$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: 2CbcIQPLpgWdsuyq+OVLEGhF6Tri+vsTy+jFYpjWM7U= Subject key identifier: 47:9E:9A:2F:E7:6A:D8:FB:62:FB:12:60:9F:E1:F6:F7:7C:85:E2:54 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 0156 Signing time: Sat 05 Sep 2026 05:03:20 +0000 Manifest this update: Sat 05 Sep 2026 05:03:20 +0000 Manifest next update: Sat 12 Sep 2026 05:03:20 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: BSb0uuJwYgYpgcr0YKO+t+BYUdXfTQbvpGRP+AeCIgQ=) 2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) 3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) 4: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Sep 5 05:03:20 2026 GMT Not After : Sep 12 05:03:20 2026 GMT Subject: CN=6a9ba298-9fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:3b:f8:1c:1e:f7:d9:1e:79:e8:aa:e7:49: a0:91:1a:18:23:04:a7:01:23:5f:c8:cb:15:3d:37: 53:9a:1e:89:a6:54:aa:ce:0c:d5:d8:d0:fd:3e:ae: 63:f3:a6:66:7a:ed:4f:ef:15:a8:64:50:97:65:d3: 0a:a9:c0:ab:1c:d7:2c:43:18:09:36:4b:b3:39:e9: c8:8c:40:41:4a:5c:0c:6c:39:87:34:78:e7:4a:55: 5e:e7:bf:61:91:a1:31:b2:0b:b6:99:20:18:8b:98: 25:94:19:aa:41:ee:96:80:92:86:4f:e8:d4:cd:75: 99:0f:95:92:22:16:43:8c:0d:d1:62:82:7c:a0:82: 74:56:10:98:20:71:3f:82:de:c2:cb:48:d9:53:b6: 98:50:ef:d1:aa:19:5f:c4:c7:5b:33:87:47:a4:21: 91:e7:c9:12:bb:c1:46:10:10:7a:e2:89:69:61:48: 9e:30:b0:60:9e:9f:c9:75:5d:85:79:3c:69:bc:f3: 8c:fd:79:ae:6e:87:d9:b7:e9:41:05:5b:28:f0:95: 40:e2:e4:70:ac:5b:8d:d6:27:f1:38:e8:1f:a4:63: 22:09:3f:2a:45:5f:c2:a2:3b:cc:58:58:ac:da:ae: 7f:7d:35:82:b9:d4:60:14:e6:81:a3:58:1e:eb:6f: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:9A:2F:E7:6A:D8:FB:62:FB:12:60:9F:E1:F6:F7:7C:85:E2:54 X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c8:78:8f:1b:b2:ce:1c:71:3d:ae:2a:17:49:df:09:2a:60: e8:03:11:b8:34:50:01:fe:da:56:ae:fc:75:6a:85:52:c8:46: 25:78:87:6d:90:18:3a:8d:e8:35:24:55:15:1b:b4:9d:cf:89: 14:bd:32:c8:ca:5d:8e:ea:5f:d6:33:07:78:da:40:60:e3:e3: 96:91:f4:9e:a0:96:a1:77:67:63:19:e1:d6:87:89:6b:e8:6b: bb:1d:27:29:c6:81:1a:69:ae:88:78:2f:1c:b7:65:89:a2:f7: 2b:f1:7e:d9:2a:eb:1c:ec:af:00:b9:c3:3a:65:6d:e9:65:4a: 06:09:57:36:34:29:36:d7:2f:c7:76:6c:66:da:1a:1f:db:82: 33:6e:8f:bd:b1:69:0e:73:ac:0d:57:28:17:a6:44:1c:17:59: d0:c3:21:08:89:03:ad:88:66:ed:8f:e9:52:8d:fd:b4:b1:1d: 05:fe:aa:1f:36:12:3b:39:ab:39:f9:46:eb:2b:47:07:31:e7: d3:27:55:3f:6d:57:af:8b:04:a5:06:69:94:03:1b:ec:f9:d9: 72:fc:e6:d6:76:40:90:e6:0b:00:b3:ee:1c:7c:3a:f3:7e:fe: 9f:52:00:7e:a4:48:e2:56:22:1b:3b:90:2f:cd:0d:4e:9a:f1: 4b:b4:dd:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYwOTA1MDUwMzIwWhcNMjYwOTEyMDUwMzIwWjAYMRYwFAYD VQQDEw02YTliYTI5OC05ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C87+Bwe99keeeiq50mgkRoYIwSnASNfyMsVPTdTmh6JplSqzgzV2ND9Pq5j 86Zmeu1P7xWoZFCXZdMKqcCrHNcsQxgJNkuzOenIjEBBSlwMbDmHNHjnSlVe579h kaExsgu2mSAYi5gllBmqQe6WgJKGT+jUzXWZD5WSIhZDjA3RYoJ8oIJ0VhCYIHE/ gt7Cy0jZU7aYUO/RqhlfxMdbM4dHpCGR58kSu8FGEBB64olpYUieMLBgnp/JdV2F eTxpvPOM/XmubofZt+lBBVso8JVA4uRwrFuN1ifxOOgfpGMiCT8qRV/CojvMWFis 2q5/fTWCudRgFOaBo1ge629IAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeemi/n atj7YvsSYJ/h9vd8heJUMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW8h4jxuyzhxxPa4qF0nfCSpg6AMRuDRQAf7aVq78dWqFUshGJXiHbZAYOo3o NSRVFRu0nc+JFL0yyMpdjupf1jMHeNpAYOPjlpH0nqCWoXdnYxnh1oeJa+hrux0n KcaBGmmuiHgvHLdliaL3K/F+2SrrHOyvALnDOmVt6WVKBglXNjQpNtcvx3ZsZtoa H9uCM26PvbFpDnOsDVcoF6ZEHBdZ0MMhCIkDrYhm7Y/pUo39tLEdBf6qHzYSOzmr OflG6ytHBzHn0ydVP21Xr4sEpQZplAMb7PnZcvzm1nZAkOYLALPuHHw6837+n1IA fqRI4lYiGzuQL80NTprxS7TduQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:39:39 2026 by rpki-client