$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: agPKnUgaP4r3CGzcBhPI2jKTiaepp/D27BD228X1gso= Subject key identifier: 10:1F:D3:17:6E:A7:58:BE:61:0E:16:3E:A8:56:BA:4E:B8:D4:24:26 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 6C Signing time: Fri 25 Sep 2026 08:08:39 +0000 Manifest this update: Fri 25 Sep 2026 08:08:39 +0000 Manifest next update: Fri 02 Oct 2026 08:08:39 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: HUldEpNjO4PyD+E8Sc40VytgoI7VZjtfpCpfDT5uqu0=) 2: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: LCbiXJV4M3UWd5Td2YnoUunf4O6JAsggUfEGQHHJ8+s=) 3: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: xm+x+fd04WB7I1yVjzFgWBEajtZgqkuYkfVhhVRPfos=) 4: 60C94672909911F189B737F66C11F970.roa (hash: MkE66wfeDgOquisiYVXHDlUpsCxTafplxHRM0Iqm2AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Sep 25 08:08:39 2026 GMT Not After : Oct 2 08:08:39 2026 GMT Subject: CN=6ab62c07-2562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:32:1a:3b:ca:b8:a0:ea:29:78:04:39:ec:ab: 15:e3:d3:4c:04:54:f8:d4:fe:c3:0a:d6:a2:ce:52: 73:f1:80:11:5c:55:5d:03:54:05:87:f2:23:60:7a: 66:f7:ca:98:91:2f:c5:55:60:ba:d6:6e:79:64:c6: 87:55:7f:8b:43:4a:a0:f1:e7:a5:87:39:c4:ae:ac: 3c:3b:2f:d3:f4:41:d0:5c:ba:6c:43:ac:cd:c2:63: 57:7a:d4:65:b2:fd:df:27:ff:84:10:61:24:b0:9d: 3a:3f:ab:55:37:c3:eb:af:11:00:1a:41:a3:77:26: 8f:3b:d7:d2:36:7a:a4:3d:d6:7d:26:56:2f:2f:57: ea:c7:e3:57:f4:e7:8c:5a:51:42:a6:34:1e:84:dd: 85:97:85:a9:83:9b:67:c4:a6:d7:36:37:27:43:c3: 8c:7b:92:b0:61:3c:78:55:3a:96:56:91:b3:65:05: 85:03:89:a6:96:b3:2b:16:65:c9:c9:10:04:a7:51: 90:8a:84:44:7b:5b:42:9c:06:64:ef:d6:b5:65:f7: eb:30:c0:fd:d3:f8:12:11:0d:a0:3c:4a:e3:a9:dc: df:bf:ab:86:19:6e:d1:4b:1b:f6:46:9f:5e:82:d6: 8c:88:5b:dd:16:7c:be:01:fd:57:a4:81:60:d7:94: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:D3:17:6E:A7:58:BE:61:0E:16:3E:A8:56:BA:4E:B8:D4:24:26 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:42:f4:68:5f:f9:dc:31:81:91:91:f6:d5:1d:40:1a:5d:f8: 18:64:c6:82:bf:e0:49:bc:d9:80:7c:92:95:68:45:16:d7:1b: 0d:a7:63:10:fd:ec:4b:ef:be:40:63:46:ef:6c:87:5b:46:3f: 24:1c:de:95:14:64:aa:79:46:e0:7a:00:b1:04:65:02:81:2d: 6b:03:0e:f4:ac:8d:80:f5:a6:a3:ee:5b:0a:b0:64:ce:bc:3b: 30:58:1d:f7:4d:1a:24:db:5e:9e:0a:c1:50:e0:8b:82:e7:55: 3c:11:a7:3f:90:13:22:a9:e6:e9:d7:58:d4:88:6b:88:20:a8: 38:05:56:61:0b:74:4c:41:0a:2f:ca:d1:70:3b:55:ae:7d:dc: 1f:35:a4:c5:79:6c:23:5f:fa:dc:87:4f:39:ac:56:44:b8:91: 9e:c2:7c:69:2f:4d:8a:e0:7e:74:80:d2:1f:1b:54:01:83:33: b3:b6:b6:93:0f:36:bc:d4:1f:05:ad:11:c7:ae:96:bc:59:ea: 74:f0:b5:8a:63:67:ba:a2:77:a7:68:0b:82:53:c7:67:ad:1e: 81:c4:44:02:a8:8c:93:04:de:e3:48:54:2f:3a:20:4c:8c:70: 25:23:d8:d9:58:aa:fd:e7:46:11:b6:a2:6d:0b:d0:68:ef:0f: ed:4b:0d:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA5MjUwODA4MzlaFw0yNjEwMDIwODA4MzlaMBgxFjAUBgNV BAMTDTZhYjYyYzA3LTI1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoMho7yrig6il4BDnsqxXj00wEVPjU/sMK1qLOUnPxgBFcVV0DVAWH8iNgemb3 ypiRL8VVYLrWbnlkxodVf4tDSqDx56WHOcSurDw7L9P0QdBcumxDrM3CY1d61GWy /d8n/4QQYSSwnTo/q1U3w+uvEQAaQaN3Jo8719I2eqQ91n0mVi8vV+rH41f054xa UUKmNB6E3YWXhamDm2fEptc2NydDw4x7krBhPHhVOpZWkbNlBYUDiaaWsysWZcnJ EASnUZCKhER7W0KcBmTv1rVl9+swwP3T+BIRDaA8SuOp3N+/q4YZbtFLG/ZGn16C 1oyIW90WfL4B/VekgWDXlG+rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEB/TF26n WL5hDhY+qFa6TrjUJCYwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQABQvRoX/ncMYGRkfbVHUAaXfgYZMaCv+BJvNmAfJKVaEUW1xsNp2MQ/exL775A Y0bvbIdbRj8kHN6VFGSqeUbgegCxBGUCgS1rAw70rI2A9aaj7lsKsGTOvDswWB33 TRok216eCsFQ4IuC51U8Eac/kBMiqebp11jUiGuIIKg4BVZhC3RMQQovytFwO1Wu fdwfNaTFeWwjX/rch085rFZEuJGewnxpL02K4H50gNIfG1QBgzOztraTDza81B8F rRHHrpa8Wep08LWKY2e6onenaAuCU8dnrR6BxEQCqIyTBN7jSFQvOiBMjHAlI9jZ WKr950YRtqJtC9Bo7w/tSw3n -----END CERTIFICATE-----Generated at Sat Sep 26 14:25:32 2026 by rpki-client