$ rpki-client -vvvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft File: l_lzn2QJyHWu4cSbtpqnQ882YRs.mft (raw, json) Hash identifier: JYp6YCvFo5WozPcJSFHrmP8QDLztCUerMzQkJ1mWRR0= Subject key identifier: D8:C8:4D:D8:F5:2B:BE:51:A0:29:BF:15:72:E3:1B:9B:A6:D7:54:1B Authority key identifier: 97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B Certificate issuer: /CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Certificate serial: 0F4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft Manifest number: 0FAB Signing time: Sun 04 Oct 2026 17:37:42 +0000 Manifest this update: Sun 04 Oct 2026 17:37:42 +0000 Manifest next update: Sun 11 Oct 2026 17:37:42 +0000 Files and hashes: 1: l_lzn2QJyHWu4cSbtpqnQ882YRs.crl (hash: mxskwz/vw0KdGgdZ7JBonvjnliZ2LZwt/SYssyMs9OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3915 (0xf4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917047F, serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Validity Not Before: Oct 4 17:37:42 2026 GMT Not After : Oct 11 17:37:42 2026 GMT Subject: CN=6ac28ee6-75df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:e0:a8:ab:71:d2:f0:23:90:0c:4a:e6:32: 75:7e:4f:94:68:1a:6d:83:e6:84:46:0f:aa:4b:5d: 1d:85:de:45:e9:0d:c1:4e:a8:e8:6c:3e:19:49:6f: 95:8d:d9:2a:cc:2f:4d:ea:fa:00:7a:36:0b:36:38: 8d:69:68:e7:ab:00:65:3e:9f:d4:76:af:a0:eb:d3: 0a:d7:91:d1:87:b2:15:23:43:c2:97:6b:ac:b2:63: 8f:3e:aa:f4:6d:f5:ef:f8:42:34:a8:9d:62:cf:bb: ed:28:9d:5b:10:e1:9e:bd:16:43:75:b0:38:a8:ce: 8a:a0:6e:58:87:5d:92:6e:9d:ed:e5:ed:8a:75:50: 33:71:9c:1a:1b:e3:b6:10:57:aa:63:79:6a:32:32: 26:eb:ed:5e:b6:bc:69:4e:01:4c:0f:de:e0:df:f4: c5:3f:7d:99:6a:b6:af:92:d2:69:6d:1f:e9:97:84: c6:9c:d1:4d:82:f3:00:17:e8:87:39:86:3d:f6:45: f7:78:6a:b2:2f:b2:ee:90:41:c1:88:e0:32:74:7d: 72:17:ad:86:cb:57:75:51:fa:85:3f:95:b9:de:75: 98:10:2b:c7:e0:50:22:8a:76:5a:76:b7:ec:63:63: a2:3d:32:79:c7:6b:72:66:37:7b:50:cc:38:f9:04: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C8:4D:D8:F5:2B:BE:51:A0:29:BF:15:72:E3:1B:9B:A6:D7:54:1B X509v3 Authority Key Identifier: keyid:97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1b:41:67:47:b5:16:4c:f6:36:bd:d7:5d:20:9a:c3:36:8a: 41:b0:b3:59:29:c9:6e:d8:3e:2c:4c:66:10:c5:a0:b5:54:c2: 1b:76:0b:b1:cf:b9:3e:fd:e4:62:ba:0f:1b:37:ac:88:e1:da: 2d:1d:63:20:8c:fc:b6:2a:32:89:49:01:e1:53:74:eb:e1:c9: 0b:f1:32:ef:80:41:d6:e1:fa:db:f3:bc:a4:e6:c4:28:be:ed: 62:a1:c1:b2:05:9c:52:b9:91:b9:a8:5c:99:f7:0d:3e:8e:84: 4b:54:ac:df:55:73:c5:09:39:b6:c5:af:4a:83:6f:13:ad:1c: 27:55:85:ad:66:ee:5b:1a:1e:d4:64:ce:80:f9:e9:82:da:69: 68:49:8f:60:a1:57:8a:ec:1c:9b:ef:50:e9:58:46:0a:7e:85: b0:63:4c:6a:c0:7d:81:e2:18:82:ac:66:65:26:4a:03:33:32: d4:a6:dd:89:ad:90:7f:13:ab:78:b8:0c:3a:10:dc:c6:b2:e6: 08:b0:e8:51:0c:29:cf:b4:e6:1f:45:aa:1d:8e:46:a9:3d:ce: c2:8b:ab:8a:93:f5:80:8f:26:d5:04:ea:15:c1:72:7c:7d:80: b4:af:5d:c2:0f:c0:01:66:a8:26:1d:0c:2a:66:8f:2f:fc:42: 99:20:2a:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA0N0YxMTAvBgNVBAUTKDk3Rjk3MzlGNjQwOUM4NzVBRUUxQzQ5QkI2OUFBNzQz Q0YzNjYxMUIwHhcNMjYxMDA0MTczNzQyWhcNMjYxMDExMTczNzQyWjAYMRYwFAYD VQQDEw02YWMyOGVlNi03NWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRrgqKtx0vAjkAxK5jJ1fk+UaBptg+aERg+qS10dhd5F6Q3BTqjobD4ZSW+V jdkqzC9N6voAejYLNjiNaWjnqwBlPp/Udq+g69MK15HRh7IVI0PCl2ussmOPPqr0 bfXv+EI0qJ1iz7vtKJ1bEOGevRZDdbA4qM6KoG5Yh12Sbp3t5e2KdVAzcZwaG+O2 EFeqY3lqMjIm6+1etrxpTgFMD97g3/TFP32ZaravktJpbR/pl4TGnNFNgvMAF+iH OYY99kX3eGqyL7LukEHBiOAydH1yF62Gy1d1UfqFP5W53nWYECvH4FAiinZadrfs Y2OiPTJ5x2tyZjd7UMw4+QSi6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjITdj1 K75RoCm/FXLjG5um11QbMB8GA1UdIwQYMBaAFJf5c59kCch1ruHEm7aap0PPNmEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDQ3Ri9GRDcyREUxNEEz QTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlIV3U0Y1NidHBxblE4ODJZ UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbHpuMlFKeUhXdTRjU2J0cHFuUTg4MllScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDQ3Ri9GRDcyREUxNEEzQTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlI V3U0Y1NidHBxblE4ODJZUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaxtBZ0e1Fkz2Nr3XXSCawzaKQbCzWSnJbtg+LExmEMWgtVTCG3YLsc+5Pv3k YroPGzesiOHaLR1jIIz8tioyiUkB4VN06+HJC/Ey74BB1uH62/O8pObEKL7tYqHB sgWcUrmRuahcmfcNPo6ES1Ss31VzxQk5tsWvSoNvE60cJ1WFrWbuWxoe1GTOgPnp gtppaEmPYKFXiuwcm+9Q6VhGCn6FsGNMasB9geIYgqxmZSZKAzMy1Kbdia2QfxOr eLgMOhDcxrLmCLDoUQwpz7TmH0WqHY5GqT3OwouripP1gI8m1QTqFcFyfH2AtK9d wg/AAWaoJh0MKmaPL/xCmSAqRA== -----END CERTIFICATE-----Generated at Tue Oct 6 14:18:54 2026 by rpki-client