$ rpki-client -vvvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: ykpX2ZBT+JoEQ6YZqxFrpGIUlKs5T9AuJvWV3dBL12I= Subject key identifier: B4:DC:8F:9A:D1:92:34:CA:05:4D:35:34:D0:67:1E:A6:25:AB:1C:EE Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 03AE Signing time: Tue 27 Oct 2026 00:29:25 +0000 Manifest this update: Tue 27 Oct 2026 00:29:25 +0000 Manifest next update: Tue 03 Nov 2026 00:29:25 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: dKrzejd1m41RWQEtFlKs/t3VwOLM49RNEuL0cpHWXlI=) 2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: kbj/qZCCFFcNhZw3sqrJDaXIf5h+0nQW4F9uuXPmNWM=) 3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: qwPyRzKdt7F2prPIJu2RV96XdN340vghb2ALVy3uoMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: Oct 27 00:29:25 2026 GMT Not After : Nov 3 00:29:25 2026 GMT Subject: CN=6adff065-d14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:67:55:b8:b7:57:30:59:f8:de:de:57:bf: cf:7e:3b:8b:10:5c:63:8b:8f:11:9f:65:3c:36:47: af:9b:69:55:50:9d:66:fe:5a:ed:f3:54:25:ea:91: af:fa:02:5e:e7:f8:87:a5:9b:35:7d:0b:52:fc:6b: 46:1d:0c:10:bf:a9:38:3d:f5:5d:c2:6a:fe:2b:e9: 89:05:5d:f6:34:e7:3c:ee:6a:cd:8c:04:f4:74:06: 31:35:07:05:b8:e3:8b:2d:3c:5e:95:d9:87:88:10: ac:00:d9:35:fa:19:4a:25:22:0a:41:0f:b7:ec:a6: bb:a8:66:f4:0b:1b:08:ce:84:eb:e5:39:27:4c:8f: 64:32:4c:85:45:b2:4c:76:65:c8:1e:87:9b:8a:64: 0d:95:18:1b:c2:72:47:ca:ae:3d:d0:2e:9c:29:17: e3:4b:16:a7:5c:54:47:c8:3e:59:34:3f:5d:59:bc: a4:18:05:20:28:f3:86:3a:59:20:9b:8e:be:b8:6b: e5:72:0e:6b:b9:f2:aa:ee:02:5b:98:40:d6:ba:03: 1c:99:21:27:7d:db:ae:36:e1:2f:99:6b:a2:44:f5: c5:3e:7d:98:4e:3e:3b:34:4e:ac:26:6c:cf:63:a9: 07:1e:69:c8:dc:e3:4b:31:6e:ed:58:ab:d2:cd:53: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:8F:9A:D1:92:34:CA:05:4D:35:34:D0:67:1E:A6:25:AB:1C:EE X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f7:1e:ab:40:72:2d:87:ec:a9:66:8f:7b:50:6f:e6:a4:72: c7:ac:a3:bf:6f:c8:ae:7c:28:d2:dd:1d:40:7e:6d:f9:a6:02: eb:4b:56:f1:7b:99:51:ba:22:cb:30:70:54:1f:05:88:d8:89: 80:dc:c0:11:b5:97:64:a1:7b:4b:05:ac:8b:f0:e4:15:22:e8: 26:c4:78:3b:c7:38:3e:ed:cd:64:f0:fb:79:93:00:07:0f:a3: 8e:8d:6b:d2:54:da:a7:bb:a0:9a:d8:67:d0:0f:3c:72:fb:57: 72:00:ec:f0:f8:a6:64:1b:94:56:d6:03:bf:45:c4:87:aa:77: 61:1d:0e:7c:dc:c0:1d:a6:3b:8f:18:9c:a3:81:7e:74:cd:71: 01:f3:ea:70:84:c6:2a:93:d0:4d:82:6f:dc:c2:b6:37:81:a6: 43:aa:f9:5e:cc:6a:b7:1e:46:ec:59:db:f3:9f:0f:99:cf:45: 08:61:2a:57:db:57:7b:31:5f:25:e6:a8:32:2a:ef:8f:0a:22: 39:70:7b:61:55:c1:11:89:ea:a7:55:d1:22:bc:94:d7:ab:1c: bf:b1:ca:66:b8:ff:54:51:ac:9e:b1:d0:26:9f:ef:76:4c:20: 76:4c:6c:d4:01:14:52:5c:cf:82:68:dc:97:0e:2d:11:f7:fd: 0c:36:f3:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjYxMDI3MDAyOTI1WhcNMjYxMTAzMDAyOTI1WjAYMRYwFAYD VQQDEw02YWRmZjA2NS1kMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1hnVbi3VzBZ+N7eV7/PfjuLEFxji48Rn2U8Nkevm2lVUJ1m/lrt81Ql6pGv +gJe5/iHpZs1fQtS/GtGHQwQv6k4PfVdwmr+K+mJBV32NOc87mrNjAT0dAYxNQcF uOOLLTxeldmHiBCsANk1+hlKJSIKQQ+37Ka7qGb0CxsIzoTr5TknTI9kMkyFRbJM dmXIHoebimQNlRgbwnJHyq490C6cKRfjSxanXFRHyD5ZND9dWbykGAUgKPOGOlkg m46+uGvlcg5rufKq7gJbmEDWugMcmSEnfduuNuEvmWuiRPXFPn2YTj47NE6sJmzP Y6kHHmnI3ONLMW7tWKvSzVMWnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTcj5rR kjTKBU01NNBnHqYlqxzuMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApPceq0ByLYfsqWaPe1Bv5qRyx6yjv2/Irnwo0t0dQH5t+aYC60tW8XuZUboi yzBwVB8FiNiJgNzAEbWXZKF7SwWsi/DkFSLoJsR4O8c4Pu3NZPD7eZMABw+jjo1r 0lTap7ugmthn0A88cvtXcgDs8PimZBuUVtYDv0XEh6p3YR0OfNzAHaY7jxico4F+ dM1xAfPqcITGKpPQTYJv3MK2N4GmQ6r5Xsxqtx5G7Fnb858Pmc9FCGEqV9tXezFf JeaoMirvjwoiOXB7YVXBEYnqp1XRIryU16scv7HKZrj/VFGsnrHQJp/vdkwgdkxs 1AEUUlzPgmjclw4tEff9DDbz3w== -----END CERTIFICATE-----Generated at Wed Oct 28 00:46:58 2026 by rpki-client