$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: IsPftgdJxOlHsaAy626grTVZZt9RHds6wU0MM2hQz04= Subject key identifier: 08:D0:9A:35:FC:74:D1:D0:16:B5:05:C3:29:6A:CF:20:1C:87:83:C4 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1F89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1F73 Signing time: Tue 06 Oct 2026 16:01:23 +0000 Manifest this update: Tue 06 Oct 2026 16:01:23 +0000 Manifest next update: Tue 13 Oct 2026 16:01:23 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: IdzTJiQ5WU1MZEJ3GtzN4paCmf10S2STAUBXn/sNdVo=) 2: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: 3MKooCBU61wIsuGXSmqPXw064htJ8PtkFCtnxTlqkOw=) 3: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=) 4: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: rr7iOLl9TUyzkrsjzgFR/+q8JCXOgUaSGUX032fYyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8073 (0x1f89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Oct 6 16:01:23 2026 GMT Not After : Oct 13 16:01:23 2026 GMT Subject: CN=6ac51b53-6f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:7f:8b:f3:f1:09:a8:07:eb:e7:35:fa:29: 6f:8d:33:52:a0:87:62:52:15:98:11:4b:b3:b2:70: 03:2e:90:14:74:c4:ee:b0:fa:96:50:c7:2e:b9:3b: ff:77:02:5a:0c:2d:72:c3:2f:3f:4c:c2:f7:df:63: eb:c1:a0:6d:8d:15:99:11:6f:38:72:6f:fc:d4:84: 6b:e8:94:40:57:b9:e8:26:3a:ea:c5:22:5b:22:70: c3:6a:b0:93:9a:69:91:6c:f4:1f:ee:51:ca:f2:44: 16:a6:93:35:05:0f:10:b3:2a:b5:e6:e7:92:04:d8: 2e:63:7d:90:98:6c:30:27:de:79:05:a4:3b:28:0f: 84:a2:b9:bc:80:d7:12:a5:51:e4:8a:36:ce:25:ec: 52:2d:47:43:cf:2c:69:b9:6d:ee:82:00:03:41:67: 6b:cb:29:47:c4:57:db:30:99:73:c5:cd:87:d4:6b: 44:19:b4:90:9a:86:7f:57:25:30:78:aa:76:dd:68: 6e:a5:79:89:66:6a:bd:f7:46:9b:59:a3:e6:a9:fa: 9e:61:37:b7:6e:36:c7:b4:b1:f2:a9:6f:24:72:19: 03:f7:aa:4f:8f:f8:29:31:17:dd:f3:6f:54:fd:ab: 81:bd:29:65:18:40:2c:3b:9f:af:c8:62:38:37:71: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:9A:35:FC:74:D1:D0:16:B5:05:C3:29:6A:CF:20:1C:87:83:C4 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:3a:f7:5a:57:cc:0a:29:43:9c:b3:2a:3b:af:8d:d3:3e:5e: 0a:32:d6:54:15:08:e8:9a:54:a7:d8:92:7b:ee:a0:a7:83:91: 50:0e:ee:4a:53:2b:85:c7:7f:4c:35:6c:7b:f9:99:f9:c9:62: 87:fc:89:ba:14:9b:58:1b:fd:d1:04:56:f8:4b:d7:6f:45:d8: 2c:61:84:6b:84:12:ad:23:aa:03:00:fe:e9:96:dd:a5:bc:5c: ed:93:72:2d:d7:86:5c:f8:75:ca:9b:cd:c0:15:04:ba:12:a9: 67:e3:39:59:e5:48:57:16:c4:58:5f:a1:90:30:ed:5f:cb:a5: 8f:c6:4c:a0:3d:a6:79:c5:20:4a:b4:4b:8c:a8:ca:31:c3:bf: 3e:9c:6f:65:5c:7d:e4:85:8e:05:3d:e9:3e:a4:3d:1e:d0:82: 33:bc:55:34:77:74:13:17:68:f8:bd:9f:90:fe:95:80:5b:b4: fb:8c:69:8c:c4:85:0f:b1:a7:1f:43:f1:1b:f2:7c:bb:89:c4: 21:d8:6a:31:20:96:f1:9e:c9:4a:90:77:b4:b7:97:66:71:1d: 16:5d:bb:85:c9:d3:40:ce:c3:26:8c:9e:f5:ed:2b:76:e9:26: 53:66:1a:80:91:fd:4c:62:d0:10:99:f8:79:b5:41:58:6f:ba: dd:38:6f:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjYxMDA2MTYwMTIzWhcNMjYxMDEzMTYwMTIzWjAYMRYwFAYD VQQDEw02YWM1MWI1My02ZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5h/i/PxCagH6+c1+ilvjTNSoIdiUhWYEUuzsnADLpAUdMTusPqWUMcuuTv/ dwJaDC1ywy8/TML332PrwaBtjRWZEW84cm/81IRr6JRAV7noJjrqxSJbInDDarCT mmmRbPQf7lHK8kQWppM1BQ8Qsyq15ueSBNguY32QmGwwJ955BaQ7KA+Eorm8gNcS pVHkijbOJexSLUdDzyxpuW3uggADQWdryylHxFfbMJlzxc2H1GtEGbSQmoZ/VyUw eKp23WhupXmJZmq990abWaPmqfqeYTe3bjbHtLHyqW8kchkD96pPj/gpMRfd829U /auBvSllGEAsO5+vyGI4N3HdhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjQmjX8 dNHQFrUFwylqzyAch4PEMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkTr3WlfMCilDnLMqO6+N0z5eCjLWVBUI6JpUp9iSe+6gp4ORUA7uSlMrhcd/ TDVse/mZ+clih/yJuhSbWBv90QRW+EvXb0XYLGGEa4QSrSOqAwD+6Zbdpbxc7ZNy LdeGXPh1ypvNwBUEuhKpZ+M5WeVIVxbEWF+hkDDtX8ulj8ZMoD2mecUgSrRLjKjK McO/PpxvZVx95IWOBT3pPqQ9HtCCM7xVNHd0Exdo+L2fkP6VgFu0+4xpjMSFD7Gn H0PxG/J8u4nEIdhqMSCW8Z7JSpB3tLeXZnEdFl27hcnTQM7DJoye9e0rdukmU2Ya gJH9TGLQEJn4ebVBWG+63ThvLw== -----END CERTIFICATE-----Generated at Tue Oct 6 20:29:29 2026 by rpki-client