$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft File: lEL1N-zOsDIKyhL8echC7A_9BiY.mft (raw, json) Hash identifier: M0sAn56QUpUEonA6iWic7plf+q4YRuzGG8SFc0SUUMI= Subject key identifier: D3:EE:12:FA:1D:E2:1C:1F:18:B0:AC:3F:3B:FE:08:82:23:15:83:C4 Authority key identifier: 94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 Certificate issuer: /CN=A91F53E8/serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft Manifest number: 22 Signing time: Mon 21 Sep 2026 08:49:59 +0000 Manifest this update: Mon 21 Sep 2026 08:49:58 +0000 Manifest next update: Mon 28 Sep 2026 08:49:58 +0000 Files and hashes: 1: lEL1N-zOsDIKyhL8echC7A_9BiY.crl (hash: chAoJsFQmQW8WVnYE364UozaB4/lCSNCl1rhLyN4wQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53E8, serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Validity Not Before: Sep 21 08:49:58 2026 GMT Not After : Sep 28 08:49:58 2026 GMT Subject: CN=6ab0efb7-c302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8f:a3:49:fe:ab:5a:1b:8b:c8:32:58:76:01: d3:93:df:6d:72:c5:44:b9:bf:05:8d:2b:84:7d:33: 91:2b:6f:e1:c8:c5:f9:62:fd:00:4f:d2:9c:18:7a: eb:7e:51:79:67:ae:53:3f:ef:95:aa:4b:56:13:9d: b6:8c:25:63:ab:7b:5f:ce:e1:39:3c:be:8c:4b:6d: b2:cb:88:59:ed:20:10:08:d1:fc:d8:50:88:69:4b: 5f:35:95:19:0c:35:88:a3:1b:d0:4e:1d:14:91:d1: ba:ef:47:0c:4c:6f:31:be:94:74:a3:32:a5:35:b9: db:a3:cd:e3:b0:a1:d3:a1:b9:8c:a2:9a:17:46:3e: ae:11:23:35:e9:e9:96:20:1f:ea:bd:6a:32:11:0e: af:f6:e5:51:b5:da:49:74:b0:e9:b1:42:25:74:49: e8:bf:80:08:80:ec:d5:46:e5:27:da:1d:1c:78:63: 64:43:61:be:4b:6c:ac:37:dc:75:71:6d:75:d8:99: fc:c6:c2:af:45:9d:68:fd:9c:1e:31:48:14:67:84: 13:fc:6c:1e:94:2d:04:1a:6c:fd:36:af:d4:a8:6e: e3:d9:c2:21:76:0d:52:74:95:23:0c:27:46:60:7d: 73:0b:de:f0:b2:09:88:75:f9:0a:77:1f:fa:98:5e: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EE:12:FA:1D:E2:1C:1F:18:B0:AC:3F:3B:FE:08:82:23:15:83:C4 X509v3 Authority Key Identifier: keyid:94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:72:fd:19:fb:81:fc:f4:92:91:54:02:ea:88:7d:50:7a: 95:f0:ca:01:7f:9f:76:ea:82:0a:57:c1:19:1a:7e:ff:17:f7: f7:5d:51:54:7e:5c:ce:39:3c:5e:0e:10:17:69:af:7e:27:d5: de:d7:f7:70:e3:07:d4:97:9c:81:37:7a:b7:94:84:b2:d2:1a: 01:0a:30:43:8a:e5:b7:5f:86:6d:8b:92:0f:21:00:2b:ff:39: 08:81:33:30:cd:13:f3:d3:f9:63:bb:bc:d6:94:5a:b1:a8:19: 1b:0e:61:0a:85:a6:02:d5:8b:7c:6a:55:34:c2:fb:ee:93:e5: 2f:b8:0b:6f:f9:54:75:ec:75:ed:57:9a:6f:55:35:b4:ab:3f: 0f:47:1f:f1:59:6f:f6:2e:75:b0:c9:a8:13:c1:68:1a:81:c1: 67:9c:6d:39:eb:f9:cc:66:6e:94:0d:22:bc:0b:e6:bf:e4:81: fb:73:e2:3c:08:56:f6:3d:37:5a:3e:6a:46:05:6e:74:0a:8c: 1d:5d:6e:d5:03:2f:af:71:12:d7:60:4c:1a:90:a2:31:9b:5e: 73:46:94:89:37:7f:76:51:86:81:c2:be:f5:8e:63:0c:bf:ea: 00:b1:4f:76:cc:3b:09:2a:aa:77:d9:27:84:bc:e5:20:b1:93: 25:20:5b:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNFODExMC8GA1UEBRMoOTQ0MkY1MzdFQ0NFQjAzMjBBQ0ExMkZDNzlDODQyRUMw RkZEMDYyNjAeFw0yNjA5MjEwODQ5NThaFw0yNjA5MjgwODQ5NThaMBgxFjAUBgNV BAMTDTZhYjBlZmI3LWMzMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmj6NJ/qtaG4vIMlh2AdOT321yxUS5vwWNK4R9M5Erb+HIxfli/QBP0pwYeut+ UXlnrlM/75WqS1YTnbaMJWOre1/O4Tk8voxLbbLLiFntIBAI0fzYUIhpS181lRkM NYijG9BOHRSR0brvRwxMbzG+lHSjMqU1udujzeOwodOhuYyimhdGPq4RIzXp6ZYg H+q9ajIRDq/25VG12kl0sOmxQiV0Sei/gAiA7NVG5SfaHRx4Y2RDYb5LbKw33HVx bXXYmfzGwq9FnWj9nB4xSBRnhBP8bB6ULQQabP02r9SobuPZwiF2DVJ0lSMMJ0Zg fXML3vCyCYh1+Qp3H/qYXizVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0+4S+h3i HB8YsKw/O/4IgiMVg8QwHwYDVR0jBBgwFoAUlEL1N+zOsDIKyhL8echC7A/9BiYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4Lzc4MDVGQTlDODVG NDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJS3loTDhlY2hDN0FfOUJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEVMMU4tek9zRElLeWhMOGVjaEM3QV85QmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 M0U4Lzc4MDVGQTlDODVGNDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJ S3loTDhlY2hDN0FfOUJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxenL9GfuB/PSSkVQC6oh9UHqV8MoBf5926oIKV8EZGn7/F/f3XVFUflzOOTxe DhAXaa9+J9Xe1/dw4wfUl5yBN3q3lISy0hoBCjBDiuW3X4Zti5IPIQAr/zkIgTMw zRPz0/lju7zWlFqxqBkbDmEKhaYC1Yt8alU0wvvuk+UvuAtv+VR17HXtV5pvVTW0 qz8PRx/xWW/2LnWwyagTwWgagcFnnG056/nMZm6UDSK8C+a/5IH7c+I8CFb2PTda PmpGBW50CowdXW7VAy+vcRLXYEwakKIxm15zRpSJN392UYaBwr71jmMMv+oAsU92 zDsJKqp32SeEvOUgsZMlIFuW -----END CERTIFICATE-----Generated at Tue Sep 22 19:36:12 2026 by rpki-client