$ rpki-client -vvvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: UW/pSZJ6Cqp4NIYvrpp0o06yPdUQfKQIK/Fj9bYBhcA= Subject key identifier: C9:EC:08:98:CC:23:5A:9A:33:1E:7A:80:EC:A3:54:A6:88:B6:C9:83 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 01C1 Signing time: Tue 03 Nov 2026 04:43:26 +0000 Manifest this update: Tue 03 Nov 2026 04:43:25 +0000 Manifest next update: Tue 10 Nov 2026 04:43:25 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: P/BjRXkWYLzn+xPL6puWNBVdXsfwpD+x5CMmYxvfmH8=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: lYBNMPIGwdmg3hahCp/0TuyobmaHK3vnQLBxguRZNCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 04:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Nov 3 04:43:25 2026 GMT Not After : Nov 10 04:43:25 2026 GMT Subject: CN=6ae9666e-e018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:65:b8:b7:db:27:37:2d:9d:61:8b:67:e1: 91:22:2b:cc:01:5a:94:d1:7d:e4:4d:4a:08:24:1e: 23:eb:b8:94:53:8d:28:d1:58:48:ae:4c:97:4e:da: 3d:98:09:44:e6:d2:09:69:d3:77:3f:d5:90:c9:97: 53:2b:5c:b6:87:5e:ad:3e:50:37:32:53:72:2b:e3: b0:c5:e2:59:70:09:83:db:41:80:43:ee:f8:5d:28: 5e:c4:47:c2:31:91:28:88:c9:b1:2c:13:53:a2:a6: b8:0c:e4:df:42:6d:14:17:08:a2:4c:40:14:9e:8c: 97:8c:23:da:c1:bb:29:13:71:b8:4f:12:f0:b0:38: e9:71:91:4b:9a:b7:2f:36:c5:0e:1b:5a:8b:c2:18: 74:fc:50:1e:8b:b1:37:71:b8:7f:1a:b1:38:21:1b: 34:0f:f1:da:03:6b:82:f0:ff:fc:50:f0:81:90:6d: b8:e4:ce:fa:63:e0:f6:af:59:a3:52:c4:3c:ea:43: 6a:64:e6:61:ea:f0:52:14:0f:36:7a:6d:1e:74:86: 26:e7:f8:e4:d0:2f:9a:7c:e5:c9:8c:02:c8:53:ff: 9e:65:77:13:2d:95:55:67:d5:a0:e4:c4:21:1e:5c: 37:ce:7d:fc:84:89:56:81:10:33:07:c7:b2:b9:c1: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EC:08:98:CC:23:5A:9A:33:1E:7A:80:EC:A3:54:A6:88:B6:C9:83 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8b:f9:f9:f2:a0:da:09:07:dd:52:4b:69:7d:c4:00:83:2d: 64:c4:f8:39:1c:13:a4:a8:dd:39:c2:43:7e:dc:ff:5f:20:4d: 14:7e:0b:1a:54:4e:41:d2:42:1c:da:24:6c:69:65:5c:16:0b: 47:9b:c2:73:f4:98:d7:fa:d4:2f:2f:60:bb:45:1c:45:27:bd: e0:b4:71:16:6f:aa:3c:7b:8c:50:f1:27:6e:72:1d:03:f7:3a: 9e:81:4b:f7:54:4e:b6:1f:3d:a0:de:f9:d7:49:5d:ce:44:e4: f1:a9:fb:43:5e:87:bb:a1:c4:3a:10:1d:d1:24:7c:46:46:22: 68:27:40:90:be:ed:07:dd:0a:a4:b0:b1:ff:fe:51:c3:2a:71: 14:dd:19:55:3f:04:c0:d7:9c:c7:8b:36:6e:23:2b:e6:7c:3e: 67:9a:d2:dc:20:2d:30:1d:cd:6f:64:22:72:db:f6:bb:13:93: a9:1c:95:7a:39:a6:62:7c:df:b6:ff:cc:c5:c5:6b:d9:16:84: 1d:1b:46:91:77:a9:c2:4c:65:a2:67:7b:5e:69:d1:68:bf:b6: de:60:39:6c:db:ec:25:9a:ed:09:b0:27:c1:9e:70:60:bd:8c: 9f:0f:c4:28:4a:84:9c:38:2a:27:c4:23:1f:fa:06:fa:be:9a: 59:11:a4:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjYxMTAzMDQ0MzI1WhcNMjYxMTEwMDQ0MzI1WjAYMRYwFAYD VQQDEw02YWU5NjY2ZS1lMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkO9luLfbJzctnWGLZ+GRIivMAVqU0X3kTUoIJB4j67iUU40o0VhIrkyXTto9 mAlE5tIJadN3P9WQyZdTK1y2h16tPlA3MlNyK+OwxeJZcAmD20GAQ+74XShexEfC MZEoiMmxLBNToqa4DOTfQm0UFwiiTEAUnoyXjCPawbspE3G4TxLwsDjpcZFLmrcv NsUOG1qLwhh0/FAei7E3cbh/GrE4IRs0D/HaA2uC8P/8UPCBkG245M76Y+D2r1mj UsQ86kNqZOZh6vBSFA82em0edIYm5/jk0C+afOXJjALIU/+eZXcTLZVVZ9Wg5MQh Hlw3zn38hIlWgRAzB8eyucENeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnsCJjM I1qaMx56gOyjVKaItsmDMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi4v5+fKg2gkH3VJLaX3EAIMtZMT4ORwTpKjdOcJDftz/XyBNFH4LGlROQdJC HNokbGllXBYLR5vCc/SY1/rULy9gu0UcRSe94LRxFm+qPHuMUPEnbnIdA/c6noFL 91ROth89oN7510ldzkTk8an7Q16Hu6HEOhAd0SR8RkYiaCdAkL7tB90KpLCx//5R wypxFN0ZVT8EwNecx4s2biMr5nw+Z5rS3CAtMB3Nb2Qictv2uxOTqRyVejmmYnzf tv/MxcVr2RaEHRtGkXepwkxlomd7XmnRaL+23mA5bNvsJZrtCbAnwZ5wYL2Mnw/E KEqEnDgqJ8QjH/oG+r6aWRGkmg== -----END CERTIFICATE-----Generated at Tue Nov 3 08:23:30 2026 by rpki-client