$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: KkUmDi8twZShK+yoZ0+kWvv5RGc2dACGWN+kXrYj/oo= Subject key identifier: 5B:C4:E8:11:E1:14:7A:C1:EA:FE:91:89:9E:4F:03:89:BF:2B:09:7F Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0C20 Signing time: Thu 24 Sep 2026 18:49:01 +0000 Manifest this update: Thu 24 Sep 2026 18:49:00 +0000 Manifest next update: Thu 01 Oct 2026 18:49:00 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: vqR0RbJquq4LGpKHoeczF55XNdPwa3inUW+V3shIvjs=) 2: 44AB1490608611F190EDABDB6E47A888.roa (hash: H6vMQ2t2D2rSoT2Sb3T5cU2Q7kcQetOPzezN9R6P68g=) 3: 462E4490A79911F1A1CAE2784811F970.roa (hash: 6RfqX8GIXHK1V8oY4WkTIG0AWJauXU9k9igM9Uvncx0=) 4: 7DAEB1F0A5CF11F19A324F273411F970.roa (hash: 5YqLlzK1YHp4em5Ro0CYRt/wM0OwKS9iYZOWAN6s4xY=) 5: 1CEF944C1AEC11F1BECB19E5043D8C67.roa (hash: bK4wK4ZW2AeyeEa2VWf/EBV02KYa6Sd38Fy+vGgwV2Q=) 6: F6A7E804177911F18F01239F253D8C67.roa (hash: 94B4DzsJi2Ia0XMNp0IDkQKvwnPAbaf/PbW4VjRjqfk=) 7: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: MTYW3WZ5bmFwcXuZyuU6mJSaDv2kg390mgtMrX2qGao=) 8: F62847A2177911F18F01239F253D8C67.roa (hash: 2WCfGiDTIDu8+cnHkGMO0SBE3Ppp/vqnYU6M++BnmjU=) 9: 7D0F1974A5CF11F19A324F273411F970.roa (hash: o8Wx36hTPMpR2tmvCxvAKJuYuXt4ThZAU0/8KVd9Sn4=) 10: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (hash: D4VLFLoLda9iVGzy5j4mVaxWgRrpARPiO4/t3mX7N14=) 11: 1E3FCA688C0911F19F6D15F94111F970.roa (hash: tbrTy2IMlg/8Hfl5uG4XQkXTRBnGsmTxtfTLyKs7+zg=) 12: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: 1HP1754dk+5RSjaQvu6ezyGMKjRnbLeUT9+IOmEICYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Sep 24 18:49:00 2026 GMT Not After : Oct 1 18:49:00 2026 GMT Subject: CN=6ab5709c-53ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:89:78:d4:30:ac:33:81:4b:01:73:f0:97: 93:ba:38:85:25:13:8e:a6:e5:03:23:70:38:c3:8c: 37:24:49:d4:7e:6b:8b:07:fd:c7:e3:d2:09:21:07: 24:0a:51:09:db:db:3d:e4:55:0f:fd:29:20:7d:cf: e2:dc:28:7d:34:70:85:b7:91:0b:31:e9:3e:e9:e4: f6:e8:21:10:58:d9:ff:92:45:e1:3f:12:c4:0d:6e: 54:17:91:f5:80:0c:fa:25:57:25:dc:93:fa:fa:b6: 0b:9d:42:74:62:36:69:41:d1:5b:9c:b2:d2:15:b0: 28:46:05:f7:82:2f:c0:7a:ad:0f:bf:8d:cf:08:b6: ec:8f:cf:c2:df:48:37:82:8f:05:53:75:65:a3:6d: 5b:83:30:17:99:0f:4a:1c:5d:aa:c2:79:4b:6d:ed: c0:64:c5:69:24:ea:76:50:b7:1d:4b:dc:0e:d6:55: