$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: 1GWtsxSBfMZ7wO9WuzXqfdCAF1I3TUMwCnnxeERX6No= Subject key identifier: C9:7D:F2:89:74:12:6C:CD:BB:0A:2A:17:6D:12:44:9E:33:B5:2A:32 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 19D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 19C1 Signing time: Fri 04 Sep 2026 16:21:35 +0000 Manifest this update: Fri 04 Sep 2026 16:21:34 +0000 Manifest next update: Fri 11 Sep 2026 16:21:34 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: RyVUQwho6WFWiTrYpvhrS+M59wycVSLjZftyyR6al0U=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: DzKmtYCdBRynloESEDJ88OdtBxNoXDc9M+RZzPAZ8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6616 (0x19d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Sep 4 16:21:34 2026 GMT Not After : Sep 11 16:21:34 2026 GMT Subject: CN=6a9af00f-3dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:8e:c6:61:eb:c7:1c:3f:45:6d:68:a0:8e: 4d:3e:2d:62:d2:aa:91:bc:09:13:c4:0a:1b:b7:14: a5:c6:9d:7c:3c:98:87:f6:a6:85:08:ae:ed:f5:cc: 51:b1:4a:a9:0c:6b:d1:a8:48:55:81:c5:03:cc:3d: c5:69:cb:1c:13:89:09:b8:2d:e7:79:be:01:fe:d9: c2:cb:25:4b:72:88:c8:e4:73:0a:fb:2f:b9:23:47: 51:0b:fb:01:2b:4b:7d:59:ba:cc:36:62:64:18:87: dd:47:3b:c6:72:d4:f7:2b:80:7b:32:14:2e:c8:bc: b9:c4:03:56:2d:2c:1b:09:40:6a:02:95:84:18:23: b9:c9:f8:1b:f7:b7:9a:60:6f:d5:1d:e1:ac:d2:d1: a4:ad:61:c8:6b:cd:fa:d5:0d:9b:ea:3a:39:84:b3: cb:c6:4e:3d:d9:2d:46:74:7a:b6:be:37:0b:c4:34: f0:d5:29:68:37:5f:78:44:fd:c7:12:65:10:11:24: 5a:01:15:ca:54:04:68:28:2c:4a:08:74:25:77:01: 1f:11:b6:8e:c0:ca:08:2c:00:ae:c7:19:0b:9b:bc: 71:00:44:a8:bf:fb:f9:88:a1:c4:e5:8e:62:05:18: f1:de:ce:3c:bf:8d:c2:d1:72:a7:ea:6a:e7:ed:41: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:F2:89:74:12:6C:CD:BB:0A:2A:17:6D:12:44:9E:33:B5:2A:32 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:45:31:9e:b2:c0:ff:5c:52:56:f4:24:9b:46:59:d7:f3:5a: b5:19:9f:d3:f8:7a:5c:fc:c3:f2:0f:38:4e:02:b1:7b:ca:ea: 62:2b:96:19:62:b7:1a:56:1a:77:69:54:46:4f:e7:d5:41:32: c1:1e:2f:da:23:74:9e:db:3c:02:4a:0e:05:f5:7e:8d:2a:65: 0a:22:57:24:ee:1c:07:ae:83:f5:23:2d:2f:84:66:78:6d:3a: 44:50:fe:ea:28:f0:a2:e7:b2:c1:5d:74:ea:33:e2:8c:a6:64: 82:8c:77:a0:c6:b7:3d:e9:25:2b:cc:5a:3a:ae:67:52:74:57: 50:07:81:2e:5c:bb:7b:61:d6:0c:15:da:e6:14:0d:24:f4:da: 65:9f:3d:76:07:06:50:41:c3:ab:72:d5:d4:c3:57:c2:55:1f: 0d:74:d8:8b:11:c9:75:bd:5d:1d:a5:be:41:ba:92:ad:91:45: e8:13:d1:a6:ba:ee:d7:e1:83:93:f6:a4:5c:a9:1f:da:f9:df: b4:52:82:ea:64:ce:b2:a9:a3:40:18:8f:61:16:fc:5d:b6:93: a4:fd:13:73:14:04:b5:26:44:71:79:e8:24:5e:2c:cc:94:0e: e7:0d:58:9b:82:d0:d5:b1:69:d5:7a:66:a6:40:36:ec:a1:e8: 38:63:39:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjYwOTA0MTYyMTM0WhcNMjYwOTExMTYyMTM0WjAYMRYwFAYD VQQDEw02YTlhZjAwZi0zZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswuOxmHrxxw/RW1ooI5NPi1i0qqRvAkTxAobtxSlxp18PJiH9qaFCK7t9cxR sUqpDGvRqEhVgcUDzD3FacscE4kJuC3neb4B/tnCyyVLcojI5HMK+y+5I0dRC/sB K0t9WbrMNmJkGIfdRzvGctT3K4B7MhQuyLy5xANWLSwbCUBqApWEGCO5yfgb97ea YG/VHeGs0tGkrWHIa8361Q2b6jo5hLPLxk492S1GdHq2vjcLxDTw1SloN194RP3H EmUQESRaARXKVARoKCxKCHQldwEfEbaOwMoILACuxxkLm7xxAESov/v5iKHE5Y5i BRjx3s48v43C0XKn6mrn7UHiCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMl98ol0 EmzNuwoqF20SRJ4ztSoyMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfUUxnrLA/1xSVvQkm0ZZ1/NatRmf0/h6XPzD8g84TgKxe8rqYiuWGWK3GlYa d2lURk/n1UEywR4v2iN0nts8AkoOBfV+jSplCiJXJO4cB66D9SMtL4RmeG06RFD+ 6ijwoueywV106jPijKZkgox3oMa3PeklK8xaOq5nUnRXUAeBLly7e2HWDBXa5hQN JPTaZZ89dgcGUEHDq3LV1MNXwlUfDXTYixHJdb1dHaW+QbqSrZFF6BPRprru1+GD k/akXKkf2vnftFKC6mTOsqmjQBiPYRb8XbaTpP0TcxQEtSZEcXnoJF4szJQO5w1Y m4LQ1bFp1XpmpkA27KHoOGM5Xw== -----END CERTIFICATE-----Generated at Sat Sep 5 07:33:54 2026 by rpki-client