$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json) Hash identifier: 6Fu8eN3Y4fxqItWNUJYGPZ202f52RMHNPEAWgA+6XNU= Subject key identifier: E8:70:7C:19:87:C1:5D:BB:C1:5F:C9:41:6A:E4:EE:48:91:8F:BA:06 Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft Manifest number: 04E2 Signing time: Mon 26 Oct 2026 23:38:50 +0000 Manifest this update: Mon 26 Oct 2026 23:38:50 +0000 Manifest next update: Mon 02 Nov 2026 23:38:50 +0000 Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: m+DUBzj7Hf7nja+SjQdCQFXzLt7ow0u28paoUHCwMFs=) 2: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: 1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=) 3: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Validity Not Before: Oct 26 23:38:50 2026 GMT Not After : Nov 2 23:38:50 2026 GMT Subject: CN=6adfe48a-510a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:3c:f6:84:40:c1:c4:20:04:ff:2a:8c:a0: ba:d1:dc:15:ac:85:7d:53:a4:fd:62:92:21:42:09: e0:dc:91:7f:4b:68:a7:37:c3:18:8b:9a:1b:a7:e5: d6:aa:bc:07:e3:19:06:27:a8:0c:9d:88:27:62:ff: 38:2f:32:ee:37:5b:0d:a0:37:d6:bf:fa:7a:db:e8: 8a:46:ec:dc:77:80:bc:43:9a:4a:be:a2:5b:55:95: 00:ff:87:ac:51:bc:d3:76:4d:f3:89:29:fa:64:ea: cc:16:10:d9:7a:a1:94:8d:6b:c2:b9:2f:e2:00:4b: 6d:8d:c3:eb:5c:47:2f:47:19:6b:08:f7:9d:cc:08: 9a:3b:28:b5:34:70:1d:72:a2:b9:e2:a6:d2:12:f9: 9b:59:60:be:50:40:62:45:70:96:9b:bf:29:6a:66: 17:b2:01:8e:85:1d:b3:e5:19:4b:b2:92:b6:54:2f: 6c:55:a7:34:8d:f8:74:11:db:43:29:94:d2:65:e6: 3d:c9:36:37:45:b7:f1:d5:76:0f:7b:3a:91:90:bc: bf:20:2f:5b:62:56:c2:d3:13:d3:67:32:9f:e6:bd: a0:84:a5:64:ce:eb:46:a1:ef:75:de:06:dd:c1:71: ad:24:c6:af:38:69:ac:84:b2:71:01:f7:58:6d:6d: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:7C:19:87:C1:5D:BB:C1:5F:C9:41:6A:E4:EE:48:91:8F:BA:06 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e1:46:a3:d7:cb:2e:5a:b7:fe:ce:02:6d:35:d3:77:dd:34: 21:34:75:c7:76:6a:22:76:48:1e:54:d3:ef:35:16:45:a6:6b: 8f:8b:fd:57:b7:d4:2d:e9:9a:59:a6:fe:21:2c:8b:af:3f:10: 73:1d:ea:b7:d3:b2:6e:ef:e4:81:7b:35:d6:e0:7b:ca:a7:93: ec:90:cb:99:76:fb:2c:8e:b7:b9:e2:90:25:71:13:78:40:26: 06:7b:f4:bc:cc:ae:7e:cc:21:72:f7:b4:59:bb:e0:34:9d:75: b3:9a:3c:de:62:e4:cf:6e:fd:a1:6b:7a:44:a4:a1:90:6d:fb: 16:9a:a4:31:ba:cb:9e:bb:46:5d:2a:75:dd:10:31:cc:2b:c4: f1:b5:87:98:2c:85:78:f9:1f:ba:54:17:10:ed:a3:f3:68:38: 82:6a:12:2d:2f:0f:80:33:c7:a8:6d:82:9a:71:e5:5b:67:ac: 6e:01:e9:ed:d1:5d:42:3c:7c:86:5b:ec:ed:c4:c3:54:4d:b3: 14:90:7c:45:51:fe:1e:38:9a:39:ba:1e:f8:2d:99:d1:df:21: c8:08:c8:91:24:fa:6c:50:a5:c5:c1:f1:fa:93:0a:51:0b:cd: 5a:ac:87:4c:51:89:9a:15:e3:78:a1:1f:33:41:3d:7b:cb:4f: 3f:d1:5a:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjYxMDI2MjMzODUwWhcNMjYxMTAyMjMzODUwWjAYMRYwFAYD VQQDEw02YWRmZTQ4YS01MTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGI89oRAwcQgBP8qjKC60dwVrIV9U6T9YpIhQgng3JF/S2inN8MYi5obp+XW qrwH4xkGJ6gMnYgnYv84LzLuN1sNoDfWv/p62+iKRuzcd4C8Q5pKvqJbVZUA/4es UbzTdk3ziSn6ZOrMFhDZeqGUjWvCuS/iAEttjcPrXEcvRxlrCPedzAiaOyi1NHAd cqK54qbSEvmbWWC+UEBiRXCWm78pamYXsgGOhR2z5RlLspK2VC9sVac0jfh0EdtD KZTSZeY9yTY3Rbfx1XYPezqRkLy/IC9bYlbC0xPTZzKf5r2ghKVkzutGoe913gbd wXGtJMavOGmshLJxAfdYbW0e2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhwfBmH wV27wV/JQWrk7kiRj7oGMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkMzMC8xMTJBRjFBQzg1QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpa R3VwVkpybzJhS0VlU2V5NU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+FGo9fLLlq3/s4CbTXTd900ITR1x3ZqInZIHlTT7zUWRaZrj4v9V7fULema Wab+ISyLrz8Qcx3qt9Oybu/kgXs11uB7yqeT7JDLmXb7LI63ueKQJXETeEAmBnv0 vMyufswhcve0WbvgNJ11s5o83mLkz279oWt6RKShkG37FpqkMbrLnrtGXSp13RAx zCvE8bWHmCyFePkfulQXEO2j82g4gmoSLS8PgDPHqG2CmnHlW2esbgHp7dFdQjx8 hlvs7cTDVE2zFJB8RVH+HjiaOboe+C2Z0d8hyAjIkST6bFClxcHx+pMKUQvNWqyH TFGJmhXjeKEfM0E9e8tPP9Faow== -----END CERTIFICATE-----Generated at Tue Oct 27 16:22:10 2026 by rpki-client