$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: kNcZZ5p2XkKcG9kLerADFvvQpPCODz+xcU4IPwVtKKY= Subject key identifier: 44:D7:97:56:05:45:D3:E8:3E:15:BD:1B:80:A6:A8:F1:2C:BD:C7:E5 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 19F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 19DD Signing time: Mon 26 Oct 2026 16:22:40 +0000 Manifest this update: Mon 26 Oct 2026 16:22:39 +0000 Manifest next update: Mon 02 Nov 2026 16:22:39 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: OSu0G0y8Vg/pKlu5SCjFVCfwSgCKm1aMfuCuk+dnGEw=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: qkdMLW4ml5LNjU2lCiySD8NT3992IeZdEG85+xrnRsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6645 (0x19f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Oct 26 16:22:39 2026 GMT Not After : Nov 2 16:22:39 2026 GMT Subject: CN=6adf7e4f-8d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:d2:2e:29:e1:42:58:cf:ee:46:c9:54:04: bd:ae:9b:8c:af:d8:93:ef:33:54:0a:bb:c9:eb:63: 46:10:0f:22:77:3c:31:bb:cb:0f:d2:4a:7d:af:e2: 9f:6d:75:a5:f8:d4:33:e3:1a:1a:e2:e1:57:78:92: b2:8d:f3:87:51:bb:4c:cf:9e:52:e0:53:cd:d3:46: 19:77:f2:b9:0e:2f:36:74:70:f4:ed:fa:82:ca:14: 6d:1f:1e:77:6d:bc:17:a3:6b:86:25:71:09:9f:70: c8:42:31:f9:87:38:f6:39:31:63:33:00:03:1d:27: c9:d0:20:26:1a:87:62:7a:2c:a1:13:62:48:ff:18: d7:e5:5d:1f:38:73:12:19:8f:c9:0a:29:5c:71:f6: 99:20:58:31:ac:51:09:74:17:50:a0:48:99:31:a8: 83:71:99:88:51:57:c3:f6:7b:b1:e7:9e:0e:0c:56: 17:3b:42:8d:78:50:d0:95:c4:05:3b:63:a8:db:be: b3:10:c6:f5:3a:e0:66:3b:cb:f5:7b:be:93:c1:8f: 15:1b:03:7e:72:ca:89:d3:a5:fc:0b:e1:ab:4a:bd: e9:7a:c5:e2:5e:ea:61:aa:a8:89:5e:f5:1d:f1:94: 26:14:0d:cf:b5:c8:bd:ab:2f:53:c7:31:ed:6c:ad: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D7:97:56:05:45:D3:E8:3E:15:BD:1B:80:A6:A8:F1:2C:BD:C7:E5 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:73:98:a9:e2:0c:1e:58:89:46:3c:fd:f2:67:f6:7b:c1: 3e:e4:a8:fd:b6:ae:78:84:5f:50:cb:84:3e:7c:5e:99:82:0d: b5:da:07:c0:09:90:f5:62:45:fa:ba:26:b9:45:35:f5:86:9d: 7c:68:df:d6:62:f3:d8:c3:9e:18:45:28:e7:39:b7:6d:8f:ff: 02:88:7b:bf:5c:9e:28:28:4f:bd:bd:21:d2:8e:be:9b:7f:75: d0:a6:6a:d8:65:00:9a:31:8d:43:42:1b:ab:20:d8:a9:cb:73: 9b:b8:bc:e5:85:5f:87:ff:11:89:e6:b6:de:ee:ed:43:2b:e1: 81:73:90:1a:d4:8c:0a:df:ad:c7:d8:5e:d1:ee:60:b0:59:2d: 65:3d:f1:07:be:a6:51:cf:a0:5b:d0:93:e1:db:71:25:0b:92: 13:e8:7f:1e:93:13:4a:4f:f3:b0:d0:e4:97:36:f4:c9:0d:38: 61:d2:df:6f:eb:48:ae:6d:31:4f:c9:fe:c3:3d:46:d3:e4:1c: 8a:63:32:a2:93:96:31:26:33:68:71:dc:8e:fa:93:40:e1:77: 1b:42:56:46:f7:f2:c0:21:a1:f8:bd:50:18:67:5b:3c:3d:9b: 67:05:db:49:61:c9:4d:db:70:d8:de:55:8f:2e:fd:ed:cc:18: c8:19:98:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYxMDI2MTYyMjM5WhcNMjYxMTAyMTYyMjM5WjAYMRYwFAYD VQQDEw02YWRmN2U0Zi04ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jTSLinhQljP7kbJVAS9rpuMr9iT7zNUCrvJ62NGEA8idzwxu8sP0kp9r+Kf bXWl+NQz4xoa4uFXeJKyjfOHUbtMz55S4FPN00YZd/K5Di82dHD07fqCyhRtHx53 bbwXo2uGJXEJn3DIQjH5hzj2OTFjMwADHSfJ0CAmGodieiyhE2JI/xjX5V0fOHMS GY/JCilccfaZIFgxrFEJdBdQoEiZMaiDcZmIUVfD9nux554ODFYXO0KNeFDQlcQF O2Oo276zEMb1OuBmO8v1e76TwY8VGwN+csqJ06X8C+GrSr3pesXiXuphqqiJXvUd 8ZQmFA3Ptci9qy9TxzHtbK0DBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETXl1YF RdPoPhW9G4CmqPEsvcflMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWAZzmKniDB5YiUY8/fJn9nvBPuSo/baueIRfUMuEPnxemYINtdoHwAmQ9WJF +romuUU19YadfGjf1mLz2MOeGEUo5zm3bY//Aoh7v1yeKChPvb0h0o6+m3910KZq 2GUAmjGNQ0IbqyDYqctzm7i85YVfh/8Riea23u7tQyvhgXOQGtSMCt+tx9he0e5g sFktZT3xB76mUc+gW9CT4dtxJQuSE+h/HpMTSk/zsNDklzb0yQ04YdLfb+tIrm0x T8n+wz1G0+QcimMyopOWMSYzaHHcjvqTQOF3G0JWRvfywCGh+L1QGGdbPD2bZwXb SWHJTdtw2N5Vjy797cwYyBmYaQ== -----END CERTIFICATE-----Generated at Wed Oct 28 11:49:51 2026 by rpki-client