$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft File: lEL1N-zOsDIKyhL8echC7A_9BiY.mft (raw, json) Hash identifier: Nc2AR3xHe6jED9XQymT/VVxiBNLLnOJPgqH3lymCD7A= Subject key identifier: F1:7A:F4:3F:6E:63:83:08:6D:28:C5:C7:9C:3E:F6:B1:7C:82:49:F0 Authority key identifier: 94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 Certificate issuer: /CN=A91F53E8/serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft Manifest number: 11 Signing time: Wed 19 Aug 2026 09:48:47 +0000 Manifest this update: Wed 19 Aug 2026 09:48:47 +0000 Manifest next update: Wed 26 Aug 2026 09:48:47 +0000 Files and hashes: 1: lEL1N-zOsDIKyhL8echC7A_9BiY.crl (hash: H745Dhoci27MiQFjM6Ur3IB5Xk+OuGHq8aE4asCWs+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53E8, serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Validity Not Before: Aug 19 09:48:47 2026 GMT Not After : Aug 26 09:48:47 2026 GMT Subject: CN=6a857bff-6810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:e7:14:26:90:f6:c0:ed:03:e9:c4:c5:26: 24:38:c0:f0:53:35:86:3f:55:09:ac:77:e2:dd:a4: ed:61:85:bf:d0:19:ce:27:94:ae:1e:01:6f:7d:ae: 7f:d8:aa:a4:61:40:fe:2c:23:74:c5:68:87:a8:bc: 33:cd:b2:4b:f4:23:d2:e9:06:9f:98:51:6f:b5:e9: 36:32:39:c6:09:8a:28:05:5e:2d:df:c7:39:d7:b1: 06:51:fc:16:65:41:30:cb:5e:93:ee:e2:dc:e3:fb: a8:fb:e0:66:20:8f:55:ad:67:fc:84:16:af:40:01: 27:5f:36:82:3a:0b:6f:5d:b5:49:b0:2f:cc:19:55: 00:75:6e:48:e6:0a:b7:28:6b:de:50:c0:51:32:54: 19:10:94:48:d4:73:00:c0:ec:88:2a:62:c9:f3:f0: 77:a8:97:df:1e:06:93:64:04:33:6b:cc:f1:df:bf: b8:f2:bb:8c:c1:71:7b:5a:6a:d0:ed:e0:fe:40:d3: 43:36:70:f8:25:ee:58:c9:89:3a:ac:df:61:4c:8a: 9b:2c:31:e9:6a:e1:64:42:cc:e2:88:68:dd:6c:5d: 40:e6:36:0e:11:a8:a5:49:03:7b:e2:41:c0:9f:ea: 48:c2:c7:21:be:2c:15:73:c8:18:8e:6b:68:66:b7: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7A:F4:3F:6E:63:83:08:6D:28:C5:C7:9C:3E:F6:B1:7C:82:49:F0 X509v3 Authority Key Identifier: keyid:94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:24:c6:d4:43:ce:b2:00:bb:43:23:86:4e:39:2f:d7:7d:e1: b4:6c:af:bf:76:5f:14:17:d5:f2:75:14:83:1a:e1:22:23:77: f0:fd:e3:6a:f4:91:70:d1:4e:23:bf:7a:e2:8f:4d:15:84:a3: b1:26:7c:58:84:ce:c5:82:ed:41:68:1a:e5:ff:f7:59:53:95: 51:19:45:79:a1:fb:d3:38:fe:d5:3a:86:f0:ad:19:6c:31:78: 06:c0:83:d8:d8:8f:f1:7a:02:fc:7e:6f:79:b1:44:54:f8:09: ae:75:01:bf:c7:77:fe:ba:e8:e7:25:3c:fc:ea:d4:f3:c0:b7: 89:c2:c2:96:3d:d3:e8:23:a5:33:6a:79:34:c4:dd:03:52:0f: 18:fd:ee:03:ce:32:a3:7e:6c:cc:f1:78:ee:a7:f5:1f:ad:c0: c7:22:66:b3:c1:cd:7b:a1:03:a3:bd:bd:62:0e:7a:4d:88:72: 7d:cb:e9:b0:5e:15:2b:ea:ed:6e:33:35:5e:b8:2b:63:e0:f3: f4:3b:28:a9:16:04:6f:f4:16:5d:dc:0c:fa:12:12:1e:0e:79: 58:ea:93:bd:d5:e6:9b:43:54:1d:34:3f:45:2e:f4:5c:de:fc: 64:4d:5b:32:12:a3:f5:5d:83:16:28:82:c3:0e:48:48:4b:9b: ae:52:76:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNFODExMC8GA1UEBRMoOTQ0MkY1MzdFQ0NFQjAzMjBBQ0ExMkZDNzlDODQyRUMw RkZEMDYyNjAeFw0yNjA4MTkwOTQ4NDdaFw0yNjA4MjYwOTQ4NDdaMBgxFjAUBgNV BAMTDTZhODU3YmZmLTY4MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy6+cUJpD2wO0D6cTFJiQ4wPBTNYY/VQmsd+LdpO1hhb/QGc4nlK4eAW99rn/Y qqRhQP4sI3TFaIeovDPNskv0I9LpBp+YUW+16TYyOcYJiigFXi3fxznXsQZR/BZl QTDLXpPu4tzj+6j74GYgj1WtZ/yEFq9AASdfNoI6C29dtUmwL8wZVQB1bkjmCrco a95QwFEyVBkQlEjUcwDA7IgqYsnz8Heol98eBpNkBDNrzPHfv7jyu4zBcXtaatDt 4P5A00M2cPgl7ljJiTqs32FMipssMelq4WRCzOKIaN1sXUDmNg4RqKVJA3viQcCf 6kjCxyG+LBVzyBiOa2hmtwmtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8Xr0P25j gwhtKMXHnD72sXyCSfAwHwYDVR0jBBgwFoAUlEL1N+zOsDIKyhL8echC7A/9BiYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4Lzc4MDVGQTlDODVG NDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJS3loTDhlY2hDN0FfOUJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEVMMU4tek9zRElLeWhMOGVjaEM3QV85QmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 M0U4Lzc4MDVGQTlDODVGNDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJ S3loTDhlY2hDN0FfOUJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALJMbUQ86yALtDI4ZOOS/XfeG0bK+/dl8UF9XydRSDGuEiI3fw/eNq9JFw0U4j v3rij00VhKOxJnxYhM7Fgu1BaBrl//dZU5VRGUV5ofvTOP7VOobwrRlsMXgGwIPY 2I/xegL8fm95sURU+AmudQG/x3f+uujnJTz86tTzwLeJwsKWPdPoI6Uzank0xN0D Ug8Y/e4DzjKjfmzM8Xjup/UfrcDHImazwc17oQOjvb1iDnpNiHJ9y+mwXhUr6u1u MzVeuCtj4PP0OyipFgRv9BZd3Az6EhIeDnlY6pO91eabQ1QdND9FLvRc3vxkTVsy EqP1XYMWKILDDkhIS5uuUnZV -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:46 2026 by rpki-client