$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft File: ly_Qf9E0egKdYBcER3vzpkeDpzg.mft (raw, json) Hash identifier: Cc/epGu5UK/QHIYnIz0Bk9TQHnEVC0o+rqxwZEHc/Ss= Subject key identifier: 68:8C:49:50:9F:5E:FC:63:34:38:72:1D:1B:63:39:34:81:66:A0:D8 Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38 Certificate issuer: /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft Manifest number: 15 Signing time: Wed 19 Aug 2026 09:48:28 +0000 Manifest this update: Wed 19 Aug 2026 09:48:28 +0000 Manifest next update: Wed 26 Aug 2026 09:48:28 +0000 Files and hashes: 1: ly_Qf9E0egKdYBcER3vzpkeDpzg.crl (hash: ToK25B7+Ou1aOZojWS3JpXJR13cxHJqKejw+UZnFk2k=) 2: 7A696120859F11F1A3889AC758A30FBC.roa (hash: KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738 Validity Not Before: Aug 19 09:48:28 2026 GMT Not After : Aug 26 09:48:28 2026 GMT Subject: CN=6a857bec-8412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:bf:48:fa:70:04:64:a4:fe:34:41:10:c3: 0a:3f:9b:32:28:a1:2d:d0:27:7b:a2:d4:02:8e:a1: 9a:b4:37:69:88:55:38:c4:5f:f1:1c:df:a6:97:0a: 6e:86:e0:7d:c8:45:85:1b:89:ba:a0:9e:44:b2:bc: 34:0a:80:c3:80:ae:cd:70:a0:a4:be:29:d2:41:fc: ad:c3:b2:26:cc:57:ea:8b:05:0b:ff:c8:93:09:db: b6:32:7f:c8:99:ec:93:60:71:d6:7d:03:a8:9f:ab: 0a:18:02:a7:82:9c:4d:77:a0:7a:f0:07:0e:8f:49: 18:60:c9:79:60:9c:52:b6:72:d4:7f:26:4c:0d:cf: 56:7e:94:45:70:90:63:cb:d2:87:8b:25:bd:3a:2d: 6a:33:2a:16:0a:69:fc:9e:34:1d:eb:a2:06:0b:99: f7:9f:0e:8c:3d:c4:b7:50:a2:03:c3:72:3c:29:f5: 0e:54:36:d7:2d:35:2f:a6:14:0a:57:bc:d8:a1:23: 31:04:57:75:28:db:47:c8:53:b3:86:a8:c2:07:82: 1e:5a:1a:96:d5:8e:d2:90:a1:f0:26:f9:01:79:08: a7:ac:01:c2:69:85:7b:63:a0:4d:93:d3:aa:3e:ec: 45:5f:37:87:a9:ff:36:d7:41:9c:70:25:4f:04:8b: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:49:50:9F:5E:FC:63:34:38:72:1D:1B:63:39:34:81:66:A0:D8 X509v3 Authority Key Identifier: keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3f:9e:5b:5c:48:45:50:06:bf:ab:39:57:4e:66:1f:84:1a: c5:04:cd:61:55:7a:91:60:9b:f8:61:3a:ab:68:ce:da:60:d0: f3:e9:4e:43:72:45:48:6e:00:1c:49:37:6d:05:23:08:78:ab: 93:26:fe:5f:ce:b1:b4:d4:9b:ac:49:01:d4:36:65:10:47:fa: 9b:ac:3d:3a:32:97:4b:90:fb:5e:c4:32:2a:11:8a:93:27:01: de:75:db:6d:fd:af:68:23:a9:60:3d:d3:9e:76:6c:1d:0c:c3: 3f:a1:66:dd:e5:99:25:97:fc:2e:e6:70:02:57:ef:d9:cb:68: 55:9c:6d:a0:7d:52:5c:55:39:b6:b0:93:a1:29:cd:3c:e8:89: 72:3b:e8:ec:6c:56:07:3e:47:d1:e1:d1:08:22:14:34:24:f1: b8:c2:53:a5:44:3b:8d:cb:18:a1:e3:97:e2:0c:85:88:5d:80: 46:6e:16:d8:be:26:c4:08:74:15:16:ea:78:c2:69:c3:a7:c8: f1:0c:f7:c3:64:67:72:13:24:32:59:24:12:88:24:12:02:ea: 12:fb:75:3d:48:d2:f9:f1:1d:47:44:c2:71:bf:a8:39:e2:66: dd:94:be:7d:5f:63:64:96:a4:3d:84:14:4d:68:ae:8e:98:a7: 12:ba:72:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTU5QjExMC8GA1UEBRMoOTcyRkQwN0ZEMTM0N0EwMjlENjAxNzA0NDc3QkYzQTY0 NzgzQTczODAeFw0yNjA4MTkwOTQ4MjhaFw0yNjA4MjYwOTQ4MjhaMBgxFjAUBgNV BAMTDTZhODU3YmVjLTg0MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvdb9I+nAEZKT+NEEQwwo/mzIooS3QJ3ui1AKOoZq0N2mIVTjEX/Ec36aXCm6G 4H3IRYUbibqgnkSyvDQKgMOArs1woKS+KdJB/K3DsibMV+qLBQv/yJMJ27Yyf8iZ 7JNgcdZ9A6ifqwoYAqeCnE13oHrwBw6PSRhgyXlgnFK2ctR/JkwNz1Z+lEVwkGPL 0oeLJb06LWozKhYKafyeNB3rogYLmfefDow9xLdQogPDcjwp9Q5UNtctNS+mFApX vNihIzEEV3Uo20fIU7OGqMIHgh5aGpbVjtKQofAm+QF5CKesAcJphXtjoE2T06o+ 7EVfN4ep/zbXQZxwJU8EiztRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaIxJUJ9e /GM0OHIdG2M5NIFmoNgwHwYDVR0jBBgwFoAUly/Qf9E0egKdYBcER3vzpkeDpzgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NTlCLzBFRTJCN0VFODU5 RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdLZFlCY0VSM3Z6cGtlRHB6 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbHlfUWY5RTBlZ0tkWUJjRVIzdnpwa2VEcHpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NTlCLzBFRTJCN0VFODU5RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdL ZFlCY0VSM3Z6cGtlRHB6Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaP55bXEhFUAa/qzlXTmYfhBrFBM1hVXqRYJv4YTqraM7aYNDz6U5DckVIbgAc STdtBSMIeKuTJv5fzrG01JusSQHUNmUQR/qbrD06MpdLkPtexDIqEYqTJwHeddtt /a9oI6lgPdOedmwdDMM/oWbd5Zkll/wu5nACV+/Zy2hVnG2gfVJcVTm2sJOhKc08 6IlyO+jsbFYHPkfR4dEIIhQ0JPG4wlOlRDuNyxih45fiDIWIXYBGbhbYvibECHQV Fup4wmnDp8jxDPfDZGdyEyQyWSQSiCQSAuoS+3U9SNL58R1HRMJxv6g54mbdlL59 X2NklqQ9hBRNaK6OmKcSunKA -----END CERTIFICATE-----Generated at Wed Aug 19 15:59:53 2026 by rpki-client