f5:65:85:db:5d:50:96:4b:3f:f9:82: 29:3f:a9:66:5c:1a:c4:0f:9b:7f:ed:5f:f5:ae:b5:e6:c0:d3: fb:09:47:34:a9:e9:f4:3d:de:31:bc:f9:c9:8c:4f:c4:fa:21: c3:a7:6c:6f:d4:83:d5:87:e4:37:1e:47:08:ad:e6:c5:c3:1e: 9f:c8:f9:d3:c7:e3:93:a8:af:10:27:8d:35:ff:b1:81:a4:12: 89:47:d5:64:da:5f:16:d4:ce:12:76:0c:0f:a2:dd:e7:f8:9a: 0b:2f:bb:9a:88:01:9f:41:d7:d7:d7:4d:68:e4:e4:e3:94:43: d4:55:f9:41:2e:1b:a6:64:92:34:e3:97:ee:36:f0:ad:46:0d: 61:40:ad:71:b8:36:ad:37:68:46:70:89:61:28:fd:48:54:7c: 08:9d:e2:73:cb:f8:6d:5a:6c:60:c9:bd:bf:02:25:be:c6:4b: d8:0e:ca:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjYwOTI0MTY1OTM5WhcNMjYxMDAxMTY1OTM5WjAYMRYwFAYD VQQDEw02YWI1NTZmYi0zNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRaBIA17hvAXLfg0YfmnIaqtJUEpRH+/GtshOoWrGbZyws4Fsjfrxq5hBUAL 8MzStomDjl4j/2ow040fF6OJ1VE03sl+dienL++e40fa5Hn3ModW5YldVLVtqApj pLbDbHWpk1NSrboqBvTttic+pc+MJOhyGXIat4n3WZpI9hmFHFAjtn23vcPkdJum imEHiW1Q/SsRsTXw/43DtxbirouYQ2TGCmnGfOmz6uR5GSumg0RlbnTr0PoF06BL iVPaySoXHluSABpjYa+jmek7ZCcLqb2Ooqoa2GQt6q7tiL82yz8qu6TnrBNrjwSD cD2Na7E2Mqv3Bgo2r8X57OyVpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjpmYMH wDSmHMVH/lom95bhTa3uMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVRSzIrR05rJgGgfC4OcyxLGtYiC4CC64r6GkO+qp6qtdorwsFxtnwYWZT4lr CGMUJLSiiWM9kQwkUOytbbvqboXd8VMEpS0RQ8SYZm71Q/VlhdtdUJZLP/mCKT+p ZlwaxA+bf+1f9a615sDT+wlHNKnp9D3eMbz5yYxPxPohw6dsb9SD1YfkNx5HCK3m xcMen8j508fjk6ivECeNNf+xgaQSiUfVZNpfFtTOEnYMD6Ld5/iaCy+7mogBn0HX 19dNaOTk45RD1FX5QS4bpmSSNOOX7jbwrUYNYUCtcbg2rTdoRnCJYSj9SFR8CJ3i c8v4bVpsYMm9vwIlvsZL2A7Kwg== -----END CERTIFICATE-----Generated at Sat Sep 26 16:44:44 2026 by rpki-client