$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json) Hash identifier: wzBVC0hJ5faJRMELVSvGr5K1uvntHyzua92RtrC30Vg= Subject key identifier: 70:59:DA:A3:08:E1:7E:05:E9:3F:FA:59:8F:B6:66:C5:5C:74:B2:73 Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Certificate serial: 1127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft Manifest number: 1124 Signing time: Tue 06 Oct 2026 17:20:12 +0000 Manifest this update: Tue 06 Oct 2026 17:20:12 +0000 Manifest next update: Tue 13 Oct 2026 17:20:12 +0000 Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: 4/G3VYLN4lJezCTaCeMKSRywozBKWQQJk+ZSBh8bPGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4391 (0x1127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Validity Not Before: Oct 6 17:20:12 2026 GMT Not After : Oct 13 17:20:12 2026 GMT Subject: CN=6ac52dcc-fb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:96:11:fc:37:68:1f:64:fe:f4:82:9e:07: a1:16:ce:cd:4f:7e:a8:dc:c8:92:3b:5c:ec:5c:a4: bd:df:13:fd:c3:34:dc:76:18:fe:c4:8f:a2:7c:37: 51:ca:fd:b6:ad:4f:ca:ec:f7:e9:81:00:dd:ae:1c: 0d:d2:45:ce:66:f1:b2:ec:2a:41:fb:f2:a5:c3:ad: 59:4f:f2:b7:d2:9e:ae:86:1d:90:63:47:cf:13:5e: 50:0d:20:19:ee:5d:67:b7:43:e4:ab:8f:99:6a:22: 14:08:bc:34:67:cb:84:d4:90:dc:fd:d3:a7:2a:0d: f5:65:90:6c:33:61:2a:7a:29:83:3e:15:c0:f9:4b: 67:40:8c:14:6b:b5:1e:3c:3f:63:5e:7f:ec:8d:6e: 1c:8e:45:b8:d3:48:b2:f7:7f:6b:fa:55:74:c8:e6: f9:b5:7d:71:a4:f8:7c:95:31:4d:b0:02:20:11:5d: d8:11:1c:03:0d:da:6b:a9:37:86:c7:18:55:06:fc: 4e:05:ab:63:a6:fe:28:c8:43:01:ae:71:cd:bd:9d: 79:49:fa:2e:64:d9:6d:96:3b:3d:34:3b:59:78:6f: 09:ec:a6:43:f5:96:e3:d1:f0:d9:fc:7d:90:c9:b0: ad:63:d0:c5:88:b8:57:97:84:ea:d2:49:c9:aa:28: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:DA:A3:08:E1:7E:05:E9:3F:FA:59:8F:B6:66:C5:5C:74:B2:73 X509v3 Authority Key Identifier: keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3b:73:ee:5e:b9:bf:5c:0a:d1:e8:b1:36:1d:c4:2f:cf:f0: 86:5a:5f:57:29:f6:d5:18:34:c3:63:28:5a:05:00:7c:e5:72: e9:dd:fd:2a:dc:81:62:5e:a7:f0:5e:41:9d:09:af:a3:b8:fa: aa:cf:2e:02:87:e3:c4:e9:96:6c:c8:e2:7d:66:5a:fc:3e:80: e6:3a:d3:27:48:b1:fb:43:b3:3d:7f:bd:ea:2a:d7:6e:cd:53: 4b:21:c1:cb:f5:8a:fc:54:c9:ee:5e:45:19:8a:fa:4a:94:db: 1f:57:15:d0:49:7f:b2:7e:eb:8f:b1:a6:ce:37:42:fc:36:dd: 69:a9:17:23:40:ee:0d:d9:e2:e9:40:f3:b5:1e:7d:c2:a9:ed: c4:a3:f0:68:17:a0:93:dd:a5:67:34:1d:2d:46:aa:43:1b:b0: 81:47:a7:c5:9e:75:4c:90:62:26:a8:f8:c8:2a:5e:2f:14:2e: 24:34:8b:af:d0:c7:35:db:55:ef:a8:16:2b:cb:d5:88:37:be: 84:07:dd:05:a0:ef:34:51:dd:c7:db:48:6d:1e:59:40:0f:d6: 2f:e2:d2:00:46:e2:a4:66:15:2b:75:ae:53:6d:82:07:0d:98: 18:f3:d9:41:d7:d4:23:d1:d1:d0:46:78:12:86:31:76:8a:cd: 4c:33:26:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBFMjExMTAvBgNVBAUTKDk0QzlENDNCNTNCNUQ4NTBEOThFMERBMkQ1RUYzQzRF MUMzMTIwNDUwHhcNMjYxMDA2MTcyMDEyWhcNMjYxMDEzMTcyMDEyWjAYMRYwFAYD VQQDEw02YWM1MmRjYy1mYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoaWEfw3aB9k/vSCngehFs7NT36o3MiSO1zsXKS93xP9wzTcdhj+xI+ifDdR yv22rU/K7PfpgQDdrhwN0kXOZvGy7CpB+/Klw61ZT/K30p6uhh2QY0fPE15QDSAZ 7l1nt0Pkq4+ZaiIUCLw0Z8uE1JDc/dOnKg31ZZBsM2EqeimDPhXA+UtnQIwUa7Ue PD9jXn/sjW4cjkW400iy939r+lV0yOb5tX1xpPh8lTFNsAIgEV3YERwDDdprqTeG xxhVBvxOBatjpv4oyEMBrnHNvZ15SfouZNltljs9NDtZeG8J7KZD9Zbj0fDZ/H2Q ybCtY9DFiLhXl4Tq0knJqihxXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBZ2qMI 4X4F6T/6WY+2ZsVcdLJzMB8GA1UdIwQYMBaAFJTJ1DtTtdhQ2Y4NotXvPE4cMSBF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEUyMS9BNUU5NTBENDQy NzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJGRFpqZzJpMWU4OFRod3hJ RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNblVPMU8xMkZEWmpnMmkxZTg4VGh3eElFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEUyMS9BNUU5NTBENDQyNzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJG RFpqZzJpMWU4OFRod3hJRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjTtz7l65v1wK0eixNh3EL8/whlpfVyn21Rg0w2MoWgUAfOVy6d39KtyBYl6n 8F5BnQmvo7j6qs8uAofjxOmWbMjifWZa/D6A5jrTJ0ix+0OzPX+96irXbs1TSyHB y/WK/FTJ7l5FGYr6SpTbH1cV0El/sn7rj7GmzjdC/DbdaakXI0DuDdni6UDztR59 wqntxKPwaBegk92lZzQdLUaqQxuwgUenxZ51TJBiJqj4yCpeLxQuJDSLr9DHNdtV 76gWK8vViDe+hAfdBaDvNFHdx9tIbR5ZQA/WL+LSAEbipGYVK3WuU22CBw2YGPPZ QdfUI9HR0EZ4EoYxdorNTDMmaQ== -----END CERTIFICATE-----Generated at Thu Oct 8 18:44:11 2026 by rpki-client