$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: wOV6kHZigY0Nq8cUY3JTiD6fwW1QVzzRBuu6rWz6uuI= Subject key identifier: 63:DF:76:35:33:C5:0A:D9:6B:B7:1B:A8:3C:DC:7A:D1:FF:B1:A2:C5 Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: F2 Signing time: Wed 07 Oct 2026 07:01:21 +0000 Manifest this update: Wed 07 Oct 2026 07:01:21 +0000 Manifest next update: Wed 14 Oct 2026 07:01:21 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: QDz7o7OvGDGBUGEu3WOnaRhd1nbFLX9LhCIOqCwzzsg=) 2: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) 3: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Oct 7 07:01:21 2026 GMT Not After : Oct 14 07:01:21 2026 GMT Subject: CN=6ac5ee41-165e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:62:c9:55:fe:fd:1c:6b:e3:db:9e:a7:92: 06:11:9f:ea:ae:3e:ae:31:e8:e7:e5:bb:dc:62:f0: 8b:3a:47:46:60:e2:d3:66:46:dc:50:78:09:8b:8e: 84:37:c7:96:1a:16:3d:e6:e4:92:a1:ae:51:e7:ff: 7f:f1:15:81:be:ff:7d:84:d0:46:49:8e:41:07:5e: 49:fc:dc:77:cf:e5:32:00:84:ae:e8:c3:8b:56:30: 3d:a5:20:8c:aa:f0:4c:1c:11:3b:88:12:43:ae:07: 6e:43:be:29:4f:be:4f:4b:0a:73:a1:6b:7c:2f:19: b1:7b:a2:79:db:ad:11:26:94:76:19:70:0e:ea:dc: 17:e5:fa:83:10:55:9f:d7:45:b6:52:0b:6f:8c:83: b8:65:e1:06:2a:a4:67:46:a5:37:42:b8:89:6e:65: 2a:85:2e:1d:6e:0d:7d:85:b3:80:d6:cf:37:69:cc: 57:57:07:3d:10:4f:8a:0b:27:04:a8:d4:65:56:d8: 16:80:45:32:dc:36:8c:e9:bf:17:76:09:0e:67:2b: c1:16:f1:c8:39:ab:b0:21:10:14:6c:fb:42:09:22: 8f:c2:65:cd:46:d9:02:28:45:35:5c:43:76:c8:13: ad:30:f8:04:bd:68:e4:15:dd:65:6b:50:83:d2:02: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DF:76:35:33:C5:0A:D9:6B:B7:1B:A8:3C:DC:7A:D1:FF:B1:A2:C5 X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:95:f0:c9:49:02:4d:2e:85:2f:26:57:67:1e:b2:b3:a1:be: de:35:f0:ef:42:a1:5c:44:5b:35:b5:0b:5f:c7:71:31:eb:19: 13:09:ec:95:47:cd:b5:07:8c:16:4a:fa:f7:7b:35:01:9c:3d: 8c:35:33:9a:81:4f:a7:77:58:51:14:22:95:38:4f:ac:40:fa: 63:4a:fe:43:04:83:3c:c9:37:22:1b:9a:ab:ec:1e:ad:e6:51: 66:95:24:00:c6:36:20:c6:5e:26:42:f1:e1:6c:c0:1e:3f:ed: 22:81:4c:e3:12:a4:d2:83:2d:4c:06:e2:1e:4f:c7:b7:d1:54: 51:66:39:88:19:5e:94:89:7b:94:f2:5c:03:b4:71:60:c7:cf: 93:88:29:4a:c5:49:11:aa:b9:d6:a6:64:f3:6f:0e:51:d3:97: 45:ce:e6:92:17:c5:9d:bc:69:93:6e:ab:58:a1:08:b6:37:5e: a3:92:9b:c7:75:58:4c:f6:f7:9f:37:f3:16:cc:2a:ea:1b:a2: 07:84:98:af:9e:c3:3e:9f:bc:0c:f9:1c:03:ac:66:63:fb:83: 83:d3:d6:b6:d4:20:92:76:60:7b:c0:70:ce:8d:15:7c:c9:4c: 87:0b:cd:6c:7a:31:9c:9d:1e:8d:e5:90:4a:fb:23:f5:3f:12: 30:d4:0a:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYxMDA3MDcwMTIxWhcNMjYxMDE0MDcwMTIxWjAYMRYwFAYD VQQDEw02YWM1ZWU0MS0xNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiABiyVX+/Rxr49uep5IGEZ/qrj6uMejn5bvcYvCLOkdGYOLTZkbcUHgJi46E N8eWGhY95uSSoa5R5/9/8RWBvv99hNBGSY5BB15J/Nx3z+UyAISu6MOLVjA9pSCM qvBMHBE7iBJDrgduQ74pT75PSwpzoWt8Lxmxe6J5260RJpR2GXAO6twX5fqDEFWf 10W2UgtvjIO4ZeEGKqRnRqU3QriJbmUqhS4dbg19hbOA1s83acxXVwc9EE+KCycE qNRlVtgWgEUy3DaM6b8XdgkOZyvBFvHIOauwIRAUbPtCCSKPwmXNRtkCKEU1XEN2 yBOtMPgEvWjkFd1la1CD0gI3dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPfdjUz xQrZa7cbqDzcetH/saLFMB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoJXwyUkCTS6FLyZXZx6ys6G+3jXw70KhXERbNbULX8dxMesZEwnslUfNtQeM Fkr693s1AZw9jDUzmoFPp3dYURQilThPrED6Y0r+QwSDPMk3Ihuaq+wereZRZpUk AMY2IMZeJkLx4WzAHj/tIoFM4xKk0oMtTAbiHk/Ht9FUUWY5iBlelIl7lPJcA7Rx YMfPk4gpSsVJEaq51qZk828OUdOXRc7mkhfFnbxpk26rWKEItjdeo5Kbx3VYTPb3 nzfzFswq6huiB4SYr57DPp+8DPkcA6xmY/uDg9PWttQgknZge8Bwzo0VfMlMhwvN bHoxnJ0ejeWQSvsj9T8SMNQK1A== -----END CERTIFICATE-----Generated at Thu Oct 8 00:47:39 2026 by rpki-client