$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft File: ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json) Hash identifier: TZhX2/r1saWCR4SYjiW77+IzYDZmHqvk7wGgZ75I8+0= Subject key identifier: FF:C7:17:3C:C4:3A:A2:2B:E8:F2:EB:3C:35:B9:DF:8E:47:BD:3E:E4 Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft Manifest number: 0123 Signing time: Fri 11 Sep 2026 06:03:11 +0000 Manifest this update: Fri 11 Sep 2026 06:03:10 +0000 Manifest next update: Fri 18 Sep 2026 06:03:10 +0000 Files and hashes: 1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: ZfCdLLer+0eKMWzxyW/OzLnZL2WZqDOjcnifccbWBYY=) 2: 794B993A4DCC11F1A3B35A8FB3833773.roa (hash: EXcXAWkPRKy2b0v846Dwu0vaIsA4gr6bY0tTEvdv/RI=) 3: 5448D8AC4DCA11F18462840CB2833773.roa (hash: j8iatOZvVQg41rHjPtQGn8/eNVWR8JQ4DuhiAOfavec=) 4: B3849A9A359311F09B54926FC4F9AE02.roa (hash: 5TjucLw3rqG1PVaTMa1TZO4hKoccTXSUW0WPJZfPVSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: Sep 11 06:03:10 2026 GMT Not After : Sep 18 06:03:10 2026 GMT Subject: CN=6aa3999e-7143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:c4:5d:eb:50:a5:9f:48:f6:75:fe:ee:63: 28:42:72:7a:d1:62:03:70:2b:17:64:36:e8:02:42: 23:ab:46:9b:0e:3d:66:a4:f5:0b:32:1a:ff:f7:33: 5e:d5:8c:42:02:10:c7:f9:94:3c:63:e1:c4:44:3f: fc:91:b2:f7:11:38:3f:64:ab:cd:9b:a5:4a:64:0b: 8f:9d:24:78:34:ce:cb:1b:dd:c3:b8:e8:91:45:41: 08:37:bd:5e:0b:04:48:99:35:ff:69:5a:25:64:cc: 21:ce:ed:6c:0d:7f:8f:50:1d:d3:52:9b:ee:8c:9b: c2:b4:7b:f0:4b:54:2e:de:10:1c:d2:df:d6:f7:07: c8:60:09:56:59:ee:e5:a4:71:fc:9e:a6:27:23:2f: 04:99:4d:d5:fe:eb:53:52:13:33:15:3a:2b:bf:e9: 82:ea:bf:a9:0a:db:3b:76:b2:04:6c:e0:f1:20:d7: c7:f1:fa:d1:78:cb:95:03:b4:80:04:9d:4a:be:0b: c3:25:ec:9f:2a:a8:09:42:ed:21:ab:67:20:4b:42: 66:81:e6:de:9f:b7:01:b0:da:ab:b8:ca:7f:da:85: 60:a5:1c:33:43:0c:3d:00:1c:58:bc:22:25:98:12: 77:63:bc:66:45:52:33:57:c3:5c:bc:b8:41:b0:ff: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C7:17:3C:C4:3A:A2:2B:E8:F2:EB:3C:35:B9:DF:8E:47:BD:3E:E4 X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:08:8e:66:95:c6:46:82:b4:44:f7:a3:55:f4:49:e1:39: 53:ec:7f:1c:9f:28:52:60:ad:9d:8b:27:0f:ce:a3:a8:0f:c7: 22:e9:86:cd:7b:ac:82:69:ab:d2:d9:f7:fa:61:31:35:4b:98: eb:33:ae:93:be:c6:b8:77:ed:a2:70:15:85:91:0f:1e:8d:d9: 06:1e:20:ed:ac:ec:ab:83:c9:a4:3c:92:f4:da:8e:1e:f2:3b: 28:03:1b:5a:b4:0d:6e:a4:2c:90:c0:ed:66:8e:88:95:07:d0: 1e:b4:93:f1:6c:63:25:4c:1f:fc:39:d5:58:f1:3d:29:cb:47: b2:46:bc:bd:cd:55:e3:3a:e5:9f:ad:6b:b2:ef:e8:70:af:32: 51:92:2e:ed:23:72:6c:a3:b2:e9:bb:2e:05:63:17:4e:86:5e: 9c:4f:0c:5a:f0:4d:9c:36:9a:dc:5b:1c:e4:a1:5e:92:e9:dc: 95:17:b4:d6:72:8e:6c:4f:d7:b8:fc:0a:72:7b:bd:fc:7a:55: 57:21:f1:f8:e5:ec:1c:6c:f7:97:da:de:29:b2:50:7a:28:00: 06:e8:4e:f4:50:cb:46:4f:81:44:f6:5c:1f:62:ea:35:d6:b4: 1b:b0:b8:39:4f:49:be:e3:8f:71:cd:c8:56:0b:eb:94:6f:37: 46:f7:f6:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNkExMTAvBgNVBAUTKDk1RDQyRUMyRjQ2OEI3RTM4Rjk1OEM4RkJBOTMxODAx MTdEQzI2RTAwHhcNMjYwOTExMDYwMzEwWhcNMjYwOTE4MDYwMzEwWjAYMRYwFAYD VQQDEw02YWEzOTk5ZS03MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngbEXetQpZ9I9nX+7mMoQnJ60WIDcCsXZDboAkIjq0abDj1mpPULMhr/9zNe 1YxCAhDH+ZQ8Y+HERD/8kbL3ETg/ZKvNm6VKZAuPnSR4NM7LG93DuOiRRUEIN71e CwRImTX/aVolZMwhzu1sDX+PUB3TUpvujJvCtHvwS1Qu3hAc0t/W9wfIYAlWWe7l pHH8nqYnIy8EmU3V/utTUhMzFTorv+mC6r+pCts7drIEbODxINfH8frReMuVA7SA BJ1KvgvDJeyfKqgJQu0hq2cgS0Jmgeben7cBsNqruMp/2oVgpRwzQww9ABxYvCIl mBJ3Y7xmRVIzV8NcvLhBsP8SrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/HFzzE OqIr6PLrPDW5345HvT7kMB8GA1UdIwQYMBaAFJXULsL0aLfjj5WMj7qTGAEX3Cbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y2QS83QTUyOTg3NjBB RjAxMUYwODUzMUQ0M0NDNEY5QUUwMi9sZFF1d3ZSb3QtT1BsWXlQdXBNWUFSZmNK dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y2QS83QTUyOTg3NjBBRjAxMUYwODUzMUQ0M0NDNEY5QUUwMi9sZFF1d3ZSb3Qt T1BsWXlQdXBNWUFSZmNKdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxDMIjmaVxkaCtET3o1X0SeE5U+x/HJ8oUmCtnYsnD86jqA/HIumGzXusgmmr 0tn3+mExNUuY6zOuk77GuHftonAVhZEPHo3ZBh4g7azsq4PJpDyS9NqOHvI7KAMb WrQNbqQskMDtZo6IlQfQHrST8WxjJUwf/DnVWPE9KctHska8vc1V4zrln61rsu/o cK8yUZIu7SNybKOy6bsuBWMXToZenE8MWvBNnDaa3Fsc5KFekunclRe01nKObE/X uPwKcnu9/HpVVyHx+OXsHGz3l9reKbJQeigABuhO9FDLRk+BRPZcH2LqNda0G7C4 OU9JvuOPcc3IVgvrlG83Rvf22g== -----END CERTIFICATE-----Generated at Fri Sep 11 12:30:12 2026 by rpki-client