$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: BFDGWmovOhv9PS1N0fA8G2XCYj+q4a9P0+fGu1u/oGM= Subject key identifier: 2B:BD:9C:5C:53:F7:CF:BF:D9:2C:50:7B:50:40:84:5D:B3:CB:BC:DB Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 9A Signing time: Mon 31 Aug 2026 07:51:00 +0000 Manifest this update: Mon 31 Aug 2026 07:51:00 +0000 Manifest next update: Mon 07 Sep 2026 07:51:00 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: /N9FLVzoii0pQvvs//K2Cer4O1+oMSRBx+AnuLROQfw=) 2: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) 3: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) 4: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 07:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Aug 31 07:51:00 2026 GMT Not After : Sep 7 07:51:00 2026 GMT Subject: CN=6a953264-2adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:9c:a1:01:d4:f5:c5:49:c0:23:c0:05:3d: 1b:17:cd:88:6d:b2:0f:35:fd:1a:d5:5f:bd:58:19: 1c:a6:f4:b9:1e:b7:ba:c3:72:e3:fe:d2:b1:5f:df: 6a:63:a1:55:eb:90:74:79:cb:36:43:2e:47:b1:8d: 80:84:e5:e8:3c:ac:e2:1c:2d:f7:e2:86:8b:bc:19: 3c:6d:ab:98:ac:6a:92:bf:a2:03:3a:e5:ef:a1:2c: 35:d5:32:20:6f:75:81:eb:3b:3b:3f:79:be:60:ff: e6:af:3d:ad:1f:1d:28:ff:89:dc:0a:bb:44:83:a4: e6:b3:b8:64:27:30:2f:8f:65:73:f9:dd:b3:c1:7d: f1:a7:bf:d5:0a:23:0a:bf:86:56:b1:f9:fa:a6:71: 4b:f5:94:b9:db:4b:ef:76:21:d1:b1:55:19:64:c5: 12:09:af:e4:9c:63:c3:b1:ab:dc:ec:a6:dc:85:0e: 51:1e:e4:38:e1:db:c4:9f:62:1a:45:9f:a3:6e:22: f6:5b:ca:6f:98:91:b9:84:31:5d:f9:46:aa:87:a3: 6b:a0:5b:f4:e5:6b:49:9d:bf:72:cc:14:12:f6:24: a9:89:11:ea:b3:bd:98:2b:5b:9b:de:89:cc:fc:05: 74:f9:3d:42:6c:d9:95:a9:7e:5e:dd:7f:98:c6:e2: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BD:9C:5C:53:F7:CF:BF:D9:2C:50:7B:50:40:84:5D:B3:CB:BC:DB X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a4:92:7e:05:66:64:9a:04:89:7d:f6:14:5a:42:b0:ac:86: a5:b3:fe:b8:83:dd:d2:b2:f8:f6:8f:34:d2:e2:85:ff:d4:8c: 06:e1:44:6f:fe:95:31:b4:b4:60:6c:3c:3f:2e:74:75:4e:00: 98:58:4a:5a:66:2f:61:78:f1:71:62:3b:4a:95:cf:b8:2b:59: 32:5f:61:7e:5a:03:c6:54:27:ee:72:0b:5c:a9:01:7f:2e:d9: 2d:f3:32:cd:65:9f:5a:ab:1d:f4:7c:6c:09:d4:43:d2:85:d9: c4:4c:8b:61:46:f0:db:a1:b5:16:7f:91:ff:67:fa:f3:64:07: 6f:ad:46:f2:52:3d:1d:f3:39:5d:51:31:8f:4b:e0:17:c8:ef: 2d:16:33:8e:d4:a6:29:65:a1:26:38:13:a1:ef:94:91:f8:8a: 63:d7:5e:19:2b:ce:56:eb:1a:65:44:d8:88:ad:4d:73:a7:87: d4:5c:83:18:f9:33:5d:66:af:ca:3e:60:1e:bc:ba:c4:95:31: f3:83:ff:ad:4d:6d:6b:bd:3c:5a:4f:bf:ca:14:65:34:41:c9: 77:b8:05:30:75:09:3c:0e:e7:e3:d9:94:7b:b7:89:82:d2:e6: fe:9e:f3:60:56:ec:50:b3:e1:b8:70:dd:d4:12:13:3d:cc:5d: 58:ce:76:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEQUUxMTAvBgNVBAUTKDJEQkZDN0IyODYxNUIxRkY3OEQ3Q0Y0Njg4NkFGOTIx MzlGRjk2OEEwHhcNMjYwODMxMDc1MTAwWhcNMjYwOTA3MDc1MTAwWjAYMRYwFAYD VQQDEw02YTk1MzI2NC0yYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zqcoQHU9cVJwCPABT0bF82IbbIPNf0a1V+9WBkcpvS5Hre6w3Lj/tKxX99q Y6FV65B0ecs2Qy5HsY2AhOXoPKziHC334oaLvBk8bauYrGqSv6IDOuXvoSw11TIg b3WB6zs7P3m+YP/mrz2tHx0o/4ncCrtEg6Tms7hkJzAvj2Vz+d2zwX3xp7/VCiMK v4ZWsfn6pnFL9ZS520vvdiHRsVUZZMUSCa/knGPDsavc7KbchQ5RHuQ44dvEn2Ia RZ+jbiL2W8pvmJG5hDFd+Uaqh6NroFv05WtJnb9yzBQS9iSpiRHqs72YK1ub3onM /AV0+T1CbNmVqX5e3X+YxuLpDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCu9nFxT 98+/2SxQe1BAhF2zy7zbMB8GA1UdIwQYMBaAFC2/x7KGFbH/eNfPRohq+SE5/5aK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RBRS8yRkJFQTQwMkM4 NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNmOTQxODlHaUdyNUlUbl9s b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RBRS8yRkJFQTQwMkM4NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNm OTQxODlHaUdyNUlUbl9sb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaSSfgVmZJoEiX32FFpCsKyGpbP+uIPd0rL49o800uKF/9SMBuFEb/6VMbS0 YGw8Py50dU4AmFhKWmYvYXjxcWI7SpXPuCtZMl9hfloDxlQn7nILXKkBfy7ZLfMy zWWfWqsd9HxsCdRD0oXZxEyLYUbw26G1Fn+R/2f682QHb61G8lI9HfM5XVExj0vg F8jvLRYzjtSmKWWhJjgToe+UkfiKY9deGSvOVusaZUTYiK1Nc6eH1FyDGPkzXWav yj5gHry6xJUx84P/rU1ta708Wk+/yhRlNEHJd7gFMHUJPA7n49mUe7eJgtLm/p7z YFbsULPhuHDd1BITPcxdWM52yw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:09 2026 by rpki-client