$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft File: lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json) Hash identifier: 497rjFQ52o6eGzPljd3DYKtwWlg+ok3eYCAWgc7amxU= Subject key identifier: 7F:9B:AA:F3:A7:1D:A3:61:CB:04:79:92:75:57:ED:12:B2:DE:65:40 Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft Manifest number: 010A Signing time: Mon 19 Oct 2026 06:45:13 +0000 Manifest this update: Mon 19 Oct 2026 06:45:12 +0000 Manifest next update: Mon 26 Oct 2026 06:45:12 +0000 Files and hashes: 1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: 24Pcc70Oo2Nn+vBSN2yHCwdohfRaOuLhOTxvKmG45+Y=) 2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: 6U2CgiUvlSZmVIxlf3rv78ibQxmJIaTJLFAkzr+rmKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Validity Not Before: Oct 19 06:45:12 2026 GMT Not After : Oct 26 06:45:12 2026 GMT Subject: CN=6ad5bc79-724b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:0a:9c:c2:29:41:fb:f3:35:3d:9b:41:56: 9d:44:c8:f2:e0:3f:df:15:c4:4a:74:db:db:e5:bd: 47:4f:69:a6:0d:1a:f3:e1:e5:e3:f6:69:0b:1e:fa: 6d:ac:a0:89:aa:4a:81:3e:27:2b:d3:8c:39:68:97: e7:02:5f:20:11:b2:1e:1d:1c:97:65:f8:d4:34:7e: c7:25:8d:0f:c3:75:63:97:99:19:ad:d1:31:29:64: 2c:11:4d:1a:e1:2b:9f:7d:e5:23:ea:32:2d:bb:3e: 42:52:3d:c7:b6:b8:94:2e:c7:b2:24:f7:b8:09:45: 3d:01:c2:9d:7d:e5:fd:65:5b:de:54:40:bf:ce:f8: d7:26:b8:e3:e9:af:e7:d3:da:06:1b:fb:86:e8:26: 16:f3:74:a7:6a:4a:c0:c1:cd:c3:bd:e2:64:4f:0e: 8a:80:60:9c:9b:f2:f1:12:e6:0e:fc:7a:7c:99:6a: 57:96:9c:0c:94:f6:27:7d:37:4b:35:c6:3a:7e:1f: 1c:f4:ec:2c:ce:a7:a1:a6:88:75:a0:ed:78:21:b0: 12:2e:1f:91:55:01:95:ea:f0:6b:fe:c5:81:05:21: 71:8f:5c:f7:64:a4:8c:94:10:94:13:82:a9:38:78: 30:23:84:37:b6:7d:3e:20:94:40:a0:b3:28:ab:b4: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:AA:F3:A7:1D:A3:61:CB:04:79:92:75:57:ED:12:B2:DE:65:40 X509v3 Authority Key Identifier: keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b2:23:53:b7:46:93:62:bf:97:ed:67:53:3a:68:8e:27:99: 9f:cf:72:6d:89:0f:ba:74:76:3a:f8:11:7e:f3:ab:b6:fe:62: e1:ec:43:13:e4:47:3a:64:c4:a8:1f:0e:a2:8c:b6:a7:fe:6b: 2e:8f:8c:e4:3d:87:9d:1e:b7:4a:21:cd:fe:72:82:f8:e7:19: 4f:03:9c:22:11:50:17:4e:cd:25:56:c5:00:9d:da:07:c7:f7: 1e:46:1e:18:a7:93:ee:37:5d:79:da:0d:12:e5:7d:c2:59:df: 1b:90:00:1b:0a:23:bf:84:72:35:c2:70:52:30:85:76:3a:6c: e3:61:fc:12:d8:7f:84:ee:06:ca:80:f6:bb:0f:76:b0:83:22: 98:a3:0f:23:bf:9e:cd:ab:d5:be:1c:54:c1:a6:5a:08:64:d2: 16:a5:21:08:c3:aa:a1:4b:04:b2:2d:e5:e8:86:ab:ed:02:c6: 72:0f:6d:e7:74:ef:ee:a7:52:5f:e6:eb:dc:88:9f:42:ae:92: 80:cf:3d:4b:e3:cb:52:0b:26:fb:5b:b2:39:a0:79:9a:05:ab: 75:2d:b6:44:9b:8c:b3:55:13:08:9c:e6:f6:d2:d3:11:c9:d6: 8f:65:dd:f8:c0:59:23:0e:0f:7b:c1:65:06:ee:ef:ae:17:6c: 66:50:a7:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MUQxMTAvBgNVBAUTKDk1MkE0REM3QzRENjEwOTU5OEJFRUU1QUMwQTIwNkQy N0I4NUM1NkEwHhcNMjYxMDE5MDY0NTEyWhcNMjYxMDI2MDY0NTEyWjAYMRYwFAYD VQQDEw02YWQ1YmM3OS03MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2YKnMIpQfvzNT2bQVadRMjy4D/fFcRKdNvb5b1HT2mmDRrz4eXj9mkLHvpt rKCJqkqBPicr04w5aJfnAl8gEbIeHRyXZfjUNH7HJY0Pw3Vjl5kZrdExKWQsEU0a 4SuffeUj6jItuz5CUj3HtriULseyJPe4CUU9AcKdfeX9ZVveVEC/zvjXJrjj6a/n 09oGG/uG6CYW83SnakrAwc3DveJkTw6KgGCcm/LxEuYO/Hp8mWpXlpwMlPYnfTdL NcY6fh8c9Owszqehpoh1oO14IbASLh+RVQGV6vBr/sWBBSFxj1z3ZKSMlBCUE4Kp OHgwI4Q3tn0+IJRAoLMoq7S/JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+bqvOn HaNhywR5knVX7RKy3mVAMB8GA1UdIwQYMBaAFJUqTcfE1hCVmL7uWsCiBtJ7hcVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcxRC8xRTBGOTkyRTM2 Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VKV1l2dTVhd0tJRzBudUZ4 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTcE54OFRXRUpXWXZ1NWF3S0lHMG51RnhXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcxRC8xRTBGOTkyRTM2Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VK V1l2dTVhd0tJRzBudUZ4V28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMbIjU7dGk2K/l+1nUzpojieZn89ybYkPunR2OvgRfvOrtv5i4exDE+RHOmTE qB8Oooy2p/5rLo+M5D2HnR63SiHN/nKC+OcZTwOcIhFQF07NJVbFAJ3aB8f3HkYe GKeT7jddedoNEuV9wlnfG5AAGwojv4RyNcJwUjCFdjps42H8Eth/hO4GyoD2uw92 sIMimKMPI7+ezavVvhxUwaZaCGTSFqUhCMOqoUsEsi3l6Iar7QLGcg9t53Tv7qdS X+br3IifQq6SgM89S+PLUgsm+1uyOaB5mgWrdS22RJuMs1UTCJzm9tLTEcnWj2Xd +MBZIw4Pe8FlBu7vrhdsZlCnjg== -----END CERTIFICATE-----Generated at Tue Oct 20 18:25:10 2026 by rpki-client