$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft File: lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json) Hash identifier: 3Ty+zmE2z50zbH+ACC0Tm3vVuREtOaaWwKcEAvo3Ka8= Subject key identifier: BA:C1:1E:ED:A3:05:CE:81:EC:93:E7:A2:14:82:E3:80:33:16:3A:19 Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft Manifest number: 01D9 Signing time: Sat 05 Sep 2026 03:32:37 +0000 Manifest this update: Sat 05 Sep 2026 03:32:36 +0000 Manifest next update: Sat 12 Sep 2026 03:32:36 +0000 Files and hashes: 1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: LgWq5uI1j5b6bF7QSgO7kdZNvhDI6dLYVQBY5FQGg+o=) 2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Sep 5 03:32:36 2026 GMT Not After : Sep 12 03:32:36 2026 GMT Subject: CN=6a9b8d54-56a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:b8:36:54:91:43:97:93:f8:53:d5:93:7f: 4a:88:44:a9:54:3b:36:73:5d:a5:c5:ad:fe:1f:c0: 06:e6:21:2b:d8:ff:af:45:28:a8:d5:67:a4:29:8c: a9:c8:81:4d:68:a7:06:dc:09:6c:94:97:6d:00:f4: 35:08:d6:da:5d:58:94:1a:97:a4:3d:63:ec:2c:9e: 91:af:2c:92:21:2f:4e:8b:34:fd:ef:60:da:8b:93: e2:a2:6f:70:af:29:48:27:dd:7f:5a:0c:77:b7:fb: 6b:cf:50:28:c2:dc:c0:3c:d0:64:04:ab:0d:48:ec: 74:e2:cb:34:5c:27:9b:93:b2:45:d4:d0:4e:cc:2e: 9e:f2:b5:eb:a3:52:e4:b7:a8:62:9b:c5:f8:07:d2: 50:e3:6b:e9:4d:ac:ac:7f:0f:e2:71:6c:28:c1:78: 79:6a:7f:51:b5:23:69:65:a9:69:a8:a2:62:ce:38: 2c:69:f7:bc:c4:e4:c9:6b:03:70:28:09:13:62:28: da:73:fd:49:52:7f:9a:8d:47:9a:43:85:f2:11:ae: 6e:37:2f:92:cd:01:86:94:93:4e:63:4d:0d:1d:1d: e7:ba:0c:3d:e1:ea:bb:b8:f1:b0:4c:10:da:64:a8: 4a:69:29:6b:c8:80:bd:99:3b:95:a4:ba:d5:0c:dd: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C1:1E:ED:A3:05:CE:81:EC:93:E7:A2:14:82:E3:80:33:16:3A:19 X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:58:74:c0:24:0c:f6:e7:6c:7e:48:c7:41:ff:22:19:05:50: a9:87:58:b3:4e:4d:6a:55:7f:58:0b:91:ae:c6:a8:da:95:88: d7:cd:a9:3f:9a:f3:8b:28:73:cf:e0:69:dd:60:6a:de:fc:0f: 02:e6:0f:fb:e9:e3:35:8b:09:cb:93:f2:a9:3c:e7:4b:4e:0d: 6e:77:e9:78:21:fd:8f:c3:55:98:df:c0:d4:79:c8:c8:02:74: 41:8d:d1:bc:a5:25:89:82:ed:32:91:b2:5c:37:90:48:42:4a: 50:76:30:f6:f7:43:bc:74:2f:47:08:ce:66:9d:11:26:9b:4d: ca:76:9e:f1:87:c5:a0:cd:01:c1:77:c5:6b:61:b1:96:b6:86: 80:4a:4c:11:d1:01:40:1f:be:d7:59:06:e0:d4:2a:c0:cc:a1: 2c:0f:97:de:07:3a:1b:f2:0d:7b:f8:2f:9f:26:e9:5f:44:2d: 60:d5:80:9d:af:ce:f4:7f:22:5a:59:e1:e6:9e:ad:78:5c:75: cb:8c:fa:bc:a0:ce:22:75:8a:96:fd:03:cf:8c:44:f2:bd:f8: 02:c4:69:3d:58:a0:7a:c4:a0:8e:10:f2:c8:be:ae:cf:f8:de: 1d:8c:ea:19:be:3c:ec:d5:b9:b5:a8:82:22:ba:6e:64:33:37: 03:de:aa:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjYwOTA1MDMzMjM2WhcNMjYwOTEyMDMzMjM2WjAYMRYwFAYD VQQDEw02YTliOGQ1NC01NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxG4NlSRQ5eT+FPVk39KiESpVDs2c12lxa3+H8AG5iEr2P+vRSio1WekKYyp yIFNaKcG3AlslJdtAPQ1CNbaXViUGpekPWPsLJ6RryySIS9OizT972Dai5Piom9w rylIJ91/Wgx3t/trz1AowtzAPNBkBKsNSOx04ss0XCebk7JF1NBOzC6e8rXro1Lk t6him8X4B9JQ42vpTaysfw/icWwowXh5an9RtSNpZalpqKJizjgsafe8xOTJawNw KAkTYijac/1JUn+ajUeaQ4XyEa5uNy+SzQGGlJNOY00NHR3nugw94eq7uPGwTBDa ZKhKaSlryIC9mTuVpLrVDN3dGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrBHu2j Bc6B7JPnohSC44AzFjoZMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFR RGRXakJoQXd5SnBJbG9BNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB1h0wCQM9udsfkjHQf8iGQVQqYdYs05NalV/WAuRrsao2pWI182pP5rziyhz z+Bp3WBq3vwPAuYP++njNYsJy5PyqTznS04NbnfpeCH9j8NVmN/A1HnIyAJ0QY3R vKUliYLtMpGyXDeQSEJKUHYw9vdDvHQvRwjOZp0RJptNynae8YfFoM0BwXfFa2Gx lraGgEpMEdEBQB++11kG4NQqwMyhLA+X3gc6G/INe/gvnybpX0QtYNWAna/O9H8i Wlnh5p6teFx1y4z6vKDOInWKlv0Dz4xE8r34AsRpPVigesSgjhDyyL6uz/jeHYzq Gb487NW5taiCIrpuZDM3A96qkQ== -----END CERTIFICATE-----Generated at Sat Sep 5 10:25:31 2026 by rpki-client