$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: hOAULv8SmUr5DXtXHLqTQYlsws8eQuI1QLxqCEJgCpE= Subject key identifier: 11:0A:4B:98:7A:B2:A3:25:08:9D:EF:A7:C9:B6:6A:52:32:16:9D:D1 Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 2213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 220C Signing time: Fri 02 Oct 2026 15:59:27 +0000 Manifest this update: Fri 02 Oct 2026 15:59:26 +0000 Manifest next update: Fri 09 Oct 2026 15:59:26 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: PsNkE6zQ0x3FFM4B3dX3llRJDxdjWT4li1oTpzX4T5E=) 2: 3607DBA8687E11F1B56F8D616747A888.roa (hash: WO/scCKxLdc7YDN982DAvWLVxjSTIhP/jPPfp19RJno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8723 (0x2213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: Oct 2 15:59:26 2026 GMT Not After : Oct 9 15:59:26 2026 GMT Subject: CN=6abfd4df-691f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:95:5d:b7:75:35:2d:a3:76:65:4e:2e:c8: ee:dd:bc:db:d2:00:1f:37:8e:dd:f6:08:7c:3e:38: da:c3:2c:1d:af:a7:6f:f9:6b:53:4b:fa:61:39:34: 29:76:eb:9b:95:d4:57:23:1b:29:ac:93:c9:ba:e6: de:e5:b2:1b:9f:b0:a5:67:0f:b2:14:a1:ae:07:56: 3d:a6:58:b0:2a:ba:8c:4d:0f:ef:2c:01:d7:0e:f6: 38:6d:01:c5:d2:6f:8b:b5:78:9c:40:96:58:88:70: 45:06:6b:b6:15:b3:79:a2:2c:0e:05:57:4f:6f:00: a0:55:80:6e:83:1c:f0:8a:7e:16:1b:5d:09:4b:ff: 02:6a:7a:27:1c:8a:44:c7:b4:30:e5:36:66:e2:c3: b0:05:cb:de:f7:5c:19:0b:b7:a5:3b:e4:bb:30:09: 9f:1b:44:e4:ef:75:c4:e6:c6:40:45:9b:2f:b0:ae: a8:a3:c6:f8:ff:70:31:54:c7:1e:86:52:ad:da:6f: 72:78:aa:40:c8:07:07:b5:e5:ae:9f:cc:47:d3:f7: 5f:f6:9a:a1:d9:8e:b9:44:95:14:26:f6:88:4a:47: 1b:2f:f9:ff:8b:36:45:3d:5a:1e:97:bf:37:70:c6: 0b:78:5f:63:14:87:16:57:b1:44:17:e0:17:cd:cf: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:4B:98:7A:B2:A3:25:08:9D:EF:A7:C9:B6:6A:52:32:16:9D:D1 X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a5:8c:82:bf:0f:12:9b:6e:31:a7:35:88:3a:57:71:a1:e9: 99:3c:ce:0a:05:bc:8d:00:35:60:9d:e5:2f:d2:75:40:e9:30: 5a:29:e1:a3:93:1f:0a:1c:c2:10:b9:d5:81:24:ec:23:b9:f7: ec:62:3b:57:c1:b7:b1:e1:7b:41:3b:ee:9a:c4:d0:7c:79:ef: a6:cb:4f:6c:f4:81:c5:00:46:c4:ed:7c:4e:b5:0c:b9:84:a4: f2:e6:c7:a1:ec:ee:19:f1:7e:6b:3e:c7:c3:26:4f:37:06:0e: 85:7e:48:15:9a:85:f5:39:4f:5a:da:90:b4:09:1d:a5:28:2a: 7e:ff:0d:17:8a:e8:e9:8c:81:7d:7e:65:b0:0c:d2:db:2c:53: 8d:49:99:f8:0b:19:b8:4a:7c:6c:d6:c2:e7:ef:85:0c:95:6b: f4:b4:1a:37:b9:d6:65:33:41:b4:a9:b5:57:03:61:e3:77:bb: b3:f9:50:eb:59:4b:89:77:cf:99:70:cf:c3:a6:fb:56:d5:67: e1:cf:a1:fd:b5:4a:fd:3c:c8:b8:8d:ae:0e:a6:c4:e9:28:18: 51:aa:35:1a:7c:14:cd:a1:b5:38:e1:0c:fd:f8:3c:95:97:d9: ee:6a:c9:45:55:09:0a:4d:10:01:18:55:d3:f7:83:ad:5a:84: fc:9d:f6:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjYxMDAyMTU1OTI2WhcNMjYxMDA5MTU1OTI2WjAYMRYwFAYD VQQDEw02YWJmZDRkZi02OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw++VXbd1NS2jdmVOLsju3bzb0gAfN47d9gh8Pjjawywdr6dv+WtTS/phOTQp duubldRXIxsprJPJuube5bIbn7ClZw+yFKGuB1Y9pliwKrqMTQ/vLAHXDvY4bQHF 0m+LtXicQJZYiHBFBmu2FbN5oiwOBVdPbwCgVYBugxzwin4WG10JS/8CanonHIpE x7Qw5TZm4sOwBcve91wZC7elO+S7MAmfG0Tk73XE5sZARZsvsK6oo8b4/3AxVMce hlKt2m9yeKpAyAcHteWun8xH0/df9pqh2Y65RJUUJvaISkcbL/n/izZFPVoel783 cMYLeF9jFIcWV7FEF+AXzc8oYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEKS5h6 sqMlCJ3vp8m2alIyFp3RMB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt6WMgr8PEptuMac1iDpXcaHpmTzOCgW8jQA1YJ3lL9J1QOkwWinho5MfChzC ELnVgSTsI7n37GI7V8G3seF7QTvumsTQfHnvpstPbPSBxQBGxO18TrUMuYSk8ubH oezuGfF+az7HwyZPNwYOhX5IFZqF9TlPWtqQtAkdpSgqfv8NF4ro6YyBfX5lsAzS 2yxTjUmZ+AsZuEp8bNbC5++FDJVr9LQaN7nWZTNBtKm1VwNh43e7s/lQ61lLiXfP mXDPw6b7VtVn4c+h/bVK/TzIuI2uDqbE6SgYUao1GnwUzaG1OOEM/fg8lZfZ7mrJ RVUJCk0QARhV0/eDrVqE/J32Yw== -----END CERTIFICATE-----Generated at Sun Oct 4 11:45:02 2026 by rpki-client