$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json) Hash identifier: 3Ude3zl1VGNkzR2H41G/JN4bCnB73miWEEPrSuJ2TeE= Subject key identifier: 18:CD:A2:82:01:F7:9C:FB:22:F3:31:0E:EF:A5:D4:1C:8F:C3:98:7F Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft Manifest number: 58 Signing time: Thu 23 Jul 2026 10:12:17 +0000 Manifest this update: Thu 23 Jul 2026 10:12:16 +0000 Manifest next update: Thu 30 Jul 2026 10:12:16 +0000 Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: vgKtVtYsdkmAyeqC6YPCI9dbCyMGzd15OBJaeAB+1cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Validity Not Before: Jul 23 10:12:16 2026 GMT Not After : Jul 30 10:12:16 2026 GMT Subject: CN=6a61e900-b696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:9b:36:49:08:a4:7d:d2:6e:bf:19:eb:23: 07:9e:31:a3:3d:8b:71:cf:9d:8e:9b:99:83:f5:e9: 3b:be:fc:ea:8e:23:1b:c9:cd:df:24:17:df:f5:04: b0:be:3f:9e:2b:f7:6b:98:80:29:e1:a6:4e:75:0c: d8:9f:98:e9:6c:24:6a:88:34:71:78:92:55:c9:93: 07:bd:e7:16:cf:0e:7a:e7:8e:83:16:18:7c:bd:af: d9:3e:34:46:c2:9b:b2:b5:a0:62:b7:b8:94:d6:ec: 5b:a4:4e:cc:a1:96:c4:17:08:5f:e7:ab:16:ba:d3: 82:6d:43:15:10:a0:d7:57:52:23:79:05:2b:4b:b8: e1:9d:b5:9f:40:b2:a5:23:9b:f1:1f:aa:ac:08:15: c0:6d:c7:d6:f8:c9:45:6a:43:47:69:17:f1:25:eb: 19:49:e2:0b:99:0c:ea:3d:11:f5:d1:cc:1d:b1:1f: 95:5b:dc:eb:f9:c3:d9:6d:5d:e6:db:be:6e:ff:6a: 64:80:88:61:9f:5b:00:19:0f:c6:4d:5e:bc:e2:9f: bd:43:c3:bd:06:6b:5b:e4:cf:47:cc:44:81:66:89: e5:bf:cb:7f:ea:c4:7d:a5:9c:9d:cd:bc:e3:12:f9: ec:53:e0:f4:39:a6:b6:4e:a2:ee:51:26:25:d8:b0: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CD:A2:82:01:F7:9C:FB:22:F3:31:0E:EF:A5:D4:1C:8F:C3:98:7F X509v3 Authority Key Identifier: keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:4c:bf:ae:44:18:80:a3:2a:b9:37:0b:97:5c:61:80:aa:ab: 05:bd:f5:97:92:5a:74:cd:6d:69:37:f7:8d:82:a1:0d:b3:13: 50:41:7b:92:58:7b:3a:ac:fa:80:2f:e9:d7:1b:03:18:70:8b: 52:6a:d2:5d:9e:ca:62:b5:cb:29:99:1b:4b:5c:5e:68:fc:99: b0:fd:ee:78:35:6e:94:6c:d8:df:85:2f:ce:c6:0b:b5:43:3a: 58:70:78:a0:f7:d3:0e:29:d8:34:e5:b5:c4:73:4b:40:67:ff: 2b:df:41:89:12:e1:e3:7f:1a:f2:e3:89:f5:d7:71:4a:2e:89: 88:d9:e3:74:1c:55:1b:0e:04:5e:7c:87:7a:ac:51:b2:ab:07: 38:60:e7:2a:a6:f9:55:6a:b0:30:62:31:39:ae:14:3a:54:90: 15:52:91:54:db:e4:23:83:b5:76:2d:63:9c:03:4e:16:11:97: d9:66:7b:7d:61:53:54:08:8c:0f:72:f1:1f:a4:fb:0b:54:51: 6f:de:bf:0f:98:d4:51:c7:01:07:fb:1a:47:45:5d:77:e1:0d: 19:17:10:1b:7f:48:5b:16:53:ca:76:45:38:d4:bc:99:4c:ca: 98:ab:62:89:c6:0b:05:17:f5:1c:b3:83:fe:c8:2a:52:44:78: b9:4c:3a:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDQ5QTExMC8GA1UEBRMoMkU1NjdDQjRENjY1NkJFRTBDRjlEQzI4QUYwREU3MjE1 QjdGNjdFODAeFw0yNjA3MjMxMDEyMTZaFw0yNjA3MzAxMDEyMTZaMBgxFjAUBgNV BAMTDTZhNjFlOTAwLWI2OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoE5s2SQikfdJuvxnrIweeMaM9i3HPnY6bmYP16Tu+/OqOIxvJzd8kF9/1BLC+ P54r92uYgCnhpk51DNifmOlsJGqINHF4klXJkwe95xbPDnrnjoMWGHy9r9k+NEbC m7K1oGK3uJTW7FukTsyhlsQXCF/nqxa604JtQxUQoNdXUiN5BStLuOGdtZ9AsqUj m/EfqqwIFcBtx9b4yUVqQ0dpF/El6xlJ4guZDOo9EfXRzB2xH5Vb3Ov5w9ltXebb vm7/amSAiGGfWwAZD8ZNXrzin71Dw70Ga1vkz0fMRIFmieW/y3/qxH2lnJ3NvOMS +exT4PQ5prZOou5RJiXYsBBdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGM2iggH3 nPsi8zEO76XUHI/DmH8wHwYDVR0jBBgwFoAULlZ8tNZla+4M+dworw3nIVt/Z+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzFBNzU4QzFBMDJD QTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00TS1kd29ydzNuSVZ0X1ot Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTGxaOHROWmxhLTRNLWR3b3J3M25JVnRfWi1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NDlBLzFBNzU4QzFBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00 TS1kd29ydzNuSVZ0X1otZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDSTL+uRBiAoyq5NwuXXGGAqqsFvfWXklp0zW1pN/eNgqENsxNQQXuSWHs6rPqA L+nXGwMYcItSatJdnspitcspmRtLXF5o/Jmw/e54NW6UbNjfhS/Oxgu1QzpYcHig 99MOKdg05bXEc0tAZ/8r30GJEuHjfxry44n113FKLomI2eN0HFUbDgRefId6rFGy qwc4YOcqpvlVarAwYjE5rhQ6VJAVUpFU2+Qjg7V2LWOcA04WEZfZZnt9YVNUCIwP cvEfpPsLVFFv3r8PmNRRxwEH+xpHRV134Q0ZFxAbf0hbFlPKdkU41LyZTMqYq2KJ xgsFF/Ucs4P+yCpSRHi5TDra -----END CERTIFICATE-----Generated at Fri Jul 24 17:10:13 2026 by rpki-client