$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json) Hash identifier: iQlArbAzY2oy6A7524i9MbmBDXiNR2sG4ycB/on1FQQ= Subject key identifier: E8:3B:A3:89:D1:8B:26:D9:25:0A:27:B7:35:6A:A0:E8:98:E1:E0:29 Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft Manifest number: 5C Signing time: Wed 29 Jul 2026 09:44:45 +0000 Manifest this update: Wed 29 Jul 2026 09:44:44 +0000 Manifest next update: Wed 05 Aug 2026 09:44:44 +0000 Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: 2TodN9r7NfAfzRpiT6PauMr9rV1nqeajCHbjWsos/mU=) 2: F7C02BF6885911F1B22A50DC5811F970.roa (hash: /wR6FGdhOPqF6g3hYPb/kar7/EqNQG1KP1NPSwyZHb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 09:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Validity Not Before: Jul 29 09:44:44 2026 GMT Not After : Aug 5 09:44:44 2026 GMT Subject: CN=6a69cb8d-ea1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:18:69:86:d1:b1:22:9f:2b:1a:e1:4b:d6: 3e:88:b5:dd:22:6a:a9:0a:61:b5:24:50:b1:24:bc: 70:e9:51:fe:90:fc:89:c7:31:ed:25:8b:46:7c:f6: e7:ac:b1:3c:2a:12:a4:0b:1b:23:4f:1c:b7:b9:ea: 30:c8:37:61:0b:e5:e6:40:3d:53:2a:b5:57:51:0f: 29:79:cd:8a:7d:da:0b:58:18:5f:65:62:b5:97:ae: fe:6b:71:ea:c1:c3:e3:df:6f:08:1a:89:ef:88:e4: a3:2f:96:df:c0:cf:ae:4f:5a:74:0f:1d:92:da:c7: a1:dd:45:33:97:0a:0d:a6:a4:0f:b3:18:6b:a1:fd: a6:fc:4a:bd:b2:5b:1a:f1:ed:69:b3:36:1e:58:1c: b6:13:b9:d5:03:bf:7a:6d:c2:83:35:d5:b8:80:d7: 5d:09:3c:70:8f:6b:2b:d2:78:83:cf:aa:d9:98:cd: e1:19:19:0b:55:fe:80:fd:a3:af:a2:b1:11:b9:c9: 5e:7b:01:f2:50:4a:12:ff:e5:5c:87:b6:3a:04:10: 18:1a:8a:77:79:fb:1e:77:0b:7b:9e:42:e8:5e:dc: 95:7d:38:2f:1f:fe:b7:7f:e9:dd:52:63:5d:50:d9: 8d:3e:ed:a4:b3:e5:12:27:8b:a3:27:4c:f8:04:8c: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:A3:89:D1:8B:26:D9:25:0A:27:B7:35:6A:A0:E8:98:E1:E0:29 X509v3 Authority Key Identifier: keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2b:2d:8c:2e:65:13:9b:2b:9e:27:13:5c:34:aa:d0:41:32: 42:d2:f2:69:43:18:58:58:99:84:76:5d:de:c6:c7:67:f1:46: 71:41:32:1c:24:58:90:43:60:73:13:e5:84:a5:12:2a:3e:dc: ed:02:6b:44:aa:a4:6a:12:97:f8:b9:74:90:ff:31:10:ae:7e: aa:80:72:80:28:30:28:ee:e5:eb:03:79:23:5f:29:a8:82:d5: d5:b9:02:ef:21:12:88:09:73:fc:a3:41:6f:04:a0:7b:74:a8: 79:c3:26:05:64:73:1f:b4:a0:a6:38:8a:31:b2:41:e1:dd:8d: a2:45:13:e7:32:6d:9e:63:57:e6:83:47:8e:c8:21:b6:52:a6: c9:c8:6b:f2:9e:34:07:fd:d2:3b:a6:48:b1:50:6f:cb:f4:c6: 57:0c:73:9d:e7:94:71:14:1b:b2:5c:cd:ad:5d:47:ae:6b:a6: 80:af:bd:3d:42:93:a0:fa:bc:5d:0a:dd:37:05:43:df:5e:3f: 25:b0:a7:c5:a4:00:0d:0c:e9:6c:ef:87:31:9f:03:f4:cc:0d: 72:f5:2d:96:45:0c:d9:61:a4:52:c6:cc:7c:3b:28:6e:e2:db: 1f:1d:98:77:ab:4c:3a:2f:38:8f:25:19:c0:35:6f:3d:b0:e8: b5:e7:b5:30 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDQ5QTExMC8GA1UEBRMoMkU1NjdDQjRENjY1NkJFRTBDRjlEQzI4QUYwREU3MjE1 QjdGNjdFODAeFw0yNjA3MjkwOTQ0NDRaFw0yNjA4MDUwOTQ0NDRaMBgxFjAUBgNV BAMTDTZhNjljYjhkLWVhMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqRRhphtGxIp8rGuFL1j6Itd0iaqkKYbUkULEkvHDpUf6Q/InHMe0li0Z89ues sTwqEqQLGyNPHLe56jDIN2EL5eZAPVMqtVdRDyl5zYp92gtYGF9lYrWXrv5rcerB w+Pfbwgaie+I5KMvlt/Az65PWnQPHZLax6HdRTOXCg2mpA+zGGuh/ab8Sr2yWxrx 7WmzNh5YHLYTudUDv3ptwoM11biA110JPHCPayvSeIPPqtmYzeEZGQtV/oD9o6+i sRG5yV57AfJQShL/5VyHtjoEEBgaind5+x53C3ueQuhe3JV9OC8f/rd/6d1SY11Q 2Y0+7aSz5RIni6MnTPgEjKlFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6DujidGL JtklCie3NWqg6Jjh4CkwHwYDVR0jBBgwFoAULlZ8tNZla+4M+dworw3nIVt/Z+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzFBNzU4QzFBMDJD QTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00TS1kd29ydzNuSVZ0X1ot Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTGxaOHROWmxhLTRNLWR3b3J3M25JVnRfWi1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NDlBLzFBNzU4QzFBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00 TS1kd29ydzNuSVZ0X1otZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQClKy2MLmUTmyueJxNcNKrQQTJC0vJpQxhYWJmEdl3exsdn8UZxQTIcJFiQQ2Bz E+WEpRIqPtztAmtEqqRqEpf4uXSQ/zEQrn6qgHKAKDAo7uXrA3kjXymogtXVuQLv IRKICXP8o0FvBKB7dKh5wyYFZHMftKCmOIoxskHh3Y2iRRPnMm2eY1fmg0eOyCG2 UqbJyGvynjQH/dI7pkixUG/L9MZXDHOd55RxFBuyXM2tXUeua6aAr709QpOg+rxd Ct03BUPfXj8lsKfFpAANDOls74cxnwP0zA1y9S2WRQzZYaRSxsx8Oyhu4tsfHZh3 q0w6LziPJRnANW89sOi157Uw -----END CERTIFICATE-----Generated at Wed Jul 29 14:21:33 2026 by rpki-client