$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: 1gNEnxD+BSuc22cB6YqisXiW2AnnA6LEGFD+jeo/4h0= Subject key identifier: 21:ED:DD:7B:5C:18:BD:B5:91:47:90:FA:7C:01:B8:8A:C8:77:C6:3A Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0A98 Signing time: Mon 28 Sep 2026 19:40:32 +0000 Manifest this update: Mon 28 Sep 2026 19:40:31 +0000 Manifest next update: Mon 05 Oct 2026 19:40:31 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: DNMMgcQjoRfLNrXp2ePYN2zHRNF9LeZXGD6DeBAnPfE=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: 8gfMMaRVrtkX5a9ZT5jiYrSA6yuefa6iSnnXB/9jTng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2722 (0xaa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Sep 28 19:40:31 2026 GMT Not After : Oct 5 19:40:31 2026 GMT Subject: CN=6abac2af-5519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:1c:5f:f6:aa:0d:fa:fc:f3:37:cb:27:98: 6a:46:ce:10:a7:fb:61:39:30:8d:83:36:7f:8b:63: 02:3f:ae:6e:0c:22:0e:ab:d4:b7:52:ab:73:cf:68: 3c:f3:58:23:a4:f5:7a:fb:f5:2f:8f:b5:5b:ff:c3: cd:7b:24:80:42:a3:8f:84:6f:f5:68:96:c6:81:10: 98:bf:2f:e9:8b:36:22:da:7b:c0:e1:09:b8:6c:49: 3a:3c:9f:00:52:6d:7b:95:e4:01:19:ad:2c:b4:16: f4:5d:2a:44:f7:ed:89:b1:32:8d:14:f1:89:39:3d: d8:72:81:94:41:94:2f:33:10:8a:fe:53:a3:af:af: dd:8c:ed:c6:f9:53:78:f5:05:65:b1:75:ab:19:34: 54:6a:e1:e3:0d:f0:e8:6e:88:70:e5:97:2d:dd:fc: d5:59:47:00:db:8c:b9:65:96:7a:e0:81:75:d7:c0: 04:a9:e0:56:8c:e6:db:3c:09:70:54:60:35:99:96: 0b:9c:50:57:f0:cb:11:36:f9:ea:f7:24:27:ff:d4: 74:8c:a2:8d:30:b4:1e:2c:9a:79:f3:34:c2:75:12: bb:52:ed:59:00:6c:5b:b8:f2:d4:7a:7c:02:88:fc: 69:53:c4:01:5e:2d:d0:b4:6e:33:fd:6d:f1:34:ff: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:DD:7B:5C:18:BD:B5:91:47:90:FA:7C:01:B8:8A:C8:77:C6:3A X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:33:20:9e:42:17:0f:bd:eb:85:81:01:be:6c:d6:99:36:91: 52:74:bd:60:09:bd:3e:10:31:cf:d5:a0:7b:d8:05:0e:48:06: d5:f6:e8:33:e2:9c:d9:af:cf:0c:16:1a:af:c4:ec:55:e2:2f: 61:f4:b3:d8:90:75:40:1a:6f:f7:20:f4:6d:18:fa:33:a0:a4: 66:99:cf:b3:fa:2f:e7:ff:e7:8a:e4:5a:28:3f:3e:09:f4:79: fb:ab:13:9b:6e:49:59:1f:e4:89:19:9f:8d:05:11:78:e0:15: 0c:1c:35:56:fc:a1:12:4b:be:e3:6e:1e:5f:23:c0:3d:54:28: 85:bb:be:8e:e9:d7:22:e0:53:5b:b2:9c:e5:23:20:93:77:8a: 5e:81:8a:ca:6f:6b:6a:e2:0f:33:de:89:36:39:79:d6:ac:3c: c3:25:49:f5:85:fe:f9:3b:42:bf:0a:5b:66:9b:7c:bc:6c:f8: 7c:e2:a4:3c:5c:bc:b7:a1:f1:a2:c4:7d:83:f9:ed:52:5f:39: c3:8f:fd:77:22:17:f4:4e:a2:4b:a9:1d:c5:02:08:26:ce:b2: 1f:99:68:3c:57:d1:1b:2b:73:1f:d7:7e:8f:db:64:7c:10:6e: 9e:52:1a:15:f6:bb:e7:78:be:c4:40:d1:63:32:66:23:c8:95: 97:9f:a4:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjYwOTI4MTk0MDMxWhcNMjYxMDA1MTk0MDMxWjAYMRYwFAYD VQQDEw02YWJhYzJhZi01NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXAcX/aqDfr88zfLJ5hqRs4Qp/thOTCNgzZ/i2MCP65uDCIOq9S3Uqtzz2g8 81gjpPV6+/Uvj7Vb/8PNeySAQqOPhG/1aJbGgRCYvy/pizYi2nvA4Qm4bEk6PJ8A Um17leQBGa0stBb0XSpE9+2JsTKNFPGJOT3YcoGUQZQvMxCK/lOjr6/djO3G+VN4 9QVlsXWrGTRUauHjDfDobohw5Zct3fzVWUcA24y5ZZZ64IF118AEqeBWjObbPAlw VGA1mZYLnFBX8MsRNvnq9yQn/9R0jKKNMLQeLJp58zTCdRK7Uu1ZAGxbuPLUenwC iPxpU8QBXi3QtG4z/W3xNP8z/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHt3Xtc GL21kUeQ+nwBuIrId8Y6MB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASjMgnkIXD73rhYEBvmzWmTaRUnS9YAm9PhAxz9Wge9gFDkgG1fboM+Kc2a/P DBYar8TsVeIvYfSz2JB1QBpv9yD0bRj6M6CkZpnPs/ov5//niuRaKD8+CfR5+6sT m25JWR/kiRmfjQUReOAVDBw1VvyhEku+424eXyPAPVQohbu+junXIuBTW7Kc5SMg k3eKXoGKym9rauIPM96JNjl51qw8wyVJ9YX++TtCvwpbZpt8vGz4fOKkPFy8t6Hx osR9g/ntUl85w4/9dyIX9E6iS6kdxQIIJs6yH5loPFfRGytzH9d+j9tkfBBunlIa Ffa753i+xEDRYzJmI8iVl5+kUw== -----END CERTIFICATE-----Generated at Wed Sep 30 05:34:47 2026 by rpki-client