$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft File: l-cly4ZRjBgURIehUCq-Kw1EAwU.mft (raw, json) Hash identifier: POFRdI4dsI0zXW+OqEuHHkt9utlDEX3bZrQIABfqwZQ= Subject key identifier: 26:AD:B4:97:0E:61:6D:62:00:BF:D3:0F:C6:B5:1A:F8:F9:76:C2:91 Authority key identifier: 97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05 Certificate issuer: /CN=A9172B99/serialNumber=97E725CB86518C18144487A1502ABE2B0D440305 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft Manifest number: 2F Signing time: Sat 03 Oct 2026 09:25:35 +0000 Manifest this update: Sat 03 Oct 2026 09:25:35 +0000 Manifest next update: Sat 10 Oct 2026 09:25:35 +0000 Files and hashes: 1: l-cly4ZRjBgURIehUCq-Kw1EAwU.crl (hash: lV6fEHZP1QjuOLEjMbuz9+tRi37QCOSxEtW6y1yp9d8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B99, serialNumber=97E725CB86518C18144487A1502ABE2B0D440305 Validity Not Before: Oct 3 09:25:35 2026 GMT Not After : Oct 10 09:25:35 2026 GMT Subject: CN=6ac0ca0f-3b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:a5:87:df:0a:47:cb:66:d5:c6:26:9b:e4: e2:8b:ef:44:1c:b2:d3:19:82:e3:f2:e5:fd:7c:42: e0:6c:d7:51:f2:43:2b:d4:96:8b:dd:d9:74:34:12: 35:98:bf:59:d9:ff:42:00:5e:62:75:6e:f0:14:9a: a5:5f:26:cf:0b:c5:5f:3a:da:a6:d9:b9:21:97:8a: 91:d9:05:06:2b:d4:8c:33:c8:ad:98:fa:04:30:db: ec:8d:91:c1:2d:e7:39:70:01:aa:f6:38:55:51:c6: 2a:60:06:b7:87:d3:da:b9:31:78:e9:74:cc:05:b2: c0:b7:e1:ed:d5:c6:f1:08:fe:78:c5:98:a0:8b:2b: 91:d0:a8:45:12:d4:02:b1:00:4e:87:a3:3b:b7:6c: 0c:ce:ca:16:05:ee:06:27:2e:89:d9:79:48:4d:06: fc:e7:01:0b:1b:20:e5:71:56:88:a2:30:1c:a9:4e: f1:2a:12:fe:8b:e1:76:a4:45:ac:d6:73:b4:f6:7a: 65:f1:3a:bc:14:cd:37:7b:14:27:55:23:b9:e4:16: cd:5d:e2:92:d9:cc:9f:87:10:18:cf:be:f6:c9:19: 25:11:51:ac:3a:ef:0a:39:e9:d7:94:13:14:c2:ce: 6c:1f:b8:f8:ee:ff:d8:f9:9f:ad:35:9b:60:52:2e: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AD:B4:97:0E:61:6D:62:00:BF:D3:0F:C6:B5:1A:F8:F9:76:C2:91 X509v3 Authority Key Identifier: keyid:97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d1:a3:f7:d3:d6:50:2d:aa:f4:64:b6:93:a4:31:3b:4f:54: e7:99:ee:ae:73:f7:35:3d:79:4a:59:7c:f0:a8:51:20:fe:8d: ff:33:b5:b0:d9:eb:67:72:10:7a:bd:b4:8c:8e:8a:71:12:2a: 72:19:6f:ed:26:15:5b:e4:93:21:0b:d4:4c:84:78:0a:15:37: 62:19:c6:e4:d1:18:99:fe:27:6f:5d:62:c6:a1:d8:71:31:e6: 43:a9:d1:eb:3f:1d:1a:64:c2:d9:73:da:78:3a:a5:f0:36:17: 1b:7d:97:57:52:ef:61:b7:69:99:3c:9a:d3:1c:9b:63:a3:f4: ad:aa:9f:c5:07:5a:ac:43:8e:57:dc:bf:70:52:6c:3a:23:25: be:de:05:3d:4e:cf:f6:dd:2f:3e:87:98:3c:fb:07:ac:68:78: 93:db:26:83:24:02:21:16:f0:81:34:5e:80:5f:1e:f8:e9:92: f7:89:19:2c:2a:d3:54:3f:b8:98:11:bb:10:05:82:b9:b4:6f: 4a:a3:28:15:1d:96:b6:45:41:9a:c8:85:76:4a:83:b7:99:60: f4:85:03:79:17:01:7a:d0:5d:dc:ab:67:7d:fc:35:bb:49:7f: 96:01:fc:ab:d5:94:dc:56:f7:a3:a0:6d:f3:fb:7c:db:22:9f: 59:3c:97:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkI5OTExMC8GA1UEBRMoOTdFNzI1Q0I4NjUxOEMxODE0NDQ4N0ExNTAyQUJFMkIw RDQ0MDMwNTAeFw0yNjEwMDMwOTI1MzVaFw0yNjEwMTAwOTI1MzVaMBgxFjAUBgNV BAMTDTZhYzBjYTBmLTNiNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNf6WH3wpHy2bVxiab5OKL70QcstMZguPy5f18QuBs11HyQyvUlovd2XQ0EjWY v1nZ/0IAXmJ1bvAUmqVfJs8LxV862qbZuSGXipHZBQYr1IwzyK2Y+gQw2+yNkcEt 5zlwAar2OFVRxipgBreH09q5MXjpdMwFssC34e3VxvEI/njFmKCLK5HQqEUS1AKx AE6Hozu3bAzOyhYF7gYnLonZeUhNBvznAQsbIOVxVoiiMBypTvEqEv6L4XakRazW c7T2emXxOrwUzTd7FCdVI7nkFs1d4pLZzJ+HEBjPvvbJGSURUaw67wo56deUExTC zmwfuPju/9j5n601m2BSLubzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJq20lw5h bWIAv9MPxrUa+Pl2wpEwHwYDVR0jBBgwFoAUl+cly4ZRjBgURIehUCq+Kw1EAwUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjk5L0FENzJGOEQyNzkw QzExRjFCQzFCNkM3MDY1QTMwRkJDL2wtY2x5NFpSakJnVVJJZWhVQ3EtS3cxRUF3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbC1jbHk0WlJqQmdVUkllaFVDcS1LdzFFQXdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy Qjk5L0FENzJGOEQyNzkwQzExRjFCQzFCNkM3MDY1QTMwRkJDL2wtY2x5NFpSakJn VVJJZWhVQ3EtS3cxRUF3VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAo0aP309ZQLar0ZLaTpDE7T1Tnme6uc/c1PXlKWXzwqFEg/o3/M7Ww2etnchB6 vbSMjopxEipyGW/tJhVb5JMhC9RMhHgKFTdiGcbk0RiZ/idvXWLGodhxMeZDqdHr Px0aZMLZc9p4OqXwNhcbfZdXUu9ht2mZPJrTHJtjo/Stqp/FB1qsQ45X3L9wUmw6 IyW+3gU9Ts/23S8+h5g8+wesaHiT2yaDJAIhFvCBNF6AXx746ZL3iRksKtNUP7iY EbsQBYK5tG9KoygVHZa2RUGayIV2SoO3mWD0hQN5FwF60F3cq2d9/DW7SX+WAfyr 1ZTcVvejoG3z+3zbIp9ZPJfy -----END CERTIFICATE-----Generated at Sat Oct 3 13:25:43 2026 by rpki-client