$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: JjMqNpEkL0K1O+gdaZ3qLd6UW6SH4nUujFH1kA8dfBk= Subject key identifier: B8:7E:CC:5A:85:57:4E:D0:31:B0:C6:9B:6E:FB:62:64:1F:D7:B2:BD Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 010D Signing time: Wed 23 Sep 2026 05:52:51 +0000 Manifest this update: Wed 23 Sep 2026 05:52:51 +0000 Manifest next update: Wed 30 Sep 2026 05:52:51 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: j3lPYv5HN2mmKS4x/nUNOPHCtRDkiOryVDZhhCcLlaw=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: uwAj/+Du5C1qEvZtOUqf44R0VMo9+4/mthpipOHyiGw=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: 5NNtAQyFropb/Z6y0svtRqsWdy6ThB8osPzJl9uYO4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Sep 23 05:52:51 2026 GMT Not After : Sep 30 05:52:51 2026 GMT Subject: CN=6ab36933-e19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:f0:d1:9e:0c:5c:43:93:11:ea:e0:c2:90: e5:3c:4a:55:5a:60:d8:82:7f:0d:48:14:e6:16:55: 52:0e:99:9e:d7:56:d8:b2:7f:81:d7:7f:06:36:c6: b0:cd:c5:10:02:f8:ee:db:48:1e:ec:63:9d:36:63: eb:9a:3b:4f:d0:cd:6e:f8:64:50:08:dc:29:b0:51: 2a:ef:f7:99:f1:6d:c0:dc:f6:23:5f:a1:d0:e2:77: 60:a4:cd:68:56:4a:1f:18:91:94:67:c4:48:54:ae: 11:6b:d1:20:98:46:ec:bd:fe:ae:86:8f:b8:ec:cf: 6a:95:a8:f8:18:a5:f4:cb:95:04:49:92:d6:12:79: 01:b8:fb:4c:c1:6c:92:11:69:00:b4:c2:99:47:5b: 31:db:36:32:de:05:fd:aa:23:4d:11:7d:b4:88:bb: dc:f6:18:e8:c2:39:71:ed:57:c7:81:90:0e:81:e5: 19:d3:2e:02:5d:23:18:66:2c:58:10:85:d9:5f:57: 4f:0e:7f:8f:f4:ed:1b:c4:0f:6e:93:5b:d4:f7:d6: 4a:da:e1:f0:04:fb:7c:a3:3c:85:e4:6c:47:5c:1b: 1b:d8:d5:c6:c5:1e:62:a1:54:f1:20:76:46:d0:c7: 8f:8b:f6:d3:e2:2b:1c:4d:30:0f:f8:02:c0:76:7a: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7E:CC:5A:85:57:4E:D0:31:B0:C6:9B:6E:FB:62:64:1F:D7:B2:BD X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:58:13:c9:54:13:b6:0e:8c:3a:06:d7:a9:57:19:62:76:1f: b4:90:56:33:de:2b:5a:51:bf:1c:dc:5c:33:2b:d1:0e:09:10: 79:1d:e4:0d:02:4f:f8:49:e5:b4:6d:a6:95:cd:25:20:41:92: ca:49:d6:64:35:d8:7b:1b:19:fa:e4:1b:c2:7c:92:42:ca:41: 41:1d:e0:c4:d2:1c:6c:b0:0e:8d:45:03:70:04:05:57:54:4f: ab:f0:13:53:45:60:b2:89:ad:4d:23:ce:ca:20:86:14:b8:51: 84:c7:20:2f:99:5c:ad:6a:0f:fd:91:b7:61:f6:7b:5c:f5:10: 0d:75:fe:e7:8d:7b:95:f5:b8:3c:4e:72:2c:33:95:95:a1:f6: ab:6b:33:47:e4:ae:31:1d:35:b0:92:31:9f:a3:97:cc:d9:14: b0:a3:45:1b:36:75:e1:96:aa:28:44:b2:72:bf:02:cc:c6:85: 0a:c4:29:bc:e1:a0:38:24:ef:db:fd:a8:87:c2:0b:61:4f:0f: 44:ee:c3:1c:dc:75:26:e7:13:68:1b:cf:90:23:2b:de:4c:a1: 59:2f:4c:ee:4d:a1:d1:91:8a:2f:f7:06:d8:1e:6f:a9:aa:0d: 09:69:44:1a:dc:89:66:c9:ed:e2:26:9f:8d:31:f7:26:74:4e: c9:96:44:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0 NjZDQzRCMEEwHhcNMjYwOTIzMDU1MjUxWhcNMjYwOTMwMDU1MjUxWjAYMRYwFAYD VQQDEw02YWIzNjkzMy1lMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67Lw0Z4MXEOTEergwpDlPEpVWmDYgn8NSBTmFlVSDpme11bYsn+B138GNsaw zcUQAvju20ge7GOdNmPrmjtP0M1u+GRQCNwpsFEq7/eZ8W3A3PYjX6HQ4ndgpM1o VkofGJGUZ8RIVK4Ra9EgmEbsvf6uho+47M9qlaj4GKX0y5UESZLWEnkBuPtMwWyS EWkAtMKZR1sx2zYy3gX9qiNNEX20iLvc9hjowjlx7VfHgZAOgeUZ0y4CXSMYZixY EIXZX1dPDn+P9O0bxA9uk1vU99ZK2uHwBPt8ozyF5GxHXBsb2NXGxR5ioVTxIHZG 0MePi/bT4iscTTAP+ALAdnoTVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLh+zFqF V07QMbDGm277YmQf17K9MB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1 RkVxbThMWmtOc3BHYk1Td28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALVgTyVQTtg6MOgbXqVcZYnYftJBWM94rWlG/HNxcMyvRDgkQeR3kDQJP+Enl tG2mlc0lIEGSyknWZDXYexsZ+uQbwnySQspBQR3gxNIcbLAOjUUDcAQFV1RPq/AT U0VgsomtTSPOyiCGFLhRhMcgL5lcrWoP/ZG3YfZ7XPUQDXX+5417lfW4PE5yLDOV laH2q2szR+SuMR01sJIxn6OXzNkUsKNFGzZ14ZaqKESycr8CzMaFCsQpvOGgOCTv 2/2oh8ILYU8PRO7DHNx1JucTaBvPkCMr3kyhWS9M7k2h0ZGKL/cG2B5vqaoNCWlE GtyJZsnt4iafjTH3JnROyZZECw== -----END CERTIFICATE-----Generated at Wed Sep 23 20:18:00 2026 by rpki-client