$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft File: lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json) Hash identifier: DcFxvTcq2RaMLzY0BLwxJOA0ViYti/+Bz2q4XI30EpI= Subject key identifier: 0D:25:8F:D1:FF:FC:20:CF:71:1C:6D:FE:43:CE:B6:D8:35:F1:27:82 Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4 Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4 Certificate serial: 0F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft Manifest number: 0F34 Signing time: Fri 02 Oct 2026 17:46:37 +0000 Manifest this update: Fri 02 Oct 2026 17:46:37 +0000 Manifest next update: Fri 09 Oct 2026 17:46:37 +0000 Files and hashes: 1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: j7Q8l4xWzsjSQs+PsFTr+iPrQc0GPxoZolcWdubhIM4=) 2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: ZmHOd8xk6wRXLnwUjYLjV1O4C/0XpnWVR3Qg13Vt0IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4 Validity Not Before: Oct 2 17:46:37 2026 GMT Not After : Oct 9 17:46:37 2026 GMT Subject: CN=6abfedfd-50fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:81:40:f2:5e:5e:27:94:2b:9b:83:38:89: 47:02:32:f0:a4:9d:26:ce:92:d8:0c:e5:66:31:83: e4:ae:09:52:98:36:38:09:02:a1:00:50:65:34:1d: 89:1e:b7:42:b2:99:3d:f2:ad:77:00:8f:11:5b:4b: 6e:08:23:eb:7e:c5:a5:cb:49:57:1a:c4:0a:6d:df: 64:e7:b7:0f:d8:81:85:54:77:a6:a6:fa:8d:d2:66: 0e:1a:67:83:b2:fe:aa:a8:55:c7:24:60:bf:1a:a0: df:7a:4f:10:a5:5e:c1:a1:22:83:76:9a:17:24:e6: bd:aa:a0:20:4e:3d:30:06:df:d5:86:7b:74:88:ba: 11:5d:da:ec:7a:8f:83:72:89:90:6a:e0:70:0e:7e: a1:89:24:6e:fb:b1:ca:8a:09:ab:ed:06:c7:9c:29: 27:22:4c:e9:07:3c:46:09:f8:5c:4f:4b:f6:4c:a9: d2:2d:f2:07:ec:ee:e6:99:b5:62:15:03:e9:51:36: c3:a5:15:77:a5:20:7e:62:f9:ec:b8:b9:90:b3:ee: 84:bb:e5:c1:2a:80:ac:1e:af:1b:e8:aa:e8:9b:07: 16:6d:38:2d:bc:80:b5:8b:00:71:f9:1d:7b:0b:4f: 81:7a:05:0b:93:09:14:64:e9:16:fb:32:ac:90:3e: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:8F:D1:FF:FC:20:CF:71:1C:6D:FE:43:CE:B6:D8:35:F1:27:82 X509v3 Authority Key Identifier: keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:02:1d:13:ca:39:f1:aa:4c:c2:a8:94:ce:80:0c:57:e5:6a: 12:d2:6d:e9:32:ac:3d:01:99:95:bf:d7:72:ae:25:36:3c:21: 2a:15:b6:06:8b:1c:d4:3f:7d:ab:97:ba:9f:e1:b1:fd:dd:ac: 05:49:06:49:71:5c:70:1b:73:75:ec:cf:27:1d:1f:6f:ce:52: f5:72:78:30:12:e2:89:ee:8e:f3:31:02:ba:2c:1d:2d:a8:87: ab:11:c8:4f:60:66:8b:a0:d9:3e:55:85:19:05:81:c5:52:c8: e4:f1:b2:c6:e4:c7:5a:f5:f7:fb:a0:79:62:22:ab:2f:b5:0a: cd:35:5c:76:8d:2e:7f:50:94:1b:24:34:87:ef:4e:44:56:23: 0c:e9:a8:bc:9f:bb:5e:24:00:33:bc:91:73:df:94:1f:31:e7: ef:62:ab:2f:31:1a:af:75:52:66:76:10:16:21:3d:08:6f:35: d4:64:b7:b9:23:f7:e5:01:0b:1e:9a:65:ff:5a:4a:cf:42:86: de:61:e5:16:03:68:92:e9:61:b5:26:9f:2c:7d:fe:05:66:02: fc:8e:ac:b4:f1:9d:52:ee:70:cd:cb:74:57:bf:3b:f2:97:d9: f5:8d:29:34:53:aa:9a:2b:2a:d9:1c:03:b9:20:2d:7a:01:2e: 05:c7:5e:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFMkMxMTAvBgNVBAUTKDk2OTBDNUQ2MDlGQ0U0NDJDMzVCOTkxNkQ1NjNGOUYx ODdCNjhBRDQwHhcNMjYxMDAyMTc0NjM3WhcNMjYxMDA5MTc0NjM3WjAYMRYwFAYD VQQDEw02YWJmZWRmZC01MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh+BQPJeXieUK5uDOIlHAjLwpJ0mzpLYDOVmMYPkrglSmDY4CQKhAFBlNB2J HrdCspk98q13AI8RW0tuCCPrfsWly0lXGsQKbd9k57cP2IGFVHempvqN0mYOGmeD sv6qqFXHJGC/GqDfek8QpV7BoSKDdpoXJOa9qqAgTj0wBt/Vhnt0iLoRXdrseo+D comQauBwDn6hiSRu+7HKigmr7QbHnCknIkzpBzxGCfhcT0v2TKnSLfIH7O7mmbVi FQPpUTbDpRV3pSB+YvnsuLmQs+6Eu+XBKoCsHq8b6KromwcWbTgtvIC1iwBx+R17 C0+BegULkwkUZOkW+zKskD6BwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0lj9H/ /CDPcRxt/kPOttg18SeCMB8GA1UdIwQYMBaAFJaQxdYJ/ORCw1uZFtVj+fGHtorU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEUyQy8wRkUxRUQwNkEy RkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVFTERXNWtXMVdQNThZZTJp dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwREYxZ244NUVMRFc1a1cxV1A1OFllMml0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEUyQy8wRkUxRUQwNkEyRkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVF TERXNWtXMVdQNThZZTJpdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIAIdE8o58apMwqiUzoAMV+VqEtJt6TKsPQGZlb/Xcq4lNjwhKhW2Bosc1D99 q5e6n+Gx/d2sBUkGSXFccBtzdezPJx0fb85S9XJ4MBLiie6O8zECuiwdLaiHqxHI T2Bmi6DZPlWFGQWBxVLI5PGyxuTHWvX3+6B5YiKrL7UKzTVcdo0uf1CUGyQ0h+9O RFYjDOmovJ+7XiQAM7yRc9+UHzHn72KrLzEar3VSZnYQFiE9CG811GS3uSP35QEL Hppl/1pKz0KG3mHlFgNokulhtSafLH3+BWYC/I6stPGdUu5wzct0V7878pfZ9Y0p NFOqmisq2RwDuSAtegEuBcdeeA== -----END CERTIFICATE-----Generated at Sun Oct 4 17:38:46 2026 by rpki-client