$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFE78/9B4E4FFA731511F18E9515CA89A30FBC/iLz-sIoBILGv0TJIuUy9-yHSrPk.mft File: iLz-sIoBILGv0TJIuUy9-yHSrPk.mft (raw, json) Hash identifier: w/MIfXkmA8vLcUa6JxuA+nt9YKvQ17tqPUtQVAYbYEs= Subject key identifier: AC:60:DF:FC:60:6E:49:95:0E:D8:75:0B:FB:EC:D5:FE:64:E0:DD:6C Authority key identifier: 88:BC:FE:B0:8A:01:20:B1:AF:D1:32:48:B9:4C:BD:FB:21:D2:AC:F9 Certificate issuer: /CN=A91CFE78/serialNumber=88BCFEB08A0120B1AFD13248B94CBDFB21D2ACF9 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iLz-sIoBILGv0TJIuUy9-yHSrPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE78/9B4E4FFA731511F18E9515CA89A30FBC/iLz-sIoBILGv0TJIuUy9-yHSrPk.mft Manifest number: 35 Signing time: Fri 09 Oct 2026 09:24:07 +0000 Manifest this update: Fri 09 Oct 2026 09:24:07 +0000 Manifest next update: Fri 16 Oct 2026 09:24:07 +0000 Files and hashes: 1: iLz-sIoBILGv0TJIuUy9-yHSrPk.crl (hash: sc//hnHpga/ZHk08WSkhaMNpFSb90Tq8lVw4SvFvTz4=) 2: 58CC31D6731711F1AA3E2B4A8AA30FBC.roa (hash: 1XmIML9jwKW8jCvIthvQU5D1Ze9rSMWeGStaXcHd1Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE78/9B4E4FFA731511F18E9515CA89A30FBC/iLz-sIoBILGv0TJIuUy9-yHSrPk.crl rsync://rpki.apnic.net/member_repository/A91CFE78/9B4E4FFA731511F18E9515CA89A30FBC/iLz-sIoBILGv0TJIuUy9-yHSrPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iLz-sIoBILGv0TJIuUy9-yHSrPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE78, serialNumber=88BCFEB08A0120B1AFD13248B94CBDFB21D2ACF9 Validity Not Before: Oct 9 09:24:07 2026 GMT Not After : Oct 16 09:24:07 2026 GMT Subject: CN=6ac8b2b7-e5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:a8:e9:9b:59:08:13:3f:86:8b:6b:83:75: a7:80:ef:d8:c7:ab:ad:a0:13:bb:78:9f:7b:6d:94: 29:cf:f6:10:70:44:7d:a3:57:a8:4e:6d:b6:1a:b6: 72:11:3a:e4:bb:b1:ef:2c:14:8a:d4:77:73:1e:b7: b3:9b:2f:75:ba:bb:9c:8d:75:ae:fe:ce:bc:99:d9: 22:89:3a:18:7e:db:a2:08:53:ab:6c:00:cb:96:8c: d4:26:dd:a3:6b:31:ca:49:f5:4e:69:f7:ea:99:f0: dc:85:85:5b:38:4d:5b:22:f1:a7:27:9c:57:aa:c2: 49:24:a1:5f:5d:32:84:44:8b:ce:47:e0:9b:3a:7a: 8d:12:2e:57:44:51:72:ad:88:1d:47:49:83:b7:bc: d6:30:91:81:41:b0:bf:13:00:b2:99:20:16:3a:84: b9:53:ab:1e:c7:48:83:51:f4:a5:23:8f:c6:7b:e0: 11:a2:d7:73:58:ef:50:54:b9:c9:4e:99:b5:e6:e0: 52:0d:38:7e:67:e8:4a:8e:9f:2d:f8:be:2f:6b:aa: 37:7a:10:51:47:b5:06:93:fb:73:d8:89:2a:9e:a2: 37:e0:96:48:db:7f:d2:d5:cb:a1:7f:99:f3:bd:7f: 80:9c:33:5a:15:0c:7c:03:1a:45:10:70:cd:ab:9e: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:60:DF:FC:60:6E:49:95:0E:D8:75:0B:FB:EC:D5:FE:64:E0:DD:6C X509v3 Authority Key Identifier: