$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json) Hash identifier: O9uVVgiqwzGSfWSqOm2vpGTTDgi6tNm37mVJOkY3+2Q= Subject key identifier: 3D:B2:04:4F:91:65:B2:8A:71:AE:39:CB:42:E9:CE:9E:5C:CC:3F:86 Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Certificate serial: 4BB5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft Manifest number: 4B8B Signing time: Thu 10 Sep 2026 02:50:26 +0000 Manifest this update: Thu 10 Sep 2026 02:50:25 +0000 Manifest next update: Thu 17 Sep 2026 02:50:25 +0000 Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: D8xW5Iir770vYoqB++y0D/mGzsSb8lBiaY9LaCHI/pw=) 2: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=) 3: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: Bd/goy5yGEAJSuUTpPjEEoTLLlOno7n/yKKnsLU9Ymo=) 4: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: sYKa+Y5lE+05j9p6XCNihD6VxqVWOC0uNPeofzjcijQ=) 5: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: htbBSMVTb1ucorXZ0udEzZrVuTkh1MbpLmulXXbWomU=) 6: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=) 7: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: CSwwxhI62sXBUpjPgEmnyLlhThNiAd6aymOtHWTko68=) 8: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: 8uhICv4Ua/GVjkWHxtdsoYmoqAISKKqyPkmvC9EVBnw=) 9: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Qkd/KB4DV6H2ngRdLzN56fQNoJ9u96Tz//Ib8JxfNvk=) 10: V3LjuCeMtseqvXrPnvViq1k8LoI.cer (hash: uTIB3+FuzPn41PDJrwadajxN3utd2Fi1QwKcnYkDfkM=) 11: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=) 12: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=) 13: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: ql//mmH3uX+M56UIRUJu1/aVCCndpyidtKkg2qBTf5Y=) 14: ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer (hash: lLAv50rlFVQlzNgK2yqlYBfpR8GoyvEqug7FREo1+Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 02:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19381 (0x4bb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Validity Not Before: Sep 10 02:50:25 2026 GMT Not After : Sep 17 02:50:25 2026 GMT Subject: CN=6aa21af1-6228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:f9:2c:dd:a6:e3:f6:70:d2:fd:22:f9:dc: b0:9a:ce:fe:f6:44:bd:d6:93:18:5a:34:04:78:0c: e1:fa:87:b3:c8:bc:c4:0a:21:f7:61:88:f4:46:1e: 6b:fd:22:f3:93:c4:64:72:6b:c0:52:ff:1d:03:63: 9c:20:c9:ff:45:ce:af:55:aa:1c:5a:f2:45:bb:8a: 51:7d:1c:a0:5b:52:41:56:34:94:cf:78:dd:ec:f4: ab:76:ec:1c:d9:7f:15:be:1d:43:85:bb:44:40:67: e7:dd:91:e9:be:5c:03:48:ee:0c:ac:58:6f:f5:58: 0b:06:9c:80:3a:26:4f:3e:f3:06:91:e8:5d:6c:99: 40:a0:36:12:5b:5c:82:51:9a:de:7e:a8:b9:31:c1: 