$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: RSRUgVUeaO3RLV6q59hDHzcrrnDRZJsVDz+Q+BugJHY= Subject key identifier: 22:E9:81:E9:65:A1:92:95:F4:9F:7D:78:D7:67:7B:8D:51:5A:D8:24 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 017B Signing time: Mon 19 Oct 2026 06:00:26 +0000 Manifest this update: Mon 19 Oct 2026 06:00:25 +0000 Manifest next update: Mon 26 Oct 2026 06:00:25 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: lMKQTjwfgXhjOv8EyLqK7ZcpZYgQrGe01bVnDBQZgfk=) 2: 93BEF5A8C13211F19B20E4B94711F970.roa (hash: 3HOomSKqtTC0iR89khoNUxVVYpYPNaQr5nvp57BS4Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Oct 19 06:00:25 2026 GMT Not After : Oct 26 06:00:25 2026 GMT Subject: CN=6ad5b1fa-d5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:63:24:72:b1:02:b8:46:b4:e7:54:99:3e: fa:e7:bf:5a:1f:15:0b:89:5f:10:93:44:49:38:4f: 0c:20:77:c3:e2:18:8f:6f:75:28:4b:13:8a:73:ad: 20:83:db:b4:1d:54:f7:e6:f5:24:e2:b5:f7:cf:6c: 63:6d:b5:9d:ae:2e:f7:18:fc:77:b8:1a:b0:ec:cb: ae:d5:53:3e:c9:9b:d5:3b:89:70:57:88:94:05:c2: 03:de:22:28:96:f4:8c:d2:6b:19:e2:6c:1d:2f:63: f4:ed:91:f1:f1:1d:e8:45:a6:f0:5f:06:7a:1f:73: d9:0b:3c:27:b2:52:f7:58:90:a0:ae:16:34:a7:60: 7d:28:5e:8c:c8:8c:ca:9a:b8:22:22:d8:2b:91:71: d1:9b:f6:20:3b:d5:6d:63:75:8d:64:aa:8b:e8:77: ef:d1:be:19:dd:53:ab:42:1a:c6:3f:33:d3:92:12: fb:87:a1:5c:df:e4:37:22:2c:15:1c:01:9d:bc:d8: 81:8f:d4:57:c9:95:eb:ca:6b:69:6b:2a:1f:92:88: 0d:7d:c0:ca:7e:23:be:08:11:f9:0c:e7:9e:93:e9: ad:57:a4:ef:2b:5b:4a:98:c2:fc:00:d8:29:89:cf: 4d:fa:92:3c:b1:2b:aa:e7:dd:1b:fb:2f:f3:e4:6b: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:81:E9:65:A1:92:95:F4:9F:7D:78:D7:67:7B:8D:51:5A:D8:24 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ed:3b:30:9f:9c:da:9e:7d:2f:cf:fa:d1:4b:d6:e1:b4:c3: 61:be:b3:fa:ea:10:64:51:b5:d4:40:b7:41:65:ab:3f:9a:75: fc:0f:e1:7b:80:15:cf:02:6f:d0:c3:24:93:bc:4f:64:4e:4b: d9:43:dc:39:de:a4:48:49:6b:21:80:04:45:aa:a5:3e:08:8f: d8:7d:5e:e1:63:2e:c7:aa:e4:21:c3:30:13:6e:87:1f:e8:a3: d1:ab:0f:c4:55:bd:ad:31:59:d7:62:e5:88:a4:8f:9e:69:14: 97:1f:99:50:06:25:4b:e7:98:c8:1d:06:ec:27:bf:dd:69:a2: 29:dc:6b:2f:05:4b:48:f3:db:f5:f8:f2:18:96:07:aa:96:81: 4d:84:95:92:38:ad:c6:85:d3:41:cd:01:ec:7d:0d:ac:f3:8f: c5:8e:6a:50:8a:70:a0:d9:47:a7:0b:87:2c:ae:25:19:f3:6c: 04:59:59:8b:ff:50:0b:b2:b1:81:08:5b:ee:50:22:40:4a:c1: f2:05:2c:dd:64:bc:41:42:7c:fa:aa:e4:03:83:02:c5:34:31: bd:0f:2a:d1:6d:7e:a7:c0:9b:0a:23:2f:c5:89:19:f8:f6:f2: 6d:30:0b:c5:7b:17:e8:ac:53:1a:bb:77:15:75:73:55:f5:15: b3:00:a5:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjYxMDE5MDYwMDI1WhcNMjYxMDI2MDYwMDI1WjAYMRYwFAYD VQQDEw02YWQ1YjFmYS1kNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNxjJHKxArhGtOdUmT76579aHxULiV8Qk0RJOE8MIHfD4hiPb3UoSxOKc60g g9u0HVT35vUk4rX3z2xjbbWdri73GPx3uBqw7Muu1VM+yZvVO4lwV4iUBcID3iIo lvSM0msZ4mwdL2P07ZHx8R3oRabwXwZ6H3PZCzwnslL3WJCgrhY0p2B9KF6MyIzK mrgiItgrkXHRm/YgO9VtY3WNZKqL6Hfv0b4Z3VOrQhrGPzPTkhL7h6Fc3+Q3IiwV HAGdvNiBj9RXyZXrymtpayofkogNfcDKfiO+CBH5DOeek+mtV6TvK1tKmML8ANgp ic9N+pI8sSuq590b+y/z5Gt9owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLpgell oZKV9J99eNdne41RWtgkMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk+07MJ+c2p59L8/60UvW4bTDYb6z+uoQZFG11EC3QWWrP5p1/A/he4AVzwJv 0MMkk7xPZE5L2UPcOd6kSElrIYAERaqlPgiP2H1e4WMux6rkIcMwE26HH+ij0asP xFW9rTFZ12LliKSPnmkUlx+ZUAYlS+eYyB0G7Ce/3WmiKdxrLwVLSPPb9fjyGJYH qpaBTYSVkjitxoXTQc0B7H0NrPOPxY5qUIpwoNlHpwuHLK4lGfNsBFlZi/9QC7Kx gQhb7lAiQErB8gUs3WS8QUJ8+qrkA4MCxTQxvQ8q0W1+p8CbCiMvxYkZ+PbybTAL xXsX6KxTGrt3FXVzVfUVswClLw== -----END CERTIFICATE-----Generated at Mon Oct 19 15:05:49 2026 by rpki-client