b7:31:1a:ee:6c:f6:bc:9c:43:16:2b:f9:7c:48:39: 86:2c:ba:69:0e:57:e2:cd:94:c1:78:0b:3c:23:f2: b3:be:8f:fd:ab:3a:4d:1c:d4:ff:be:ae:26:52:c0: e9:9a:24:81:9b:a7:82:3d:5e:13:60:b5:44:40:6c: f9:f8:33:f5:8b:6c:c0:3b:61:95:d5:6b:e3:3f:af: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C4:E8:11:E1:14:7A:C1:EA:FE:91:89:9E:4F:03:89:BF:2B:09:7F X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:38:c4:2a:87:05:c3:90:02:42:16:04:63:33:b0:a6:41:9b: 93:e1:e8:5b:30:7b:11:96:e6:d3:46:2f:47:30:a1:8c:8c:1f: c1:a3:c6:88:b8:5a:ea:00:40:c8:eb:6a:59:fb:f4:c4:f0:ad: 09:c0:ee:ba:25:1d:22:f3:e4:22:d7:79:ac:36:56:f6:73:cd: 1b:e2:0d:e5:f8:4b:12:c8:85:b9:2c:90:e2:9f:d3:0c:a9:e0: 20:91:19:61:31:d3:e3:bf:e1:eb:e8:5a:06:31:67:79:11:ec: 8e:05:6b:83:36:15:59:d3:5c:1e:a8:a9:7b:f9:ad:a2:7a:de: 0b:c3:f5:61:ee:70:ec:0d:c1:e9:71:26:af:5e:77:8d:a2:b8: a9:2c:a0:ba:ac:a2:e2:b7:ec:1a:45:04:fb:31:ac:f4:42:df: b1:e2:8a:e8:c2:80:e7:ea:2d:5f:2c:d0:71:81:4d:49:bc:d3: 76:a6:f4:75:08:e9:c2:a0:24:e1:fc:87:d4:85:4c:b7:c8:07: b9:1c:f2:44:c7:19:d1:d0:f3:42:5f:4a:8e:dc:67:11:6f:8b: 78:2c:3f:0e:5b:50:a5:7b:27:15:4e:de:5c:bb:27:55:20:ee: 01:a2:d9:9d:e0:2a:47:89:97:7e:59:17:0a:6a:5e:ec:9c:52: 0f:15:29:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwOTI0MTg0OTAwWhcNMjYxMDAxMTg0OTAwWjAYMRYwFAYD VQQDEw02YWI1NzA5Yy01M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JmJeNQwrDOBSwFz8JeTujiFJROOpuUDI3A4w4w3JEnUfmuLB/3H49IJIQck ClEJ29s95FUP/Skgfc/i3Ch9NHCFt5ELMek+6eT26CEQWNn/kkXhPxLEDW5UF5H1 gAz6JVcl3JP6+rYLnUJ0YjZpQdFbnLLSFbAoRgX3gi/Aeq0Pv43PCLbsj8/C30g3 go8FU3Vlo21bgzAXmQ9KHF2qwnlLbe3AZMVpJOp2ULcdS9wO1lW3MRrubPa8nEMW K/l8SDmGLLppDlfizZTBeAs8I/Kzvo/9qzpNHNT/vq4mUsDpmiSBm6eCPV4TYLVE QGz5+DP1i2zAO2GV1WvjP68tFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvE6BHh FHrB6v6RiZ5PA4m/Kwl/MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTjEKocFw5ACQhYEYzOwpkGbk+HoWzB7EZbm00YvRzChjIwfwaPGiLha6gBA yOtqWfv0xPCtCcDuuiUdIvPkItd5rDZW9nPNG+IN5fhLEsiFuSyQ4p/TDKngIJEZ YTHT47/h6+haBjFneRHsjgVrgzYVWdNcHqipe/mtonreC8P1Ye5w7A3B6XEmr153 jaK4qSyguqyi4rfsGkUE+zGs9ELfseKK6MKA5+otXyzQcYFNSbzTdqb0dQjpwqAk 4fyH1IVMt8gHuRzyRMcZ0dDzQl9KjtxnEW+LeCw/DltQpXsnFU7eXLsnVSDuAaLZ neAqR4mXflkXCmpe7JxSDxUpeA== -----END CERTIFICATE-----Generated at Sat Sep 26 03:50:38 2026 by rpki-client