$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: vWP6p3LmMfykHhTGmGlED1E+fLe7U5N8UOtSeiNdrj4= Subject key identifier: 42:A7:07:D2:37:8E:5C:CE:0E:A1:D8:EE:A4:E3:F9:AD:B4:D4:A8:E2 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 065E Signing time: Tue 22 Sep 2026 22:28:14 +0000 Manifest this update: Tue 22 Sep 2026 22:28:13 +0000 Manifest next update: Tue 29 Sep 2026 22:28:13 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: GwsurRrPMkdgUFcGex7ebLdEGOgA7I0hto78acgn9Aw=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Sep 22 22:28:13 2026 GMT Not After : Sep 29 22:28:13 2026 GMT Subject: CN=6ab300fe-b6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:3b:f7:73:d2:75:f7:47:be:f8:75:15:7b: b2:e4:73:8f:1a:64:38:95:5e:25:01:46:af:82:dc: 2e:10:b8:d4:db:4d:11:0a:0d:1a:e5:0e:0b:7e:71: 84:90:cd:4c:7d:e1:a0:ff:b1:be:3a:8d:13:a0:c8: b9:9d:75:c9:b6:c5:44:aa:72:22:d9:b2:42:59:36: 41:9c:01:4d:84:8c:a7:6b:03:f1:68:73:bf:38:f0: 25:0a:56:bb:56:14:f2:be:dc:f3:df:2c:f4:ea:64: 5e:09:8d:4e:ba:0f:7e:5e:18:80:e1:70:62:81:e6: 34:e8:67:c0:a7:73:0e:42:a7:c2:fa:74:37:46:03: 5b:a5:94:53:68:84:80:55:df:2f:4a:75:9c:de:cf: 2a:32:a2:8a:2d:a9:52:48:77:38:12:a4:59:23:1c: 4c:c7:cf:63:1a:d9:ab:b3:8c:0b:63:c7:3d:08:16: 80:0a:99:b2:f2:91:d0:7b:fd:1e:81:83:56:8b:10: 23:c7:80:3b:8c:b7:9b:eb:e8:31:e4:11:c2:bd:f4: d1:7c:0a:b9:3b:70:49:e0:92:8c:f7:1d:7e:6e:05: 5a:72:8a:1e:cc:4d:25:d6:56:49:49:30:74:34:74: f3:3a:df:72:23:1b:6e:48:a4:2a:43:0f:fb:57:43: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A7:07:D2:37:8E:5C:CE:0E:A1:D8:EE:A4:E3:F9:AD:B4:D4:A8:E2 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:e2:35:cf:87:ca:ff:af:62:4d:53:b7:7c:10:0d:1b:b2: 75:f5:e4:2b:f8:52:5e:72:72:0b:0c:4f:ad:84:5f:6c:a7:c7: b0:79:1d:79:01:f9:dd:8d:8f:bf:b8:8f:01:48:2f:2a:7c:4b: 03:c7:f7:d2:56:e7:a9:7f:1f:6b:9e:cf:1f:8e:d5:db:d8:54: 2a:4b:99:cb:93:df:b7:4a:a6:83:7b:d8:75:40:f2:0e:5a:6e: 28:22:15:f6:e3:94:a8:14:dd:47:c4:10:8b:82:ff:6a:4e:6e: b0:90:af:11:39:46:a8:63:bd:df:7d:67:68:59:fd:4b:09:24: 1f:bd:9d:55:2a:a4:f1:bb:e2:af:44:6b:4c:cb:36:1f:1d:b5: c7:5c:d6:69:6a:88:99:7a:5d:64:ee:cd:17:d9:63:05:40:6e: 2b:8f:a1:b0:7b:bc:ec:a0:e1:6e:05:f1:b2:b8:4c:7a:93:89: cb:49:5c:b6:2f:18:84:30:b5:9a:fc:9e:83:8b:14:5f:ce:5f: 8a:9b:4a:25:a9:83:08:88:c3:51:bb:38:d8:94:01:89:3b:55: 4f:ab:4e:26:5e:98:e8:99:76:a7:05:a5:6f:dc:15:ab:06:94: 1f:8b:cf:bc:50:c2:7b:f9:9a:a0:6b:d2:db:bf:f7:43:7b:7a: 3a:08:a7:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjYwOTIyMjIyODEzWhcNMjYwOTI5MjIyODEzWjAYMRYwFAYD VQQDEw02YWIzMDBmZS1iNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IU793PSdfdHvvh1FXuy5HOPGmQ4lV4lAUavgtwuELjU200RCg0a5Q4LfnGE kM1MfeGg/7G+Oo0ToMi5nXXJtsVEqnIi2bJCWTZBnAFNhIynawPxaHO/OPAlCla7 VhTyvtzz3yz06mReCY1Oug9+XhiA4XBigeY06GfAp3MOQqfC+nQ3RgNbpZRTaISA Vd8vSnWc3s8qMqKKLalSSHc4EqRZIxxMx89jGtmrs4wLY8c9CBaACpmy8pHQe/0e gYNWixAjx4A7jLeb6+gx5BHCvfTRfAq5O3BJ4JKM9x1+bgVacooezE0l1lZJSTB0 NHTzOt9yIxtuSKQqQw/7V0NbLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKnB9I3 jlzODqHY7qTj+a201KjiMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVuPiNc+Hyv+vYk1Tt3wQDRuydfXkK/hSXnJyCwxPrYRfbKfHsHkdeQH53Y2P v7iPAUgvKnxLA8f30lbnqX8fa57PH47V29hUKkuZy5Pft0qmg3vYdUDyDlpuKCIV 9uOUqBTdR8QQi4L/ak5usJCvETlGqGO9331naFn9SwkkH72dVSqk8bvir0RrTMs2 Hx21x1zWaWqImXpdZO7NF9ljBUBuK4+hsHu87KDhbgXxsrhMepOJy0lcti8YhDC1 mvyeg4sUX85fiptKJamDCIjDUbs42JQBiTtVT6tOJl6Y6Jl2pwWlb9wVqwaUH4vP vFDCe/maoGvS27/3Q3t6Oginkw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:51:47 2026 by rpki-client