$ rpki-client -vvvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft File: l_lzn2QJyHWu4cSbtpqnQ882YRs.mft (raw, json) Hash identifier: J9RO9kJv8d//nqxhEKbVE29TjhU8jScqqqSAwSl75x4= Subject key identifier: 85:92:29:A8:2D:90:B8:84:59:09:8C:85:CA:51:1C:0D:49:85:C1:70 Authority key identifier: 97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B Certificate issuer: /CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Certificate serial: 0F4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft Manifest number: 0FB1 Signing time: Sat 10 Oct 2026 17:37:09 +0000 Manifest this update: Sat 10 Oct 2026 17:37:08 +0000 Manifest next update: Sat 17 Oct 2026 17:37:08 +0000 Files and hashes: 1: l_lzn2QJyHWu4cSbtpqnQ882YRs.crl (hash: mfnGweECLYEmAgGWWhcW8SVBaTzbu+HhiNdVDNzQMZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3918 (0xf4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917047F, serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Validity Not Before: Oct 10 17:37:08 2026 GMT Not After : Oct 17 17:37:08 2026 GMT Subject: CN=6aca77c5-0c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:a7:57:dc:b4:3a:dc:78:c7:57:fd:b1:2b: 66:1d:37:ec:b4:e2:65:ba:71:dd:fa:b1:47:61:5f: 4d:63:9a:7b:62:3c:75:83:cc:a6:60:40:de:dc:36: 3b:b6:49:a1:fd:b7:53:09:29:e4:e9:63:91:2b:12: 7b:be:20:36:7e:fd:a9:2d:6a:b7:76:4f:4d:56:04: ba:24:e9:78:99:88:7f:53:78:13:02:68:59:af:e8: fb:b1:15:c3:84:f8:92:23:dd:76:f4:2d:fa:0d:c0: 41:cb:3a:0e:1c:67:23:36:e8:af:47:b9:d6:9d:cf: 8b:b2:c7:04:2c:75:43:f8:fd:3c:3d:49:06:83:cb: 32:e4:90:16:bf:45:12:dd:da:25:84:21:e2:e5:91: df:9b:85:b9:3f:3f:19:93:01:18:f0:98:ca:41:b0: a4:ab:7a:c2:82:e2:77:92:8b:6e:db:f8:c2:19:ad: 49:1d:c6:17:4b:98:9a:4c:8a:d7:14:4e:a3:1f:28: 1d:2c:77:d6:2f:c9:6f:89:6f:ec:1e:04:fa:38:c2: c3:2f:2b:10:27:8e:1d:a1:b5:f2:7e:b1:d1:f2:9c: f3:91:cc:73:0e:c6:f7:d0:79:ff:44:1a:e5:a5:78: c5:35:05:80:22:70:f6:bc:d2:a0:12:d1:a1:0c:97: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:29:A8:2D:90:B8:84:59:09:8C:85:CA:51:1C:0D:49:85:C1:70 X509v3 Authority Key Identifier: keyid:97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:52:9d:30:7a:93:69:0b:ab:f4:c8:c5:dc:9f:15:f1:77:da: bc:73:11:9f:cf:e0:2a:c4:53:b0:7c:ea:e0:fc:38:6d:0b:86: 44:07:8c:70:b5:97:5b:61:f6:91:73:af:ae:b8:a4:c5:53:0c: 76:b8:a3:dd:a1:9b:b4:d6:d4:c0:1b:ed:6e:3d:61:18:34:4b: ab:12:26:ad:61:58:d8:55:fc:56:07:74:e5:ba:78:9a:19:f8: b8:26:48:6e:ce:ec:e9:46:73:5e:65:7a:55:2a:7d:ce:df:f1: 29:7f:89:75:51:e6:19:a5:ac:3d:19:dd:e2:ca:52:e8:0a:e1: 4c:0c:82:45:30:44:94:c3:be:38:13:c3:3d:25:31:71:06:fb: ae:ca:a8:ec:1e:70:c0:1f:93:70:f9:07:90:d3:b8:e6:01:82: 28:0a:eb:ed:08:b9:25:23:05:85:eb:33:18:09:be:8a:2d:41: 1d:dd:42:71:9e:66:53:f9:f2:6d:50:5d:f2:b7:de:1e:5c:aa: 75:9b:f0:42:36:05:ae:9a:6c:6b:75:06:58:cf:01:d6:72:a2: 35:b0:40:31:db:b8:63:44:23:93:91:67:28:83:3b:f6:2c:1d: f3:76:1d:ff:e3:26:f7:bc:79:bb:d3:66:7e:ae:e9:b8:00:94: 46:cb:15:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA0N0YxMTAvBgNVBAUTKDk3Rjk3MzlGNjQwOUM4NzVBRUUxQzQ5QkI2OUFBNzQz Q0YzNjYxMUIwHhcNMjYxMDEwMTczNzA4WhcNMjYxMDE3MTczNzA4WjAYMRYwFAYD VQQDEw02YWNhNzdjNS0wYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxOnV9y0Otx4x1f9sStmHTfstOJlunHd+rFHYV9NY5p7Yjx1g8ymYEDe3DY7 tkmh/bdTCSnk6WORKxJ7viA2fv2pLWq3dk9NVgS6JOl4mYh/U3gTAmhZr+j7sRXD hPiSI9129C36DcBByzoOHGcjNuivR7nWnc+LsscELHVD+P08PUkGg8sy5JAWv0US 3dolhCHi5ZHfm4W5Pz8ZkwEY8JjKQbCkq3rCguJ3kotu2/jCGa1JHcYXS5iaTIrX FE6jHygdLHfWL8lviW/sHgT6OMLDLysQJ44dobXyfrHR8pzzkcxzDsb30Hn/RBrl pXjFNQWAInD2vNKgEtGhDJcZKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWSKagt kLiEWQmMhcpRHA1JhcFwMB8GA1UdIwQYMBaAFJf5c59kCch1ruHEm7aap0PPNmEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDQ3Ri9GRDcyREUxNEEz QTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlIV3U0Y1NidHBxblE4ODJZ UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbHpuMlFKeUhXdTRjU2J0cHFuUTg4MllScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDQ3Ri9GRDcyREUxNEEzQTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlI V3U0Y1NidHBxblE4ODJZUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlKdMHqTaQur9MjF3J8V8XfavHMRn8/gKsRTsHzq4Pw4bQuGRAeMcLWXW2H2 kXOvrrikxVMMdrij3aGbtNbUwBvtbj1hGDRLqxImrWFY2FX8Vgd05bp4mhn4uCZI bs7s6UZzXmV6VSp9zt/xKX+JdVHmGaWsPRnd4spS6ArhTAyCRTBElMO+OBPDPSUx cQb7rsqo7B5wwB+TcPkHkNO45gGCKArr7Qi5JSMFheszGAm+ii1BHd1CcZ5mU/ny bVBd8rfeHlyqdZvwQjYFrppsa3UGWM8B1nKiNbBAMdu4Y0Qjk5FnKIM79iwd83Yd /+Mm97x5u9Nmfq7puACURssV8g== -----END CERTIFICATE-----Generated at Sun Oct 11 17:46:29 2026 by rpki-client