$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: PW1bZDmvRlGcyhvqX54WdymQU5UJZIs6+tFJoc/l3VA= Subject key identifier: 3B:9E:92:DC:3D:29:D2:A3:6B:2C:88:94:58:A1:EB:ED:E2:DE:36:BD Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 35B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 359A Signing time: Sun 04 Oct 2026 15:18:16 +0000 Manifest this update: Sun 04 Oct 2026 15:18:15 +0000 Manifest next update: Sun 11 Oct 2026 15:18:15 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: M86A/eF3dvf4sB8wCpjAGqnI96HjHEhQTEgN7NRO/uo=) 2: uCAt4SXBl2CtUWyQ22mEcLh7WPg.asa (hash: btoH/G2nBy0fOe8e9v5dhBMJtDpFQdFY2sJmPNuTutI=) 3: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: HQH51hi8x4G+r78sw5Vb/qFkzB1JErJiNGaCDyzi5E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13752 (0x35b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Oct 4 15:18:15 2026 GMT Not After : Oct 11 15:18:15 2026 GMT Subject: CN=6ac26e38-082e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:cd:a3:e5:6a:e1:b8:78:04:42:38:d4:c7: 88:80:04:e9:41:cf:0d:82:9d:89:e7:4c:36:13:32: 5d:1b:77:e7:14:7a:a2:2f:7b:d8:64:08:33:94:4c: 10:51:4a:6b:21:84:3c:31:10:6a:8a:b6:07:4b:f4: 1c:75:f9:21:5c:ba:66:31:74:cb:79:c7:e3:da:91: 58:ea:31:ee:06:6d:1a:a5:af:a9:d5:f5:83:bd:30: 5f:a6:77:dc:40:ec:71:a8:f6:85:90:57:73:cd:e4: d6:80:52:51:fe:76:7a:7e:de:a5:e0:01:25:38:06: 9b:15:06:a6:c2:47:0a:75:a7:fd:b1:0c:31:bb:ca: 22:dd:22:a4:68:21:e5:3b:e9:8c:29:0e:61:34:8c: ad:7a:ca:68:4f:a7:54:c4:c3:54:c1:fd:c9:2d:39: a3:ac:63:cc:a3:60:b1:7a:56:cc:b0:cb:ac:6e:0b: ac:6d:4c:95:8e:7a:e3:11:28:c0:76:aa:b4:79:88: fe:2d:61:e7:5e:04:e5:39:7c:3c:fc:d6:5b:1a:6f: dc:b6:a0:e3:fd:f9:8d:d4:cf:c1:d0:e2:a7:83:0b: 1e:85:7a:84:10:d2:b8:5e:43:07:54:ec:d4:9f:04: 2d:33:ff:06:e4:69:34:85:21:c5:32:80:d5:f2:e0: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9E:92:DC:3D:29:D2:A3:6B:2C:88:94:58:A1:EB:ED:E2:DE:36:BD X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:a9:6c:bf:64:68:b5:2d:3d:dc:6e:f0:10:5a:0c:10:f0:8f: 8c:e3:04:c4:de:67:12:ae:12:a0:51:50:9c:0d:23:13:80:a2: 37:b8:a9:2d:e4:30:b5:bb:cf:50:0e:a4:5d:5e:1a:bd:2f:29: 58:60:d6:ea:9f:32:73:f0:01:b3:0d:32:7f:1f:5b:a0:bf:ad: 7a:25:27:03:00:3d:c0:e1:2f:73:42:70:07:c1:b2:0e:50:69: 06:24:91:d9:a9:04:2e:5f:1d:0e:ad:80:06:5e:9e:c6:cb:ff: d4:35:b1:32:29:2a:be:a0:11:26:8f:51:3a:fe:0f:25:48:f3: 2d:7a:be:ab:54:2e:c9:90:4b:fd:e4:cc:b0:ba:8e:d9:d0:30: d2:7f:81:c6:12:db:47:f1:c7:ee:bc:6d:08:8e:a0:6b:41:25: 80:3b:2e:53:7f:a3:61:cb:65:ee:6c:e3:32:ec:e8:a6:20:5d: 91:46:43:06:58:42:bd:94:6a:da:66:21:a1:8e:2f:31:90:25: b9:83:35:85:f8:22:dd:24:ec:05:67:34:44:b5:87:3e:82:cb: 5f:f5:46:93:e9:0a:8f:9c:1a:ab:cc:0c:cc:67:21:40:88:87: c9:53:80:95:a1:24:3d:e8:f1:0e:d8:bb:8d:20:ab:82:b8:c8: df:f8:4c:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjYxMDA0MTUxODE1WhcNMjYxMDExMTUxODE1WjAYMRYwFAYD VQQDEw02YWMyNmUzOC0wODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPPNo+Vq4bh4BEI41MeIgATpQc8Ngp2J50w2EzJdG3fnFHqiL3vYZAgzlEwQ UUprIYQ8MRBqirYHS/QcdfkhXLpmMXTLecfj2pFY6jHuBm0apa+p1fWDvTBfpnfc QOxxqPaFkFdzzeTWgFJR/nZ6ft6l4AElOAabFQamwkcKdaf9sQwxu8oi3SKkaCHl O+mMKQ5hNIytespoT6dUxMNUwf3JLTmjrGPMo2CxelbMsMusbgusbUyVjnrjESjA dqq0eYj+LWHnXgTlOXw8/NZbGm/ctqDj/fmN1M/B0OKngwsehXqEENK4XkMHVOzU nwQtM/8G5Gk0hSHFMoDV8uBM6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuektw9 KdKjayyIlFih6+3i3ja9MB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxKlsv2RotS093G7wEFoMEPCPjOMExN5nEq4SoFFQnA0jE4CiN7ipLeQwtbvP UA6kXV4avS8pWGDW6p8yc/ABsw0yfx9boL+teiUnAwA9wOEvc0JwB8GyDlBpBiSR 2akELl8dDq2ABl6exsv/1DWxMikqvqARJo9ROv4PJUjzLXq+q1QuyZBL/eTMsLqO 2dAw0n+BxhLbR/HH7rxtCI6ga0ElgDsuU3+jYctl7mzjMuzopiBdkUZDBlhCvZRq 2mYhoY4vMZAluYM1hfgi3STsBWc0RLWHPoLLX/VGk+kKj5waq8wMzGchQIiHyVOA laEkPejxDti7jSCrgrjI3/hMbg== -----END CERTIFICATE-----Generated at Mon Oct 5 07:00:18 2026 by rpki-client