$ rpki-client -vvvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json) Hash identifier: 6XEpYnekbrxqdAb1SLSszHKTHyWOXpPk+XRh7oId+8s= Subject key identifier: 14:E5:23:D6:BB:31:5B:EB:C2:5E:52:2F:A9:85:20:B2:6A:34:A5:2C Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft Manifest number: 0600 Signing time: Tue 06 Oct 2026 23:05:24 +0000 Manifest this update: Tue 06 Oct 2026 23:05:23 +0000 Manifest next update: Tue 13 Oct 2026 23:05:23 +0000 Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: NEzF3Fnw8VP1JXRtoUgR6/5/LlVxvODx4jRZ9wh4BXc=) 2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=) 3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=) 4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: Oct 6 23:05:23 2026 GMT Not After : Oct 13 23:05:23 2026 GMT Subject: CN=6ac57eb3-1053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f9:14:74:af:91:24:a0:8b:2f:34:4c:47:33: 38:b7:88:60:d3:62:cb:94:8a:f8:cf:52:8c:3c:b4: 45:73:c3:4e:b4:97:4e:8d:b6:3e:7a:db:a6:cc:c7: 2d:67:07:fd:d8:fd:27:99:08:46:76:9b:c5:1a:13: 9e:3e:5f:d9:a7:85:c6:cf:ef:9b:44:90:68:38:e2: bb:3e:6a:33:d8:7e:b0:0f:f2:fe:9e:94:77:0e:33: 83:4e:14:47:4a:e4:4b:e7:b5:f7:1f:23:25:75:25: 35:a1:32:8e:9a:12:fc:6c:6d:de:dd:b0:32:b5:cd: 54:1f:d6:24:d8:c3:08:28:96:ac:b7:a7:bf:8d:70: de:60:bb:f7:41:95:16:bb:b3:4f:14:8b:9f:b0:0d: 65:e6:05:1c:1c:8c:23:33:24:76:1e:f1:ea:0d:db: c6:ac:87:da:69:7c:2f:99:61:5f:7d:ba:27:75:10: b3:d6:95:cc:c5:81:d6:1f:3e:40:11:cc:8c:13:b8: 2a:a6:e6:dd:52:88:18:71:68:67:db:9b:39:80:b4: 46:51:fb:34:db:99:c8:da:c9:e6:4e:fe:6d:43:ca: 67:5b:84:26:4f:05:b7:ab:78:c0:7c:82:03:07:3b: d6:61:f1:7b:a9:85:48:a8:e5:16:7c:74:a9:17:f5: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E5:23:D6:BB:31:5B:EB:C2:5E:52:2F:A9:85:20:B2:6A:34:A5:2C X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2f:6b:86:29:44:cc:ae:d6:36:bc:e1:62:dd:59:04:b1:38: 88:a6:9d:01:22:ec:02:dc:68:c6:a9:b3:37:fe:ef:4a:67:f5: 66:c8:2b:02:1d:c7:19:fa:db:d2:5f:b4:06:30:af:04:d4:c4: 87:dc:5c:54:73:3a:0f:7f:1c:5b:50:c1:07:a1:8e:98:8f:b3: ca:3e:6a:e5:0f:e8:cc:dd:75:7f:bc:bb:1f:fa:43:8e:8a:56: 57:e1:fd:2a:54:fc:75:3e:84:4c:ae:b4:92:63:9b:a3:c3:48: 06:58:96:be:80:0a:f0:9d:6f:16:c5:74:7b:f0:e5:ba:50:0e: 93:89:1b:d0:36:e1:a5:d0:d2:f1:7c:f0:57:69:fc:92:df:73: 3a:9a:2a:58:29:f4:62:33:7e:d9:73:af:9b:05:8a:05:c1:33: db:88:d9:01:9f:80:34:43:2a:43:30:3e:e9:cf:f7:09:3c:9f: 05:44:b3:20:a3:3a:c4:71:d6:6f:50:a9:e1:b7:1b:f9:38:ee: b5:7a:8c:a0:04:09:c9:98:07:28:86:ca:64:b0:f0:f7:de:b0: 89:89:53:74:2e:38:bb:19:2b:76:56:88:02:e0:9b:dd:a3:83: 29:89:00:0e:2e:24:79:4c:3a:46:91:1e:dc:b1:f4:2d:fe:d8: 3c:c1:0b:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjYxMDA2MjMwNTIzWhcNMjYxMDEzMjMwNTIzWjAYMRYwFAYD VQQDEw02YWM1N2ViMy0xMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vkUdK+RJKCLLzRMRzM4t4hg02LLlIr4z1KMPLRFc8NOtJdOjbY+etumzMct Zwf92P0nmQhGdpvFGhOePl/Zp4XGz++bRJBoOOK7Pmoz2H6wD/L+npR3DjODThRH SuRL57X3HyMldSU1oTKOmhL8bG3e3bAytc1UH9Yk2MMIKJast6e/jXDeYLv3QZUW u7NPFIufsA1l5gUcHIwjMyR2HvHqDdvGrIfaaXwvmWFffbondRCz1pXMxYHWHz5A EcyME7gqpubdUogYcWhn25s5gLRGUfs025nI2snmTv5tQ8pnW4QmTwW3q3jAfIID BzvWYfF7qYVIqOUWfHSpF/XolQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTlI9a7 MVvrwl5SL6mFILJqNKUsMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81 T3lQSjN4VFpZWDJrRExKbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIS9rhilEzK7WNrzhYt1ZBLE4iKadASLsAtxoxqmzN/7vSmf1ZsgrAh3HGfrb 0l+0BjCvBNTEh9xcVHM6D38cW1DBB6GOmI+zyj5q5Q/ozN11f7y7H/pDjopWV+H9 KlT8dT6ETK60kmObo8NIBliWvoAK8J1vFsV0e/DlulAOk4kb0DbhpdDS8XzwV2n8 kt9zOpoqWCn0YjN+2XOvmwWKBcEz24jZAZ+ANEMqQzA+6c/3CTyfBUSzIKM6xHHW b1Cp4bcb+TjutXqMoAQJyZgHKIbKZLDw996wiYlTdC44uxkrdlaIAuCb3aODKYkA Di4keUw6RpEe3LH0Lf7YPMELKw== -----END CERTIFICATE-----Generated at Wed Oct 7 06:01:43 2026 by rpki-client