$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft File: lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json) Hash identifier: gs9NAzvmy6/epUgI79MjeqavZur8v3x9maED4WD5bWs= Subject key identifier: 7C:ED:B7:CA:C5:73:49:FB:DE:06:58:74:8B:E1:66:A3:27:5D:B3:71 Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft Manifest number: 04C8 Signing time: Fri 04 Sep 2026 23:35:40 +0000 Manifest this update: Fri 04 Sep 2026 23:35:39 +0000 Manifest next update: Fri 11 Sep 2026 23:35:39 +0000 Files and hashes: 1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: lG6L8zVfb5vKNZckbt7CAWse7zNswjZLfBke6Q0OYRg=) 2: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: 1pV5x+wzFKlIURLdK4W0ATECc1pPeoL8XQh/coLs8yw=) 3: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 89nb39WeO+2Ub6Nf3O9bYYBJxsIA87zSaSarp1B+j1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Validity Not Before: Sep 4 23:35:39 2026 GMT Not After : Sep 11 23:35:39 2026 GMT Subject: CN=6a9b55cc-16f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:1f:f9:19:70:ba:20:2c:82:bc:88:fe:6c: 4c:03:0c:f0:0d:c8:ac:3c:fb:91:65:75:d5:69:5e: 53:6c:ec:69:fa:94:d2:f0:e3:97:50:7d:6d:86:59: 94:68:b4:1f:d6:62:7e:ad:1a:b9:a1:21:ac:45:02: 3f:5a:6f:b7:3f:c0:03:6f:1a:5d:36:97:2e:fd:1e: 25:3d:16:21:e0:c0:95:f7:cf:ef:ee:af:fb:db:2f: 33:19:45:ac:f1:1f:9c:c6:42:41:f3:7d:f0:f9:2b: f5:14:67:2d:c5:c8:a1:74:48:a5:60:5f:1e:df:43: 8f:5e:86:20:1c:bd:cf:18:00:45:b0:72:45:14:0d: 5c:2b:23:ad:bd:3e:ac:4e:06:b3:54:19:38:f7:0b: 72:d2:e6:57:ae:0c:37:b5:cb:e3:30:b1:0b:63:e4: b7:7f:c5:8a:97:36:26:4c:b0:02:d8:06:a0:bc:5d: c0:ee:1b:76:61:c0:e5:b0:18:37:2d:ec:0a:d8:5c: 9d:51:48:a3:93:54:c7:3e:c2:94:ee:bb:90:86:1c: 0e:55:35:ab:93:8b:da:aa:7c:27:15:84:7e:0f:85: 84:bc:ec:f7:24:47:60:09:87:31:87:f8:fa:13:e3: 01:87:a2:fd:fb:ce:05:3b:8f:85:d6:51:ee:da:5c: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:ED:B7:CA:C5:73:49:FB:DE:06:58:74:8B:E1:66:A3:27:5D:B3:71 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dc:12:46:b3:4d:03:33:4a:d9:83:e8:6c:c8:31:bc:44:2b: 8b:ec:b5:d3:e9:4c:ba:ee:f8:5a:ea:49:ca:f0:b4:40:18:19: 4a:97:ed:1f:95:68:20:3f:9a:24:12:4a:a9:9c:a7:d6:ca:b9: fa:23:87:17:a3:a2:8e:37:07:31:91:e3:34:81:bf:3a:7b:1c: c8:d9:84:83:6e:02:ca:e7:85:eb:a3:07:1b:b5:8f:2c:dc:26: 72:b0:37:5b:f7:31:1f:b3:f1:a7:c4:d6:61:b2:cd:c5:e1:a8: bc:f0:b5:a9:39:6d:b0:77:53:b3:b9:57:30:15:e1:95:af:c1: b9:bf:b4:07:03:53:03:9a:66:d7:80:63:26:ce:67:24:76:99: 2e:06:38:1d:d3:ac:fc:cf:d1:73:c2:38:3b:36:4c:cd:4a:bb: 08:d3:76:fc:6e:29:46:14:95:38:73:6b:bf:80:e9:86:a9:fa: d9:cb:a6:ab:a8:61:73:3a:e1:7f:0e:e3:31:14:26:96:08:d1: 0b:d6:5b:21:22:70:79:d8:ac:96:15:2f:47:ff:09:bf:40:8c: 73:c3:9e:4a:9e:07:7c:66:5f:11:ae:ad:25:35:89:54:b6:8f: f9:51:a1:43:28:76:3c:4c:0e:e2:b2:88:6b:61:80:16:dd:a6: d3:9d:dc:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjYwOTA0MjMzNTM5WhcNMjYwOTExMjMzNTM5WjAYMRYwFAYD VQQDEw02YTliNTVjYy0xNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR0f+RlwuiAsgryI/mxMAwzwDcisPPuRZXXVaV5TbOxp+pTS8OOXUH1thlmU aLQf1mJ+rRq5oSGsRQI/Wm+3P8ADbxpdNpcu/R4lPRYh4MCV98/v7q/72y8zGUWs 8R+cxkJB833w+Sv1FGctxcihdEilYF8e30OPXoYgHL3PGABFsHJFFA1cKyOtvT6s TgazVBk49wty0uZXrgw3tcvjMLELY+S3f8WKlzYmTLAC2AagvF3A7ht2YcDlsBg3 LewK2FydUUijk1THPsKU7ruQhhwOVTWrk4vaqnwnFYR+D4WEvOz3JEdgCYcxh/j6 E+MBh6L9+84FO4+F1lHu2lx76QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHztt8rF c0n73gZYdIvhZqMnXbNxMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkMzMC8xMTJBRjFBQzg1QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpa R3VwVkpybzJhS0VlU2V5NU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9wSRrNNAzNK2YPobMgxvEQri+y10+lMuu74WupJyvC0QBgZSpftH5VoID+a JBJKqZyn1sq5+iOHF6OijjcHMZHjNIG/OnscyNmEg24CyueF66MHG7WPLNwmcrA3 W/cxH7Pxp8TWYbLNxeGovPC1qTltsHdTs7lXMBXhla/Bub+0BwNTA5pm14BjJs5n JHaZLgY4HdOs/M/Rc8I4OzZMzUq7CNN2/G4pRhSVOHNrv4Dphqn62cumq6hhczrh fw7jMRQmlgjRC9ZbISJwedislhUvR/8Jv0CMc8OeSp4HfGZfEa6tJTWJVLaP+VGh Qyh2PEwO4rKIa2GAFt2m053cSw== -----END CERTIFICATE-----Generated at Sat Sep 5 02:33:27 2026 by rpki-client