$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: I8AeVetsLX4DOX6GbGERn+9Mj4GrCnc0zREImyYpCDA= Subject key identifier: 73:4D:23:2B:C2:8B:57:CF:CE:71:61:CE:7F:B9:6E:28:38:E3:22:63 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 71 Signing time: Fri 23 Oct 2026 08:34:51 +0000 Manifest this update: Fri 23 Oct 2026 08:34:50 +0000 Manifest next update: Fri 30 Oct 2026 08:34:50 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: YgSQE7Q4ZQsrbmmA6tlNUeR8tn26LVmhVvS6IjGKCR0=) 2: 0A1C4E5C53AC11F19DB1C139B4833773.roa (hash: u+mOL6p14fYJ42VLhe7ZTS6oNzz6YUYqHu2z8DUWqD4=) 3: 3987426E53AC11F1A96C853AB4833773.roa (hash: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Oct 23 08:34:50 2026 GMT Not After : Oct 30 08:34:50 2026 GMT Subject: CN=6adb1c2a-003d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:d1:1e:48:1f:be:f7:fe:08:f5:e9:d9:ce: a3:13:72:93:41:98:e1:b9:5b:e0:85:80:45:b7:0f: 80:4e:6d:7f:77:4c:d1:e1:d4:20:1d:d1:50:17:bd: aa:1a:b1:56:8f:1e:fc:83:44:22:aa:e6:b3:2c:0e: e0:0a:b7:c7:d6:56:c9:bb:3b:de:a3:5a:cd:92:39: 28:06:ee:3d:db:3d:67:47:23:cd:94:bd:09:d3:dc: 34:ea:8d:36:1a:8b:08:52:10:5f:2e:7f:1d:1d:ed: 9b:56:f3:23:bb:56:63:fc:27:38:b9:ff:0a:de:20: c8:0d:a3:94:48:42:69:cf:f3:08:97:0f:da:b5:d3: e1:c3:95:26:b8:e1:2e:88:6e:dd:c0:d4:52:ca:b5: 7e:bf:8e:df:ee:4d:56:31:47:1a:12:a5:d6:5f:c2: 24:8f:44:d9:25:dd:e1:eb:5e:a6:c3:4a:0d:90:01: 50:9d:a3:3e:a6:06:14:cd:d6:b9:4d:9d:15:ae:bb: 75:07:04:d7:ff:97:99:41:2f:75:8a:e3:e1:c0:86: 18:8f:de:74:14:fb:df:81:9c:1c:c6:25:e4:2f:5e: f1:b6:bb:40:e1:6f:69:63:02:86:ea:8f:a9:cc:da: 80:f3:cb:97:c3:be:24:72:44:e0:59:96:56:eb:19: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4D:23:2B:C2:8B:57:CF:CE:71:61:CE:7F:B9:6E:28:38:E3:22:63 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:40:4d:74:33:1a:b6:f1:53:3a:f2:c1:3d:40:96:a0:4d:bc: 19:bf:4d:57:6d:45:ca:04:c9:fd:19:d3:63:3d:6f:7d:64:97: 7e:9f:8c:f7:71:bc:f0:25:e5:07:f2:4a:99:f3:ae:82:3c:a1: c1:42:f2:d1:05:a2:be:7b:3d:df:17:c7:ad:4d:a5:13:62:ef: cf:55:cd:27:e8:2d:e9:c2:2d:3a:2d:6a:da:d7:7c:8f:89:9c: 5d:cf:f0:a1:0e:37:b9:99:9f:3b:5f:06:71:24:7b:30:37:4f: 46:d5:6c:cd:fc:3c:d1:3e:b3:12:00:6e:0c:49:09:0c:20:fa: 33:ec:b3:8d:b9:c0:bd:21:f5:71:23:2e:7a:fd:d6:48:1c:11: 07:22:b3:51:d2:48:ff:58:d0:f6:6f:e3:e6:1d:68:39:51:cd: 9e:7d:e6:06:a0:cd:c8:bd:eb:4a:80:66:06:ce:fc:78:80:e6: a7:9a:d4:28:b3:4f:2e:d0:e9:d6:4e:37:d1:06:f6:25:79:2f: 2f:6e:14:e3:5a:60:0f:1c:bd:f6:a5:34:04:e8:ea:9b:90:2d: e4:3a:48:99:9e:cc:59:0e:1b:36:95:63:87:c2:aa:51:66:e0: a3:84:91:48:5e:69:79:c8:33:27:f8:26:56:39:6f:af:22:c0: d9:b2:f5:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjEwMjMwODM0NTBaFw0yNjEwMzAwODM0NTBaMBgxFjAUBgNV BAMTDTZhZGIxYzJhLTAwM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqxdEeSB++9/4I9enZzqMTcpNBmOG5W+CFgEW3D4BObX93TNHh1CAd0VAXvaoa sVaPHvyDRCKq5rMsDuAKt8fWVsm7O96jWs2SOSgG7j3bPWdHI82UvQnT3DTqjTYa iwhSEF8ufx0d7ZtW8yO7VmP8Jzi5/wreIMgNo5RIQmnP8wiXD9q10+HDlSa44S6I bt3A1FLKtX6/jt/uTVYxRxoSpdZfwiSPRNkl3eHrXqbDSg2QAVCdoz6mBhTN1rlN nRWuu3UHBNf/l5lBL3WK4+HAhhiP3nQU+9+BnBzGJeQvXvG2u0Dhb2ljAobqj6nM 2oDzy5fDviRyROBZllbrGTm/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc00jK8KL V8/OcWHOf7luKDjjImMwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDAQE10Mxq28VM68sE9QJagTbwZv01XbUXKBMn9GdNjPW99ZJd+n4z3cbzwJeUH 8kqZ866CPKHBQvLRBaK+ez3fF8etTaUTYu/PVc0n6C3pwi06LWra13yPiZxdz/Ch Dje5mZ87XwZxJHswN09G1WzN/DzRPrMSAG4MSQkMIPoz7LONucC9IfVxIy56/dZI HBEHIrNR0kj/WND2b+PmHWg5Uc2efeYGoM3IvetKgGYGzvx4gOanmtQos08u0OnW TjfRBvYleS8vbhTjWmAPHL32pTQE6OqbkC3kOkiZnsxZDhs2lWOHwqpRZuCjhJFI Xml5yDMn+CZWOW+vIsDZsvW6 -----END CERTIFICATE-----Generated at Sun Oct 25 06:01:02 2026 by rpki-client