$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft File: LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json) Hash identifier: CobHFyIKfyCjF/BU2UA26+onyI2q5UtSUgL9BdyB4L0= Subject key identifier: BE:AA:37:3E:3B:0E:A6:50:37:63:62:71:24:C1:49:55:47:BD:A3:FD Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 Certificate issuer: /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft Manifest number: D9 Signing time: Wed 19 Aug 2026 07:29:48 +0000 Manifest this update: Wed 19 Aug 2026 07:29:47 +0000 Manifest next update: Wed 26 Aug 2026 07:29:47 +0000 Files and hashes: 1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: G4MiTBmEQDm6Qe8Pz+5iF8jCi+gXwLJWsxyXaPlMUK8=) 2: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=) 3: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6 Validity Not Before: Aug 19 07:29:47 2026 GMT Not After : Aug 26 07:29:47 2026 GMT Subject: CN=6a855b6b-e288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:5b:cd:e8:fe:e0:c8:be:16:a6:3f:09:3f: cc:d4:1d:fc:df:6d:bc:d6:42:74:52:be:3c:a9:61: ae:4b:90:84:d9:2b:56:97:4e:95:6e:5c:dc:c5:43: 41:7a:e6:3a:76:23:ea:e1:14:d4:14:2f:fe:ff:92: 1c:11:2a:39:bb:95:18:93:66:f8:85:13:bc:43:4b: a2:61:fe:b6:c5:c0:37:34:19:29:27:79:5e:ec:50: 38:75:5f:5f:9c:91:b6:79:f8:99:b7:6a:1c:7f:bd: 22:ef:da:c1:30:ff:65:87:c1:a9:24:31:81:b1:f2: 1d:88:8f:a8:ef:35:ee:fa:55:86:a7:85:99:f3:4c: 9a:c1:db:51:5f:0b:7a:f5:ea:0d:9b:da:9a:cd:b0: 8a:5c:aa:e3:25:e1:aa:23:20:ef:74:7b:bc:15:bc: 0d:d9:d5:09:87:f2:b6:64:d1:3e:95:ab:c5:07:7f: 11:e7:92:a3:f3:c0:22:22:6d:ae:be:95:4c:2b:46: ba:0e:49:65:32:dd:6f:1a:1c:92:6b:23:67:36:56: bc:b0:22:45:51:6a:d1:19:88:50:11:15:2d:25:b9: 70:ed:16:03:91:84:31:47:83:2d:da:d9:58:40:5d: 27:ca:1c:dd:a9:a1:f1:6a:11:44:8c:21:c7:8a:46: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:37:3E:3B:0E:A6:50:37:63:62:71:24:C1:49:55:47:BD:A3:FD X509v3 Authority Key Identifier: keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:fa:d7:c1:ad:6b:30:86:f0:3b:a8:53:b8:41:7d:75:3c:98: 90:04:ab:a4:d9:ee:db:49:51:e1:df:fa:b7:eb:31:df:b7:c0: ff:3b:6a:13:64:79:94:d9:f3:26:80:45:bd:35:a7:0e:5d:aa: 36:8d:e6:6f:c0:98:03:48:10:07:1d:67:cb:7e:dc:74:71:10: 4c:be:24:0e:a2:b9:44:fb:b7:4a:dd:49:36:20:23:6e:c0:bb: 80:b2:18:24:35:d3:55:a9:dd:4c:28:38:b9:95:e0:02:fe:27: 93:96:cc:ed:0d:c2:10:66:ec:58:ad:fd:40:35:45:fc:96:56: a0:9e:93:06:fe:30:a0:66:11:08:11:4c:8b:44:6d:de:f7:a3: 5c:68:82:20:2b:c1:7a:68:7f:8c:c1:f7:3a:69:85:07:ab:b0: 5e:76:5e:18:fc:e3:7e:a7:d8:4f:b1:6f:9d:93:e8:cb:40:cb: ca:05:11:8d:f2:96:2c:25:a0:d0:e0:7b:c9:96:46:d7:c2:da: 7d:9d:4b:0c:c6:03:23:16:d4:33:f3:d5:a8:c0:79:0f:ae:5a: ce:f1:8f:61:c2:51:97:21:fa:12:10:c2:91:25:e2:c4:5c:59: 43:ef:bb:5a:8d:3e:45:a7:8e:b6:a0:5b:1b:77:9f:d1:a7:80: c3:62:4e:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgyMjExMTAvBgNVBAUTKDJDNjdEMjE2OTZCM0ExQzFCQzJDRTQ5RkNCRTBBN0E1 M0EzN0QzQTYwHhcNMjYwODE5MDcyOTQ3WhcNMjYwODI2MDcyOTQ3WjAYMRYwFAYD VQQDEw02YTg1NWI2Yi1lMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJNbzej+4Mi+FqY/CT/M1B3832281kJ0Ur48qWGuS5CE2StWl06VblzcxUNB euY6diPq4RTUFC/+/5IcESo5u5UYk2b4hRO8Q0uiYf62xcA3NBkpJ3le7FA4dV9f nJG2efiZt2ocf70i79rBMP9lh8GpJDGBsfIdiI+o7zXu+lWGp4WZ80yawdtRXwt6 9eoNm9qazbCKXKrjJeGqIyDvdHu8FbwN2dUJh/K2ZNE+lavFB38R55Kj88AiIm2u vpVMK0a6DkllMt1vGhySayNnNla8sCJFUWrRGYhQERUtJblw7RYDkYQxR4Mt2tlY QF0nyhzdqaHxahFEjCHHikbgVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6qNz47 DqZQN2NicSTBSVVHvaP9MB8GA1UdIwQYMBaAFCxn0haWs6HBvCzkn8vgp6U6N9Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODIyMS8zMzUzNUNCMDY1 NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9jRzhMT1NmeS1DbnBUbzMw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xHZlNGcGF6b2NHOExPU2Z5LUNucFRvMzA2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODIyMS8zMzUzNUNCMDY1NEMxMUYwOEIzOUU3MUNDNEY5QUUwMi9MR2ZTRnBhem9j RzhMT1NmeS1DbnBUbzMwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApPrXwa1rMIbwO6hTuEF9dTyYkASrpNnu20lR4d/6t+sx37fA/ztqE2R5lNnz JoBFvTWnDl2qNo3mb8CYA0gQBx1ny37cdHEQTL4kDqK5RPu3St1JNiAjbsC7gLIY JDXTVandTCg4uZXgAv4nk5bM7Q3CEGbsWK39QDVF/JZWoJ6TBv4woGYRCBFMi0Rt 3vejXGiCICvBemh/jMH3OmmFB6uwXnZeGPzjfqfYT7FvnZPoy0DLygURjfKWLCWg 0OB7yZZG18LafZ1LDMYDIxbUM/PVqMB5D65azvGPYcJRlyH6EhDCkSXixFxZQ++7 Wo0+RaeOtqBbG3ef0aeAw2JOZA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:59 2026 by rpki-client