$ rpki-client -vvvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json) Hash identifier: rAYmi2MuO3Fq79dF40RvDeh4Y0IlHjrU6UW2pGbQaHQ= Subject key identifier: B1:83:69:17:44:C1:09:48:7D:E1:74:8E:59:AB:E4:28:F4:32:47:BD Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft Manifest number: 0C15 Signing time: Mon 14 Sep 2026 18:51:15 +0000 Manifest this update: Mon 14 Sep 2026 18:51:14 +0000 Manifest next update: Mon 21 Sep 2026 18:51:14 +0000 Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: JZqijgg9dG6RvEFAi1Y4qYfdYxbUc41do5BohmPY/4Q=) 2: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: OsKpmn4d4PR+9xigCzefdFcY4eHlBHpLVwQgzWBMDnY=) 3: 86850E56021D11F18B736F00496F56BC.roa (hash: t1YOO3CTB2wqmZ9Z1apALeTPXX0rA5ab+0BE/sJrH9E=) 4: 856D71DE021D11F18B736F00496F56BC.roa (hash: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Sep 14 18:51:14 2026 GMT Not After : Sep 21 18:51:14 2026 GMT Subject: CN=6aa84223-ccc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:ed:95:01:96:d9:aa:22:67:f0:6d:ab:68: 39:67:b8:9d:92:70:2a:51:f0:fc:b9:33:32:50:6f: d8:11:c4:a9:b7:29:1c:a7:54:b3:15:65:36:d0:d6: 52:9e:33:54:fb:7b:db:67:d1:ce:3d:7c:e3:e6:77: 22:fe:f5:d8:55:96:f3:51:8f:e5:d7:9f:20:92:5b: e2:f1:03:a6:d7:0d:ce:1f:d7:d5:f0:06:34:ba:29: ae:8e:9d:5d:17:16:83:03:e0:51:d3:cb:bc:3a:2c: ab:14:ef:62:b1:3c:19:13:77:2e:17:84:85:9d:70: 04:73:e0:4a:19:12:34:49:1e:76:75:75:25:91:b1: c5:9d:6e:8f:88:f4:8a:5c:f8:c2:a6:8a:13:1c:df: 5e:69:1b:f0:78:5e:2e:5a:34:ce:16:01:43:d8:87: 48:75:f8:d6:0c:e3:c7:f2:de:72:3f:39:35:4e:e3: 56:1d:3c:9f:52:89:88:53:59:4b:26:00:5b:92:6b: 29:2f:be:99:25:db:83:27:dc:84:5a:86:ff:40:70: 67:c3:3a:89:5e:ec:7f:b5:9d:33:14:ac:7f:0e:c1: 44:87:6b:48:6a:fc:5d:96:ce:c3:50:ad:d7:13:49: 1a:f3:8e:f0:b6:74:3b:dc:6b:6b:cb:f5:d2:8c:33: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:69:17:44:C1:09:48:7D:E1:74:8E:59:AB:E4:28:F4:32:47:BD X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:4b:49:bc:23:fe:af:04:34:66:30:db:a9:f6:aa:4b:33:98: 2e:22:bd:43:5e:6a:1d:c1:2f:a6:71:8f:81:76:b6:f8:5c:2c: c4:a4:ef:5d:ec:a0:05:ec:f4:a1:f2:d5:2a:9c:3c:6b:3b:6c: b6:a1:40:93:0c:bf:ee:23:ac:db:a6:3e:a2:5a:00:72:f0:3e: 08:41:de:89:fc:66:f8:3b:28:83:e5:05:69:4e:77:10:58:d4: 1e:47:c5:d6:71:c9:9f:dc:0d:47:cf:b3:07:9d:f7:30:a0:3e: cf:28:98:58:e2:a1:22:36:c6:3a:da:35:15:9c:fc:87:97:b3: dc:19:1d:93:ee:a2:d9:a5:1d:e2:bd:d6:52:8b:8c:6d:5f:ae: 2b:5e:5a:7d:60:92:5c:64:14:79:65:b5:56:a6:6f:95:59:18: b3:80:f6:84:c2:21:6b:bd:c8:d7:3d:90:bf:fe:62:6e:f8:03: a8:ea:a8:c3:0b:1e:c9:0f:fc:b1:cc:7c:32:34:eb:f6:d0:18: 43:43:90:0d:78:5f:05:7d:cc:07:50:9c:2f:2a:8c:32:f4:5f: fb:be:e0:d2:b1:39:d0:e8:79:6f:de:83:90:a7:32:60:41:8a: c6:ef:76:63:82:85:a7:c1:06:59:45:89:d4:d8:3a:c5:f7:af: 5e:23:4b:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjYwOTE0MTg1MTE0WhcNMjYwOTIxMTg1MTE0WjAYMRYwFAYD VQQDEw02YWE4NDIyMy1jY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFztlQGW2aoiZ/Btq2g5Z7idknAqUfD8uTMyUG/YEcSptykcp1SzFWU20NZS njNU+3vbZ9HOPXzj5nci/vXYVZbzUY/l158gklvi8QOm1w3OH9fV8AY0uimujp1d FxaDA+BR08u8OiyrFO9isTwZE3cuF4SFnXAEc+BKGRI0SR52dXUlkbHFnW6PiPSK XPjCpooTHN9eaRvweF4uWjTOFgFD2IdIdfjWDOPH8t5yPzk1TuNWHTyfUomIU1lL JgBbkmspL76ZJduDJ9yEWob/QHBnwzqJXux/tZ0zFKx/DsFEh2tIavxdls7DUK3X E0ka847wtnQ73Gtry/XSjDMpZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGDaRdE wQlIfeF0jlmr5Cj0Mke9MB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTE5QS8wNDkwOTA5QTQzMUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1Hdjhm N1Zpd18wdFlQYzlld2FOMG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv0tJvCP+rwQ0ZjDbqfaqSzOYLiK9Q15qHcEvpnGPgXa2+FwsxKTvXeygBez0 ofLVKpw8aztstqFAkwy/7iOs26Y+oloAcvA+CEHeifxm+Dsog+UFaU53EFjUHkfF 1nHJn9wNR8+zB533MKA+zyiYWOKhIjbGOto1FZz8h5ez3Bkdk+6i2aUd4r3WUouM bV+uK15afWCSXGQUeWW1VqZvlVkYs4D2hMIha73I1z2Qv/5ibvgDqOqowwseyQ/8 scx8MjTr9tAYQ0OQDXhfBX3MB1CcLyqMMvRf+77g0rE50Oh5b96DkKcyYEGKxu92 Y4KFp8EGWUWJ1Ng6xfevXiNLbQ== -----END CERTIFICATE-----Generated at Tue Sep 15 05:38:26 2026 by rpki-client