$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft File: LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json) Hash identifier: ja437e5qTagi2Md4EA/9CxlN6gQjY9M7PZn+gxZOFr4= Subject key identifier: E8:DB:CF:B2:E2:76:71:D7:42:75:B1:9D:B0:27:58:D4:C9:66:D3:A6 Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 Certificate issuer: /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft Manifest number: 7D Signing time: Mon 27 Jul 2026 09:56:09 +0000 Manifest this update: Mon 27 Jul 2026 09:56:09 +0000 Manifest next update: Mon 03 Aug 2026 09:56:09 +0000 Files and hashes: 1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: vhTEZ3+WAIK7eDhK67NTgv7VCVyIs3++fgFvuHcs240=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Validity Not Before: Jul 27 09:56:09 2026 GMT Not After : Aug 3 09:56:09 2026 GMT Subject: CN=6a672b39-83ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:b8:de:6d:6a:b8:90:0d:2e:08:5c:73:a7: bf:d7:b9:e4:f7:29:43:7b:2f:6c:69:93:15:dc:bf: 0c:9d:0e:12:8c:56:1a:d2:ea:3b:dd:e3:86:c0:ae: 5a:26:62:72:72:57:a5:2d:56:3e:00:3b:46:a6:b8: 4b:cf:7e:2c:0e:15:9e:e4:59:84:32:61:06:54:6e: 31:9f:44:a7:3d:3a:17:b6:07:24:1c:ad:ff:d8:4a: 23:85:fc:55:8b:fe:ea:35:74:17:ea:17:a8:d6:c4: 09:28:83:b7:84:64:b4:cb:75:0e:d2:20:c5:00:22: cf:f0:f7:6a:f6:4c:c2:41:24:b7:d8:9e:f8:7e:d6: b2:60:ff:ef:e4:6b:52:07:9d:5a:0a:d9:28:bd:7e: 11:88:31:f0:43:71:a3:53:67:81:be:7e:af:d0:c6: 9f:c1:7e:01:43:4a:69:ab:0e:dd:9b:58:3d:22:55: 16:f0:84:03:0f:b2:f5:e7:aa:f7:2d:60:f2:20:05: 48:08:d6:ad:b7:55:9c:93:52:bf:ac:91:1e:86:7a: 63:72:4e:09:78:b1:ac:70:ee:1a:13:3c:9f:e9:9b: 86:14:14:47:31:3f:00:01:28:00:3c:e1:9f:00:4c: ff:1b:33:0f:d6:79:60:4e:7e:a2:7c:65:7f:cb:f9: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DB:CF:B2:E2:76:71:D7:42:75:B1:9D:B0:27:58:D4:C9:66:D3:A6 X509v3 Authority Key Identifier: keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f4:da:b0:26:f4:e6:61:67:e3:63:23:58:c2:15:bf:18:8e: 08:6a:3c:62:08:44:dd:8b:25:92:21:bd:a1:9e:d4:f9:23:34: 15:ca:5b:38:18:60:b9:2c:75:8b:df:0d:23:5f:5d:cc:64:fc: 56:54:46:35:50:b1:98:ff:3e:0d:c5:d4:3c:1b:d1:e3:1f:99: fa:81:a4:5c:c1:5e:8f:cd:8f:f0:9c:f7:bb:21:24:91:ee:8c: f9:74:9f:31:b0:d0:52:4d:82:ff:3f:9a:32:be:25:2b:5b:04: 34:66:cf:ba:a4:de:6e:b5:24:b4:03:69:b3:74:52:a4:79:9d: 33:f2:d6:4a:31:25:b1:73:df:fb:40:77:96:15:f6:b9:df:a6: ce:18:66:20:a9:ad:34:c4:98:2b:08:23:a6:95:c2:dd:f2:0a: e2:f9:44:e3:98:0c:da:de:82:68:47:90:c5:c2:06:94:51:94: 52:dd:28:be:36:cb:38:f0:4e:fa:b6:29:2d:5e:68:43:87:ca: 32:51:47:51:7e:2c:3b:b1:7a:60:ef:88:db:6e:9c:6d:e8:ad: e8:a3:cf:79:c9:45:67:0b:ba:13:da:fb:6a:aa:8c:01:e7:cd: c1:76:b8:23:ff:63:5e:57:e2:39:7c:d4:16:0b:21:5c:15:b9: 4a:4c:5c:12 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEFDRDExMC8GA1UEBRMoMkM5QUE1Rjk4MkM4QjQ0RkEyNkRGMDhDRUEyNDMxRDc5 QUFDMzc1NTAeFw0yNjA3MjcwOTU2MDlaFw0yNjA4MDMwOTU2MDlaMBgxFjAUBgNV BAMTDTZhNjcyYjM5LTgzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7zrjebWq4kA0uCFxzp7/XueT3KUN7L2xpkxXcvwydDhKMVhrS6jvd44bArlom YnJyV6UtVj4AO0amuEvPfiwOFZ7kWYQyYQZUbjGfRKc9Ohe2ByQcrf/YSiOF/FWL /uo1dBfqF6jWxAkog7eEZLTLdQ7SIMUAIs/w92r2TMJBJLfYnvh+1rJg/+/ka1IH nVoK2Si9fhGIMfBDcaNTZ4G+fq/Qxp/BfgFDSmmrDt2bWD0iVRbwhAMPsvXnqvct YPIgBUgI1q23VZyTUr+skR6GemNyTgl4saxw7hoTPJ/pm4YUFEcxPwABKAA84Z8A TP8bMw/WeWBOfqJ8ZX/L+W1bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6NvPsuJ2 cddCdbGdsCdY1Mlm06YwHwYDVR0jBBgwFoAULJql+YLItE+ibfCM6iQx15qsN1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QUNEL0JDREJENEU0Q0I5 QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUtaWJmQ002aVF4MTVxc04x VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEpxbC1ZTEl0RS1pYmZDTTZpUXgxNXFzTjFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QUNEL0JDREJENEU0Q0I5QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUt aWJmQ002aVF4MTVxc04xVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAn9NqwJvTmYWfjYyNYwhW/GI4IajxiCETdiyWSIb2hntT5IzQVyls4GGC5LHWL 3w0jX13MZPxWVEY1ULGY/z4NxdQ8G9HjH5n6gaRcwV6PzY/wnPe7ISSR7oz5dJ8x sNBSTYL/P5oyviUrWwQ0Zs+6pN5utSS0A2mzdFKkeZ0z8tZKMSWxc9/7QHeWFfa5 36bOGGYgqa00xJgrCCOmlcLd8gri+UTjmAza3oJoR5DFwgaUUZRS3Si+Nss48E76 tiktXmhDh8oyUUdRfiw7sXpg74jbbpxt6K3oo895yUVnC7oT2vtqqowB583Bdrgj /2NeV+I5fNQWCyFcFblKTFwS -----END CERTIFICATE-----Generated at Tue Jul 28 20:55:09 2026 by rpki-client