$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft File: LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft (raw, json) Hash identifier: Q83aFMSJnmW6ftBoHrha3VtLx/K44rJDhJsr/cOgU6w= Subject key identifier: 02:54:F5:F7:41:D4:27:CB:AC:97:74:6E:CE:08:20:DD:4B:AE:E2:1B Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 Certificate issuer: /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft Manifest number: 0332 Signing time: Wed 07 Oct 2026 01:09:16 +0000 Manifest this update: Wed 07 Oct 2026 01:09:16 +0000 Manifest next update: Wed 14 Oct 2026 01:09:16 +0000 Files and hashes: 1: LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl (hash: 7lauOPtAgkoughnbUqJBPyUmLVzIycRAFTT/0MBONRY=) 2: 49CEB44A28D111EDB364C870C4F9AE02.roa (hash: jgvcwXfR1ytNtZnPkE0NS8oNTgn4AVeJN86S8AIpa0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Validity Not Before: Oct 7 01:09:16 2026 GMT Not After : Oct 14 01:09:16 2026 GMT Subject: CN=6ac59bbc-9c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:7e:82:e8:d6:ba:92:db:71:0f:23:dd:fa: 4d:62:4e:a0:47:ea:29:a6:52:c4:16:86:44:9a:eb: 10:8f:9e:c2:e4:40:d7:93:a2:cf:32:a4:2d:23:53: 89:ab:4a:17:5d:01:3e:9a:37:13:c7:91:31:fc:d4: 63:44:55:5b:19:0f:e4:11:9f:c6:f4:aa:79:32:bd: ba:03:ea:af:e2:23:52:65:dc:88:79:f0:2d:99:c9: de:03:a2:d6:b1:34:c0:88:56:36:db:d2:22:cd:4a: ed:f7:80:10:ae:5b:51:9e:48:7a:fe:84:10:7b:14: 7e:7b:c8:05:64:a7:65:7f:b5:97:97:05:00:27:f2: b5:13:d8:7a:11:dc:02:06:61:42:15:8d:cf:e0:3b: 78:a3:17:fc:42:19:34:14:56:01:19:a4:a9:4c:2b: b7:a6:3b:72:b4:1a:f8:03:8a:15:86:b2:a1:87:99: 30:63:9e:93:58:69:49:54:e9:68:f0:0f:25:9f:09: a1:b5:2d:98:59:92:c1:10:e7:6f:dd:a3:2f:48:56: 02:17:7e:65:a8:e7:87:5d:03:9b:a9:3c:7d:d0:b4: f2:5a:63:71:de:39:70:a0:32:6c:d9:91:49:05:5b: ef:84:54:e6:52:c6:2f:68:16:17:c8:b5:5c:e8:4e: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:54:F5:F7:41:D4:27:CB:AC:97:74:6E:CE:08:20:DD:4B:AE:E2:1B X509v3 Authority Key Identifier: keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fa:24:81:8d:43:aa:67:b1:86:66:b6:e1:24:9a:8b:1c:1c: 62:8e:56:2a:d8:ee:f8:93:80:81:c3:9d:47:c1:5f:c9:40:ef: 57:b9:fb:1f:c8:e6:19:fa:d4:39:09:ef:fc:29:f6:50:40:2f: e5:ee:3b:4b:1f:06:03:18:1e:49:de:88:14:43:71:ea:c0:0f: fb:aa:e5:c1:bb:e2:c8:ab:cf:fd:89:7b:b5:4d:b8:1c:ff:96: c0:a3:1f:c1:d0:4b:ce:2b:b9:60:97:dc:73:af:e9:82:bf:ed: e2:66:cc:b5:30:99:39:cc:45:36:f4:d6:32:7b:2f:87:d4:53: 59:62:3a:53:f1:a4:b9:77:e9:c8:3d:da:38:6b:70:11:c4:17: 81:f7:3d:a8:3f:f3:d4:eb:be:52:2a:3f:51:a7:0f:91:72:79: 6a:c1:7a:7b:8e:73:23:fd:71:b0:26:d2:63:8a:10:6c:cd:61: e2:c1:cb:bd:9a:fa:08:ef:27:39:3b:e9:09:92:60:7a:24:f2: 3c:e5:12:ba:f8:33:a3:25:17:eb:f0:0e:78:46:29:f4:fa:71: 83:a9:69:1a:45:de:08:c2:57:fa:a5:4f:19:7f:3d:36:89:e8: b2:91:da:72:3b:f9:fe:69:47:4f:54:71:15:1a:66:15:58:a8: e8:84:2a:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMjgxMTAvBgNVBAUTKDJFMDZGMzA5MUFENThFRDA2MzNGRjk4OUIxRkQzMjk3 NzNFQzNBQTcwHhcNMjYxMDA3MDEwOTE2WhcNMjYxMDE0MDEwOTE2WjAYMRYwFAYD VQQDEw02YWM1OWJiYy05YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrt+gujWupLbcQ8j3fpNYk6gR+opplLEFoZEmusQj57C5EDXk6LPMqQtI1OJ q0oXXQE+mjcTx5Ex/NRjRFVbGQ/kEZ/G9Kp5Mr26A+qv4iNSZdyIefAtmcneA6LW sTTAiFY229IizUrt94AQrltRnkh6/oQQexR+e8gFZKdlf7WXlwUAJ/K1E9h6EdwC BmFCFY3P4Dt4oxf8Qhk0FFYBGaSpTCu3pjtytBr4A4oVhrKhh5kwY56TWGlJVOlo 8A8lnwmhtS2YWZLBEOdv3aMvSFYCF35lqOeHXQObqTx90LTyWmNx3jlwoDJs2ZFJ BVvvhFTmUsYvaBYXyLVc6E5DSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJU9fdB 1CfLrJd0bs4IIN1LruIbMB8GA1UdIwQYMBaAFC4G8wka1Y7QYz/5ibH9Mpdz7Dqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QyOC80QkRBRUVEQzI4 Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0QmpQX21Kc2YweWwzUHNP cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnYnpDUnJWanRCalBfbUpzZjB5bDNQc09xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QyOC80QkRBRUVEQzI4Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0 QmpQX21Kc2YweWwzUHNPcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifokgY1Dqmexhma24SSaixwcYo5WKtju+JOAgcOdR8FfyUDvV7n7H8jmGfrU OQnv/Cn2UEAv5e47Sx8GAxgeSd6IFENx6sAP+6rlwbviyKvP/Yl7tU24HP+WwKMf wdBLziu5YJfcc6/pgr/t4mbMtTCZOcxFNvTWMnsvh9RTWWI6U/GkuXfpyD3aOGtw EcQXgfc9qD/z1Ou+Uio/UacPkXJ5asF6e45zI/1xsCbSY4oQbM1h4sHLvZr6CO8n OTvpCZJgeiTyPOUSuvgzoyUX6/AOeEYp9Ppxg6lpGkXeCMJX+qVPGX89NonospHa cjv5/mlHT1RxFRpmFVio6IQq/Q== -----END CERTIFICATE-----Generated at Wed Oct 7 13:31:39 2026 by rpki-client