$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft File: R-lr-DG7PMQ7TweEJj5ylYddVRY.mft (raw, json) Hash identifier: UlMmlD+2kW9HDwQD5cLDzo8tbDBcb/83CKSuUxJcTD8= Subject key identifier: 0C:2C:B4:83:B5:26:75:AB:EF:CC:87:37:31:13:B3:14:63:44:02:D6 Authority key identifier: 47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 Certificate issuer: /CN=A91C4204/serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft Manifest number: 010D Signing time: Sat 17 Oct 2026 06:43:27 +0000 Manifest this update: Sat 17 Oct 2026 06:43:26 +0000 Manifest next update: Sat 24 Oct 2026 06:43:26 +0000 Files and hashes: 1: R-lr-DG7PMQ7TweEJj5ylYddVRY.crl (hash: fl6ObWAB58eOgq9TW1rt3kvok7H9Ifev/vLOUP6pOj4=) 2: CA2D4952300911F0AB675D3EC4F9AE02.roa (hash: LQJzwkclBmwOmL2YkraTcankSfQmcjnSpIupRPPZZKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 06:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=47E96BF831BB3CC43B4F0784263E7295875D5516 Validity Not Before: Oct 17 06:43:26 2026 GMT Not After : Oct 24 06:43:26 2026 GMT Subject: CN=6ad3190f-94ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:dd:30:1b:eb:4e:29:e7:1f:9d:56:8b:ac: ec:0f:1f:36:f0:0b:ef:ae:33:28:0c:41:52:4d:3b: 27:d9:2e:ae:64:71:08:58:39:eb:21:b6:d1:88:b8: da:1c:e9:2c:8e:c5:b6:51:a9:c0:46:44:13:18:20: 6c:e9:ba:6e:b3:1b:51:a2:95:a0:27:51:3e:38:ca: 7d:88:fa:ea:6d:aa:87:a6:42:c4:55:5f:b0:6c:ea: 90:e6:16:3c:45:96:9b:18:5f:05:8e:28:c9:2c:11: 2c:63:6d:a6:56:44:5e:18:e0:03:ec:d9:23:f5:42: 42:99:e3:b5:11:2a:e3:05:0e:5e:6e:32:a5:65:7a: cd:a1:d0:48:cc:35:59:ac:d4:18:90:0c:27:d6:3d: 12:4b:fc:86:e0:15:4d:e3:5c:68:01:29:04:7c:22: a0:e9:e7:68:d0:7c:71:dc:48:34:78:16:fa:bb:d9: c7:7f:6a:35:76:d7:a4:9f:90:b1:c5:e5:73:58:ff: 90:5a:45:8f:f9:5d:16:36:3d:b5:b8:91:10:dc:4d: 0a:ef:98:16:93:f3:40:30:ae:f6:0c:37:d0:12:e6: 29:f8:13:20:fa:6a:bc:f2:32:b4:ea:93:93:d2:21: cf:cf:29:65:78:24:38:19:66:96:39:96:68:5e:8c: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:B4:83:B5:26:75:AB:EF:CC:87:37:31:13:B3:14:63:44:02:D6 X509v3 Authority Key Identifier: keyid:47:E9:6B:F8:31:BB:3C:C4:3B:4F:07:84:26:3E:72:95:87:5D:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R-lr-DG7PMQ7TweEJj5ylYddVRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/441B5052300911F0A0AA7D3DC4F9AE02/R-lr-DG7PMQ7TweEJj5ylYddVRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:16:e0:91:a3:cf:40:83:1b:1c:06:f2:05:bf:be:11:31:e9: 