$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft File: l_lzn2QJyHWu4cSbtpqnQ882YRs.mft (raw, json) Hash identifier: tyLBXWbaJmnKN0Ap10a5k57GmAw0S78XTz/rSijBrlY= Subject key identifier: BB:77:73:6E:19:60:69:CE:67:91:ED:9D:F1:56:6E:95:DD:81:9C:DD Authority key identifier: 97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B Certificate issuer: /CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Certificate serial: 0F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft Manifest number: 0F19 Signing time: Wed 20 May 2026 17:39:05 +0000 Manifest this update: Wed 20 May 2026 17:39:05 +0000 Manifest next update: Wed 27 May 2026 17:39:05 +0000 Files and hashes: 1: l_lzn2QJyHWu4cSbtpqnQ882YRs.crl (hash: uyNFJGETujeybFnZozUmY2v0TgsEh07j+7Uv6BWGhKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3843 (0xf03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917047F, serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Validity Not Before: May 20 17:39:05 2026 GMT Not After : May 27 17:39:05 2026 GMT Subject: CN=6a0df1b9-0350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:fe:ae:07:13:e0:82:e1:b9:ae:79:6c:d5: f5:1c:08:74:2b:81:72:e1:6b:d2:be:59:5a:ed:67: da:a0:04:15:92:20:b6:1b:46:84:51:7a:ba:a8:09: be:97:7f:93:4a:74:94:9e:d3:b8:6e:40:c2:7d:33: 7e:df:f1:14:ba:6d:cf:a8:d2:92:19:f1:8b:3a:b8: 7e:2c:59:21:9e:b7:4e:af:5a:11:40:22:bb:cd:8f: e9:7e:ef:a5:5b:c2:b5:6c:b9:ee:a9:73:e4:30:a2: 13:8a:e8:39:49:ac:0e:70:46:81:23:53:a7:2e:e5: b0:ce:f0:b5:2e:eb:6b:6e:ff:97:65:1d:e6:99:de: 33:97:5e:e7:0a:e9:3c:6b:2c:54:4d:46:fb:91:6a: 83:81:1a:99:bd:94:b5:98:57:9f:50:65:b3:47:b6: 77:0a:64:5f:5d:63:b9:87:ea:fb:f6:85:83:32:2e: 04:8b:5a:9e:e9:cd:59:bf:0b:3c:e4:92:ab:e7:fd: bf:51:d8:3f:81:c6:2d:8f:07:56:a9:2a:fb:2f:b2: 5c:a2:c2:b0:6f:05:e3:dd:0e:85:4f:ee:41:30:28: 9a:0d:a5:87:42:c4:b4:ac:b1:4e:82:4d:1f:dd:0a: e1:3c:bc:ed:62:99:6b:dc:26:16:d3:63:26:50:7d: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:77:73:6E:19:60:69:CE:67:91:ED:9D:F1:56:6E:95:DD:81:9C:DD X509v3 Authority Key Identifier: keyid:97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:01:7e:be:b0:a8:8a:dd:4c:68:33:8f:6c:6f:07:c8:62:9f: 2e:ca:c1:0d:9e:37:e9:d0:ad:b1:66:ba:aa:c5:c6:e1:e1:ca: c8:c4:45:e7:14:3a:dd:ce:46:1f:89:4d:02:a5:40:b3:d5:ed: cc:05:c9:51:ca:d3:93:1d:74:0d:83:6c:92:0b:41:72:4a:bc: e7:a3:9f:2c:34:60:17:1e:e4:04:32:f5:aa:d9:23:d8:9f:62: 7b:5b:d9:ec:2f:b9:02:f6:d5:a9:80:a2:df:28:e6:78:f8:0a: 97:22:29:6b:72:09:3a:58:5c:50:64:aa:e1:f5:fc:78:5d:38: 61:16:fc:48:07:f5:22:45:9c:d3:db:15:8b:9f:74:70:40:7f: ef:8f:a8:d7:89:e2:3b:40:5f:95:1d:fc:e9:95:15:42:e7:44: a2:a0:fe:41:66:bb:82:6f:c0:1c:95:5c:fb:62:fa:cb:5b:42: bc:cc:8f:54:ed:95:86:de:fc:b2:77:a8:46:d3:9c:b0:0d:e2: 4f:66:a6:d7:df:8f:c6:da:c8:70:32:04:a6:d3:77:ea:57:d4: 13:8c:0e:c7:c3:01:b6:a5:df:ee:23:ce:ed:3f:0a:6e:d1:fc: 21:69:53:83:84:2c:3f:c8:31:4a:0e:25:13:01:9c:83:b8:1b: 31:17:2e:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA0N0YxMTAvBgNVBAUTKDk3Rjk3MzlGNjQwOUM4NzVBRUUxQzQ5QkI2OUFBNzQz Q0YzNjYxMUIwHhcNMjYwNTIwMTczOTA1WhcNMjYwNTI3MTczOTA1WjAYMRYwFAYD VQQDEw02YTBkZjFiOS0wMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJj+rgcT4ILhua55bNX1HAh0K4Fy4WvSvlla7WfaoAQVkiC2G0aEUXq6qAm+ l3+TSnSUntO4bkDCfTN+3/EUum3PqNKSGfGLOrh+LFkhnrdOr1oRQCK7zY/pfu+l W8K1bLnuqXPkMKITiug5SawOcEaBI1OnLuWwzvC1Lutrbv+XZR3mmd4zl17nCuk8 ayxUTUb7kWqDgRqZvZS1mFefUGWzR7Z3CmRfXWO5h+r79oWDMi4Ei1qe6c1Zvws8 5JKr5/2/Udg/gcYtjwdWqSr7L7JcosKwbwXj3Q6FT+5BMCiaDaWHQsS0rLFOgk0f 3QrhPLztYplr3CYW02MmUH3M1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLt3c24Z YGnOZ5HtnfFWbpXdgZzdMB8GA1UdIwQYMBaAFJf5c59kCch1ruHEm7aap0PPNmEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDQ3Ri9GRDcyREUxNEEz QTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlIV3U0Y1NidHBxblE4ODJZ UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbHpuMlFKeUhXdTRjU2J0cHFuUTg4MllScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDQ3Ri9GRDcyREUxNEEzQTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlI V3U0Y1NidHBxblE4ODJZUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAswF+vrCoit1MaDOPbG8HyGKfLsrBDZ436dCtsWa6qsXG4eHKyMRF5xQ63c5G H4lNAqVAs9XtzAXJUcrTkx10DYNskgtBckq856OfLDRgFx7kBDL1qtkj2J9ie1vZ 7C+5AvbVqYCi3yjmePgKlyIpa3IJOlhcUGSq4fX8eF04YRb8SAf1IkWc09sVi590 cEB/74+o14niO0BflR386ZUVQudEoqD+QWa7gm/AHJVc+2L6y1tCvMyPVO2Vht78 sneoRtOcsA3iT2am19+PxtrIcDIEptN36lfUE4wOx8MBtqXf7iPO7T8KbtH8IWlT g4QsP8gxSg4lEwGcg7gbMRcufw== -----END CERTIFICATE-----Generated at Thu May 21 10:28:38 2026 by rpki-client