$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: CEteYeIZYdD6uPSwvZTF9ttlmOTNj8F2WUvr2zkoUIs= Subject key identifier: BF:37:B8:F4:B0:68:0B:14:19:21:16:86:6C:19:4C:EF:F6:B9:7F:E7 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 73 Signing time: Fri 09 Oct 2026 08:41:46 +0000 Manifest this update: Fri 09 Oct 2026 08:41:46 +0000 Manifest next update: Fri 16 Oct 2026 08:41:46 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: FQgYSR9a42SmId9s1qeFMJoLirkWEmEKshYN8nF2Ouw=) 2: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: xm+x+fd04WB7I1yVjzFgWBEajtZgqkuYkfVhhVRPfos=) 3: 60C94672909911F189B737F66C11F970.roa (hash: MkE66wfeDgOquisiYVXHDlUpsCxTafplxHRM0Iqm2AA=) 4: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: LCbiXJV4M3UWd5Td2YnoUunf4O6JAsggUfEGQHHJ8+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Oct 9 08:41:46 2026 GMT Not After : Oct 16 08:41:46 2026 GMT Subject: CN=6ac8a8ca-606d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:2b:48:39:3b:6e:c5:e7:55:40:ce:da:60: c4:be:9f:87:4a:6b:2e:35:47:3c:50:86:1a:3a:4f: 83:e6:2d:45:b8:56:26:b8:0f:e2:ff:ae:c0:8c:72: 9c:cd:8a:55:ba:c8:da:97:17:14:21:0e:5c:38:6d: 9d:6a:f9:e0:71:e7:3b:20:63:08:b5:fd:a7:39:ff: 79:03:c3:57:92:55:a5:70:01:85:75:43:d5:71:95: 9f:94:f3:96:83:f2:ce:d5:de:d4:23:3f:57:45:d1: 49:e6:c1:d8:17:60:2e:e0:89:7b:48:9a:61:47:1f: 02:a6:8b:4c:a7:80:a3:43:b3:ef:64:bf:77:0d:bb: ae:fc:a7:27:42:1b:5e:5f:58:d5:b6:68:aa:1f:c0: e2:35:df:82:bf:97:38:22:75:79:27:7e:5e:19:52: 82:f6:50:8c:b4:18:85:e0:b5:c9:36:5a:f7:b8:c5: 04:81:68:9b:ee:2a:71:ef:a1:8c:c3:ae:da:ac:9f: f8:d5:2f:dd:34:3f:0f:20:43:15:49:61:d2:8c:3f: 74:07:2a:3d:29:6a:e9:b8:57:65:dd:21:c7:1e:75: 94:db:49:f4:e8:8e:b4:86:7d:30:2a:b8:b4:4d:69: 0c:aa:37:d9:a7:56:b2:4a:f0:27:6b:4e:85:3d:ce: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:B8:F4:B0:68:0B:14:19:21:16:86:6C:19:4C:EF:F6:B9:7F:E7 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:80:af:f8:8b:32:a1:54:5f:3d:a8:fe:64:27:6d:dd:ad:16: 4a:2a:03:7a:a9:dc:49:67:be:80:7f:5a:1d:3d:4e:f7:20:59: 24:63:13:1a:15:1e:b5:b9:ce:de:75:4f:78:fc:35:a7:92:9f: 5a:b1:6e:0b:91:a5:8b:37:c7:14:4a:67:36:99:86:48:6a:24: 9c:81:91:0c:71:d6:78:b3:4b:d5:73:45:fa:a2:47:51:92:10: 78:50:2b:1b:5c:d2:cd:bc:ad:10:05:36:f2:7f:39:40:a7:33: 5a:ef:52:4b:ec:1d:80:65:bd:98:06:49:10:17:ad:0b:92:8a: 65:43:29:5e:ec:78:c6:ef:40:df:8d:f4:0d:5d:90:e5:a3:69: 33:fe:1e:0f:82:44:f2:c1:37:59:a2:96:a3:eb:c9:e9:27:87: a4:97:db:3a:10:fe:01:6c:bb:e9:0f:95:99:7c:2f:b4:f5:db: 9c:48:02:e4:78:57:9a:e8:95:25:c9:4a:d2:72:5b:be:b2:2e: 67:66:ed:51:0d:e9:e5:84:53:d1:83:23:5e:bc:64:a6:dd:9f: fb:94:61:be:93:dc:f8:62:14:68:10:9b:97:28:44:d8:3c:ca: bc:84:b9:df:95:55:b6:f1:48:73:cc:7d:69:d4:15:6c:06:3c: 13:5a:ec:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjEwMDkwODQxNDZaFw0yNjEwMTYwODQxNDZaMBgxFjAUBgNV BAMTDTZhYzhhOGNhLTYwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClyCtIOTtuxedVQM7aYMS+n4dKay41RzxQhho6T4PmLUW4Via4D+L/rsCMcpzN ilW6yNqXFxQhDlw4bZ1q+eBx5zsgYwi1/ac5/3kDw1eSVaVwAYV1Q9VxlZ+U85aD 8s7V3tQjP1dF0UnmwdgXYC7giXtImmFHHwKmi0yngKNDs+9kv3cNu678pydCG15f WNW2aKofwOI134K/lzgidXknfl4ZUoL2UIy0GIXgtck2Wve4xQSBaJvuKnHvoYzD rtqsn/jVL900Pw8gQxVJYdKMP3QHKj0paum4V2XdIccedZTbSfTojrSGfTAquLRN aQyqN9mnVrJK8CdrToU9zgb1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvze49LBo CxQZIRaGbBlM7/a5f+cwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+gK/4izKhVF89qP5kJ23drRZKKgN6qdxJZ76Af1odPU73IFkkYxMaFR61uc7e dU94/DWnkp9asW4LkaWLN8cUSmc2mYZIaiScgZEMcdZ4s0vVc0X6okdRkhB4UCsb XNLNvK0QBTbyfzlApzNa71JL7B2AZb2YBkkQF60LkoplQyle7HjG70DfjfQNXZDl o2kz/h4PgkTywTdZopaj68npJ4ekl9s6EP4BbLvpD5WZfC+09ducSALkeFea6JUl yUrSclu+si5nZu1RDenlhFPRgyNevGSm3Z/7lGG+k9z4YhRoEJuXKETYPMq8hLnf lVW28UhzzH1p1BVsBjwTWuz1 -----END CERTIFICATE-----Generated at Sun Oct 11 09:25:03 2026 by rpki-client