0e:81:63:6d:a0:e0:c8:57:8c:eb:38:1a:8b:83:c3:8c:c1:d6: c1:4c:b3:55:30:d5:ca:f7:28:a2:49:cc:57:9a:d1:b9:cd:45: ca:7a:71:6b:c0:10:41:81:51:4d:e6:0b:fd:bc:d6:3b:4a:61: 8e:ae:8b:c0:d8:7f:5a:c0:59:9a:18:af:9e:8d:9b:68:30:f1: b9:03:66:a5:66:a3:0a:e7:bc:39:db:28:63:ef:86:3e:a5:c3: e3:28:74:bc:7d:60:ff:e8:2e:7b:d6:13:00:a7:db:5f:9a:a8: 18:4b:cf:5f:d8:c9:ed:03:05:74:0b:37:e4:45:e9:7e:bf:80: b7:56:20:e1:c0:1d:46:d8:8c:a1:05:3e:d8:ab:32:38:fe:04: df:ad:d4:7a:69:ba:2e:3a:94:bd:e1:57:5d:25:f6:ff:cf:9c: c0:d3:92:38:55:84:7d:6d:f3:63:8c:78:e9:aa:6a:6d:65:45: 1d:d3:a7:22:3f:46:19:a8:49:b7:e4:79:2b:31:41:b4:9b:81: e3:97:b8:da:ca:15:eb:da:b3:6b:30:c3:29:4c:0b:14:e8:65: dc:ad:5a:4a:92:7a:b1:5d:5d:43:e3:6e:ac:c9:66:f9:0c:e7: 4c:2f:7a:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQyMDQxMTAvBgNVBAUTKDQ3RTk2QkY4MzFCQjNDQzQzQjRGMDc4NDI2M0U3Mjk1 ODc1RDU1MTYwHhcNMjYxMDE3MDY0MzI2WhcNMjYxMDI0MDY0MzI2WjAYMRYwFAYD VQQDEw02YWQzMTkwZi05NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbHdMBvrTinnH51Wi6zsDx828AvvrjMoDEFSTTsn2S6uZHEIWDnrIbbRiLja HOksjsW2UanARkQTGCBs6bpusxtRopWgJ1E+OMp9iPrqbaqHpkLEVV+wbOqQ5hY8 RZabGF8FjijJLBEsY22mVkReGOAD7Nkj9UJCmeO1ESrjBQ5ebjKlZXrNodBIzDVZ rNQYkAwn1j0SS/yG4BVN41xoASkEfCKg6edo0Hxx3Eg0eBb6u9nHf2o1dtekn5Cx xeVzWP+QWkWP+V0WNj21uJEQ3E0K75gWk/NAMK72DDfQEuYp+BMg+mq88jK06pOT 0iHPzylleCQ4GWaWOZZoXowFwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwstIO1 JnWr78yHNzETsxRjRALWMB8GA1UdIwQYMBaAFEfpa/gxuzzEO08HhCY+cpWHXVUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDIwNC80NDFCNTA1MjMw MDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BNUTdUd2VFSmo1eWxZZGRW UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ItbHItREc3UE1RN1R3ZUVKajV5bFlkZFZSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDIwNC80NDFCNTA1MjMwMDkxMUYwQTBBQTdEM0RDNEY5QUUwMi9SLWxyLURHN1BN UTdUd2VFSmo1eWxZZGRWUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlxbgkaPPQIMbHAbyBb++ETHpDoFjbaDgyFeM6zgai4PDjMHWwUyzVTDVyvco oknMV5rRuc1Fynpxa8AQQYFRTeYL/bzWO0phjq6LwNh/WsBZmhivno2baDDxuQNm pWajCue8OdsoY++GPqXD4yh0vH1g/+gue9YTAKfbX5qoGEvPX9jJ7QMFdAs35EXp fr+At1Yg4cAdRtiMoQU+2KsyOP4E363Uemm6LjqUveFXXSX2/8+cwNOSOFWEfW3z Y4x46apqbWVFHdOnIj9GGahJt+R5KzFBtJuB45e42soV69qzazDDKUwLFOhl3K1a SpJ6sV1dQ+NurMlm+QznTC96hQ== -----END CERTIFICATE-----Generated at Sun Oct 18 06:31:35 2026 by rpki-client