$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json) Hash identifier: +KvBTh600g2dCKTjX/pQeVo7wdjH+2rXWGhi+pbCua0= Subject key identifier: D3:9B:4D:CA:F4:4C:B2:0B:15:C9:5F:D3:B2:20:E0:13:11:8A:43:6C Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Certificate serial: 4BDF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft Manifest number: 4BB3 Signing time: Tue 22 Sep 2026 14:50:25 +0000 Manifest this update: Tue 22 Sep 2026 14:50:25 +0000 Manifest next update: Tue 29 Sep 2026 14:50:25 +0000 Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: ftNL6mBHA/IH1bJt7t8euKhAupn430+VyaZxLXfPs7M=) 2: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=) 3: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: htbBSMVTb1ucorXZ0udEzZrVuTkh1MbpLmulXXbWomU=) 4: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Qkd/KB4DV6H2ngRdLzN56fQNoJ9u96Tz//Ib8JxfNvk=) 5: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: Bd/goy5yGEAJSuUTpPjEEoTLLlOno7n/yKKnsLU9Ymo=) 6: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=) 7: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: ql//mmH3uX+M56UIRUJu1/aVCCndpyidtKkg2qBTf5Y=) 8: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: CSwwxhI62sXBUpjPgEmnyLlhThNiAd6aymOtHWTko68=) 9: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=) 10: oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer (hash: i0mvCv9BCkAZJXiyet6dSMMrqd+2TZuhoLyOP3Lqqlw=) 11: u_Gz58XB6yDJVjW4jkE07DamSWA.cer (hash: /cWiSXJLUhiEHMWpJvg6jcSRoa6h2/LjcNVn8dchMGQ=) 12: ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer (hash: lLAv50rlFVQlzNgK2yqlYBfpR8GoyvEqug7FREo1+Cc=) 13: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=) 14: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: 8uhICv4Ua/GVjkWHxtdsoYmoqAISKKqyPkmvC9EVBnw=) 15: V3LjuCeMtseqvXrPnvViq1k8LoI.cer (hash: uTIB3+FuzPn41PDJrwadajxN3utd2Fi1QwKcnYkDfkM=) 16: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19423 (0x4bdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Validity Not Before: Sep 22 14:50:25 2026 GMT Not After : Sep 29 14:50:25 2026 GMT Subject: CN=6ab295b1-2d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:cd:b4:34:16:66:fa:ba:77:2e:24:2c:7a: a4:ef:4b:8a:ae:4a:f5:5e:fc:be:c5:f9:ce:53:ac: 19:9b:66:62:b0:c1:72:5a:8e:c1:36:94:a3:0e:58: 74:5e:e9:2e:72:87:ca:67:4d:46:21:39:ed:94:9c: f1:4f:00:8e:87:68:e6:53:0f:b1:af:c8:13:44:c9: dd:3c:f0:7b:4c:f8:7c:23:65:66:ed:b6:e7:87:07: 0e:72:ee:5c:7f:d1:c0:9e:d4:27:4f:c9:98:38:b6: 2d:f9:28:41:55:43:f0:80:bf:8f:83:f4:a4:55:c0: a1:c0:c8:12:94:6d:bf:ff:e4:c8:ca:a2:f1:ef:f5: 21:13:83:03:c9:3f:b7:e6:41:fd:ee:05:ea:eb:f9: 