$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: MOIkq8v8sChoZvkcaccVngpsCDTWRj8gzTzTVajoAe8= Subject key identifier: 0E:73:B9:2A:F1:94:00:CC:72:81:EE:46:C0:D0:4D:21:2D:BE:37:BA Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 59 Signing time: Sat 05 Sep 2026 07:59:22 +0000 Manifest this update: Sat 05 Sep 2026 07:59:22 +0000 Manifest next update: Sat 12 Sep 2026 07:59:22 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: 53p4i7sJVYpepnBlZEI9+5EBqW8i5mxWwuH/3F+rLoY=) 2: 0A1C4E5C53AC11F19DB1C139B4833773.roa (hash: u+mOL6p14fYJ42VLhe7ZTS6oNzz6YUYqHu2z8DUWqD4=) 3: 3987426E53AC11F1A96C853AB4833773.roa (hash: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 07:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Sep 5 07:59:22 2026 GMT Not After : Sep 12 07:59:22 2026 GMT Subject: CN=6a9bcbda-2030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:89:22:07:13:38:c8:2a:d3:06:03:3a:48: 74:32:d9:87:54:12:bb:21:bc:3e:88:fd:33:f3:a5: e2:e5:1f:a0:6b:f1:67:55:8d:f0:17:18:bc:89:a4: 72:ea:aa:12:31:ec:00:cc:c6:73:ce:17:fe:c8:ad: 80:c9:89:da:59:85:04:e8:13:6d:80:7d:a7:fa:61: b6:43:f9:28:61:bc:8a:fd:c6:58:b6:e9:9e:af:4d: 16:51:b6:9a:02:0c:3d:e2:41:7c:1a:11:8c:85:34: b8:9c:08:a2:31:60:69:4c:7b:01:cb:01:cf:3a:cb: de:f8:7e:68:c1:55:c1:5c:5e:44:d2:fa:e2:80:2c: e3:30:4b:1e:9f:c0:40:67:fd:81:c5:6a:9e:fe:ee: 35:11:cf:67:70:13:98:9a:8e:b3:21:ad:7c:3f:e7: ab:2b:37:39:a0:f9:fd:fb:73:a2:17:2b:99:fd:f0: 80:7f:97:99:20:6e:ec:d2:11:f9:a5:48:93:23:13: e5:1e:df:e1:a7:ea:77:d9:df:20:1f:1f:f9:e0:2f: 05:89:5a:c7:cb:27:2a:41:f4:ea:6e:59:73:b4:3d: b4:27:cd:38:19:ee:55:b1:58:5a:6d:c0:53:bd:36: 68:93:a1:c0:b7:ec:1c:d7:fb:07:34:92:7d:be:f9: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:73:B9:2A:F1:94:00:CC:72:81:EE:46:C0:D0:4D:21:2D:BE:37:BA X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8c:8d:28:11:71:87:95:f5:c0:b4:d5:2a:19:fb:c6:34:49: 17:32:7e:f0:c7:da:ea:77:90:22:17:22:9e:9f:95:b7:9e:f7: c5:f0:10:f1:22:b2:a4:14:89:c9:cc:57:75:bb:c9:90:02:46: 05:89:4d:07:87:81:40:1c:03:38:0f:2d:b3:e7:1e:f0:d5:a1: b2:0d:c3:61:e2:c3:50:37:83:66:2f:b3:8b:e1:1e:6a:8d:dc: 3e:06:22:2e:22:dc:e3:c8:0b:85:42:ee:19:21:f0:01:1b:7c: 4b:de:18:b3:24:5f:fb:b9:ff:9e:5e:9b:0d:69:c9:b9:47:50: 39:34:b5:9b:c4:05:18:ad:b8:35:8d:39:ee:1d:36:f4:e9:a2: 76:20:4f:bb:a0:29:b4:13:f5:ad:57:a8:1e:10:62:39:1e:e3: d3:65:84:3b:65:c6:3a:89:7d:46:83:b1:21:b3:4b:6e:bd:9a: fd:36:49:6e:94:ea:f7:75:55:dc:9c:b2:9a:e5:51:2d:cb:d1: a6:cd:43:a1:7d:4f:5a:62:a3:7e:68:52:7b:fa:d2:8c:76:aa: 55:5e:10:fc:c3:08:6c:e1:7d:8a:23:b7:a1:8d:53:9e:7f:e9: 46:f8:c7:f6:ad:64:8d:ae:29:b2:df:3b:7d:ad:19:8a:db:3a: d6:b1:04:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjA5MDUwNzU5MjJaFw0yNjA5MTIwNzU5MjJaMBgxFjAUBgNV BAMTDTZhOWJjYmRhLTIwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSqIkiBxM4yCrTBgM6SHQy2YdUErshvD6I/TPzpeLlH6Br8WdVjfAXGLyJpHLq qhIx7ADMxnPOF/7IrYDJidpZhQToE22Afaf6YbZD+ShhvIr9xli26Z6vTRZRtpoC DD3iQXwaEYyFNLicCKIxYGlMewHLAc86y974fmjBVcFcXkTS+uKALOMwSx6fwEBn /YHFap7+7jURz2dwE5iajrMhrXw/56srNzmg+f37c6IXK5n98IB/l5kgbuzSEfml SJMjE+Ue3+Gn6nfZ3yAfH/ngLwWJWsfLJypB9OpuWXO0PbQnzTgZ7lWxWFptwFO9 NmiTocC37BzX+wc0kn2++Y4dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDnO5KvGU AMxyge5GwNBNIS2+N7owHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCejI0oEXGHlfXAtNUqGfvGNEkXMn7wx9rqd5AiFyKen5W3nvfF8BDxIrKkFInJ zFd1u8mQAkYFiU0Hh4FAHAM4Dy2z5x7w1aGyDcNh4sNQN4NmL7OL4R5qjdw+BiIu ItzjyAuFQu4ZIfABG3xL3hizJF/7uf+eXpsNacm5R1A5NLWbxAUYrbg1jTnuHTb0 6aJ2IE+7oCm0E/WtV6geEGI5HuPTZYQ7ZcY6iX1Gg7Ehs0tuvZr9NklulOr3dVXc nLKa5VEty9GmzUOhfU9aYqN+aFJ7+tKMdqpVXhD8wwhs4X2KI7ehjVOef+lG+Mf2 rWSNrimy3zt9rRmK2zrWsQS1 -----END CERTIFICATE-----Generated at Sat Sep 5 12:44:38 2026 by rpki-client