$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json) Hash identifier: soXf8dHOXiezk4gVstfFfw8gnyAgZkHKgUgZbIbTw10= Subject key identifier: A4:AA:BD:3E:99:28:CD:51:81:61:FE:3F:43:B7:04:44:17:2E:93:02 Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft Manifest number: 01F4 Signing time: Tue 27 Oct 2026 03:35:32 +0000 Manifest this update: Tue 27 Oct 2026 03:35:32 +0000 Manifest next update: Tue 03 Nov 2026 03:35:32 +0000 Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: EzlO4MrGMOaeMxQPV3pt1AhqwAk/16Hxp9fVgSJ74+g=) 2: C659227E3D9611F1B3BD8648C4833773.roa (hash: URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: Oct 27 03:35:32 2026 GMT Not After : Nov 3 03:35:32 2026 GMT Subject: CN=6ae01c04-32c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:68:a3:e3:9f:58:ee:aa:aa:e2:a7:71:00: 58:bc:f6:87:92:26:39:40:e2:9b:29:60:11:c8:2a: f4:55:52:83:10:63:9b:98:f6:d2:14:3b:79:7a:63: 5b:45:fd:b4:af:e0:8e:76:d6:c8:5c:37:da:61:0a: 59:d9:4c:af:e9:c4:78:b9:37:aa:58:87:ff:76:1c: 69:15:8a:df:b5:ef:d2:17:b3:32:83:d5:22:c0:62: 13:4f:02:98:f8:ad:42:fb:44:6d:b0:27:df:f8:68: 05:9c:9f:45:f1:e5:91:d4:40:5e:45:3d:ce:85:f7: 2c:7b:12:38:6e:95:74:e0:0f:bc:4d:4e:ec:7a:5e: 54:70:eb:cc:58:fa:02:31:f1:5e:3e:bf:fe:1a:1f: 56:ce:b2:10:76:09:b9:bc:9a:1b:da:ca:00:44:db: 1e:cf:00:97:3a:2b:fd:ac:28:27:b5:bc:d5:56:dd: 3d:2a:27:ac:16:f0:c3:34:4d:bb:2d:d5:ba:1b:79: e1:31:f0:db:b4:16:d2:39:01:ff:e6:6a:03:a2:f8: f0:82:04:d5:ac:ee:bd:0d:0f:f6:5b:9c:f8:16:2d: f5:57:ca:b9:83:5b:95:07:c7:b1:49:78:4c:ec:eb: 64:d3:e4:9e:28:18:53:ab:ff:41:50:b2:e9:a6:ba: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AA:BD:3E:99:28:CD:51:81:61:FE:3F:43:B7:04:44:17:2E:93:02 X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a8:e2:3c:7e:cc:d9:2b:2d:83:1a:05:44:4b:93:f2:d4:81: 84:b6:b6:a7:d1:a5:99:cc:b3:08:65:45:5c:a0:f9:a3:58:ab: 63:e1:1d:41:9a:29:01:a6:30:30:69:29:4a:5a:8a:5b:84:cf: b3:c6:94:3a:47:0f:36:5a:6a:a8:33:5c:69:bc:93:8f:8b:51: 46:c4:30:4c:57:10:e1:a1:a9:6d:4b:3b:40:b1:bb:24:7d:26: 02:0d:83:46:c6:ee:2d:e3:37:26:1a:e3:c1:ef:71:07:c7:74: ae:b8:d8:5b:98:b6:24:68:d3:41:d8:07:98:f2:9d:d4:a8:08: 2f:a9:c8:d1:14:6d:9e:b9:97:16:90:a0:56:42:d1:d7:51:a5: f1:9c:7a:77:7c:26:30:b0:bf:02:61:11:1a:53:b9:f6:1f:bf: 90:17:59:ed:27:ca:49:b8:b7:7b:43:f4:08:2b:d5:c0:71:84: bf:9e:66:1e:3a:8b:10:95:90:cb:4c:8f:6f:e7:ce:59:7a:51: f1:f9:a1:93:c4:ab:af:c3:a1:a9:03:54:34:cf:56:83:36:dd: 4c:1b:21:99:af:4c:82:c6:c8:99:03:91:ea:7c:09:3e:46:7e: 7c:d6:0e:47:54:0b:e0:8a:e9:90:ee:9a:47:77:8d:8f:9f:32: cf:3c:4b:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE QTNCMjAwQjUwHhcNMjYxMDI3MDMzNTMyWhcNMjYxMTAzMDMzNTMyWjAYMRYwFAYD VQQDEw02YWUwMWMwNC0zMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsZoo+OfWO6qquKncQBYvPaHkiY5QOKbKWARyCr0VVKDEGObmPbSFDt5emNb Rf20r+COdtbIXDfaYQpZ2Uyv6cR4uTeqWIf/dhxpFYrfte/SF7Myg9UiwGITTwKY +K1C+0RtsCff+GgFnJ9F8eWR1EBeRT3OhfcsexI4bpV04A+8TU7sel5UcOvMWPoC MfFePr/+Gh9WzrIQdgm5vJob2soARNsezwCXOiv9rCgntbzVVt09KiesFvDDNE27 LdW6G3nhMfDbtBbSOQH/5moDovjwggTVrO69DQ/2W5z4Fi31V8q5g1uVB8exSXhM 7Otk0+SeKBhTq/9BULLpprqVXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSqvT6Z KM1RgWH+P0O3BEQXLpMCMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXKjiPH7M2SstgxoFREuT8tSBhLa2p9GlmcyzCGVFXKD5o1irY+EdQZopAaYw MGkpSlqKW4TPs8aUOkcPNlpqqDNcabyTj4tRRsQwTFcQ4aGpbUs7QLG7JH0mAg2D RsbuLeM3Jhrjwe9xB8d0rrjYW5i2JGjTQdgHmPKd1KgIL6nI0RRtnrmXFpCgVkLR 11Gl8Zx6d3wmMLC/AmERGlO59h+/kBdZ7SfKSbi3e0P0CCvVwHGEv55mHjqLEJWQ y0yPb+fOWXpR8fmhk8Srr8OhqQNUNM9WgzbdTBshma9MgsbImQOR6nwJPkZ+fNYO R1QL4IrpkO6aR3eNj58yzzxL4g== -----END CERTIFICATE-----Generated at Thu Oct 29 00:43:35 2026 by rpki-client