$ rpki-client -vvvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft File: ly_Qf9E0egKdYBcER3vzpkeDpzg.mft (raw, json) Hash identifier: JFcPA7ueo/u8nNEoNzTNBPSF4QdQXKHBNDA0VtWUaZQ= Subject key identifier: B7:32:97:0D:EC:F0:92:E7:E4:F7:77:5A:E0:EE:9A:AE:0E:63:39:3F Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38 Certificate issuer: /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft Manifest number: 28 Signing time: Fri 25 Sep 2026 08:58:42 +0000 Manifest this update: Fri 25 Sep 2026 08:58:42 +0000 Manifest next update: Fri 02 Oct 2026 08:58:42 +0000 Files and hashes: 1: ly_Qf9E0egKdYBcER3vzpkeDpzg.crl (hash: lTJmogq+Ra3TyY8bsmY3ZYjtmUN2VX8/RSxcTGxu/lU=) 2: 7A696120859F11F1A3889AC758A30FBC.roa (hash: KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738 Validity Not Before: Sep 25 08:58:42 2026 GMT Not After : Oct 2 08:58:42 2026 GMT Subject: CN=6ab637c2-39e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:12:9b:16:88:8f:19:d8:76:9b:77:a9:cb: 51:be:33:a0:cd:4a:7f:fa:6d:9a:1e:ce:8a:9b:cb: 3a:92:f7:0b:31:6a:79:d7:fd:d6:9b:ac:79:e4:93: 51:5a:e6:0f:08:98:5a:65:19:99:60:45:52:19:9f: 5f:0d:b2:1d:93:02:a3:c9:fa:1b:bc:f3:8a:45:c2: 33:ab:2c:3a:b5:e9:fb:bd:a1:5c:e5:99:b7:9e:82: da:2e:b2:c9:74:10:c8:1c:60:ae:3f:74:cc:b9:1d: ff:77:9f:a6:70:9c:44:58:7d:b5:c6:10:4b:fe:fc: ca:af:41:f6:23:a5:aa:5d:be:01:74:bd:fa:4f:a1: cc:7c:f2:b1:4c:6a:05:40:9e:ec:de:e6:73:05:72: d0:2d:dc:ac:f0:34:19:2a:69:5d:b1:f7:d9:46:d5: bc:ae:61:ea:2b:ab:16:c9:0b:72:b2:62:64:6b:02: 98:60:ff:ca:1d:4b:f1:08:1e:91:6c:d7:aa:98:22: 5e:c5:44:3e:70:8c:83:85:a7:ca:ef:7a:38:79:03: 9c:2f:3b:5e:54:a5:9e:23:b8:64:79:d7:17:29:4e: df:61:20:f9:bc:de:51:a8:32:77:6d:45:bf:fe:13: d5:1e:3a:af:9f:99:2b:c6:28:77:50:0f:ad:48:47: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:32:97:0D:EC:F0:92:E7:E4:F7:77:5A:E0:EE:9A:AE:0E:63:39:3F X509v3 Authority Key Identifier: keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:95:0c:b3:b4:92:fa:73:70:cf:81:f6:6e:18:2c:62:45:be: 72:1d:b5:ec:51:a4:5a:d2:58:d1:01:9f:19:14:54:ec:62:1d: 3d:1b:95:cb:41:0a:7f:16:cc:af:88:02:ce:13:bb:26:73:3a: 74:36:d1:29:18:e5:35:11:68:9b:64:1b:c3:06:f5:7f:6e:a8: a9:b2:cb:d3:28:36:64:37:c3:f3:d5:8c:0a:fb:2b:82:1e:b6: 77:c9:6c:ad:73:79:f7:78:d5:07:a3:52:1a:0a:79:e2:7c:20: af:c5:89:57:07:85:ff:fe:a1:42:93:43:43:62:16:fc:fa:2d: 7b:e1:d0:c4:98:84:91:09:50:34:88:2d:df:8b:0b:d7:d7:83: 01:f1:b8:21:ee:f9:64:f2:73:61:7a:09:8a:fa:34:b5:b6:bd: 70:d8:e4:84:4b:b1:b1:1b:c0:03:da:45:73:f2:c8:a3:e0:80: ec:66:07:2b:b5:35:2f:0f:27:c7:66:c3:df:9c:42:56:8a:b2: 74:01:ad:d3:0c:7f:2c:b4:e6:56:67:a5:fd:6b:c6:eb:0b:9b: cf:32:59:61:9a:d2:39:5e:0f:14:85:27:85:75:df:b5:c6:e9: c8:c2:23:96:6c:99:08:af:2f:71:c1:34:ca:2c:29:66:0f:6b: 4d:7b:c8:f9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTU5QjExMC8GA1UEBRMoOTcyRkQwN0ZEMTM0N0EwMjlENjAxNzA0NDc3QkYzQTY0 NzgzQTczODAeFw0yNjA5MjUwODU4NDJaFw0yNjEwMDIwODU4NDJaMBgxFjAUBgNV BAMTDTZhYjYzN2MyLTM5ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOexKbFoiPGdh2m3epy1G+M6DNSn/6bZoezoqbyzqS9wsxannX/dabrHnkk1Fa 5g8ImFplGZlgRVIZn18Nsh2TAqPJ+hu884pFwjOrLDq16fu9oVzlmbeegtoussl0 EMgcYK4/dMy5Hf93n6ZwnERYfbXGEEv+/MqvQfYjpapdvgF0vfpPocx88rFMagVA nuze5nMFctAt3KzwNBkqaV2x99lG1byuYeorqxbJC3KyYmRrAphg/8odS/EIHpFs 16qYIl7FRD5wjIOFp8rvejh5A5wvO15UpZ4juGR51xcpTt9hIPm83lGoMndtRb/+ E9UeOq+fmSvGKHdQD61IR/CTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtzKXDezw kufk93da4O6arg5jOT8wHwYDVR0jBBgwFoAUly/Qf9E0egKdYBcER3vzpkeDpzgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NTlCLzBFRTJCN0VFODU5 RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdLZFlCY0VSM3Z6cGtlRHB6 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbHlfUWY5RTBlZ0tkWUJjRVIzdnpwa2VEcHpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NTlCLzBFRTJCN0VFODU5RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdL ZFlCY0VSM3Z6cGtlRHB6Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCelQyztJL6c3DPgfZuGCxiRb5yHbXsUaRa0ljRAZ8ZFFTsYh09G5XLQQp/Fsyv iALOE7smczp0NtEpGOU1EWibZBvDBvV/bqipssvTKDZkN8Pz1YwK+yuCHrZ3yWyt c3n3eNUHo1IaCnnifCCvxYlXB4X//qFCk0NDYhb8+i174dDEmISRCVA0iC3fiwvX 14MB8bgh7vlk8nNhegmK+jS1tr1w2OSES7GxG8AD2kVz8sij4IDsZgcrtTUvDyfH ZsPfnEJWirJ0Aa3TDH8stOZWZ6X9a8brC5vPMllhmtI5Xg8UhSeFdd+1xunIwiOW bJkIry9xwTTKLClmD2tNe8j5 -----END CERTIFICATE-----Generated at Sun Sep 27 00:09:13 2026 by rpki-client