$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: ENDm2yqMGmIjuVmVsmpjhBVKj+qlRg484sPNewmc3oU= Subject key identifier: D9:A3:33:91:5E:AA:A1:8D:B2:14:3B:3C:22:32:7A:6E:A4:5A:57:2A Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0A0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 09EF Signing time: Fri 02 Oct 2026 20:08:26 +0000 Manifest this update: Fri 02 Oct 2026 20:08:26 +0000 Manifest next update: Fri 09 Oct 2026 20:08:26 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: GLNp9Gzq/LCqNzG7oClARNfOEH5URQ89YqkzPYclreY=) 2: C6375A0C4E6E11F18914D768AA833773.roa (hash: LWTMgu/Rj8mxnaBR+W4WL09UY/B1DqeAC/Sg7AaI1Xg=) 3: C51E21964E6E11F18914D768AA833773.roa (hash: zipkwEwfKvKs9YWsnBUKVG+rOAHA5B8lFyQzCssBVr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Oct 2 20:08:26 2026 GMT Not After : Oct 9 20:08:26 2026 GMT Subject: CN=6ac00f3a-9e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:2c:4e:15:b0:4d:31:53:21:9e:4b:31:b3: c4:8a:c4:88:9a:00:44:67:c3:8b:fd:bf:cf:93:29: 41:df:36:78:6d:c4:6d:23:03:ff:55:5a:90:00:d8: c3:d4:ea:69:f2:03:d5:25:dd:7f:44:f6:57:31:63: 6e:e0:c0:4e:c4:2a:d4:68:93:e2:4a:f1:d0:7e:59: 31:20:d0:8c:cf:55:36:a7:51:88:46:89:e4:b1:4e: 3a:93:49:d8:67:0d:a7:75:9e:8c:48:51:50:bd:8b: 01:1c:bf:d4:fd:0d:e9:bf:35:2d:05:24:c8:b9:de: 24:34:93:72:2d:f6:17:c5:62:c2:97:e7:22:14:8c: 92:7b:50:fe:a2:d2:2f:93:d3:a8:5b:8a:bc:aa:d0: 68:a7:c5:b0:c8:86:61:ce:84:1a:cd:8e:03:2b:47: 91:20:60:1e:a9:1f:09:da:71:f8:cc:6d:00:b4:3b: c4:93:67:cd:5f:6c:05:b0:7e:22:31:af:f3:42:a4: e7:c9:d0:83:6b:67:30:52:ab:9e:2b:fd:89:12:28: 82:a5:e0:0d:b0:6e:cb:a6:96:3c:02:00:cb:69:5d: 2e:af:65:8d:bb:bd:9c:2b:d0:29:00:0e:2b:fc:95: 13:6b:90:58:2d:5a:3c:85:1e:da:61:c0:42:cd:f2: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A3:33:91:5E:AA:A1:8D:B2:14:3B:3C:22:32:7A:6E:A4:5A:57:2A X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9a:fa:ba:fa:de:aa:0a:d7:bf:e2:2e:45:68:6f:4b:70:7c: ef:90:66:e3:77:32:a2:9f:18:0b:15:15:75:b5:51:30:71:d9: 73:3c:68:87:ad:45:7c:de:09:bb:b9:8d:a0:f7:cb:7c:a2:e2: 4e:0c:81:14:56:3c:83:c6:d6:12:b5:84:c3:1f:64:c3:c6:2d: 2b:01:c4:30:ee:24:a1:c0:ad:3f:3a:46:16:f0:9f:88:2f:4a: 99:56:1c:89:ec:fc:f7:b9:c2:75:21:c7:f1:4d:85:b9:d5:ea: 5a:a5:72:be:00:3e:3d:85:5e:93:90:cb:d7:e4:71:2d:77:2a: 55:dd:98:47:5b:57:6c:21:a3:73:33:b7:98:87:4e:07:2c:9d: 4f:c4:56:01:50:02:e1:3e:62:47:54:05:af:2f:56:5f:10:69: f2:84:13:6f:05:3d:63:d4:be:c4:fd:53:ff:78:d1:83:a2:98: af:81:48:a7:8f:9f:18:99:c6:b9:a1:dd:02:4e:4c:17:05:77: df:2e:54:65:55:c7:17:d6:5e:65:8a:55:f9:18:21:f8:02:1b: f7:87:e5:4b:cc:4f:5f:2d:78:cb:d9:ae:ab:25:68:95:12:a0: 87:25:0c:ad:34:f5:f6:bb:33:2a:d9:b9:82:3a:cc:32:4d:e9: f2:f4:99:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjYxMDAyMjAwODI2WhcNMjYxMDA5MjAwODI2WjAYMRYwFAYD VQQDEw02YWMwMGYzYS05ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLcsThWwTTFTIZ5LMbPEisSImgBEZ8OL/b/PkylB3zZ4bcRtIwP/VVqQANjD 1Opp8gPVJd1/RPZXMWNu4MBOxCrUaJPiSvHQflkxINCMz1U2p1GIRonksU46k0nY Zw2ndZ6MSFFQvYsBHL/U/Q3pvzUtBSTIud4kNJNyLfYXxWLCl+ciFIySe1D+otIv k9OoW4q8qtBop8WwyIZhzoQazY4DK0eRIGAeqR8J2nH4zG0AtDvEk2fNX2wFsH4i Ma/zQqTnydCDa2cwUqueK/2JEiiCpeANsG7LppY8AgDLaV0ur2WNu72cK9ApAA4r /JUTa5BYLVo8hR7aYcBCzfI0XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmjM5Fe qqGNshQ7PCIyem6kWlcqMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZr6uvreqgrXv+IuRWhvS3B875Bm43cyop8YCxUVdbVRMHHZczxoh61FfN4J u7mNoPfLfKLiTgyBFFY8g8bWErWEwx9kw8YtKwHEMO4kocCtPzpGFvCfiC9KmVYc iez897nCdSHH8U2FudXqWqVyvgA+PYVek5DL1+RxLXcqVd2YR1tXbCGjczO3mIdO ByydT8RWAVAC4T5iR1QFry9WXxBp8oQTbwU9Y9S+xP1T/3jRg6KYr4FIp4+fGJnG uaHdAk5MFwV33y5UZVXHF9ZeZYpV+Rgh+AIb94flS8xPXy14y9muqyVolRKghyUM rTT19rszKtm5gjrMMk3p8vSZZA== -----END CERTIFICATE-----Generated at Sun Oct 4 21:44:11 2026 by rpki-client