$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: lg0Te3lzwvT4zvbJUmZte6fWeUXDXv2bycDQbskU+2o= Subject key identifier: F3:11:0F:35:AE:66:34:7A:C8:FF:20:6A:34:EF:94:EF:E5:1D:88:7B Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: D3 Signing time: Thu 03 Sep 2026 06:57:15 +0000 Manifest this update: Thu 03 Sep 2026 06:57:15 +0000 Manifest next update: Thu 10 Sep 2026 06:57:15 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: mLyZeSaNkO7yF7Jpvv2q3IOVMLz256JY96f8qJ9qH4U=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: Aiqr1BZcTds3P/iXTe2jF+OrDs76X3Zs65sOq3vVPbg=) 3: AFD8C9F0A4E311F18DF958E06811F970.roa (hash: Lrk9LTcg/bv+vbM0honqqAUz9KhJdQc3X7h5xz+fH0E=) 4: vm-m4NmypyOFpQCYpZK4hhgAvvg.asa (hash: DOI9hPKC1i4e0v5+qepnp8+dbckDpzsHh7vM8oGqjpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Sep 3 06:57:15 2026 GMT Not After : Sep 10 06:57:15 2026 GMT Subject: CN=6a991a4b-0b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:5c:1b:32:ed:6e:6c:05:9d:ea:e1:fe:41: 42:9a:68:f8:48:37:57:2b:c4:94:33:26:ae:6b:10: 5b:6d:2f:ad:02:82:3c:8b:56:03:9b:fe:bf:66:e0: 4c:dc:5c:44:79:8d:8c:1c:c8:35:66:80:17:c3:87: fc:cc:1c:e2:eb:54:89:3a:59:9b:f6:57:61:12:b4: 5b:07:6f:f4:04:0b:db:dd:47:73:76:1f:09:71:fc: b1:84:01:fc:e8:9c:9b:a0:07:f5:b5:cf:b0:b0:e9: 66:60:93:79:8f:64:3f:ac:fd:f1:31:41:9d:f8:af: 26:2e:61:ed:31:bd:ed:38:64:4f:68:1f:23:f3:4f: d9:26:7d:1d:81:d9:15:0c:40:67:f8:3b:f4:23:f4: 67:82:9a:f9:b6:f0:cc:2f:d6:33:7c:09:99:0f:8b: e7:04:34:8c:ac:72:24:e6:91:58:0c:ee:ac:12:5b: 0f:b2:e8:f3:b1:8a:9f:78:73:9f:50:3a:8f:e0:b9: cb:ed:40:6c:d4:7c:2c:60:42:7d:f4:69:6f:df:8b: 3e:5d:6d:2e:a0:cf:a3:44:8c:28:15:bf:b0:e5:09: ae:d1:fb:a4:51:9e:12:c2:23:70:d8:f5:cc:1e:6f: 6b:6d:a4:0b:a6:e7:d8:17:93:89:6a:95:84:02:bf: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:11:0F:35:AE:66:34:7A:C8:FF:20:6A:34:EF:94:EF:E5:1D:88:7B X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5c:77:99:41:4a:3b:c6:8d:30:ee:db:ec:44:e6:e3:cb:33: 67:f2:33:52:f0:6b:5b:14:ee:ed:10:f4:9a:5e:ab:33:6f:bb: 2e:c8:1e:fb:9b:98:10:1d:c1:76:48:6b:d8:ba:46:6f:de:8c: b4:1a:31:5e:9f:52:96:e6:0b:36:c7:01:0b:d1:34:df:be:10: 80:22:3f:df:6b:7c:5d:d7:82:a4:ef:e4:7e:81:47:48:07:5e: 09:d6:c8:43:1e:ce:67:6e:17:81:da:05:b1:58:d5:90:6e:4d: f4:bb:6c:00:79:e0:33:6f:74:84:74:af:08:e6:c8:bd:09:4e: 90:2d:e1:fa:37:c8:77:13:e1:a8:71:62:96:28:04:73:55:43: 47:8e:a0:c2:86:b1:84:ca:59:86:84:70:a5:42:36:a8:fe:7f: bf:9c:d5:ad:cc:49:1a:8f:f8:30:64:22:13:ef:e2:37:4e:ed: 84:92:88:8c:40:f0:6b:a0:c0:9e:e4:dc:a3:c0:47:54:3a:b7: 27:78:d7:3c:22:8c:57:f0:4c:14:53:d9:f5:1a:b6:0e:33:43: ee:e4:16:1e:5e:7d:fa:d1:34:af:7d:ff:50:5a:b4:c1:bd:1e: 3f:e8:a9:c0:bb:0f:9b:81:3a:96:68:0f:ea:e9:79:77:1b:ed: 68:0a:24:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0MzIxMTAvBgNVBAUTKDk2RkMzRDFGODc5NUJFRTlFQUExRUI5NUQyOUE1OUM4 QTQwMjczRDMwHhcNMjYwOTAzMDY1NzE1WhcNMjYwOTEwMDY1NzE1WjAYMRYwFAYD VQQDEw02YTk5MWE0Yi0wYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kZcGzLtbmwFnerh/kFCmmj4SDdXK8SUMyauaxBbbS+tAoI8i1YDm/6/ZuBM 3FxEeY2MHMg1ZoAXw4f8zBzi61SJOlmb9ldhErRbB2/0BAvb3Udzdh8JcfyxhAH8 6JyboAf1tc+wsOlmYJN5j2Q/rP3xMUGd+K8mLmHtMb3tOGRPaB8j80/ZJn0dgdkV DEBn+Dv0I/Rngpr5tvDML9YzfAmZD4vnBDSMrHIk5pFYDO6sElsPsujzsYqfeHOf UDqP4LnL7UBs1HwsYEJ99Glv34s+XW0uoM+jRIwoFb+w5Qmu0fukUZ4SwiNw2PXM Hm9rbaQLpufYF5OJapWEAr84uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMRDzWu ZjR6yP8gajTvlO/lHYh7MB8GA1UdIwQYMBaAFJb8PR+Hlb7p6qHrldKaWcikAnPT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQzMi9GQjY4NUIxRTZD NTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1bnFvZXVWMHBwWnlLUUNj OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQzMi9GQjY4NUIxRTZDNTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1 bnFvZXVWMHBwWnlLUUNjOU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbVx3mUFKO8aNMO7b7ETm48szZ/IzUvBrWxTu7RD0ml6rM2+7Lsge+5uYEB3B dkhr2LpGb96MtBoxXp9SluYLNscBC9E0374QgCI/32t8XdeCpO/kfoFHSAdeCdbI Qx7OZ24XgdoFsVjVkG5N9LtsAHngM290hHSvCObIvQlOkC3h+jfIdxPhqHFiligE c1VDR46gwoaxhMpZhoRwpUI2qP5/v5zVrcxJGo/4MGQiE+/iN07thJKIjEDwa6DA nuTco8BHVDq3J3jXPCKMV/BMFFPZ9Rq2DjND7uQWHl59+tE0r33/UFq0wb0eP+ip wLsPm4E6lmgP6ul5dxvtaAoktQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:56:48 2026 by rpki-client