$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft File: lEL1N-zOsDIKyhL8echC7A_9BiY.mft (raw, json) Hash identifier: NcSo18VcJkF3MyaRg5uNBF+c2IggtJZaYiq2xa225NQ= Subject key identifier: 56:30:39:92:1F:05:AD:22:EC:7A:AB:9E:4B:41:15:25:76:BE:8B:4C Authority key identifier: 94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 Certificate issuer: /CN=A91F53E8/serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft Manifest number: 29 Signing time: Mon 05 Oct 2026 09:15:11 +0000 Manifest this update: Mon 05 Oct 2026 09:15:10 +0000 Manifest next update: Mon 12 Oct 2026 09:15:10 +0000 Files and hashes: 1: lEL1N-zOsDIKyhL8echC7A_9BiY.crl (hash: t7Fpo4HXsmrt7VLbGTKbshGirXctMSKK0Y1MRQgPfhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53E8, serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Validity Not Before: Oct 5 09:15:10 2026 GMT Not After : Oct 12 09:15:10 2026 GMT Subject: CN=6ac36a9f-7c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:63:22:a5:54:f2:96:ca:53:c2:65:53:81: a6:d9:6f:d0:dc:c1:d8:f5:ec:40:69:74:05:d9:46: 87:ad:9a:02:9e:9a:12:4b:56:f2:71:f0:12:bf:fb: 36:53:ad:1d:13:60:1b:d5:37:d4:3c:d6:01:8a:41: a8:b3:5e:f0:93:e1:f6:2e:ee:18:3b:cb:8a:78:2d: d4:6f:c3:c1:7d:3e:02:27:f1:ce:a4:de:13:a7:52: 21:bd:f6:b7:f5:0d:72:a8:59:99:7e:40:f6:e3:a8: 1c:40:3d:84:b9:04:c3:34:1f:89:bd:8b:31:c9:27: 05:fd:b3:c1:e9:5c:38:e0:6a:70:ad:ed:46:3b:3a: a1:17:2e:bf:7c:00:f1:60:36:63:f4:7e:ee:b9:b2: 7d:d4:15:10:87:01:20:b6:97:9d:6e:52:15:7d:05: 08:90:00:b2:0c:2b:90:9b:ff:7c:2b:68:65:1d:4a: 47:9d:af:32:fe:f4:6b:98:e6:f6:dc:3f:19:ac:0b: 5a:12:7b:f5:f1:4f:f1:75:39:45:48:2e:94:f9:06: 4a:ce:38:7b:b0:4a:f0:5d:e3:58:a8:c9:08:9d:0e: 64:f0:bb:f8:97:63:cc:82:48:9c:74:4d:ce:3a:a1: 2a:c4:27:45:86:8c:a0:72:d9:51:6f:86:cf:de:04: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:30:39:92:1F:05:AD:22:EC:7A:AB:9E:4B:41:15:25:76:BE:8B:4C X509v3 Authority Key Identifier: keyid:94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:00:de:1b:a4:13:f2:47:c3:11:25:8f:69:d7:a5:ec:e0:6d: 1a:1b:d8:d6:62:44:7d:e9:26:1a:92:3f:08:ef:5b:b8:5e:a5: c9:33:98:b5:ce:76:74:1b:23:68:5b:c6:1a:00:5b:d0:3d:b4: e3:e3:87:30:94:bc:dd:64:82:ce:52:2d:42:da:23:fa:55:0e: b0:b1:21:d0:5d:da:ce:9e:32:ca:24:e6:65:10:0c:02:77:bb: 8a:9f:0a:e3:a1:5c:74:37:e8:d8:4f:19:dc:ad:19:14:92:77: 88:61:94:61:d1:23:43:98:e6:dd:7d:d3:bb:6d:63:f1:75:4a: c7:c3:f5:ff:71:c8:07:cd:3f:18:39:a4:0d:22:c5:05:f9:49: cb:c0:bf:31:ba:ae:63:92:12:37:f4:2d:85:20:77:d2:be:84: d2:24:fd:4b:d6:ca:8c:fb:a2:2c:51:55:e1:7b:62:3c:b8:bc: cb:a6:48:b2:95:8b:4d:af:3d:c2:42:4b:cb:85:53:1a:f4:0a: af:80:cf:a6:e8:81:41:f4:a7:50:30:86:94:ac:fd:40:39:13: 81:de:8a:c3:ca:d0:95:67:85:c1:87:52:b8:f6:1a:47:89:75: be:1b:37:3c:e6:1b:98:eb:cd:a4:a7:b8:5f:ee:36:51:18:49: 61:63:30:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNFODExMC8GA1UEBRMoOTQ0MkY1MzdFQ0NFQjAzMjBBQ0ExMkZDNzlDODQyRUMw RkZEMDYyNjAeFw0yNjEwMDUwOTE1MTBaFw0yNjEwMTIwOTE1MTBaMBgxFjAUBgNV BAMTDTZhYzM2YTlmLTdjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6qmMipVTylspTwmVTgabZb9Dcwdj17EBpdAXZRoetmgKemhJLVvJx8BK/+zZT rR0TYBvVN9Q81gGKQaizXvCT4fYu7hg7y4p4LdRvw8F9PgIn8c6k3hOnUiG99rf1 DXKoWZl+QPbjqBxAPYS5BMM0H4m9izHJJwX9s8HpXDjganCt7UY7OqEXLr98APFg NmP0fu65sn3UFRCHASC2l51uUhV9BQiQALIMK5Cb/3wraGUdSkedrzL+9GuY5vbc PxmsC1oSe/XxT/F1OUVILpT5BkrOOHuwSvBd41ioyQidDmTwu/iXY8yCSJx0Tc46 oSrEJ0WGjKBy2VFvhs/eBD5HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVjA5kh8F rSLsequeS0EVJXa+i0wwHwYDVR0jBBgwFoAUlEL1N+zOsDIKyhL8echC7A/9BiYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4Lzc4MDVGQTlDODVG NDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJS3loTDhlY2hDN0FfOUJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEVMMU4tek9zRElLeWhMOGVjaEM3QV85QmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 M0U4Lzc4MDVGQTlDODVGNDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJ S3loTDhlY2hDN0FfOUJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNAN4bpBPyR8MRJY9p16Xs4G0aG9jWYkR96SYakj8I71u4XqXJM5i1znZ0GyNo W8YaAFvQPbTj44cwlLzdZILOUi1C2iP6VQ6wsSHQXdrOnjLKJOZlEAwCd7uKnwrj oVx0N+jYTxncrRkUkneIYZRh0SNDmObdfdO7bWPxdUrHw/X/ccgHzT8YOaQNIsUF +UnLwL8xuq5jkhI39C2FIHfSvoTSJP1L1sqM+6IsUVXhe2I8uLzLpkiylYtNrz3C QkvLhVMa9AqvgM+m6IFB9KdQMIaUrP1AOROB3orDytCVZ4XBh1K49hpHiXW+Gzc8 5huY682kp7hf7jZRGElhYzDo -----END CERTIFICATE-----Generated at Tue Oct 6 01:28:07 2026 by rpki-client