$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json) Hash identifier: NlNCuEXeTE3B8pZbMhk589F+oE28DExUUkJzJDnItDo= Subject key identifier: FD:9F:39:91:56:5B:B1:8B:2E:B5:1C:2B:59:15:BD:BB:C0:E4:C3:4A Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft Manifest number: 02CE Signing time: Fri 11 Sep 2026 01:13:30 +0000 Manifest this update: Fri 11 Sep 2026 01:13:29 +0000 Manifest next update: Fri 18 Sep 2026 01:13:29 +0000 Files and hashes: 1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: qbKee3+fTU1nXZZf61x7Yx57dv7hW8eZHseBb5Adh3Q=) 2: 349641F2A03111F1889724EB3511F970.roa (hash: CvTC/pIM80we377avR/pdEAzz4NkXAGS/quK/H+TxIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Validity Not Before: Sep 11 01:13:29 2026 GMT Not After : Sep 18 01:13:29 2026 GMT Subject: CN=6aa355ba-91b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:52:f9:9a:18:e2:58:23:13:36:c7:3d:2c: 4c:dc:61:26:75:89:7f:42:2f:f6:ae:6c:69:c3:80: 37:25:48:38:63:ff:69:6f:fb:29:94:3f:ab:f8:db: 05:e0:f0:fa:fe:61:39:04:75:1d:2c:cb:df:96:cd: 63:cf:30:0c:af:f4:77:b2:03:dd:82:f7:cc:be:2b: a8:fc:7e:45:7c:1e:3e:d4:f3:f4:90:ba:ac:04:30: fb:3a:7a:fa:11:e9:75:f2:8c:6b:c7:2c:83:2f:6e: 4a:d6:74:a6:df:21:4e:56:44:69:ff:8b:6f:ac:72: 44:42:83:ab:e2:6c:fd:6e:75:a2:79:92:41:80:e2: 26:31:6e:32:ca:4d:03:53:b3:50:59:68:ee:e4:e8: 24:dd:60:c5:6d:b6:ef:9c:68:8f:2f:67:7e:0b:a2: 1d:4a:7c:fb:61:e6:13:32:6c:67:6e:a2:f7:65:80: 0e:c4:ea:26:64:59:07:9d:4e:5e:9e:74:87:a7:7c: 98:0f:39:cc:51:ba:79:dd:c2:5f:d8:20:6b:ee:10: d5:96:db:79:5d:28:e9:1b:41:3a:70:f5:7f:66:44: f3:60:68:ca:1f:82:f3:b7:8e:9d:cb:99:a5:cd:06: 65:63:27:f8:1a:d4:ad:1c:17:fc:ff:2b:95:63:08: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9F:39:91:56:5B:B1:8B:2E:B5:1C:2B:59:15:BD:BB:C0:E4:C3:4A X509v3 Authority Key Identifier: keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0d:08:d7:e0:47:57:67:c6:d3:3e:f8:fc:69:62:92:dd:5d: 02:ff:5a:52:ca:8b:03:43:9b:4c:37:29:17:fc:c2:52:a1:e9: c8:dc:e0:36:b9:d8:a2:9e:8e:6b:d2:49:80:11:65:e7:ff:08: 5b:78:0f:11:95:9d:94:0d:8f:7c:1e:c2:ce:c3:59:ae:9b:16: 93:37:66:7c:d1:30:56:4d:2a:5a:55:cd:45:3d:5e:38:1d:f0: 15:c6:62:da:d4:1f:50:6b:33:66:6c:00:76:e2:3c:01:2f:9b: 76:9d:4b:4a:c4:c9:fe:72:55:27:20:95:83:8f:a9:18:87:a5: 09:8f:31:92:1f:58:e3:69:4a:9c:3f:b1:c3:cc:9f:be:4c:97: c7:73:3e:4b:ea:be:89:23:cd:ba:cf:08:4b:95:96:34:e8:81: 76:ae:ed:22:98:e7:5e:77:1a:cc:8c:0f:5e:64:17:e3:f5:8c: af:db:6d:5a:46:62:fe:a8:c8:56:69:f0:d1:a0:7b:3f:12:72: 34:21:27:cb:59:46:0f:cf:b4:76:87:62:03:1d:26:2a:50:b5: ed:53:7d:10:03:cc:f1:c8:42:06:88:15:c2:75:d2:ed:3f:33: a9:67:31:cb:c8:88:63:f1:52:43:ba:9b:7f:6d:2e:3f:a6:fa: 16:b7:92:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNENzUxMTAvBgNVBAUTKDJEQkM0NjVEQTY4MUI1QjMxMTg5N0FCNkM0NjhDMjU0 NzA2RTVEMkYwHhcNMjYwOTExMDExMzI5WhcNMjYwOTE4MDExMzI5WjAYMRYwFAYD VQQDEw02YWEzNTViYS05MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBlS+ZoY4lgjEzbHPSxM3GEmdYl/Qi/2rmxpw4A3JUg4Y/9pb/splD+r+NsF 4PD6/mE5BHUdLMvfls1jzzAMr/R3sgPdgvfMviuo/H5FfB4+1PP0kLqsBDD7Onr6 Eel18oxrxyyDL25K1nSm3yFOVkRp/4tvrHJEQoOr4mz9bnWieZJBgOImMW4yyk0D U7NQWWju5Ogk3WDFbbbvnGiPL2d+C6IdSnz7YeYTMmxnbqL3ZYAOxOomZFkHnU5e nnSHp3yYDznMUbp53cJf2CBr7hDVltt5XSjpG0E6cPV/ZkTzYGjKH4Lzt46dy5ml zQZlYyf4GtStHBf8/yuVYwiWrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2fOZFW W7GLLrUcK1kVvbvA5MNKMB8GA1UdIwQYMBaAFC28Rl2mgbWzEYl6tsRowlRwbl0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Q3NS81MkRFNEM0QTY0 QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRiTVJpWHEyeEdqQ1ZIQnVY UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xieEdYYWFCdGJNUmlYcTJ4R2pDVkhCdVhTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Q3NS81MkRFNEM0QTY0QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRi TVJpWHEyeEdqQ1ZIQnVYUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaA0I1+BHV2fG0z74/Glikt1dAv9aUsqLA0ObTDcpF/zCUqHpyNzgNrnYop6O a9JJgBFl5/8IW3gPEZWdlA2PfB7CzsNZrpsWkzdmfNEwVk0qWlXNRT1eOB3wFcZi 2tQfUGszZmwAduI8AS+bdp1LSsTJ/nJVJyCVg4+pGIelCY8xkh9Y42lKnD+xw8yf vkyXx3M+S+q+iSPNus8IS5WWNOiBdq7tIpjnXncazIwPXmQX4/WMr9ttWkZi/qjI Vmnw0aB7PxJyNCEny1lGD8+0dodiAx0mKlC17VN9EAPM8chCBogVwnXS7T8zqWcx y8iIY/FSQ7qbf20uP6b6FreSxw== -----END CERTIFICATE-----Generated at Fri Sep 11 15:05:47 2026 by rpki-client