$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json) Hash identifier: fw/fjYTuWqXsKFvrvfLJTcFOPoN17GHLR5Nu8WC2XnM= Subject key identifier: 60:08:B1:F9:46:3B:F7:CD:AC:E8:7A:8D:54:B0:FB:55:88:44:2F:5B Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft Manifest number: 02E7 Signing time: Thu 29 Oct 2026 01:30:24 +0000 Manifest this update: Thu 29 Oct 2026 01:30:24 +0000 Manifest next update: Thu 05 Nov 2026 01:30:24 +0000 Files and hashes: 1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: hD0WU2iFRgWWljpmsxbnKiQTdMXWJ39+Nu7paxDGSSI=) 2: 349641F2A03111F1889724EB3511F970.roa (hash: CvTC/pIM80we377avR/pdEAzz4NkXAGS/quK/H+TxIw=) 3: dTHGenAG0Y3TNVyWRneW2mjP-F0.asa (hash: JbeJSpkerq+CwxYJ/iF7DBQibaRKdHsrzKWNG6ptUCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Validity Not Before: Oct 29 01:30:24 2026 GMT Not After : Nov 5 01:30:24 2026 GMT Subject: CN=6ae2a1b0-bdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:0d:05:42:3c:a7:b6:c4:67:41:48:c8:31: 4b:e7:e0:51:f7:2e:3e:98:3c:52:29:1f:fd:8d:7d: 30:32:19:4c:3f:de:d4:c8:7f:e1:ad:ae:e8:25:ca: df:01:5a:41:92:94:77:0b:f0:5f:8a:9b:85:1f:9c: f4:00:c5:60:e3:e2:d9:6e:b3:dc:63:6d:01:9f:fa: b6:91:c9:29:b9:7f:e3:4f:d0:07:17:f6:8f:71:ff: fe:1c:93:4d:e5:f4:70:f9:f9:79:46:fb:43:6b:2b: 12:57:17:ff:60:36:cb:32:a7:18:dd:23:50:5a:58: d8:86:60:5d:fe:00:89:f6:3d:45:00:42:07:13:94: b9:65:25:4d:63:ba:de:d3:89:4c:95:58:cb:ed:b0: 9b:cd:71:85:4e:59:40:56:3b:64:d2:c0:87:e8:b7: 5a:4b:dd:49:46:25:48:9c:b8:a7:b4:80:69:2f:40: b5:0a:44:95:7d:51:79:dc:d2:af:a3:b6:7d:f9:a8: 11:90:e8:62:6b:ec:12:8e:93:3f:65:00:e6:bc:32: 0c:46:63:cf:82:64:76:4c:b0:69:2c:4c:b0:fa:44: d5:b8:c7:ff:3f:c5:4f:d0:f9:09:04:1c:ca:48:0c: ff:89:07:04:0b:f8:51:25:ae:ec:e2:5c:00:b8:8e: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:B1:F9:46:3B:F7:CD:AC:E8:7A:8D:54:B0:FB:55:88:44:2F:5B X509v3 Authority Key Identifier: keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b7:14:e4:f1:95:a9:45:6f:55:5a:74:1a:c0:b8:8d:d0:61: 2b:2a:52:6b:2e:4a:08:3e:87:f6:11:8e:38:c9:b5:4b:ed:24: f2:7d:e2:9a:38:ec:15:27:52:19:be:54:f8:cd:7b:41:f8:66: 65:a2:0c:3e:25:00:43:9c:d7:b8:ef:c7:f9:40:93:18:d1:1a: ff:52:fe:a2:4e:71:34:75:ee:ec:72:92:14:fe:a9:ca:d1:19: c1:56:de:26:38:66:cd:fd:da:2b:2c:87:27:f2:1e:43:0b:d9: d3:a5:dd:ea:6f:2f:b0:ea:98:10:a0:65:5b:18:75:0b:72:d0: 3c:30:e5:5c:90:3a:32:a9:ab:d9:1d:6a:2b:f1:89:2e:6a:ec: bd:15:50:06:21:0d:2b:4c:96:3f:e8:c8:98:4d:72:52:24:da: 57:be:92:d7:fc:d3:17:15:08:f7:0c:a0:8f:93:86:c0:4b:e9: 7e:8a:70:dc:87:5c:c6:a9:fb:e0:00:9c:83:bf:7b:c0:72:5d: 69:77:f6:af:58:93:35:45:57:3b:e1:77:e8:53:45:97:0d:02: 59:84:c8:90:8d:14:18:f3:f2:2f:4c:8b:3f:00:7f:fc:18:df: 6e:6d:56:62:ac:b3:82:fc:37:e8:bf:87:b2:b8:f8:99:9b:de: 18:f7:79:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNENzUxMTAvBgNVBAUTKDJEQkM0NjVEQTY4MUI1QjMxMTg5N0FCNkM0NjhDMjU0 NzA2RTVEMkYwHhcNMjYxMDI5MDEzMDI0WhcNMjYxMTA1MDEzMDI0WjAYMRYwFAYD VQQDEw02YWUyYTFiMC1iZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRANBUI8p7bEZ0FIyDFL5+BR9y4+mDxSKR/9jX0wMhlMP97UyH/hra7oJcrf AVpBkpR3C/BfipuFH5z0AMVg4+LZbrPcY20Bn/q2kckpuX/jT9AHF/aPcf/+HJNN 5fRw+fl5RvtDaysSVxf/YDbLMqcY3SNQWljYhmBd/gCJ9j1FAEIHE5S5ZSVNY7re 04lMlVjL7bCbzXGFTllAVjtk0sCH6LdaS91JRiVInLintIBpL0C1CkSVfVF53NKv o7Z9+agRkOhia+wSjpM/ZQDmvDIMRmPPgmR2TLBpLEyw+kTVuMf/P8VP0PkJBBzK SAz/iQcEC/hRJa7s4lwAuI7dvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAIsflG O/fNrOh6jVSw+1WIRC9bMB8GA1UdIwQYMBaAFC28Rl2mgbWzEYl6tsRowlRwbl0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Q3NS81MkRFNEM0QTY0 QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRiTVJpWHEyeEdqQ1ZIQnVY UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xieEdYYWFCdGJNUmlYcTJ4R2pDVkhCdVhTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Q3NS81MkRFNEM0QTY0QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRi TVJpWHEyeEdqQ1ZIQnVYUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKbcU5PGVqUVvVVp0GsC4jdBhKypSay5KCD6H9hGOOMm1S+0k8n3imjjsFSdS Gb5U+M17QfhmZaIMPiUAQ5zXuO/H+UCTGNEa/1L+ok5xNHXu7HKSFP6pytEZwVbe Jjhmzf3aKyyHJ/IeQwvZ06Xd6m8vsOqYEKBlWxh1C3LQPDDlXJA6Mqmr2R1qK/GJ LmrsvRVQBiENK0yWP+jImE1yUiTaV76S1/zTFxUI9wygj5OGwEvpfopw3Idcxqn7 4ACcg797wHJdaXf2r1iTNUVXO+F36FNFlw0CWYTIkI0UGPPyL0yLPwB//Bjfbm1W Yqyzgvw36L+Hsrj4mZveGPd5wA== -----END CERTIFICATE-----Generated at Fri Oct 30 01:55:41 2026 by rpki-client