$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft File: lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft (raw, json) Hash identifier: 2vaN4/eMsXdpyIL/mLv18ldLe08q848FBr4iycacu0Y= Subject key identifier: A2:75:B2:47:0A:EC:5A:15:E4:ED:22:2F:27:7A:3B:B2:75:5E:96:9C Authority key identifier: 94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 Certificate issuer: /CN=A9185308/serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft Manifest number: 4D Signing time: Sat 17 Oct 2026 09:04:58 +0000 Manifest this update: Sat 17 Oct 2026 09:04:58 +0000 Manifest next update: Sat 24 Oct 2026 09:04:58 +0000 Files and hashes: 1: lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl (hash: PCz7YxK5xPXuzqemvFbWHUCr/UYMcYX40l5vFXh2fM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185308, serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Validity Not Before: Oct 17 09:04:58 2026 GMT Not After : Oct 24 09:04:58 2026 GMT Subject: CN=6ad33a3a-25d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:ce:71:cd:fd:13:ec:eb:97:be:28:8b:61: 9b:07:40:a1:0e:65:76:8d:98:58:af:6b:ce:3d:21: 92:4c:dd:e9:17:5f:cc:fc:e6:2f:e2:0c:25:1c:24: df:9b:1a:25:90:ba:00:d1:7b:0a:7d:de:57:75:b4: c8:30:51:58:87:40:d8:8e:84:8e:35:b1:a8:80:b6: d1:e8:c1:f2:76:58:76:22:94:59:4c:36:87:21:28: 42:8f:08:d5:ac:f1:f7:db:e0:7f:af:4c:6c:a6:b5: e1:74:dc:81:89:c1:b8:49:10:fa:6e:7e:b7:c6:3f: c3:63:09:eb:96:22:28:e7:13:fc:2f:8c:a7:8d:0d: 6c:05:cb:d7:32:db:eb:6a:40:83:9c:63:1a:3b:44: f5:c2:51:23:c0:74:8f:26:54:85:3f:39:49:31:3f: dd:e6:4d:21:a5:71:a6:be:c4:b1:dd:2f:02:f1:92: fc:e3:d0:cf:2e:8b:8b:a6:5c:94:98:31:d0:c6:99: a1:d7:09:25:c4:06:fa:16:03:50:3d:71:91:66:be: 8a:35:76:e9:36:ce:6e:4f:01:5d:31:17:ea:45:cc: fa:57:b7:73:8f:fd:a9:05:de:dc:be:17:23:43:52: 8b:cc:31:c8:d6:6e:7b:e5:94:67:b6:c1:52:0e:70: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:B2:47:0A:EC:5A:15:E4:ED:22:2F:27:7A:3B:B2:75:5E:96:9C X509v3 Authority Key Identifier: keyid:94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0b:df:fc:d3:8d:73:cc:d2:80:56:e3:4a:c7:f9:6f:5c:3f: c2:f4:e8:db:6d:0e:88:37:5b:52:26:6e:9c:13:84:17:e7:8d: 06:27:35:57:0a:8b:a2:fd:f8:a4:a9:32:8b:0f:71:c9:46:0e: a2:c2:ee:4c:38:f1:22:48:40:c5:de:dc:7c:ec:03:7f:0b:90: 75:18:f5:76:69:c0:d4:b4:06:10:0c:b4:10:b9:44:e5:c6:0d: 5d:2f:97:cc:4a:cf:8b:81:f9:4c:a1:06:21:53:5b:d0:3c:43: 0a:79:c5:6a:7f:81:2c:e7:d0:df:19:94:d2:93:32:70:27:f8: 65:14:81:ee:01:0a:8c:8b:60:06:a0:a2:19:26:8f:25:db:95: b8:d5:cb:10:44:fe:a2:33:66:95:0a:c6:46:34:0e:21:74:a1: f6:79:4e:a1:e6:18:4f:92:2d:29:47:a8:eb:56:b8:9e:a8:d5: 0c:2a:be:b5:99:13:56:c7:90:f5:cd:de:bb:e9:65:bb:82:30: 9c:6a:9d:ae:ef:5b:24:d6:f8:f2:dd:d7:62:18:2d:3d:db:c9: cb:f9:90:a8:c4:5f:2f:9b:73:cc:29:1c:80:20:a3:b2:15:bf: ec:17:56:c0:9f:c4:a5:c8:1a:d9:ee:91:66:c4:4e:86:60:f3: 9d:e6:c5:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTMwODExMC8GA1UEBRMoOTQwMTc1NzIxRTcwQjYyMDhDNUNBMDI5MzhCMzBFMDQ1 MUI5OUM0NDAeFw0yNjEwMTcwOTA0NThaFw0yNjEwMjQwOTA0NThaMBgxFjAUBgNV BAMTDTZhZDMzYTNhLTI1ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+g85xzf0T7OuXviiLYZsHQKEOZXaNmFiva849IZJM3ekXX8z85i/iDCUcJN+b GiWQugDRewp93ld1tMgwUViHQNiOhI41saiAttHowfJ2WHYilFlMNochKEKPCNWs 8ffb4H+vTGymteF03IGJwbhJEPpufrfGP8NjCeuWIijnE/wvjKeNDWwFy9cy2+tq QIOcYxo7RPXCUSPAdI8mVIU/OUkxP93mTSGlcaa+xLHdLwLxkvzj0M8ui4umXJSY MdDGmaHXCSXEBvoWA1A9cZFmvoo1duk2zm5PAV0xF+pFzPpXt3OP/akF3ty+FyND UovMMcjWbnvllGe2wVIOcPrhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUonWyRwrs WhXk7SIvJ3o7snVelpwwHwYDVR0jBBgwFoAUlAF1ch5wtiCMXKApOLMOBFG5nEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MzA4L0VCQ0REMjc0NTU3 QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlDTVhLQXBPTE1PQkZHNW5F US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbEFGMWNoNXd0aUNNWEtBcE9MTU9CRkc1bkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MzA4L0VCQ0REMjc0NTU3QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlD TVhLQXBPTE1PQkZHNW5FUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4C9/8041zzNKAVuNKx/lvXD/C9OjbbQ6IN1tSJm6cE4QX540GJzVXCoui/fik qTKLD3HJRg6iwu5MOPEiSEDF3tx87AN/C5B1GPV2acDUtAYQDLQQuUTlxg1dL5fM Ss+LgflMoQYhU1vQPEMKecVqf4Es59DfGZTSkzJwJ/hlFIHuAQqMi2AGoKIZJo8l 25W41csQRP6iM2aVCsZGNA4hdKH2eU6h5hhPki0pR6jrVrieqNUMKr61mRNWx5D1 zd676WW7gjCcap2u71sk1vjy3ddiGC0928nL+ZCoxF8vm3PMKRyAIKOyFb/sF1bA n8SlyBrZ7pFmxE6GYPOd5sU/ -----END CERTIFICATE-----Generated at Sat Oct 17 15:22:28 2026 by rpki-client