7c:2c:54:d2:e8:e3:a4:4a:12:6f:35:65:f8:44:b3: ae:c1:ce:29:c4:47:8e:05:cd:a4:3e:6c:df:78:e1: 07:db:00:9d:94:00:a7:a0:32:69:00:d6:45:21:0e: b3:95:26:3b:1e:97:aa:da:01:53:53:04:fc:05:06: 5e:22:69:05:48:0f:36:9e:0e:48:0d:be:84:01:6f: b4:e8:d3:34:57:f6:91:11:49:be:42:9f:48:6b:f1: 1d:10:b0:6d:2d:1e:01:ca:9f:d4:e1:08:02:fb:9d: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9B:4D:CA:F4:4C:B2:0B:15:C9:5F:D3:B2:20:E0:13:11:8A:43:6C X509v3 Authority Key Identifier: keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:9f:2d:db:1b:a9:cd:dd:53:37:4e:3e:75:0f:28:e2:20:e7: de:dc:c3:c3:21:45:08:11:5c:d1:74:ca:2a:5d:dd:7b:60:b5: da:2f:aa:17:f6:9d:bd:0f:1b:f1:f1:fe:e8:48:4f:5c:36:b2: 02:ba:f7:72:ee:f0:6d:fc:ee:3d:df:a3:1d:21:37:37:01:0a: 2a:0f:63:03:3c:73:19:cc:85:d2:1d:d0:30:60:0f:9d:f9:ed: 46:81:94:77:a9:a3:65:3d:90:30:40:57:68:db:c9:7f:a2:3c: a7:64:f2:c5:2b:1a:df:ce:32:1f:58:61:e6:92:71:d6:bc:02: 0f:f6:8d:bb:7f:e7:b9:32:ce:6a:10:57:e8:a1:9e:8f:e7:7e: 23:05:9a:e5:a3:4e:d1:c1:d6:76:22:31:99:35:3f:e8:ce:e8: 04:70:52:47:be:34:40:5d:ab:eb:77:0e:b9:79:74:23:a5:a4: 6b:88:2d:01:1e:b2:f2:a2:ee:a5:19:6e:d4:49:dd:0e:19:de: ff:f7:70:bf:b7:6a:2b:67:cf:ef:c1:0b:ac:62:67:d7:4b:df: b4:ad:27:99:e8:6c:66:8a:87:33:82:26:03:62:91:00:d8:e5: 43:3f:f5:5d:b4:df:44:c1:29:d0:ee:36:1c:1d:36:6b:c6:5c: 9b:67:40:f1 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICS98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0 OTRCQUY5MzkwHhcNMjYwOTIyMTQ1MDI1WhcNMjYwOTI5MTQ1MDI1WjAYMRYwFAYD VQQDEw02YWIyOTViMS0yZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2TNtDQWZvq6dy4kLHqk70uKrkr1Xvy+xfnOU6wZm2ZisMFyWo7BNpSjDlh0 XukucofKZ01GITntlJzxTwCOh2jmUw+xr8gTRMndPPB7TPh8I2Vm7bbnhwcOcu5c f9HAntQnT8mYOLYt+ShBVUPwgL+Pg/SkVcChwMgSlG2//+TIyqLx7/UhE4MDyT+3 5kH97gXq6/l8LFTS6OOkShJvNWX4RLOuwc4pxEeOBc2kPmzfeOEH2wCdlACnoDJp ANZFIQ6zlSY7Hpeq2gFTUwT8BQZeImkFSA82ng5IDb6EAW+06NM0V/aREUm+Qp9I a/EdELBtLR4Byp/U4QgC+53GaQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFNObTcr0 TLILFclf07Ig4BMRikNsMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5 MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZG Mi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAqJ8t2xupzd1TN04+dQ8o4iDn3tzDwyFFCBFc0XTKKl3d e2C12i+qF/advQ8b8fH+6EhPXDayArr3cu7wbfzuPd+jHSE3NwEKKg9jAzxzGcyF 0h3QMGAPnfntRoGUd6mjZT2QMEBXaNvJf6I8p2TyxSsa384yH1hh5pJx1rwCD/aN u3/nuTLOahBX6KGej+d+IwWa5aNO0cHWdiIxmTU/6M7oBHBSR740QF2r63cOuXl0 I6Wka4gtAR6y8qLupRlu1EndDhne//dwv7dqK2fP78ELrGJn10vftK0nmehsZoqH M4ImA2KRANjlQz/1XbTfRMEp0O42HB02a8Zcm2dA8Q== -----END CERTIFICATE-----Generated at Tue Sep 22 19:08:49 2026 by rpki-client