$ rpki-client -vvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft File: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft (raw, json) Hash identifier: 3tgQg4eLH7u6lC2oktQjEO74c2zve8Aj1x5n+eFpjZo= Subject key identifier: 33:12:21:2D:FE:28:97:A9:95:C1:C9:38:34:CC:F6:5C:67:30:95:3C Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft Manifest number: 72 Signing time: Wed 19 Aug 2026 08:40:29 +0000 Manifest this update: Wed 19 Aug 2026 08:40:29 +0000 Manifest next update: Wed 26 Aug 2026 08:40:29 +0000 Files and hashes: 1: lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl (hash: j7RgOT/ISB8ZBDTZhzXteQ6oASXEAwiv5alFNFHSwBU=) 2: 0452EB4853FC11F1A50C3A68CD833773.roa (hash: Dwbq6wOkLhWt6mifV43tjYsX+dptJ/PFCJBmbhW6+7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Validity Not Before: Aug 19 08:40:29 2026 GMT Not After : Aug 26 08:40:29 2026 GMT Subject: CN=6a856bfd-1880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:2c:4b:e4:60:d3:84:c7:83:d5:41:f4:7a: a0:9c:19:86:1f:3e:8c:07:fa:bd:64:51:ba:4c:a1: 9f:26:60:05:e3:38:f1:19:21:28:f2:65:b1:74:1c: 94:27:fa:45:fe:0e:38:41:ce:ef:aa:28:e4:e9:f3: fe:2e:56:52:cf:0a:0a:e7:b1:b1:5e:2f:07:16:ac: a6:66:39:9d:5c:59:41:db:6c:cb:12:e1:af:39:6d: 9a:a6:07:93:02:28:13:be:e6:47:f4:32:a0:c6:5e: f3:1f:9f:4a:75:62:79:4d:a8:1d:3e:30:3f:b2:1d: 20:6f:4e:c4:ef:19:5f:13:8c:21:b5:33:62:be:1b: ef:60:bd:d4:f5:0b:01:4e:79:25:13:9e:33:90:7f: a4:26:86:20:8a:08:93:d1:95:4b:07:e0:27:35:9e: 97:b4:a0:22:6a:34:7e:3d:b1:ad:cb:de:45:6e:e8: 91:3a:dc:3a:28:f3:20:a9:2c:c7:c2:80:3d:cc:2c: e4:58:0f:3d:94:7f:78:9e:83:17:7f:50:bd:da:cf: fd:a7:9c:53:74:ac:d7:1d:4e:76:1c:4c:23:47:ed: ca:22:16:65:1b:25:f3:91:e5:01:84:e7:26:d9:38: bc:79:51:e7:b0:da:f1:20:ca:13:12:66:53:f0:64: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:21:2D:FE:28:97:A9:95:C1:C9:38:34:CC:F6:5C:67:30:95:3C X509v3 Authority Key Identifier: keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:66:bd:26:ad:59:6a:b0:2b:a5:57:fc:9e:b0:31:3e:49:c9: e5:4b:cb:ea:80:7a:9d:7e:6d:9d:86:a7:ff:56:7d:b6:3c:8c: 53:f9:75:52:f8:88:48:b9:f2:27:b7:f6:45:65:84:05:7e:8a: 0e:78:1c:d2:80:32:80:da:4d:69:5f:b4:c8:05:d1:6b:7d:d4: f2:cb:31:08:6a:7b:71:54:62:d7:e8:b4:36:2a:c0:1b:3e:03: a0:9c:84:03:20:92:70:35:31:55:e8:d5:01:ec:44:22:71:0a: f8:c0:4c:5c:64:89:05:e6:3f:d7:6d:33:c8:58:c6:e2:03:cf: 6b:f9:33:70:a6:4a:81:c2:05:24:8f:ec:69:5c:5a:28:a5:44: 40:29:04:fb:dd:4a:9a:3a:10:b3:de:cb:03:cb:27:d6:28:df: de:08:f9:04:46:85:07:1b:fd:05:55:07:84:9a:a0:e1:d2:11: 69:f5:75:e7:06:39:bb:09:a5:4e:22:66:25:1e:f8:17:1e:cd: ab:d4:0e:58:c8:62:f9:be:38:27:bd:99:3b:ca:a3:b7:2a:ee: 06:58:db:2a:cc:49:1b:c0:d0:45:f2:72:1f:94:56:d6:81:7b: af:76:d1:f0:47:0c:d9:a5:9b:1f:a1:a2:dd:f7:22:c2:57:04: c0:fc:ea:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDI3RjExMC8GA1UEBRMoOTU2MEJDQTlBQjZDNjhCRDkwOUYzMDRDNUIyMkJBNjM2 MzlDRjAxQzAeFw0yNjA4MTkwODQwMjlaFw0yNjA4MjYwODQwMjlaMBgxFjAUBgNV BAMTDTZhODU2YmZkLTE4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZXixL5GDThMeD1UH0eqCcGYYfPowH+r1kUbpMoZ8mYAXjOPEZISjyZbF0HJQn +kX+DjhBzu+qKOTp8/4uVlLPCgrnsbFeLwcWrKZmOZ1cWUHbbMsS4a85bZqmB5MC KBO+5kf0MqDGXvMfn0p1YnlNqB0+MD+yHSBvTsTvGV8TjCG1M2K+G+9gvdT1CwFO eSUTnjOQf6QmhiCKCJPRlUsH4Cc1npe0oCJqNH49sa3L3kVu6JE63Doo8yCpLMfC gD3MLORYDz2Uf3iegxd/UL3az/2nnFN0rNcdTnYcTCNH7coiFmUbJfOR5QGE5ybZ OLx5Ueew2vEgyhMSZlPwZIdTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMxIhLf4o l6mVwck4NMz2XGcwlTwwHwYDVR0jBBgwFoAUlWC8qatsaL2QnzBMWyK6Y2Oc8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjdGLzNCQkRBQ0UyRkMw NjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwyUW56Qk1XeUs2WTJPYzhC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFdDOHFhdHNhTDJRbnpCTVd5SzZZMk9jOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MjdGLzNCQkRBQ0UyRkMwNjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwy UW56Qk1XeUs2WTJPYzhCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvZr0mrVlqsCulV/yesDE+ScnlS8vqgHqdfm2dhqf/Vn22PIxT+XVS+IhIufIn t/ZFZYQFfooOeBzSgDKA2k1pX7TIBdFrfdTyyzEIantxVGLX6LQ2KsAbPgOgnIQD IJJwNTFV6NUB7EQicQr4wExcZIkF5j/XbTPIWMbiA89r+TNwpkqBwgUkj+xpXFoo pURAKQT73UqaOhCz3ssDyyfWKN/eCPkERoUHG/0FVQeEmqDh0hFp9XXnBjm7CaVO ImYlHvgXHs2r1A5YyGL5vjgnvZk7yqO3Ku4GWNsqzEkbwNBF8nIflFbWgXuvdtHw RwzZpZsfoaLd9yLCVwTA/OpI -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:53 2026 by rpki-client