$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: FwuQwv3WSjAtEVt25kumCKrnsLmgx7hb+TNnTm9VTXQ= Subject key identifier: F3:14:00:FB:3D:FB:9B:C5:E8:C5:20:69:FF:C9:03:BD:B2:63:36:51 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: B3 Signing time: Mon 19 Oct 2026 07:50:30 +0000 Manifest this update: Mon 19 Oct 2026 07:50:29 +0000 Manifest next update: Mon 26 Oct 2026 07:50:29 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: dvzsOoolsQAAwKojhiUmQTduf+6/6j76GBIeWKNq1qk=) 2: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=) 3: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=) 4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Oct 19 07:50:29 2026 GMT Not After : Oct 26 07:50:29 2026 GMT Subject: CN=6ad5cbc6-829a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:4f:b2:b6:56:66:4d:f1:ed:a5:84:df:de: ec:00:91:4e:fb:2c:12:5b:ca:3e:ab:d8:ea:7e:09: 98:8b:ce:92:14:bf:00:52:39:71:18:3e:df:4a:98: b9:5f:01:ef:35:65:79:d7:30:7a:08:d1:96:c1:61: bc:ee:dc:db:8c:30:68:69:07:f2:10:ef:e5:42:c9: a0:d5:8d:ba:40:5f:69:16:bb:9a:a2:45:1a:d0:73: 3c:63:c3:0d:48:c7:fe:50:6d:e7:eb:bb:56:54:55: b9:7b:8b:0b:1f:ba:82:89:09:e4:ba:07:d6:e2:11: d5:3b:de:c6:5d:ac:ce:f3:13:b5:cf:8e:15:c7:df: df:0a:47:80:a6:c7:6f:88:ad:f7:b6:b2:7f:13:8d: 83:2e:df:dd:2e:16:5c:29:5b:08:ce:50:25:27:1c: 2e:98:09:9d:5e:a2:1e:a8:e1:7d:46:d7:da:bd:53: 0a:f7:9f:04:fa:17:f2:ee:50:2d:bb:76:41:2a:2f: bc:e6:be:38:f3:4a:55:27:0f:54:bd:57:f5:3e:34: 23:e1:10:0f:fa:ee:4d:01:a3:d5:21:d1:aa:17:b6: 3b:20:74:c6:4a:a8:26:1c:83:c7:02:37:76:b9:f9: 0a:9a:8d:ae:e6:ab:23:8e:d0:e4:11:a5:7c:d7:bc: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:14:00:FB:3D:FB:9B:C5:E8:C5:20:69:FF:C9:03:BD:B2:63:36:51 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:07:88:52:c0:f6:b7:2b:a6:9a:cc:c6:2e:d4:2e:0a:6b: 61:5e:1e:5b:0b:d1:bc:a7:9e:ea:06:da:02:6a:78:1e:2d:f8: cd:0a:ee:dd:8d:e3:5a:df:13:8f:2f:61:cf:73:57:88:8c:da: 36:31:f1:fd:d8:a0:82:b1:0b:92:cd:21:fe:2b:11:0a:1e:09: 7a:b8:91:7a:cb:95:95:32:41:36:f8:29:a9:bc:91:f0:ce:88: d3:e6:8e:6b:7a:bf:bc:ff:a1:3b:eb:15:57:d0:c0:b2:e0:4f: 13:f3:68:e4:99:72:44:e5:30:f6:93:e7:a4:e6:eb:d6:dc:ce: 57:0c:95:51:2a:b8:7f:6f:01:a5:35:27:ad:b4:09:f3:2c:35: f4:eb:26:a3:6a:ff:cc:b5:fe:46:f0:0d:37:25:d6:6a:ab:ba: 00:a2:07:56:95:99:7e:10:6e:c9:1b:8c:b9:ff:e8:9b:5a:ad: ef:ed:d5:5d:d5:fe:2e:ee:50:85:f8:e3:3f:da:48:b7:c8:62: 4c:2b:88:58:da:c5:ff:02:f8:38:ea:fc:e5:ec:d8:9d:39:3a: 04:31:e3:8f:59:14:34:17:0e:51:b5:cb:4f:f7:50:31:a9:70: 68:b3:f7:b6:10:9f:85:40:e0:b4:23:eb:18:26:26:48:98:8f: ca:3d:2a:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEQUUxMTAvBgNVBAUTKDJEQkZDN0IyODYxNUIxRkY3OEQ3Q0Y0Njg4NkFGOTIx MzlGRjk2OEEwHhcNMjYxMDE5MDc1MDI5WhcNMjYxMDI2MDc1MDI5WjAYMRYwFAYD VQQDEw02YWQ1Y2JjNi04MjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqJPsrZWZk3x7aWE397sAJFO+ywSW8o+q9jqfgmYi86SFL8AUjlxGD7fSpi5 XwHvNWV51zB6CNGWwWG87tzbjDBoaQfyEO/lQsmg1Y26QF9pFruaokUa0HM8Y8MN SMf+UG3n67tWVFW5e4sLH7qCiQnkugfW4hHVO97GXazO8xO1z44Vx9/fCkeApsdv iK33trJ/E42DLt/dLhZcKVsIzlAlJxwumAmdXqIeqOF9RtfavVMK958E+hfy7lAt u3ZBKi+85r4480pVJw9UvVf1PjQj4RAP+u5NAaPVIdGqF7Y7IHTGSqgmHIPHAjd2 ufkKmo2u5qsjjtDkEaV817w52wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMUAPs9 +5vF6MUgaf/JA72yYzZRMB8GA1UdIwQYMBaAFC2/x7KGFbH/eNfPRohq+SE5/5aK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RBRS8yRkJFQTQwMkM4 NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNmOTQxODlHaUdyNUlUbl9s b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RBRS8yRkJFQTQwMkM4NDIxMUYwQTMzRTlBN0VDNEY5QUUwMi9MYl9Ic29ZVnNm OTQxODlHaUdyNUlUbl9sb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFkHiFLA9rcrpprMxi7ULgprYV4eWwvRvKee6gbaAmp4Hi34zQru3Y3jWt8T jy9hz3NXiIzaNjHx/diggrELks0h/isRCh4JeriResuVlTJBNvgpqbyR8M6I0+aO a3q/vP+hO+sVV9DAsuBPE/No5JlyROUw9pPnpObr1tzOVwyVUSq4f28BpTUnrbQJ 8yw19Osmo2r/zLX+RvANNyXWaqu6AKIHVpWZfhBuyRuMuf/om1qt7+3VXdX+Lu5Q hfjjP9pIt8hiTCuIWNrF/wL4OOr85ezYnTk6BDHjj1kUNBcOUbXLT/dQMalwaLP3 thCfhUDgtCPrGCYmSJiPyj0qOg== -----END CERTIFICATE-----Generated at Tue Oct 20 09:04:53 2026 by rpki-client