$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: Pabq8NiQ3w6KMZGhGmSdQZrWTulZpbTd899E13pzPm8= Subject key identifier: 9F:5D:2A:26:64:BF:66:22:76:92:24:F3:ED:0C:15:EE:D6:4A:40:EA Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 35AA Signing time: Thu 10 Sep 2026 14:24:57 +0000 Manifest this update: Thu 10 Sep 2026 14:24:57 +0000 Manifest next update: Thu 17 Sep 2026 14:24:57 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: bqjbGvA1NHgJnx/ReEAJp7JY7cqy1YsheCeFzx6T3ec=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=) 6: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=) 7: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=) 8: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=) 9: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13858 (0x3622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Sep 10 14:24:57 2026 GMT Not After : Sep 17 14:24:57 2026 GMT Subject: CN=6aa2bdb9-2fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:35:94:8a:d4:4c:d2:9d:d6:d6:19:ea:85:70: 4c:a6:42:5a:6c:d6:90:2f:6c:3a:2c:99:ff:a9:ab: c8:e8:50:3d:ea:a4:13:bc:5a:6c:e3:65:74:83:be: d8:9b:93:2c:44:7f:93:42:90:c2:e8:49:b7:64:18: 14:d7:fb:ce:fe:0b:3c:bf:ff:b9:7c:c7:7b:91:af: de:ab:81:ec:ac:f1:a6:81:f7:25:cb:d1:73:91:4c: fc:a7:4b:c4:28:50:1c:a2:a5:d9:db:15:6d:d5:c4: 3c:25:8d:63:6f:96:5c:e4:83:3f:81:2f:df:20:35: a6:73:12:f7:f6:e5:77:de:c7:c8:ab:a1:0a:78:40: 57:b8:7f:ac:4b:99:c5:2d:09:1c:ee:bb:d8:1e:1c: d2:45:6a:d5:30:a4:4a:d9:e5:fa:f3:9d:85:a7:a6: 08:f0:cf:72:18:1a:c9:3f:8b:c8:e6:92:44:c5:11: 98:c3:f5:25:c7:70:f7:0d:eb:82:8c:2b:57:c8:1b: 93:03:6f:43:42:c4:11:a3:29:b6:58:8d:00:66:0b: aa:4c:36:74:f3:a8:ff:80:80:98:13:5f:5d:7c:01: 27:50:97:d1:f7:7c:c3:10:20:34:e0:2a:8b:2e:ea: bf:9a:f7:03:32:8c:43:7e:ff:a4:f5:d9:19:27:22: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:2A:26:64:BF:66:22:76:92:24:F3:ED:0C:15:EE:D6:4A:40:EA X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f4:c8:04:a2:7d:81:25:fc:a7:0a:f5:4a:1b:1d:7b:81:9d: 98:62:da:dd:f3:04:a6:7f:e7:c1:7d:b2:ce:14:1c:23:b7:2e: d4:26:c0:4a:94:2d:73:bd:5e:38:8e:eb:89:6b:a3:22:42:a2: 0c:57:fe:aa:0c:d2:bd:23:18:51:e6:58:e0:a6:60:7a:a7:1b: ba:60:41:a0:29:c7:f1:3e:ee:1c:b0:f0:2c:05:ab:09:4d:7f: 0c:38:8e:5e:e7:a3:c4:07:f1:94:32:35:db:db:12:5f:30:37: 09:a6:1d:48:5d:c1:74:a2:16:66:c6:c1:7c:11:68:8e:d0:08: 16:7b:5a:79:96:cc:d5:23:94:37:8b:f9:5b:b6:dd:31:03:0d: 53:98:ed:33:ec:12:cb:90:96:9f:c3:54:52:dd:da:c6:3e:32: 87:87:2c:76:dc:30:f4:1a:d4:3f:ba:0e:68:a8:c4:01:f0:e3: c8:3c:a5:85:97:50:4e:2f:98:d4:ff:a5:b8:e3:a0:94:5f:83: c5:cc:61:b1:c5:be:15:ab:b7:e1:15:cf:64:e6:58:e8:9f:4a: 9d:e2:3a:45:1e:71:7f:3c:f5:6b:95:88:df:ca:57:59:bf:0f: 5b:ff:33:41:29:4e:44:6a:de:c4:57:b0:70:47:de:6c:5b:8c: cf:2a:6e:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjYwOTEwMTQyNDU3WhcNMjYwOTE3MTQyNDU3WjAYMRYwFAYD VQQDEw02YWEyYmRiOS0yZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjTWUitRM0p3W1hnqhXBMpkJabNaQL2w6LJn/qavI6FA96qQTvFps42V0g77Y m5MsRH+TQpDC6Em3ZBgU1/vO/gs8v/+5fMd7ka/eq4HsrPGmgfcly9FzkUz8p0vE KFAcoqXZ2xVt1cQ8JY1jb5Zc5IM/gS/fIDWmcxL39uV33sfIq6EKeEBXuH+sS5nF LQkc7rvYHhzSRWrVMKRK2eX6852Fp6YI8M9yGBrJP4vI5pJExRGYw/Ulx3D3DeuC jCtXyBuTA29DQsQRoym2WI0AZguqTDZ086j/gICYE19dfAEnUJfR93zDECA04CqL Luq/mvcDMoxDfv+k9dkZJyJwEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9dKiZk v2YidpIk8+0MFe7WSkDqMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgPTIBKJ9gSX8pwr1Shsde4GdmGLa3fMEpn/nwX2yzhQcI7cu1CbASpQtc71e OI7riWujIkKiDFf+qgzSvSMYUeZY4KZgeqcbumBBoCnH8T7uHLDwLAWrCU1/DDiO XuejxAfxlDI129sSXzA3CaYdSF3BdKIWZsbBfBFojtAIFntaeZbM1SOUN4v5W7bd MQMNU5jtM+wSy5CWn8NUUt3axj4yh4csdtww9BrUP7oOaKjEAfDjyDylhZdQTi+Y 1P+luOOglF+DxcxhscW+Fau34RXPZOZY6J9KneI6RR5xfzz1a5WI38pXWb8PW/8z QSlORGrexFewcEfebFuMzypu2w== -----END CERTIFICATE-----Generated at Fri Sep 11 12:35:04 2026 by rpki-client