$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft File: ly_Qf9E0egKdYBcER3vzpkeDpzg.mft (raw, json) Hash identifier: W9uFLd4zg68zZ6xmPSq9R8WoLJOF2bfFx0P9CNWwJKA= Subject key identifier: 2E:EA:E2:5E:E7:59:85:0B:1F:54:40:57:DE:67:95:11:D1:70:9C:6B Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38 Certificate issuer: /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft Manifest number: 09 Signing time: Tue 28 Jul 2026 01:50:50 +0000 Manifest this update: Tue 28 Jul 2026 01:50:50 +0000 Manifest next update: Tue 04 Aug 2026 01:50:50 +0000 Files and hashes: 1: ly_Qf9E0egKdYBcER3vzpkeDpzg.crl (hash: kICnCpA6oKv9CY46PVgYn8PTqUgfg4pmEVzfDC1Ytys=) 2: 7A696120859F11F1A3889AC758A30FBC.roa (hash: KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 01:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738 Validity Not Before: Jul 28 01:50:50 2026 GMT Not After : Aug 4 01:50:50 2026 GMT Subject: CN=6a680afa-8398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:83:e3:dc:e2:1e:fb:0a:96:01:f6:29:17: cc:e2:d2:96:4d:0f:a0:cf:f8:4e:75:9b:2f:18:02: be:6c:5c:86:50:83:10:1c:57:ea:df:8e:60:4b:67: b6:42:73:64:35:d1:2c:bb:87:39:46:18:80:ce:72: f4:69:27:a8:87:4e:46:6d:9c:02:9f:74:3e:70:51: 98:ff:6d:22:ff:91:5a:72:24:ae:0b:00:9e:2e:f0: c8:1e:6e:86:1d:0a:ae:f0:15:61:97:f6:39:68:16: 0e:b6:21:5f:95:71:86:4c:d4:fd:c5:7c:a7:47:ca: 31:a5:b2:df:db:a3:49:77:4e:29:72:3d:0e:c4:61: 61:db:76:15:18:fb:a5:9b:c0:b5:62:2e:cb:a8:34: 40:90:a6:b6:0a:39:e8:85:97:72:b4:3f:78:21:88: 79:d3:e0:f5:8c:b4:2f:74:8d:de:a6:d1:1f:bc:5b: d7:09:b4:f7:54:3c:2b:69:68:65:d7:2c:fb:9c:67: d1:f7:13:8b:41:34:8f:cb:c3:97:78:c7:ea:01:2f: 3f:90:88:e8:5e:33:8d:f9:45:42:b1:3d:11:ab:15: 30:5e:1c:e9:04:50:70:e3:d4:83:66:56:38:a7:e3: a3:3d:b0:5f:e3:b0:51:ab:56:92:cd:3b:d7:38:d9: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:E2:5E:E7:59:85:0B:1F:54:40:57:DE:67:95:11:D1:70:9C:6B X509v3 Authority Key Identifier: keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:55:76:9d:c3:fc:c9:61:81:1d:37:f1:91:d0:c5:da:a7:40: 64:c7:3c:e2:8e:b6:e2:f1:6e:1e:83:ca:b6:9f:c6:cb:4f:3b: 89:15:07:d2:69:20:81:4a:79:48:85:44:a0:f5:96:b5:e0:d7: 26:7b:11:ed:eb:19:af:6b:ae:f4:02:c1:d4:5a:86:60:4d:8b: ce:27:6e:71:cc:10:eb:5e:22:1f:af:93:7f:91:78:3d:bf:fc: 1f:c9:6d:0b:69:d3:24:a4:e8:8f:73:72:a0:94:bb:24:f2:22: 22:8f:6d:66:22:ce:27:d7:f9:17:eb:7f:17:0c:df:d3:99:06: fb:3c:9d:30:ab:56:0b:41:89:1a:aa:7b:82:b6:88:73:88:b8: 3e:68:77:da:ad:4b:ec:23:3e:66:41:ca:d1:32:12:e7:8e:ed: 1e:b3:0b:47:3c:35:04:c6:fd:74:fa:c9:06:fc:35:94:b8:f7: f4:60:95:bc:52:c6:66:68:d5:cd:0f:d6:69:9a:09:bb:3f:48: a5:65:ac:9a:c4:ec:50:d9:7b:60:fa:e4:29:19:75:fd:1a:63: ce:28:5a:38:b7:26:8c:c2:bf:dc:4f:e8:ad:a4:9d:c3:df:14: b6:23:fd:e0:1d:f7:6b:00:61:e0:6f:a9:88:55:03:52:ce:a2: 21:17:d8:85 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTU5QjExMC8GA1UEBRMoOTcyRkQwN0ZEMTM0N0EwMjlENjAxNzA0NDc3QkYzQTY0 NzgzQTczODAeFw0yNjA3MjgwMTUwNTBaFw0yNjA4MDQwMTUwNTBaMBgxFjAUBgNV BAMTDTZhNjgwYWZhLTgzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCT54Pj3OIe+wqWAfYpF8zi0pZND6DP+E51my8YAr5sXIZQgxAcV+rfjmBLZ7ZC c2Q10Sy7hzlGGIDOcvRpJ6iHTkZtnAKfdD5wUZj/bSL/kVpyJK4LAJ4u8MgeboYd Cq7wFWGX9jloFg62IV+VcYZM1P3FfKdHyjGlst/bo0l3TilyPQ7EYWHbdhUY+6Wb wLViLsuoNECQprYKOeiFl3K0P3ghiHnT4PWMtC90jd6m0R+8W9cJtPdUPCtpaGXX LPucZ9H3E4tBNI/Lw5d4x+oBLz+QiOheM435RUKxPRGrFTBeHOkEUHDj1INmVjin 46M9sF/jsFGrVpLNO9c42bmXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULuriXudZ hQsfVEBX3meVEdFwnGswHwYDVR0jBBgwFoAUly/Qf9E0egKdYBcER3vzpkeDpzgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NTlCLzBFRTJCN0VFODU5 RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdLZFlCY0VSM3Z6cGtlRHB6 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbHlfUWY5RTBlZ0tkWUJjRVIzdnpwa2VEcHpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NTlCLzBFRTJCN0VFODU5RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdL ZFlCY0VSM3Z6cGtlRHB6Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkVXadw/zJYYEdN/GR0MXap0Bkxzzijrbi8W4eg8q2n8bLTzuJFQfSaSCBSnlI hUSg9Za14NcmexHt6xmva670AsHUWoZgTYvOJ25xzBDrXiIfr5N/kXg9v/wfyW0L adMkpOiPc3KglLsk8iIij21mIs4n1/kX638XDN/TmQb7PJ0wq1YLQYkaqnuCtohz iLg+aHfarUvsIz5mQcrRMhLnju0eswtHPDUExv10+skG/DWUuPf0YJW8UsZmaNXN D9Zpmgm7P0ilZayaxOxQ2Xtg+uQpGXX9GmPOKFo4tyaMwr/cT+itpJ3D3xS2I/3g HfdrAGHgb6mIVQNSzqIhF9iF -----END CERTIFICATE-----Generated at Tue Jul 28 16:50:30 2026 by rpki-client