keyid:88:BC:FE:B0:8A:01:20:B1:AF:D1:32:48:B9:4C:BD:FB:21:D2:AC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE78/9B4E4FFA731511F18E9515CA89A30FBC/iLz-sIoBILGv0TJIuUy9-yHSrPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iLz-sIoBILGv0TJIuUy9-yHSrPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE78/9B4E4FFA731511F18E9515CA89A30FBC/iLz-sIoBILGv0TJIuUy9-yHSrPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:04:a0:93:fc:aa:4f:27:03:1a:89:3d:d1:d0:ed:08:d5: 47:90:f0:7e:79:30:e7:12:98:6c:dd:73:c9:57:00:f2:d8:28: 0f:75:41:31:6e:47:98:a0:c1:c5:b1:50:25:0b:78:79:e6:d7: fb:d5:73:13:ab:0e:62:df:d5:da:54:da:70:ed:04:5e:bb:8b: 7d:33:5b:59:f4:99:d0:0d:b0:4c:8a:43:30:75:44:e2:25:92: 5a:98:b5:85:31:81:e7:69:27:12:9c:4c:6f:d4:a8:82:c4:b6: c6:bd:f2:8a:78:d1:2f:81:31:f7:3b:b8:0f:af:98:b8:87:bc: e8:3c:54:f9:9c:aa:49:15:cf:3d:ef:99:93:3c:66:f7:9a:75: 17:33:d0:1d:8b:b1:a4:11:e1:a3:9a:17:e3:db:b1:4b:54:8c: 43:2e:a2:27:a0:15:ea:91:83:ef:ff:4c:5e:d5:95:cb:d1:ec: 71:8b:1b:38:4a:0c:bf:0f:c9:46:4f:40:02:24:d1:b7:a8:ed: d3:77:8c:06:c1:4d:49:c4:28:59:ab:10:5d:94:76:1c:9c:a5: 90:01:d0:44:7f:2d:f6:0a:f8:25:02:5e:06:b8:af:03:68:07: b6:08:0c:c4:8f:29:6c:3f:13:f7:8d:76:0c:aa:17:11:c8:fd: ae:f2:2c:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkU3ODExMC8GA1UEBRMoODhCQ0ZFQjA4QTAxMjBCMUFGRDEzMjQ4Qjk0Q0JERkIy MUQyQUNGOTAeFw0yNjEwMDkwOTI0MDdaFw0yNjEwMTYwOTI0MDdaMBgxFjAUBgNV BAMTDTZhYzhiMmI3LWU1ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYyKjpm1kIEz+Gi2uDdaeA79jHq62gE7t4n3ttlCnP9hBwRH2jV6hObbYatnIR OuS7se8sFIrUd3Met7ObL3W6u5yNda7+zryZ2SKJOhh+26IIU6tsAMuWjNQm3aNr McpJ9U5p9+qZ8NyFhVs4TVsi8acnnFeqwkkkoV9dMoREi85H4Js6eo0SLldEUXKt iB1HSYO3vNYwkYFBsL8TALKZIBY6hLlTqx7HSINR9KUjj8Z74BGi13NY71BUuclO mbXm4FINOH5n6EqOny34vi9rqjd6EFFHtQaT+3PYiSqeojfglkjbf9LVy6F/mfO9 f4CcM1oVDHwDGkUQcM2rnjDNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrGDf/GBu SZUO2HUL++zV/mTg3WwwHwYDVR0jBBgwFoAUiLz+sIoBILGv0TJIuUy9+yHSrPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRTc4LzlCNEU0RkZBNzMx NTExRjE4RTk1MTVDQTg5QTMwRkJDL2lMei1zSW9CSUxHdjBUSkl1VXk5LXlIU3JQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUx6LXNJb0JJTEd2MFRKSXVVeTkteUhTclBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RTc4LzlCNEU0RkZBNzMxNTExRjE4RTk1MTVDQTg5QTMwRkJDL2lMei1zSW9CSUxH djBUSkl1VXk5LXlIU3JQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMWQSgk/yqTycDGok90dDtCNVHkPB+eTDnEphs3XPJVwDy2CgPdUExbkeYoMHF sVAlC3h55tf71XMTqw5i39XaVNpw7QReu4t9M1tZ9JnQDbBMikMwdUTiJZJamLWF MYHnaScSnExv1KiCxLbGvfKKeNEvgTH3O7gPr5i4h7zoPFT5nKpJFc8975mTPGb3 mnUXM9Adi7GkEeGjmhfj27FLVIxDLqInoBXqkYPv/0xe1ZXL0exxixs4Sgy/D8lG T0ACJNG3qO3Td4wGwU1JxChZqxBdlHYcnKWQAdBEfy32CvglAl4GuK8DaAe2CAzE jylsPxP3jXYMqhcRyP2u8ixC -----END CERTIFICATE-----Generated at Sat Oct 10 16:21:10 2026 by rpki-client