$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: 3npASjlBHt6vBUMS2lSa+8M0HgJOaj/MjtwgPVQPJ74= Subject key identifier: 32:46:23:B8:1E:63:14:0A:18:0D:A7:4E:80:E6:93:78:01:E6:10:D2 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0834 Signing time: Sun 20 Sep 2026 20:58:52 +0000 Manifest this update: Sun 20 Sep 2026 20:58:52 +0000 Manifest next update: Sun 27 Sep 2026 20:58:52 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: oBZNRAf56kkRUPIuc0etNyRyv2TL0RRZ31gLL12v5zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Sep 20 20:58:52 2026 GMT Not After : Sep 27 20:58:52 2026 GMT Subject: CN=6ab0490c-f784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:35:22:81:05:e5:2b:0e:d8:ce:2b:ff:ea: 42:7f:cc:5d:44:f4:69:68:2d:40:09:82:8f:21:31: ca:b0:f8:59:12:be:e4:c1:48:d5:89:44:ee:7b:40: 8d:ec:9b:ba:9f:a0:05:2a:7a:57:4d:c0:46:35:e2: d3:4b:3f:d8:ec:99:c2:54:e3:83:50:4a:42:12:24: 9e:19:6f:30:69:f4:cd:81:97:37:13:92:35:c9:48: 22:6d:e9:65:38:b8:0f:14:d8:e3:b2:0c:45:97:2a: b5:5c:0e:23:3a:7c:3e:b0:9f:4b:30:82:2a:93:43: 1f:87:bd:df:08:77:15:d4:cb:52:a6:44:36:75:1d: 57:96:2e:30:48:c4:a0:52:f6:49:6b:33:1b:57:4d: f3:c9:ed:e5:f1:5c:d0:6e:3b:a9:56:36:ee:7f:e8: e7:03:36:14:19:d5:8b:3a:9b:14:1b:5d:23:91:b9: 11:2c:23:99:e9:bd:6c:55:d8:73:62:cb:f9:45:ed: 1a:fc:a6:cc:e0:e9:fc:2a:1c:40:2f:46:3a:4d:9c: cc:f2:a5:32:04:99:a9:f9:20:35:ea:8b:5d:4f:e6: 38:48:5c:ef:84:fa:74:6a:0d:86:56:2a:39:2f:bb: 00:77:ee:bd:aa:09:b0:3f:fe:42:c9:dd:a7:75:26: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:46:23:B8:1E:63:14:0A:18:0D:A7:4E:80:E6:93:78:01:E6:10:D2 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5c:c7:16:c8:77:81:aa:42:51:8f:31:0c:ee:e3:ca:17:60: 53:b1:5e:2f:5f:69:59:c0:63:9a:ec:ca:20:30:06:e0:17:45: c4:70:ea:a7:10:20:0f:79:dd:25:07:81:b0:18:94:e6:9e:58: 74:0a:5d:b6:46:b7:3b:77:e6:ce:c9:7d:a8:cb:ae:a6:f0:d6: a2:49:3e:7e:43:3b:40:7e:a7:cb:66:91:f8:23:50:d1:26:d5: 97:ee:22:fe:b2:16:5d:8c:ec:82:3a:9c:dc:ee:1f:03:2d:4a: 9a:39:cb:8d:72:17:d0:2c:6b:03:1d:9e:39:2d:9c:42:6a:ef: 68:1e:f5:b1:91:00:3a:87:cc:fb:a9:63:c0:7c:4a:da:7c:f1: 59:54:8c:16:e3:86:46:78:0c:a2:2e:c2:83:3a:8c:20:05:ab: f2:c1:5c:6f:04:05:72:4c:fb:28:52:05:10:04:a1:f6:a7:b7: a4:7f:7b:e7:b2:19:e5:e4:e0:9f:80:90:8d:6e:62:ee:e5:69: dd:09:33:2e:d8:d2:99:3e:22:cb:68:18:5e:10:7d:1e:8c:ff: 2b:f2:e1:09:76:7c:78:09:4c:55:6e:7b:40:59:eb:7d:1c:dc: a8:cf:a9:ed:53:1f:55:2f:47:4c:64:47:38:1b:46:05:fe:95: 51:da:37:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjYwOTIwMjA1ODUyWhcNMjYwOTI3MjA1ODUyWjAYMRYwFAYD VQQDEw02YWIwNDkwYy1mNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuU1IoEF5SsO2M4r/+pCf8xdRPRpaC1ACYKPITHKsPhZEr7kwUjViUTue0CN 7Ju6n6AFKnpXTcBGNeLTSz/Y7JnCVOODUEpCEiSeGW8wafTNgZc3E5I1yUgibell OLgPFNjjsgxFlyq1XA4jOnw+sJ9LMIIqk0Mfh73fCHcV1MtSpkQ2dR1Xli4wSMSg UvZJazMbV03zye3l8VzQbjupVjbuf+jnAzYUGdWLOpsUG10jkbkRLCOZ6b1sVdhz Ysv5Re0a/KbM4On8KhxAL0Y6TZzM8qUyBJmp+SA16otdT+Y4SFzvhPp0ag2GVio5 L7sAd+69qgmwP/5Cyd2ndSbf1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJGI7ge YxQKGA2nToDmk3gB5hDSMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi1zHFsh3gapCUY8xDO7jyhdgU7FeL19pWcBjmuzKIDAG4BdFxHDqpxAgD3nd JQeBsBiU5p5YdApdtka3O3fmzsl9qMuupvDWokk+fkM7QH6ny2aR+CNQ0SbVl+4i /rIWXYzsgjqc3O4fAy1KmjnLjXIX0CxrAx2eOS2cQmrvaB71sZEAOofM+6ljwHxK 2nzxWVSMFuOGRngMoi7CgzqMIAWr8sFcbwQFckz7KFIFEASh9qe3pH9757IZ5eTg n4CQjW5i7uVp3QkzLtjSmT4iy2gYXhB9Hoz/K/LhCXZ8eAlMVW57QFnrfRzcqM+p 7VMfVS9HTGRHOBtGBf6VUdo3oQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:23:52 2026 by rpki-client