$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json) Hash identifier: pzWGDE0aJib14Idq9OjQE8gVkX5aifFYjwoSjRM2ix4= Subject key identifier: 58:37:DB:91:20:6D:03:8A:E2:7A:D5:AD:1E:3A:CC:C4:C9:50:8D:05 Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Certificate serial: 4C49 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft Manifest number: 4C1A Signing time: Mon 26 Oct 2026 02:50:26 +0000 Manifest this update: Mon 26 Oct 2026 02:50:26 +0000 Manifest next update: Mon 02 Nov 2026 02:50:26 +0000 Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: opTi9UOGCHO0TepP31HLMHHZfvG7M/23+AmxnoUSXR0=) 2: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (hash: ql//mmH3uX+M56UIRUJu1/aVCCndpyidtKkg2qBTf5Y=) 3: BvSy24SzhwK186kqeJJV2c_vPus.cer (hash: Qkd/KB4DV6H2ngRdLzN56fQNoJ9u96Tz//Ib8JxfNvk=) 4: zURUsk4_99x1y76Rm92nnEe5Xqc.cer (hash: H5fg7c2O93XAHMjs397YJBjJaE7ncYjqoDI2vqqer3I=) 5: 5x-HDnK9Im57-jqrGpGKtGIybF8.cer (hash: a5Ir0nV7KBW/9+U4soNUFcBC7U+vUfDbNDnpTLrDiRE=) 6: ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer (hash: lLAv50rlFVQlzNgK2yqlYBfpR8GoyvEqug7FREo1+Cc=) 7: V3LjuCeMtseqvXrPnvViq1k8LoI.cer (hash: uTIB3+FuzPn41PDJrwadajxN3utd2Fi1QwKcnYkDfkM=) 8: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: iV05xmMyePyIT86cKY8Y2kLrNQLqTwwd1A2Z00Rys/o=) 9: oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer (hash: i0mvCv9BCkAZJXiyet6dSMMrqd+2TZuhoLyOP3Lqqlw=) 10: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: Jykal/79ESrmZg8HBK3c/WYXbtQTb6/9uO4/tPS78C8=) 11: _KtbpyYSYFeOSNmqwBIRqzpaIwk.cer (hash: htbBSMVTb1ucorXZ0udEzZrVuTkh1MbpLmulXXbWomU=) 12: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: CSwwxhI62sXBUpjPgEmnyLlhThNiAd6aymOtHWTko68=) 13: u_Gz58XB6yDJVjW4jkE07DamSWA.cer (hash: /cWiSXJLUhiEHMWpJvg6jcSRoa6h2/LjcNVn8dchMGQ=) 14: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: SeARXxioSSxZdrtzPF+zK2A5bqe0H2TKbzU72Ej7NZI=) 15: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: 8uhICv4Ua/GVjkWHxtdsoYmoqAISKKqyPkmvC9EVBnw=) 16: 7DaNWC4Rd-CZFeM_RO253k7zLFI.cer (hash: NeCxFow7kBXkFh/UwPzYDU64nBCugUP7ufkzyj5XtKY=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19529 (0x4c49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Validity Not Before: Oct 26 02:50:26 2026 GMT Not After : Nov 2 02:50:26 2026 GMT Subject: CN=6adebff2-89e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:27:17:a2:38:e2:1a:48:c2:47:e3:74:e8: f0:99:69:67:e5:6d:91:41:66:cd:54:ba:5b:ad:86: ad:bc:f4:b0:0d:e0:3b:97:7b:3c:44:b6:d5:fc:7b: 17:fc:f7:e1:ad:70:7e:96:a1:0f:cf:46:75:1f:8f: bf:d1:73:f0:56:a8:71:da:b6:0f:bc:3e:e6:4e:30: 13:d9:73:17:bf:20:25:61:8a:db:3c:ae:3c:43:8a: ba:d2:1c:ab:f4:e9:e3:68:de:83:6d:5f:25:1f:a5: 