$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: eBjmoxvCwdQM1LK3P6f52QIbR+MgLiE0WrnkzztPiF0= Subject key identifier: 5E:D8:1A:51:11:E8:55:29:AB:5F:B7:88:51:CC:C6:95:12:78:C2:CD Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 018A Signing time: Fri 11 Sep 2026 04:39:08 +0000 Manifest this update: Fri 11 Sep 2026 04:39:07 +0000 Manifest next update: Fri 18 Sep 2026 04:39:07 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: ryJMkgnAazcNCq7k9aqDrER3F2yZYJyvxrR61Y2oZ7c=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=) 4: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Sep 11 04:39:07 2026 GMT Not After : Sep 18 04:39:07 2026 GMT Subject: CN=6aa385ec-8455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:d8:d0:e6:34:b4:ca:cc:df:f3:fc:b0:e5: 19:9c:f4:46:b9:55:56:2b:ef:29:11:f0:a7:f5:be: 48:7c:66:c5:8b:48:80:db:01:56:10:d9:59:de:de: 1e:40:87:3b:6f:7b:fa:44:3c:5d:01:f1:c0:26:2b: b3:71:82:c6:d3:11:d2:8b:c3:67:91:8c:ee:78:e0: 87:3c:d7:73:66:d1:a4:da:d7:ad:ed:40:b5:c8:4c: 7a:93:e7:e2:ae:fd:55:29:38:67:ff:7a:0d:b9:ff: 8d:1a:a7:64:6e:a1:2e:0b:c4:c2:c9:37:35:36:60: 50:5d:b6:6f:37:74:2c:f4:25:58:44:f4:ee:26:7b: 93:09:58:ab:ee:e9:ce:9a:8e:64:d8:14:0b:c3:47: dc:8c:f2:e9:e1:17:f0:31:00:4e:48:9e:3c:f8:1d: 32:1f:bc:6d:cf:25:6d:1b:79:42:3e:c1:6b:2a:f0: 79:78:95:4a:f0:37:41:49:f5:9d:5c:61:06:a4:73: aa:53:76:c4:86:d1:0a:80:2d:09:4a:e4:fa:4c:af: f7:fc:b3:b4:ab:73:11:53:1f:e5:97:06:fd:e3:24: 12:1b:c3:fa:96:a3:64:fe:59:a9:da:4c:5c:8f:a5: 96:39:ee:e3:ef:02:81:d6:b7:52:ba:d6:f6:cc:48: 34:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:1A:51:11:E8:55:29:AB:5F:B7:88:51:CC:C6:95:12:78:C2:CD X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:6e:8a:4a:f0:e5:f8:c3:56:11:b6:be:07:db:67:c4:18:e6: 91:78:78:34:ed:24:e4:f7:d0:b4:c9:db:c0:81:56:9b:45:1d: a7:7a:fc:ed:21:e8:fa:94:2b:9d:30:47:71:8b:14:27:6d:44: 29:ab:e3:d7:3c:2d:8a:61:00:b9:49:4b:30:d0:01:a5:77:81: 77:77:76:8a:71:8e:4f:40:73:af:1c:e8:16:d5:20:68:f8:cf: c4:50:15:85:17:d5:54:40:e9:83:34:c7:9b:0d:df:86:68:96: 05:c3:2a:e5:73:b8:6c:1d:c2:4b:63:87:90:f7:68:87:b7:80: 75:21:ab:0e:44:86:d3:f9:a9:8c:69:0b:89:c9:ed:73:e7:9f: 4f:b0:e3:d8:dd:d3:4e:51:1b:b3:d7:94:d3:02:ba:7d:df:7f: 11:17:37:2d:95:2f:88:60:a7:1d:ac:64:b4:7d:f4:e8:82:81: 93:95:1a:1b:fe:f1:2b:8f:20:67:62:3d:e8:b6:c0:0a:e3:71: 74:b9:79:30:bb:45:4e:3c:5a:19:69:14:14:93:15:37:df:d0: d1:97:d1:8e:9d:24:a4:03:a3:22:2b:8f:77:fd:86:a8:e1:e5: 53:ef:ff:6a:7d:7d:4e:12:ef:a6:e6:0b:2c:b9:67:c5:ca:c4: f0:23:de:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjYwOTExMDQzOTA3WhcNMjYwOTE4MDQzOTA3WjAYMRYwFAYD VQQDEw02YWEzODVlYy04NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XLY0OY0tMrM3/P8sOUZnPRGuVVWK+8pEfCn9b5IfGbFi0iA2wFWENlZ3t4e QIc7b3v6RDxdAfHAJiuzcYLG0xHSi8NnkYzueOCHPNdzZtGk2tet7UC1yEx6k+fi rv1VKThn/3oNuf+NGqdkbqEuC8TCyTc1NmBQXbZvN3Qs9CVYRPTuJnuTCVir7unO mo5k2BQLw0fcjPLp4RfwMQBOSJ48+B0yH7xtzyVtG3lCPsFrKvB5eJVK8DdBSfWd XGEGpHOqU3bEhtEKgC0JSuT6TK/3/LO0q3MRUx/llwb94yQSG8P6lqNk/lmp2kxc j6WWOe7j7wKB1rdSutb2zEg0dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7YGlER 6FUpq1+3iFHMxpUSeMLNMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwW6KSvDl+MNWEba+B9tnxBjmkXh4NO0k5PfQtMnbwIFWm0Udp3r87SHo+pQr nTBHcYsUJ21EKavj1zwtimEAuUlLMNABpXeBd3d2inGOT0BzrxzoFtUgaPjPxFAV hRfVVEDpgzTHmw3fhmiWBcMq5XO4bB3CS2OHkPdoh7eAdSGrDkSG0/mpjGkLicnt c+efT7Dj2N3TTlEbs9eU0wK6fd9/ERc3LZUviGCnHaxktH306IKBk5UaG/7xK48g Z2I96LbACuNxdLl5MLtFTjxaGWkUFJMVN9/Q0ZfRjp0kpAOjIiuPd/2GqOHlU+// an19ThLvpuYLLLlnxcrE8CPeOw== -----END CERTIFICATE-----Generated at Fri Sep 11 12:30:21 2026 by rpki-client