$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: i6fZaZbGYHUrDoAxesDBUNcM/GWXQ1kNgyMfZdrXaMU= Subject key identifier: 90:AB:8B:BA:B0:BC:4A:8B:4B:E6:0B:79:83:2A:BE:AE:D5:70:04:04 Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 021C Signing time: Sat 03 Oct 2026 03:28:19 +0000 Manifest this update: Sat 03 Oct 2026 03:28:18 +0000 Manifest next update: Sat 10 Oct 2026 03:28:18 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: C6adST4ddTNN/mWCGyos/wzWUXU+OozvyTPDfigSHrY=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: v1uuoVFUnedlDTjjrQCWqm2VkiqYxyN2FpeHQY4I9y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: Oct 3 03:28:18 2026 GMT Not After : Oct 10 03:28:18 2026 GMT Subject: CN=6ac07653-7a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:f9:7e:6a:36:d3:ad:49:b3:b8:09:03:87: 4e:a0:da:0e:dd:79:52:9e:46:05:ca:3a:73:50:76: 7c:e7:8c:8a:ae:72:cf:92:ba:7d:9c:c3:1e:09:b1: 1f:5d:0b:70:97:c0:65:69:dd:6e:b5:48:7b:58:b1: 0e:6e:54:96:67:a2:10:a2:af:0a:e9:72:79:e9:56: 2a:c3:3f:5a:84:b4:04:5d:c5:25:49:62:dd:33:22: c6:ec:84:2a:ae:f5:55:c7:92:80:8d:fb:7a:e8:74: b4:09:bc:34:97:ef:86:e9:e0:7f:ea:80:18:f1:01: 54:07:2c:96:ec:d9:f2:6c:ba:d7:52:fe:f5:d9:2b: cb:0d:1f:a6:64:be:ef:d9:6a:d4:b6:1e:4e:08:62: c1:dc:6e:b8:2b:44:12:b6:e9:c1:69:dc:d6:2f:64: 76:be:3d:b7:22:28:62:41:24:d7:75:2a:e7:77:2a: ba:f3:88:7f:ea:bd:bd:df:ed:16:c7:69:a7:d8:33: bf:08:dc:41:16:15:c3:82:70:51:6b:6a:21:ef:a5: 40:86:ea:7e:ff:ff:91:cf:58:ea:f3:8e:3e:b4:c2: 4c:eb:87:68:88:b6:aa:13:4a:da:e2:54:86:e3:96: 40:b3:c1:96:61:16:0b:d6:63:14:97:cb:2d:da:04: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AB:8B:BA:B0:BC:4A:8B:4B:E6:0B:79:83:2A:BE:AE:D5:70:04:04 X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fd:59:6a:14:d0:0c:c7:8e:f5:80:81:c9:4b:0f:71:85:13: f6:94:94:39:59:4c:e8:97:91:8b:57:56:b0:e4:a9:d3:1e:26: d3:e0:9b:eb:36:03:85:59:cf:82:0c:ea:0d:21:f3:18:d8:5b: 84:14:21:17:93:4f:18:aa:32:fa:29:58:fc:14:01:9a:5c:b9: 07:73:42:2f:88:9b:ea:b3:57:f3:82:99:e5:2d:6f:4d:26:b9: 50:19:d4:a4:10:44:6e:49:08:d7:ed:97:0f:c1:05:08:86:cb: 37:82:57:56:82:5c:51:6b:cb:5e:c0:b5:71:9b:a3:73:9d:4b: 1d:87:bc:c1:7b:35:1e:3e:0b:02:6c:f3:8c:89:34:71:b2:3d: fd:e4:c7:6d:e6:53:6b:ed:d1:44:c3:33:d0:cc:55:fd:1c:2a: 06:26:a4:02:dd:f5:03:1e:54:f9:99:38:0d:ce:a0:b7:41:ca: 5e:43:69:47:0a:b9:f4:12:93:64:b3:63:78:1e:7b:0c:f2:5c: db:95:4a:d7:71:cc:53:34:38:56:ea:89:b1:d3:00:ea:34:24: 23:da:ee:68:dc:4d:81:94:8c:e2:c0:bd:4a:e5:d1:e3:0a:64: 06:a5:6e:d5:27:26:2b:77:95:52:76:f5:a7:5b:a5:e7:9c:05: 56:a5:a4:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdERDUxMTAvBgNVBAUTKDk0QzNFRThDQzA3MjRFQkEzQ0IxMDMyNEY5RURCODFC QUM4NTAzMjAwHhcNMjYxMDAzMDMyODE4WhcNMjYxMDEwMDMyODE4WjAYMRYwFAYD VQQDEw02YWMwNzY1My03YTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlH5fmo2061Js7gJA4dOoNoO3XlSnkYFyjpzUHZ854yKrnLPkrp9nMMeCbEf XQtwl8Blad1utUh7WLEOblSWZ6IQoq8K6XJ56VYqwz9ahLQEXcUlSWLdMyLG7IQq rvVVx5KAjft66HS0Cbw0l++G6eB/6oAY8QFUByyW7NnybLrXUv712SvLDR+mZL7v 2WrUth5OCGLB3G64K0QStunBadzWL2R2vj23IihiQSTXdSrndyq684h/6r293+0W x2mn2DO/CNxBFhXDgnBRa2oh76VAhup+//+Rz1jq844+tMJM64doiLaqE0ra4lSG 45ZAs8GWYRYL1mMUl8st2gRmcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCri7qw vEqLS+YLeYMqvq7VcAQEMB8GA1UdIwQYMBaAFJTD7ozAck66PLEDJPntuBushQMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RENS8xNkQ0QjBEQzgx Q0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRybzhzUU1rLWUyNEc2eUZB eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RENS8xNkQ0QjBEQzgxQ0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRy bzhzUU1rLWUyNEc2eUZBeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWv1ZahTQDMeO9YCByUsPcYUT9pSUOVlM6JeRi1dWsOSp0x4m0+Cb6zYDhVnP ggzqDSHzGNhbhBQhF5NPGKoy+ilY/BQBmly5B3NCL4ib6rNX84KZ5S1vTSa5UBnU pBBEbkkI1+2XD8EFCIbLN4JXVoJcUWvLXsC1cZujc51LHYe8wXs1Hj4LAmzzjIk0 cbI9/eTHbeZTa+3RRMMz0MxV/RwqBiakAt31Ax5U+Zk4Dc6gt0HKXkNpRwq59BKT ZLNjeB57DPJc25VK13HMUzQ4VuqJsdMA6jQkI9ruaNxNgZSM4sC9SuXR4wpkBqVu 1ScmK3eVUnb1p1ul55wFVqWkug== -----END CERTIFICATE-----Generated at Sun Oct 4 17:16:16 2026 by rpki-client