$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: Jw0Bi0vyRKlnTvaNwrQU0qKpZgGIdcoBhj7U6kJG+Zo= Subject key identifier: 5E:85:5A:F8:5E:6A:62:AF:F7:70:49:BB:A4:1E:7C:7D:0C:D7:69:A6 Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 360D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 35CC Signing time: Tue 06 Oct 2026 14:15:43 +0000 Manifest this update: Tue 06 Oct 2026 14:15:42 +0000 Manifest next update: Tue 13 Oct 2026 14:15:42 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: n+Vlte72+0X8/7QvsX0LdPAdlN1j8vzG6cd/0COrcaw=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13837 (0x360d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Oct 6 14:15:42 2026 GMT Not After : Oct 13 14:15:42 2026 GMT Subject: CN=6ac5028e-3e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:8a:af:51:96:5b:c8:78:88:53:1b:97:60: a6:a9:02:80:3d:0f:60:b4:6f:4e:86:7c:4f:28:3d: b1:ef:89:69:3a:2d:bd:7e:35:1d:0d:a9:a4:a7:47: e3:b3:23:e4:c7:80:b2:55:e0:af:6a:78:4e:cb:a1: a0:89:07:58:83:a1:d6:5f:40:ff:24:17:5f:ed:6a: 45:8f:64:67:aa:d8:34:25:25:a4:d7:b6:a4:f5:37: 35:89:3d:fc:5f:2d:db:ae:13:14:20:93:3f:2e:5e: cd:d0:1c:1b:60:70:4b:22:98:b8:37:44:55:53:60: a7:3c:fc:77:11:b9:b8:cf:7c:98:a3:56:72:db:7a: 14:6c:5b:98:6a:e9:ca:fc:10:11:db:7a:c9:c1:10: 76:88:44:f7:17:fc:1a:68:35:08:fe:ac:70:1b:27: 24:6b:08:b7:6b:31:24:1f:bb:cf:1a:bd:e7:ef:e0: 2b:08:43:f6:85:d6:61:08:a2:11:97:3c:bc:19:80: a3:11:c1:16:0b:89:a2:c8:a7:ae:1a:ba:37:00:4f: a6:d7:e3:04:4c:9a:68:e9:a0:f4:e4:38:56:c5:2e: 11:1a:e3:69:74:75:d9:23:b6:f0:5d:6d:e3:e1:f6: be:47:16:a4:b6:0b:a5:ca:36:99:ca:65:91:74:9c: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:5A:F8:5E:6A:62:AF:F7:70:49:BB:A4:1E:7C:7D:0C:D7:69:A6 X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6e:3f:92:26:47:8d:93:13:26:c7:07:34:57:73:57:dd:18: 5f:0a:37:d5:cc:09:42:62:b1:09:a7:27:f0:3f:b0:f7:b1:18: a6:44:66:69:c0:c1:fa:09:27:df:26:d8:b7:4d:b7:c2:31:32: f0:b4:3f:ab:d1:3b:f2:09:e2:c1:3c:bb:44:43:5b:5c:c1:d9: 32:b5:f7:46:cd:5b:e7:84:49:d4:2b:91:8b:92:41:58:d3:f7: 09:63:72:d7:5f:fd:a5:b7:1f:62:50:52:14:e0:8e:45:fd:41: 03:78:28:37:aa:84:5a:ab:74:8a:9c:1a:95:d2:80:a3:88:55: ae:90:27:8b:23:54:72:8e:65:7f:f1:13:1d:c7:b3:52:ea:8a: 0e:54:da:8d:d6:7e:96:56:f1:03:23:82:1e:15:8c:4b:98:97: 84:85:7f:87:a8:5c:73:1d:dc:57:69:8a:10:e1:94:d2:c1:28: e0:4b:64:e4:0f:62:49:ef:d2:3b:1b:79:43:0f:98:a5:29:78: f9:64:fe:6c:59:94:54:81:45:75:a7:4b:a6:2b:f7:c0:98:58: 23:1b:17:e2:56:eb:92:7c:f4:05:74:6e:7c:06:f9:73:2c:a6: e9:b3:6f:0d:2f:56:2b:49:9b:88:4e:14:ec:bb:6a:bf:7f:49: 2f:59:ea:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjYxMDA2MTQxNTQyWhcNMjYxMDEzMTQxNTQyWjAYMRYwFAYD VQQDEw02YWM1MDI4ZS0zZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/mKr1GWW8h4iFMbl2CmqQKAPQ9gtG9OhnxPKD2x74lpOi29fjUdDamkp0fj syPkx4CyVeCvanhOy6GgiQdYg6HWX0D/JBdf7WpFj2Rnqtg0JSWk17ak9Tc1iT38 Xy3brhMUIJM/Ll7N0BwbYHBLIpi4N0RVU2CnPPx3Ebm4z3yYo1Zy23oUbFuYaunK /BAR23rJwRB2iET3F/waaDUI/qxwGyckawi3azEkH7vPGr3n7+ArCEP2hdZhCKIR lzy8GYCjEcEWC4miyKeuGro3AE+m1+METJpo6aD05DhWxS4RGuNpdHXZI7bwXW3j 4fa+RxaktgulyjaZymWRdJx8eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6FWvhe amKv93BJu6QefH0M12mmMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH24/kiZHjZMTJscHNFdzV90YXwo31cwJQmKxCacn8D+w97EYpkRmacDB+gkn 3ybYt023wjEy8LQ/q9E78gniwTy7RENbXMHZMrX3Rs1b54RJ1CuRi5JBWNP3CWNy 11/9pbcfYlBSFOCORf1BA3goN6qEWqt0ipwaldKAo4hVrpAniyNUco5lf/ETHcez UuqKDlTajdZ+llbxAyOCHhWMS5iXhIV/h6hccx3cV2mKEOGU0sEo4Etk5A9iSe/S Oxt5Qw+YpSl4+WT+bFmUVIFFdadLpiv3wJhYIxsX4lbrknz0BXRufAb5cyym6bNv DS9WK0mbiE4U7Ltqv39JL1nqsg== -----END CERTIFICATE-----Generated at Thu Oct 8 15:28:27 2026 by rpki-client