$ rpki-client -vvvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft File: LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json) Hash identifier: geXHdvJ/DquA2rH+PftNR9QdD30rb+FOc7h9UlOS3WA= Subject key identifier: 17:4E:2B:E3:77:12:79:70:C0:4F:D3:8E:DD:EC:73:D6:32:F0:E1:C7 Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft Manifest number: 83 Signing time: Tue 13 Oct 2026 08:25:14 +0000 Manifest this update: Tue 13 Oct 2026 08:25:14 +0000 Manifest next update: Tue 20 Oct 2026 08:25:14 +0000 Files and hashes: 1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: x4/gAjURNqcUHepMNxNvCIdtbGvnY93zKLkAN5zdD4U=) 2: F7C02BF6885911F1B22A50DC5811F970.roa (hash: /wR6FGdhOPqF6g3hYPb/kar7/EqNQG1KP1NPSwyZHb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8 Validity Not Before: Oct 13 08:25:14 2026 GMT Not After : Oct 20 08:25:14 2026 GMT Subject: CN=6acdeaea-d3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:d1:08:c8:da:f1:c2:67:1b:80:f8:b0:81: c3:35:39:24:73:ba:f3:ba:71:ee:04:4f:9d:de:0f: b9:3f:a4:e1:8d:57:a6:ae:da:11:52:6b:7a:39:45: 73:89:c9:fc:b1:11:18:0a:7c:7a:ee:67:a0:af:02: d5:d2:3b:13:5a:4d:9d:78:a2:6f:31:0f:77:54:dc: 68:f5:0d:92:9a:78:3a:01:e9:55:cb:6b:3c:64:3b: 28:a7:43:1d:b6:64:d4:77:fd:1d:35:9f:d6:f0:e3: c7:f2:9b:27:74:b9:68:07:44:0a:dd:17:71:53:88: 91:fc:e9:1b:a4:b4:46:da:96:da:c0:21:e4:06:c2: 82:0e:26:89:09:98:d8:59:ec:c9:55:34:af:6d:51: 1e:28:dc:04:d2:d8:54:63:84:5e:f9:08:5a:bf:48: 42:0e:d4:0b:04:0a:ce:73:12:fd:ab:d0:9c:9e:c9: b7:1a:e1:a3:0c:ea:68:12:42:55:4e:3f:74:95:08: c4:ba:69:be:2f:83:cc:28:67:c4:bb:68:cd:be:4d: 08:28:2d:31:bd:54:25:cb:ba:4f:60:59:99:aa:b2: bb:3d:ae:21:29:61:71:3e:7b:48:e7:2e:c7:36:57: 8f:52:c0:09:8b:52:ce:e7:0a:3a:5f:24:14:c8:d8: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4E:2B:E3:77:12:79:70:C0:4F:D3:8E:DD:EC:73:D6:32:F0:E1:C7 X509v3 Authority Key Identifier: keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:51:6d:ea:c6:b4:8c:b1:ce:c8:6d:9f:ba:e4:68:e8:01: e7:5d:28:e3:64:ad:6e:54:d0:a9:17:e6:b1:1c:9d:ac:8b:15: 7c:f4:7b:db:f4:55:93:27:7d:2e:e1:78:ad:ad:30:c6:33:8a: b2:da:5b:8d:60:31:79:50:d0:62:84:be:ee:37:67:4a:fb:e4: f2:b3:84:3b:39:72:a9:1c:07:17:b8:31:16:62:97:68:fe:57: 31:b5:41:2e:a6:2d:c4:68:50:8c:1a:a9:1a:92:6a:f8:d3:16: fb:fe:10:ea:97:b1:06:24:78:20:7f:64:ef:21:bb:1a:e2:c6: d0:d4:09:73:aa:92:5c:ca:91:6e:2e:1c:f6:2c:21:5c:8d:68: dd:87:ab:8d:42:cb:b3:e5:61:a8:d3:4c:15:3b:9e:c3:85:0c: 91:cd:46:45:77:a0:ff:bc:80:df:b6:f0:b5:aa:30:7b:40:68: e4:eb:f1:a4:46:28:9c:e9:3e:3b:ce:68:b0:38:d6:fa:cb:7d: 04:07:29:a1:f7:e7:21:7f:a7:64:fa:a1:ba:66:f9:57:31:14: 87:48:62:21:29:ba:77:17:41:e8:30:71:1c:93:2b:d6:f3:6a: 3d:ae:be:dd:62:44:d8:8f:33:20:83:ba:7c:87:d3:79:28:e2: 7c:dd:fa:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA0OUExMTAvBgNVBAUTKDJFNTY3Q0I0RDY2NTZCRUUwQ0Y5REMyOEFGMERFNzIx NUI3RjY3RTgwHhcNMjYxMDEzMDgyNTE0WhcNMjYxMDIwMDgyNTE0WjAYMRYwFAYD VQQDEw02YWNkZWFlYS1kM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx77RCMja8cJnG4D4sIHDNTkkc7rzunHuBE+d3g+5P6ThjVemrtoRUmt6OUVz icn8sREYCnx67megrwLV0jsTWk2deKJvMQ93VNxo9Q2Smng6AelVy2s8ZDsop0Md tmTUd/0dNZ/W8OPH8psndLloB0QK3RdxU4iR/OkbpLRG2pbawCHkBsKCDiaJCZjY WezJVTSvbVEeKNwE0thUY4Re+Qhav0hCDtQLBArOcxL9q9Ccnsm3GuGjDOpoEkJV Tj90lQjEumm+L4PMKGfEu2jNvk0IKC0xvVQly7pPYFmZqrK7Pa4hKWFxPntI5y7H NlePUsAJi1LO5wo6XyQUyNjI+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdOK+N3 EnlwwE/Tjt3sc9Yy8OHHMB8GA1UdIwQYMBaAFC5WfLTWZWvuDPncKK8N5yFbf2fo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDQ5QS8xQTc1OEMxQTAy Q0ExMUYxQUQyRDI3NDkwNDNEOEM2Ny9MbFo4dE5abGEtNE0tZHdvcnczbklWdF9a LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xsWjh0TlpsYS00TS1kd29ydzNuSVZ0X1otZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDQ5QS8xQTc1OEMxQTAyQ0ExMUYxQUQyRDI3NDkwNDNEOEM2Ny9MbFo4dE5abGEt NE0tZHdvcnczbklWdF9aLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuZRberGtIyxzshtn7rkaOgB510o42StblTQqRfmsRydrIsVfPR72/RVkyd9 LuF4ra0wxjOKstpbjWAxeVDQYoS+7jdnSvvk8rOEOzlyqRwHF7gxFmKXaP5XMbVB LqYtxGhQjBqpGpJq+NMW+/4Q6pexBiR4IH9k7yG7GuLG0NQJc6qSXMqRbi4c9iwh XI1o3YerjULLs+VhqNNMFTuew4UMkc1GRXeg/7yA37bwtaowe0Bo5OvxpEYonOk+ O85osDjW+st9BAcpoffnIX+nZPqhumb5VzEUh0hiISm6dxdB6DBxHJMr1vNqPa6+ 3WJE2I8zIIO6fIfTeSjifN361A== -----END CERTIFICATE-----Generated at Thu Oct 15 05:34:39 2026 by rpki-client