02:d3:9a:41:06:5d:58:f3:28:75:13:f5:0c:64:e5: 90:29:4f:c6:75:b9:bd:02:97:aa:8f:68:74:1d:1b: b7:c9:1e:e0:51:60:94:66:ad:ed:69:8f:c9:b1:b8: ea:73:cc:b5:8c:80:e1:fc:75:31:22:20:f5:3e:3e: 44:35:3f:89:83:78:d3:79:a0:65:17:49:49:6b:50: 93:2d:48:9c:95:2b:52:56:d7:3b:78:9f:e5:78:30: bf:34:1c:d4:51:60:25:21:19:2e:48:dd:40:db:eb: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B2:04:4F:91:65:B2:8A:71:AE:39:CB:42:E9:CE:9E:5C:CC:3F:86 X509v3 Authority Key Identifier: keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fc:6e:d2:07:93:b0:07:a7:d3:f6:29:13:e9:fc:00:5e:1d: c8:84:60:a5:2b:16:41:46:5e:d8:0d:1b:43:94:df:63:ab:28: b5:99:e6:22:73:a9:97:21:9d:43:57:d5:84:bd:a8:63:3d:65: b0:80:eb:f7:70:f2:c1:2d:c0:21:aa:8a:2e:fa:c2:63:97:21: 31:94:9f:2a:19:fe:99:0c:bc:ef:32:64:26:14:9c:05:6d:c5: 16:cc:be:1c:a2:95:0a:04:27:c9:08:60:92:d7:5b:2e:34:ab: e7:84:ce:55:7c:5c:2d:57:23:1c:48:69:a8:e6:8e:ec:8c:6a: bf:66:e7:1d:c5:a3:47:dc:6c:26:d2:aa:d9:84:4c:7a:52:2b: dc:c3:6c:dd:db:56:a5:3e:b5:92:8d:9e:6e:78:85:1e:1e:29: 4c:9a:b4:b6:90:c1:b1:19:20:3c:0b:d4:60:77:c8:e2:2c:a9: f8:43:d7:a8:29:a9:ce:e7:8e:fb:ba:1a:8e:ee:68:4e:77:a0: b6:93:fa:78:03:9d:6d:72:c9:4b:00:cf:19:97:5c:02:1f:47: ca:a9:e1:94:36:18:c8:26:76:b9:7d:b5:24:cc:bb:b8:be:38: ff:22:28:b6:2e:40:ca:5d:6a:8a:0c:b0:ad:a9:ec:35:ee:c9: b8:e1:e5:32 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICS7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0 OTRCQUY5MzkwHhcNMjYwOTEwMDI1MDI1WhcNMjYwOTE3MDI1MDI1WjAYMRYwFAYD VQQDEw02YWEyMWFmMS02MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8z5LN2m4/Zw0v0i+dywms7+9kS91pMYWjQEeAzh+oezyLzECiH3YYj0Rh5r /SLzk8RkcmvAUv8dA2OcIMn/Rc6vVaocWvJFu4pRfRygW1JBVjSUz3jd7PSrduwc 2X8Vvh1DhbtEQGfn3ZHpvlwDSO4MrFhv9VgLBpyAOiZPPvMGkehdbJlAoDYSW1yC UZrefqi5McEC05pBBl1Y8yh1E/UMZOWQKU/Gdbm9Apeqj2h0HRu3yR7gUWCUZq3t aY/Jsbjqc8y1jIDh/HUxIiD1Pj5ENT+Jg3jTeaBlF0lJa1CTLUiclStSVtc7eJ/l eDC/NBzUUWAlIRkuSN1A2+sZGQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFD2yBE+R ZbKKca45y0Lpzp5czD+GMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5 MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZG Mi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAm/xu0geTsAen0/YpE+n8AF4dyIRgpSsWQUZe2A0bQ5Tf Y6sotZnmInOplyGdQ1fVhL2oYz1lsIDr93DywS3AIaqKLvrCY5chMZSfKhn+mQy8 7zJkJhScBW3FFsy+HKKVCgQnyQhgktdbLjSr54TOVXxcLVcjHEhpqOaO7Ixqv2bn HcWjR9xsJtKq2YRMelIr3MNs3dtWpT61ko2ebniFHh4pTJq0tpDBsRkgPAvUYHfI 4iyp+EPXqCmpzueO+7oaju5oTnegtpP6eAOdbXLJSwDPGZdcAh9HyqnhlDYYyCZ2 uX21JMy7uL44/yIoti5Ayl1qigywransNe7JuOHlMg== -----END CERTIFICATE-----Generated at Thu Sep 10 05:17:08 2026 by rpki-client