$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: 2fBVj3sBJwrnbhB7eB2lenoMxMSpa8bnVZGB1SQUfd8= Subject key identifier: 1A:C3:78:B6:B6:7D:D3:C6:34:35:2E:A4:B7:CD:38:2E:AF:69:0D:75 Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 0138 Signing time: Tue 27 Oct 2026 06:02:27 +0000 Manifest this update: Tue 27 Oct 2026 06:02:27 +0000 Manifest next update: Tue 03 Nov 2026 06:02:27 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: 6f2hDtbbQzVCGeq3Ieh4CUtXhW6N09R79ZQe5UQkIGI=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: vs8LiC2a7yfcHqx0F2jxfAS1octXGMx2IWNSmWMrwRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Oct 27 06:02:27 2026 GMT Not After : Nov 3 06:02:27 2026 GMT Subject: CN=6ae03e73-5697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:64:f8:2a:18:18:73:8a:97:b1:d9:90:59: 58:92:e5:93:62:33:d9:e9:11:eb:8a:43:f7:7d:98: fc:04:4a:c6:8f:55:27:4c:bc:ac:24:f0:9f:5e:8d: 25:30:66:99:df:4e:4b:34:ad:4b:cc:56:31:8e:1e: 85:d3:3f:dd:51:bb:d5:b1:40:03:ab:8b:c2:3a:d1: e7:ff:f2:a2:11:dc:2e:49:04:27:bf:03:90:35:89: e6:09:db:5f:39:18:b6:9c:41:1a:68:1f:80:7c:fe: e2:a0:55:07:e5:ca:58:bc:5d:40:f3:53:35:6a:7b: 52:d2:27:aa:e5:5d:97:2c:68:3f:89:37:a0:78:a3: df:f7:bc:89:9c:4f:4e:f5:d4:c4:8e:b6:a3:58:86: 55:ab:0f:05:5a:d0:96:20:fc:aa:a2:7b:c3:00:69: e4:74:b3:66:20:65:8d:8f:18:6f:6f:3e:65:e2:44: 02:07:9a:17:74:a4:ed:f2:e3:52:95:8c:a4:03:3a: 9a:90:6d:77:c5:f5:47:66:59:85:3c:3c:14:ab:05: c7:ad:c4:bc:5d:9b:7a:e3:f0:d8:67:5b:ba:98:3a: b1:88:37:5d:9e:4f:6c:f9:51:89:e5:19:91:c0:ce: 03:68:b8:1c:f5:8e:d9:1e:48:db:e3:cf:fb:f2:5c: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:78:B6:B6:7D:D3:C6:34:35:2E:A4:B7:CD:38:2E:AF:69:0D:75 X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f7:74:cb:03:93:29:95:6a:fd:e8:eb:55:21:a7:bb:9f:33: 57:9f:4f:68:4e:44:d8:c1:af:bc:e2:c8:d8:31:b3:03:0d:d1: 76:26:fe:24:4c:4f:a9:57:bf:1c:94:53:0d:aa:22:96:13:59: 73:04:12:05:f0:ab:ef:bf:b4:f1:06:26:33:77:4a:b9:f1:68: ee:ac:3d:51:ff:20:7b:ca:13:8e:9d:22:eb:7f:7d:03:3b:55: 32:86:46:38:ed:c6:70:c8:3a:b9:78:d7:52:d9:b4:83:4b:15: eb:b7:cf:6d:09:ac:69:d4:fc:2c:17:5f:7e:28:7f:fd:c9:0c: 12:1d:84:24:ec:e3:52:fd:8f:1d:78:db:42:a4:9e:a7:be:0a: 41:d8:07:05:0a:b7:e5:c8:78:2e:8a:4e:d2:67:1f:50:f2:32: bd:1c:22:80:dd:4d:1b:93:1c:2a:35:99:e9:b7:b3:5a:64:30: 0a:65:cd:eb:1e:d6:f8:8e:68:65:88:bf:1c:8a:71:50:d2:30: a3:0a:99:2d:34:b1:c2:1c:58:fb:d8:2e:99:64:3e:57:93:b0: f4:52:f7:d3:1c:89:e0:21:d5:5c:b1:7a:c1:97:98:8c:b9:83: 04:44:c3:b5:6d:64:05:72:b4:96:54:af:18:5a:cd:75:57:50: 02:83:94:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx NjlCN0M5MjIwHhcNMjYxMDI3MDYwMjI3WhcNMjYxMTAzMDYwMjI3WjAYMRYwFAYD VQQDEw02YWUwM2U3My01Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nRk+CoYGHOKl7HZkFlYkuWTYjPZ6RHrikP3fZj8BErGj1UnTLysJPCfXo0l MGaZ305LNK1LzFYxjh6F0z/dUbvVsUADq4vCOtHn//KiEdwuSQQnvwOQNYnmCdtf ORi2nEEaaB+AfP7ioFUH5cpYvF1A81M1antS0ieq5V2XLGg/iTegeKPf97yJnE9O 9dTEjrajWIZVqw8FWtCWIPyqonvDAGnkdLNmIGWNjxhvbz5l4kQCB5oXdKTt8uNS lYykAzqakG13xfVHZlmFPDwUqwXHrcS8XZt64/DYZ1u6mDqxiDddnk9s+VGJ5RmR wM4DaLgc9Y7ZHkjb48/78lyWcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrDeLa2 fdPGNDUupLfNOC6vaQ11MB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5 YmhDbGZWajBMTU1XbTN5U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfd0ywOTKZVq/ejrVSGnu58zV59PaE5E2MGvvOLI2DGzAw3Rdib+JExPqVe/ HJRTDaoilhNZcwQSBfCr77+08QYmM3dKufFo7qw9Uf8ge8oTjp0i6399AztVMoZG OO3GcMg6uXjXUtm0g0sV67fPbQmsadT8LBdffih//ckMEh2EJOzjUv2PHXjbQqSe p74KQdgHBQq35ch4LopO0mcfUPIyvRwigN1NG5McKjWZ6bezWmQwCmXN6x7W+I5o ZYi/HIpxUNIwowqZLTSxwhxY+9gumWQ+V5Ow9FL30xyJ4CHVXLF6wZeYjLmDBETD tW1kBXK0llSvGFrNdVdQAoOUzg== -----END CERTIFICATE-----Generated at Tue Oct 27 12:55:52 2026 by rpki-client