$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: MfcSmyMmmhr+09kbTrWRwMVCRid+SoIGRcfB3zm/GSo= Subject key identifier: 72:3B:61:E7:06:40:30:79:D6:83:36:AB:DD:A5:01:D4:1C:7F:43:0A Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: FB Signing time: Mon 21 Sep 2026 06:15:34 +0000 Manifest this update: Mon 21 Sep 2026 06:15:34 +0000 Manifest next update: Mon 28 Sep 2026 06:15:34 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: J7vwjhorfdCCaC5EGRF0nrJNE3TNe8EFQUBiJ3TYo38=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: W6jpg6xPZ5rYD5YfNt1tX8u8keRGsJ8qbAeMSNB05Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Sep 21 06:15:34 2026 GMT Not After : Sep 28 06:15:34 2026 GMT Subject: CN=6ab0cb86-1e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:fe:61:13:c4:f5:1b:d5:d2:50:5a:41:35: 5f:22:4c:ba:2b:fa:4d:ff:33:e9:b2:70:52:e9:f6: be:34:5b:26:53:f1:bf:db:da:09:82:7d:1e:43:f5: d1:4a:48:53:65:73:5f:92:6f:c1:5e:ea:12:37:a5: 9b:c5:0a:be:b4:b2:be:5f:1e:de:19:ca:a6:eb:2c: 16:de:a0:e3:e2:84:ce:a5:7a:0a:9f:80:ec:ce:36: 55:3d:fe:64:86:f1:83:05:42:b2:ce:b1:a0:e6:54: 47:f7:ac:f3:c9:46:18:c5:7d:00:72:68:ba:30:4e: cd:97:8b:41:7e:2e:e7:35:4b:8a:60:4f:8a:25:69: 24:bb:71:d6:fd:63:e8:5e:66:83:54:c6:47:78:6d: 18:73:c5:a0:15:b9:d6:23:24:7e:37:90:19:45:7e: 5b:ff:85:8e:3b:be:e1:45:d1:95:b5:0a:46:81:8b: 2a:1f:e7:70:a3:78:70:5f:08:74:c0:c9:b1:6f:5f: 99:46:0f:3e:4a:a5:dd:f4:59:8e:10:80:3b:2e:5a: ec:ce:cb:bb:b0:09:d5:d5:f1:12:72:92:3d:03:2e: 2e:0b:d7:6c:80:7b:e9:e4:90:f6:36:6e:02:71:8e: 15:e2:c6:3b:d6:b9:42:e1:88:ca:82:f1:94:1d:03: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:61:E7:06:40:30:79:D6:83:36:AB:DD:A5:01:D4:1C:7F:43:0A X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:8d:63:76:86:e2:b8:ba:ce:00:d8:2b:00:88:f8:6b:49: f5:33:90:cf:e9:c4:32:cb:21:c0:78:f4:19:04:2b:ea:58:c7: 17:1c:90:37:35:f4:82:b3:2a:62:4a:88:24:30:09:90:80:f7: dc:dc:c5:6c:7f:81:73:cf:27:59:07:4a:85:d6:06:94:82:8c: ad:06:cc:51:c1:bd:bf:3a:b2:bf:5e:6e:67:74:bd:d6:52:99: 32:c0:ea:cf:bf:0c:21:33:ad:d1:fd:e3:fe:a2:43:8f:f9:2d: 55:95:ef:56:06:bb:61:b2:44:86:d2:93:59:22:14:36:86:c0: fb:f0:a6:96:ed:22:db:46:a6:35:94:b9:ed:1b:f9:46:82:90: d2:13:59:6b:29:22:6d:43:44:61:f9:b0:bb:a5:39:2f:d8:f3: d1:bb:a6:af:32:5f:11:72:e5:ca:14:cc:87:4a:a2:e7:2e:b8: 66:af:a7:e7:ca:ef:22:07:71:ec:4e:30:16:11:c5:7b:31:6f: 1a:79:8f:22:d1:9e:f0:fe:42:d7:aa:9b:9d:f5:91:aa:a1:47: 42:03:3e:7e:80:ff:ab:20:ae:f1:a1:b1:f1:8d:7a:f5:56:05: d3:d8:ba:65:50:13:a8:11:bd:d1:61:61:88:df:fb:51:ef:fd: e5:ce:3a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5NzUxMTAvBgNVBAUTKDJEMEM3NDdERUZGNkQzNTExQ0NGNUQ1M0YzQTc2NTcw MEYxQzgyQTAwHhcNMjYwOTIxMDYxNTM0WhcNMjYwOTI4MDYxNTM0WjAYMRYwFAYD VQQDEw02YWIwY2I4Ni0xZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDX+YRPE9RvV0lBaQTVfIky6K/pN/zPpsnBS6fa+NFsmU/G/29oJgn0eQ/XR SkhTZXNfkm/BXuoSN6WbxQq+tLK+Xx7eGcqm6ywW3qDj4oTOpXoKn4DszjZVPf5k hvGDBUKyzrGg5lRH96zzyUYYxX0Acmi6ME7Nl4tBfi7nNUuKYE+KJWkku3HW/WPo XmaDVMZHeG0Yc8WgFbnWIyR+N5AZRX5b/4WOO77hRdGVtQpGgYsqH+dwo3hwXwh0 wMmxb1+ZRg8+SqXd9FmOEIA7Llrszsu7sAnV1fEScpI9Ay4uC9dsgHvp5JD2Nm4C cY4V4sY71rlC4YjKgvGUHQNtIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHI7YecG QDB51oM2q92lAdQcf0MKMB8GA1UdIwQYMBaAFC0MdH3v9tNRHM9dU/OnZXAPHIKg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk3NS81RjkwMzVGNjNB MjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9MUXgwZmVfMjAxRWN6MTFUODZkbGNBOGNn cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk3NS81RjkwMzVGNjNBMjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9MUXgwZmVfMjAx RWN6MTFUODZkbGNBOGNncUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABtyNY3aG4ri6zgDYKwCI+GtJ9TOQz+nEMsshwHj0GQQr6ljHFxyQNzX0grMq YkqIJDAJkID33NzFbH+Bc88nWQdKhdYGlIKMrQbMUcG9vzqyv15uZ3S91lKZMsDq z78MITOt0f3j/qJDj/ktVZXvVga7YbJEhtKTWSIUNobA+/Cmlu0i20amNZS57Rv5 RoKQ0hNZaykibUNEYfmwu6U5L9jz0bumrzJfEXLlyhTMh0qi5y64Zq+n58rvIgdx 7E4wFhHFezFvGnmPItGe8P5C16qbnfWRqqFHQgM+foD/qyCu8aGx8Y169VYF09i6 ZVATqBG90WFhiN/7Ue/95c46vg== -----END CERTIFICATE-----Generated at Tue Sep 22 21:27:43 2026 by rpki-client