$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: sle/OLy3BMlgyhln6T5S7wOtiZkmY0lOx/UARBXu+TM= Subject key identifier: 20:7A:F2:5B:EB:E6:95:30:BF:49:5D:70:36:93:3E:4D:8D:0D:3D:22 Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 5F Signing time: Sat 03 Oct 2026 08:52:48 +0000 Manifest this update: Sat 03 Oct 2026 08:52:47 +0000 Manifest next update: Sat 10 Oct 2026 08:52:47 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: bH662nv+czQHeK+hoAjf4NNkt2ah8dGVJelpmnseq7g=) 2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) 3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: Oct 3 08:52:47 2026 GMT Not After : Oct 10 08:52:47 2026 GMT Subject: CN=6ac0c260-1ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:26:93:f1:0b:70:1c:a8:ce:47:15:3d:01: c7:56:74:8a:c3:c7:11:49:66:86:2b:a0:28:df:11: f7:cd:a8:ba:f4:9f:f4:2d:46:01:4b:28:ab:c0:a4: 10:3c:ab:02:12:85:c2:65:24:da:b0:1a:69:33:03: 02:d2:40:9d:b9:b3:3e:e4:6a:36:58:54:83:ef:4b: a9:74:b2:37:ba:b1:bb:3a:a4:70:0b:35:97:d3:4a: d7:74:dd:93:2b:11:83:b2:23:88:62:0d:06:16:d6: 6b:de:a0:62:f9:1e:86:90:90:9a:59:82:08:0e:2c: ab:f6:fa:43:cd:6b:a8:06:99:04:33:62:2d:66:06: 33:4e:d0:3c:84:fe:be:6a:6c:34:be:81:f3:48:f2: ea:2e:fc:7b:8a:0e:3a:4d:61:53:87:a8:51:8f:38: 79:4d:e8:f7:37:73:27:bc:82:ee:10:8f:b1:3c:ee: 45:ff:17:50:2f:d1:f4:2f:1b:c3:b3:03:3d:df:55: 5d:47:60:d4:cf:0e:a4:c0:d4:d7:58:02:aa:0f:91: de:c1:11:ec:d2:ad:3d:f9:52:e4:4d:9f:04:24:f5: ee:fa:65:cf:93:87:d0:5b:ad:b5:8f:67:fa:f0:40: 28:5d:f7:ae:cb:71:9a:ce:8c:9b:20:f8:62:7f:3d: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:F2:5B:EB:E6:95:30:BF:49:5D:70:36:93:3E:4D:8D:0D:3D:22 X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:82:b2:43:6a:29:df:f8:0c:57:12:27:53:41:b2:d7:a7:12: fd:66:76:1a:12:51:c4:da:67:c9:29:30:df:2b:b4:b0:1e:bd: 78:a8:9f:28:bb:b9:9e:ee:b6:8b:95:f9:52:af:47:1a:82:17: b7:dd:8b:df:7f:5a:d4:4e:83:18:f8:f3:6a:75:1e:1d:a4:82: 0f:ec:d7:46:20:9d:aa:b4:07:cc:0e:7e:8c:c0:29:63:35:35: 9d:8d:03:ba:36:a1:3a:e8:fb:cd:0c:79:1b:bb:dc:71:fc:a0: 13:09:02:1d:9a:a7:a7:3f:f7:b6:16:54:6f:ec:d7:e9:f6:cc: 7d:de:b7:cf:30:2d:49:30:f1:a3:25:a2:c6:c8:2e:01:68:4c: 65:42:f8:b0:27:42:da:45:80:12:86:4b:0f:39:e4:7a:1d:26: 2a:b3:4f:b9:06:38:a1:70:0f:9e:84:3d:e0:3c:7f:35:2b:d7: 08:1f:76:bb:b5:d2:d6:46:ac:65:bb:dc:29:c1:de:b5:d4:08: d5:c5:bd:2c:0a:79:c9:1d:56:c5:28:3d:ea:5f:d8:13:28:74: da:c4:6c:45:72:be:47:9d:f1:fb:73:2a:76:b0:31:a1:c3:6b: 3e:87:53:6c:cb:f8:06:d1:f4:8d:dc:e0:e5:66:64:09:ab:c9: ba:9a:d6:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjEwMDMwODUyNDdaFw0yNjEwMTAwODUyNDdaMBgxFjAUBgNV BAMTDTZhYzBjMjYwLTFiYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGbyaT8QtwHKjORxU9AcdWdIrDxxFJZoYroCjfEffNqLr0n/QtRgFLKKvApBA8 qwIShcJlJNqwGmkzAwLSQJ25sz7kajZYVIPvS6l0sje6sbs6pHALNZfTStd03ZMr EYOyI4hiDQYW1mveoGL5HoaQkJpZgggOLKv2+kPNa6gGmQQzYi1mBjNO0DyE/r5q bDS+gfNI8uou/HuKDjpNYVOHqFGPOHlN6Pc3cye8gu4Qj7E87kX/F1Av0fQvG8Oz Az3fVV1HYNTPDqTA1NdYAqoPkd7BEezSrT35UuRNnwQk9e76Zc+Th9BbrbWPZ/rw QChd967LcZrOjJsg+GJ/PdU7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIHryW+vm lTC/SV1wNpM+TY0NPSIwHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkgrJDainf+AxXEidTQbLXpxL9ZnYaElHE2mfJKTDfK7SwHr14qJ8ou7me7raL lflSr0caghe33Yvff1rUToMY+PNqdR4dpIIP7NdGIJ2qtAfMDn6MwCljNTWdjQO6 NqE66PvNDHkbu9xx/KATCQIdmqenP/e2FlRv7Nfp9sx93rfPMC1JMPGjJaLGyC4B aExlQviwJ0LaRYAShksPOeR6HSYqs0+5BjihcA+ehD3gPH81K9cIH3a7tdLWRqxl u9wpwd611AjVxb0sCnnJHVbFKD3qX9gTKHTaxGxFcr5HnfH7cyp2sDGhw2s+h1Ns y/gG0fSN3ODlZmQJq8m6mta9 -----END CERTIFICATE-----Generated at Mon Oct 5 06:41:59 2026 by rpki-client