1a:4f:3a:1d:ba:3a:66:57:0c:72:75:26:28:15:c0: b2:c8:c8:86:1c:c5:23:77:56:3e:58:64:1f:5a:60: 41:88:60:5d:aa:78:b4:9a:47:d7:6f:95:43:94:af: f3:92:0b:3e:cb:35:52:e8:06:cc:05:28:8b:f2:78: d3:b4:16:ae:54:b8:64:3a:19:9b:fa:26:bd:90:70: 5a:44:87:89:12:ba:6e:87:c3:b4:68:db:e6:11:eb: 90:96:d1:f0:3b:dc:63:1f:b8:8a:70:d0:a0:2c:7e: 62:3b:03:ea:de:18:f8:62:9a:39:15:94:0a:ec:43: 0d:b6:ba:d4:a1:0b:b2:33:c2:55:d5:1e:4a:2f:60: fa:6f:09:20:2b:0f:e2:0e:7b:85:6f:50:5e:00:13: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:DB:91:20:6D:03:8A:E2:7A:D5:AD:1E:3A:CC:C4:C9:50:8D:05 X509v3 Authority Key Identifier: keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9a:7d:c0:5c:62:8f:ea:df:a0:8f:3c:b8:7a:ef:25:b5:14: 1c:bd:72:e9:c3:71:c1:5f:62:8b:dd:89:97:d6:34:7c:98:2c: c5:95:2d:42:d8:36:3e:51:49:6f:4c:6e:47:af:b4:a7:27:63: d5:47:2e:6b:1b:6c:d1:b0:ff:33:6b:c1:ef:dc:97:70:fa:77: 87:43:9d:80:3f:b1:43:3e:73:74:8d:1d:6a:c9:cd:bb:90:86: bc:47:8c:d5:be:28:f5:ca:37:e9:0a:84:7e:b6:4e:7b:74:77: ed:57:b0:ee:7c:9f:f9:96:80:c7:a4:87:2a:87:78:b0:85:26: 1a:b9:00:af:2f:17:e8:23:f1:0a:2a:46:74:fc:d1:4d:7b:a8: a9:b5:48:80:ca:be:48:6d:0a:e9:b8:5b:fb:b3:88:e1:81:28: 83:25:bb:6b:74:5a:10:f3:d1:0f:a5:45:aa:43:4b:76:ee:47: 3f:44:4a:90:98:98:eb:0b:7a:db:08:4a:19:cc:76:fa:ff:44: 8b:89:34:56:92:82:1e:39:df:75:99:d9:b7:05:22:7a:6a:82: 91:51:11:8b:a0:13:bb:9f:69:96:6c:2a:58:45:db:d8:fe:ce: 70:f9:92:a6:53:27:1a:a5:03:a0:c3:09:69:ba:f0:f7:5c:8b: 6f:01:ac:6c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0 OTRCQUY5MzkwHhcNMjYxMDI2MDI1MDI2WhcNMjYxMTAyMDI1MDI2WjAYMRYwFAYD VQQDEw02YWRlYmZmMi04OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn44nF6I44hpIwkfjdOjwmWln5W2RQWbNVLpbrYatvPSwDeA7l3s8RLbV/HsX /PfhrXB+lqEPz0Z1H4+/0XPwVqhx2rYPvD7mTjAT2XMXvyAlYYrbPK48Q4q60hyr 9OnjaN6DbV8lH6UaTzodujpmVwxydSYoFcCyyMiGHMUjd1Y+WGQfWmBBiGBdqni0 mkfXb5VDlK/zkgs+yzVS6AbMBSiL8njTtBauVLhkOhmb+ia9kHBaRIeJErpuh8O0 aNvmEeuQltHwO9xjH7iKcNCgLH5iOwPq3hj4Ypo5FZQK7EMNtrrUoQuyM8JV1R5K L2D6bwkgKw/iDnuFb1BeABOquwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFFg325Eg bQOK4nrVrR46zMTJUI0FMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5 MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZG Mi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEARZp9wFxij+rfoI88uHrvJbUUHL1y6cNxwV9ii92Jl9Y0 fJgsxZUtQtg2PlFJb0xuR6+0pydj1Ucuaxts0bD/M2vB79yXcPp3h0OdgD+xQz5z dI0dasnNu5CGvEeM1b4o9co36QqEfrZOe3R37Vew7nyf+ZaAx6SHKod4sIUmGrkA ry8X6CPxCipGdPzRTXuoqbVIgMq+SG0K6bhb+7OI4YEogyW7a3RaEPPRD6VFqkNL du5HP0RKkJiY6wt62whKGcx2+v9Ei4k0VpKCHjnfdZnZtwUiemqCkVERi6ATu59p lmwqWEXb2P7OcPmSplMnGqUDoMMJabrw91yLbwGsbA== -----END CERTIFICATE-----Generated at Mon Oct 26 12:38:51 2026 by rpki-client