$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: MYUZ6jV5Uck0orIehKzf9uCbvAbZi9xmVAkOnYE+1hs= Subject key identifier: 8C:5C:75:7E:6C:3A:78:57:1F:54:08:31:09:17:A5:36:47:16:76:F0 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 0182 Signing time: Thu 03 Sep 2026 04:52:11 +0000 Manifest this update: Thu 03 Sep 2026 04:52:11 +0000 Manifest next update: Thu 10 Sep 2026 04:52:11 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: qfDZaUR6b8ePWKddoYpFHQP6IxBQLqCsfFZGyk/oHMw=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: /fpFKtFcwh7KjBndTGfGIO4WW4Bx9KlPmCwqANIq6FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 04:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Sep 3 04:52:11 2026 GMT Not After : Sep 10 04:52:11 2026 GMT Subject: CN=6a98fcfb-6958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:21:2f:54:ca:cd:d4:c1:91:00:14:06:df:52: 63:0b:ce:e8:d5:dc:97:ff:55:34:4a:6f:03:99:43: c2:5a:b6:8c:2e:ba:65:a3:d1:a0:ee:1d:a0:22:d3: 05:fd:0c:cc:d4:9d:55:f8:58:3f:ec:53:4f:17:81: 77:ff:0a:b4:eb:8a:fb:1c:7e:86:1e:17:7d:9d:50: aa:c1:ff:13:5a:77:7b:04:f3:2e:06:16:63:fb:10: db:df:3a:8f:b4:6d:a3:19:b4:c8:30:cd:c6:5a:a6: 2b:98:39:60:f2:52:ed:e6:b3:be:f4:a2:4d:d8:61: b7:44:a0:4c:3d:2d:8d:46:86:ab:d3:1b:f6:6d:4d: c9:2e:ee:82:62:36:0f:7b:94:79:74:fe:57:f9:fc: c3:ff:a9:81:c0:7e:60:f5:6b:5c:90:39:79:ba:81: 4b:0c:ca:26:50:d8:b7:5e:c8:57:a0:b4:e0:33:f8: 8c:49:fc:a8:0d:61:75:33:03:9e:5b:0b:e4:74:ea: cc:65:52:9a:7e:da:d8:91:f6:8b:01:a0:9a:74:a3: 1f:3f:43:a1:fc:89:ee:da:0b:bc:a4:27:f7:63:75: 34:5d:e0:82:e1:c1:a5:78:f4:aa:2e:46:44:d4:f9: 64:c0:50:e3:f0:17:42:40:27:81:2b:70:d2:2d:e7: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5C:75:7E:6C:3A:78:57:1F:54:08:31:09:17:A5:36:47:16:76:F0 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4c:2a:45:8e:2e:c1:56:ab:68:a5:5f:9d:7d:32:ad:30:c1: 33:f4:12:31:79:b2:11:a5:d9:57:f8:e8:f0:a9:8d:6c:43:78: ea:00:00:7c:e2:7b:7d:33:58:5c:2d:bd:35:47:ab:fb:f5:61: a8:68:f6:c3:46:39:44:18:bd:fd:67:07:a6:b2:24:a8:2e:7d: eb:d4:d2:59:4b:47:b6:87:aa:31:4b:f5:7d:8d:b5:14:67:6e: f7:43:ae:c6:c5:9f:13:d1:97:98:7c:6d:1f:ed:2d:a5:6b:18: 8d:76:39:a9:a8:f8:c8:cc:5f:19:9c:63:77:87:1a:46:43:4b: 82:13:8d:4e:66:b9:d5:20:1d:8f:f4:59:8d:26:7b:81:54:3d: 9a:18:cf:79:38:05:b7:ad:b2:37:6c:a2:96:c1:8e:80:74:00: c7:fd:84:3a:b9:2a:36:34:b3:66:4c:35:52:74:13:4d:74:b2: 65:5a:d1:e7:73:0d:41:1e:14:29:fd:a1:67:57:11:5d:1f:76: e0:90:d3:80:6f:9b:1a:5a:48:3a:37:33:7a:2f:12:d6:39:f0: 0e:34:ae:9d:fa:80:4f:42:e0:57:0b:52:85:ea:a5:d4:57:71: 8a:40:7b:5c:3d:35:a1:99:c7:0c:98:f5:b3:cf:78:bb:84:90: 10:0d:7e:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjYwOTAzMDQ1MjExWhcNMjYwOTEwMDQ1MjExWjAYMRYwFAYD VQQDEw02YTk4ZmNmYi02OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/CEvVMrN1MGRABQG31JjC87o1dyX/1U0Sm8DmUPCWraMLrplo9Gg7h2gItMF /QzM1J1V+Fg/7FNPF4F3/wq064r7HH6GHhd9nVCqwf8TWnd7BPMuBhZj+xDb3zqP tG2jGbTIMM3GWqYrmDlg8lLt5rO+9KJN2GG3RKBMPS2NRoar0xv2bU3JLu6CYjYP e5R5dP5X+fzD/6mBwH5g9WtckDl5uoFLDMomUNi3XshXoLTgM/iMSfyoDWF1MwOe WwvkdOrMZVKaftrYkfaLAaCadKMfP0Oh/Inu2gu8pCf3Y3U0XeCC4cGlePSqLkZE 1PlkwFDj8BdCQCeBK3DSLee2/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxcdX5s OnhXH1QIMQkXpTZHFnbwMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL0wqRY4uwVaraKVfnX0yrTDBM/QSMXmyEaXZV/jo8KmNbEN46gAAfOJ7fTNY XC29NUer+/VhqGj2w0Y5RBi9/WcHprIkqC5969TSWUtHtoeqMUv1fY21FGdu90Ou xsWfE9GXmHxtH+0tpWsYjXY5qaj4yMxfGZxjd4caRkNLghONTma51SAdj/RZjSZ7 gVQ9mhjPeTgFt62yN2yilsGOgHQAx/2EOrkqNjSzZkw1UnQTTXSyZVrR53MNQR4U Kf2hZ1cRXR924JDTgG+bGlpIOjczei8S1jnwDjSunfqAT0LgVwtSheql1FdxikB7 XD01oZnHDJj1s894u4SQEA1+lQ== -----END CERTIFICATE-----Generated at Fri Sep 4 23:07:07 2026 by rpki-client