$ rpki-client -vvvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: E7lcMDUQNtsPwHTAQcRGQzjHTq9PcvMVogIUt9B6xKo= Subject key identifier: 4F:FC:F0:B0:DD:9E:3F:AC:0E:B6:AF:C3:68:49:50:E4:A7:00:B0:FF Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 0412 Signing time: Fri 11 Sep 2026 00:18:15 +0000 Manifest this update: Fri 11 Sep 2026 00:18:15 +0000 Manifest next update: Fri 18 Sep 2026 00:18:15 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: N0l6o95r14hIQ9S6iOwk6WRY3JHZx2q2k9+dpPuMGYA=) 2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Sep 11 00:18:15 2026 GMT Not After : Sep 18 00:18:15 2026 GMT Subject: CN=6aa348c7-ac68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:fb:65:9f:d8:1c:a4:69:6e:da:d2:95:91: d8:7e:da:93:fc:06:75:e8:10:10:ac:aa:e5:60:4d: 2e:16:41:d5:7b:dd:ed:3d:58:22:38:f5:be:22:3e: 9e:a0:ca:31:d8:1b:af:1e:f7:85:2f:e2:62:d6:5f: a7:8a:71:9e:71:e5:dc:c0:1c:31:5a:ca:02:c4:ed: b1:ee:44:d6:b8:9f:e5:9d:fb:5e:6c:a4:ec:1d:fb: af:c7:b2:ac:7e:02:f4:94:9a:3a:fb:d5:08:e1:68: b5:a8:40:f2:9a:42:89:c0:e4:c1:72:86:df:f2:9f: fc:87:66:16:27:ee:59:52:1d:06:0a:76:fd:ce:46: 59:ae:f7:cb:82:8b:9b:b4:89:b9:42:ad:5d:02:2e: 7f:0f:1a:7b:fd:b6:7b:f6:43:e7:2e:4f:19:15:90: 79:58:37:af:96:69:9a:77:5f:9e:61:aa:ae:d9:74: df:6d:ad:38:08:0a:c1:be:c4:e1:96:a3:e2:6f:08: e8:d9:15:46:d8:f7:3c:f8:43:14:98:e6:bc:ba:4b: 55:f0:92:1b:de:88:bc:81:30:f3:e0:99:77:c0:28: 52:51:6a:6e:d3:80:76:a2:57:3a:91:9f:95:bf:4c: 06:0b:c8:f0:46:a8:b1:33:80:94:c9:cf:cc:da:2f: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FC:F0:B0:DD:9E:3F:AC:0E:B6:AF:C3:68:49:50:E4:A7:00:B0:FF X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:4d:56:98:9e:43:c1:6e:25:20:57:38:6f:cb:b0:25:19:93: e4:41:24:99:60:62:28:59:84:a6:6c:2c:19:72:51:1f:03:b4: c6:14:37:02:11:25:3b:33:eb:f6:04:9a:3d:27:3a:ef:29:d1: 65:30:90:81:0a:b1:d0:78:bb:83:5d:9f:d9:fc:92:eb:88:96: db:1b:5c:54:5f:8b:85:a8:67:28:ab:d4:21:c0:a1:f1:e7:30: b9:a7:5e:03:3f:6d:2d:83:83:b5:a0:00:fb:c2:0f:0d:81:2e: 27:c2:30:d0:bf:fd:0a:3d:af:13:d8:88:31:90:4d:d2:9b:4e: b0:94:95:80:c3:66:66:5c:1c:a3:4f:1c:a3:d2:35:33:8f:72: 43:d7:89:69:e3:2f:c3:83:13:70:85:20:13:ee:5b:f5:f6:e6: d8:67:5f:48:8c:b0:31:4d:13:ee:a3:a1:36:90:87:4a:62:6d: bb:56:c3:3b:a8:76:ea:b2:fd:d1:e0:a3:c9:d3:bd:6c:9b:7e: d5:9d:55:93:2a:63:02:08:66:c4:f1:55:ab:f4:14:80:72:85: 84:b9:2d:20:eb:e2:1b:f1:2c:be:22:e1:b2:1f:9d:7d:9d:38: b7:2b:9e:a8:47:17:d6:b9:1f:06:64:80:7b:ce:78:50:36:da: 68:a9:20:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwOTExMDAxODE1WhcNMjYwOTE4MDAxODE1WjAYMRYwFAYD VQQDEw02YWEzNDhjNy1hYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Of7ZZ/YHKRpbtrSlZHYftqT/AZ16BAQrKrlYE0uFkHVe93tPVgiOPW+Ij6e oMox2BuvHveFL+Ji1l+ninGeceXcwBwxWsoCxO2x7kTWuJ/lnftebKTsHfuvx7Ks fgL0lJo6+9UI4Wi1qEDymkKJwOTBcobf8p/8h2YWJ+5ZUh0GCnb9zkZZrvfLgoub tIm5Qq1dAi5/Dxp7/bZ79kPnLk8ZFZB5WDevlmmad1+eYaqu2XTfba04CArBvsTh lqPibwjo2RVG2Pc8+EMUmOa8uktV8JIb3oi8gTDz4Jl3wChSUWpu04B2olc6kZ+V v0wGC8jwRqixM4CUyc/M2i82tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/88LDd nj+sDravw2hJUOSnALD/MB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxk1WmJ5DwW4lIFc4b8uwJRmT5EEkmWBiKFmEpmwsGXJRHwO0xhQ3AhElOzPr 9gSaPSc67ynRZTCQgQqx0Hi7g12f2fyS64iW2xtcVF+LhahnKKvUIcCh8ecwuade Az9tLYODtaAA+8IPDYEuJ8Iw0L/9Cj2vE9iIMZBN0ptOsJSVgMNmZlwco08co9I1 M49yQ9eJaeMvw4MTcIUgE+5b9fbm2GdfSIywMU0T7qOhNpCHSmJtu1bDO6h26rL9 0eCjydO9bJt+1Z1VkypjAghmxPFVq/QUgHKFhLktIOviG/EsviLhsh+dfZ04tyue qEcX1rkfBmSAe854UDbaaKkg+w== -----END CERTIFICATE-----Generated at Fri Sep 11 09:26:18 2026 by rpki-client