$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: HbbQ2vhFCcMVzm3cYozf0B3KWW6hhMawp446Nlid+6I= Subject key identifier: 9C:EB:7A:43:51:3F:4D:87:CE:2B:DC:A4:A4:D8:B7:1C:CB:D6:6F:F6 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 085B Signing time: Sun 26 Jul 2026 21:35:09 +0000 Manifest this update: Sun 26 Jul 2026 21:35:09 +0000 Manifest next update: Sun 02 Aug 2026 21:35:09 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: 4p8S8p+N6ruxgZSOHvqkN3X+xG4gDPUaQYEcoxdyMxg=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: yum8wC57OlDbLTsoFYFFmg3G0eHaYFBCQhxgQarxJdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Jul 26 21:35:09 2026 GMT Not After : Aug 2 21:35:09 2026 GMT Subject: CN=6a667d8d-2497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:c8:21:57:b8:8c:10:51:64:61:02:5d:5a: 6a:8b:fb:70:4e:8b:c9:10:5e:93:ce:a6:05:2a:9b: 98:d4:12:7f:53:e6:59:84:f8:d3:db:d0:f9:14:fc: 9f:a2:07:24:9e:67:30:18:27:70:b0:a2:26:72:02: 60:ef:17:7b:d9:df:f8:44:26:bb:54:4d:73:40:8e: 49:e1:a0:7a:f7:7a:7c:99:b8:1e:b3:5e:1e:2b:1e: e9:2f:bb:cd:1c:4b:43:09:6e:5d:ac:f5:f8:b9:48: 1f:4b:cc:28:ac:5b:d8:e0:0d:8a:62:93:33:86:99: 95:7d:2f:32:57:6f:62:29:bd:36:64:74:7d:ff:92: df:3b:08:d4:42:9d:c0:19:c8:05:b5:37:e9:fc:d4: cc:42:4d:f7:46:d2:00:9d:c8:71:ec:60:47:36:64: c5:ba:64:70:0b:29:5d:28:16:c4:63:e3:38:cc:e6: c7:27:d1:46:00:b1:2f:89:f0:5c:fc:be:e7:84:65: be:70:87:ad:40:51:e4:df:84:2f:f8:e7:f8:ee:23: f1:9d:7e:7a:3c:6e:83:e2:7d:09:6b:bc:7b:2a:de: de:51:dc:6f:bb:6d:9c:90:43:34:69:9d:be:bc:f4: c1:c6:f5:d9:6c:fc:a2:9a:f7:a6:82:06:53:08:e9: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:7A:43:51:3F:4D:87:CE:2B:DC:A4:A4:D8:B7:1C:CB:D6:6F:F6 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:8c:09:a6:3d:71:af:78:2c:cc:b5:cd:06:88:af:2f:04: 1f:83:a7:dc:b7:09:bd:72:0b:a7:c3:ae:6c:ad:9b:43:45:65: 87:da:d1:c6:e4:9c:04:fd:6d:29:69:f3:96:d2:99:26:b5:58: ea:e8:6c:d7:39:bc:50:af:6d:29:48:83:29:4a:e9:11:ce:f1: 20:11:39:20:0b:7c:c6:f4:e0:6c:ba:cf:3e:3e:76:0f:9c:a4: 7f:c4:20:7a:3a:cc:70:4a:2b:38:90:d5:0f:09:be:32:da:c5: d7:30:89:01:66:fb:01:e1:9d:52:c6:63:fd:a6:04:56:4f:52: cf:40:ba:68:a5:39:4b:77:e7:4d:3f:19:2b:cf:ec:82:2b:d7: 1f:e2:e6:68:35:38:92:7e:8a:99:a5:25:e2:61:2f:69:b1:c3: fe:70:4e:d7:29:23:67:ed:10:c0:1a:73:61:02:32:37:6d:f1: 18:83:78:d3:03:25:16:9f:64:49:47:18:46:35:c1:c1:de:8c: dc:52:9c:2b:fa:3a:26:28:09:ca:da:08:33:ee:40:fc:33:95: 0b:77:5f:22:99:9f:4d:b8:b3:e9:e8:bb:58:d7:1c:da:83:5c: c8:a2:9e:ee:92:96:35:4b:e0:f6:52:65:79:ff:b3:69:ec:80: a7:6b:ec:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjYwNzI2MjEzNTA5WhcNMjYwODAyMjEzNTA5WjAYMRYwFAYD VQQDEw02YTY2N2Q4ZC0yNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkTIIVe4jBBRZGECXVpqi/twTovJEF6TzqYFKpuY1BJ/U+ZZhPjT29D5FPyf ogcknmcwGCdwsKImcgJg7xd72d/4RCa7VE1zQI5J4aB693p8mbges14eKx7pL7vN HEtDCW5drPX4uUgfS8worFvY4A2KYpMzhpmVfS8yV29iKb02ZHR9/5LfOwjUQp3A GcgFtTfp/NTMQk33RtIAnchx7GBHNmTFumRwCyldKBbEY+M4zObHJ9FGALEvifBc /L7nhGW+cIetQFHk34Qv+Of47iPxnX56PG6D4n0Ja7x7Kt7eUdxvu22ckEM0aZ2+ vPTBxvXZbPyimvemggZTCOk9QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzrekNR P02HzivcpKTYtxzL1m/2MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADI2MCaY9ca94LMy1zQaIry8EH4On3LcJvXILp8OubK2bQ0Vlh9rRxuScBP1t KWnzltKZJrVY6uhs1zm8UK9tKUiDKUrpEc7xIBE5IAt8xvTgbLrPPj52D5ykf8Qg ejrMcEorOJDVDwm+MtrF1zCJAWb7AeGdUsZj/aYEVk9Sz0C6aKU5S3fnTT8ZK8/s givXH+LmaDU4kn6KmaUl4mEvabHD/nBO1ykjZ+0QwBpzYQIyN23xGIN40wMlFp9k SUcYRjXBwd6M3FKcK/o6JigJytoIM+5A/DOVC3dfIpmfTbiz6ei7WNcc2oNcyKKe 7pKWNUvg9lJlef+zaeyAp2vs5A== -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:29 2026 by rpki-client