$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json) Hash identifier: 35MXvrAuE1CaK7gsRIpgvKDl4SxgjP9HE1aYU7+bZEw= Subject key identifier: 35:65:A9:A4:D9:4B:84:24:D4:24:9A:C6:6C:9F:09:64:A9:E5:85:7D Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Certificate serial: 25FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft Manifest number: 25FD Signing time: Tue 22 Sep 2026 14:16:39 +0000 Manifest this update: Tue 22 Sep 2026 14:16:39 +0000 Manifest next update: Tue 29 Sep 2026 14:16:39 +0000 Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: CF6EFFYHVtJcNcG22eU5wb9pzQRt3JKOHB92IW87/5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9725 (0x25fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Validity Not Before: Sep 22 14:16:39 2026 GMT Not After : Sep 29 14:16:39 2026 GMT Subject: CN=6ab28dc7-0163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:a2:a9:4b:19:63:60:47:4d:dc:f7:79:10: 24:a6:8d:6e:b5:41:c1:24:43:99:76:99:78:f2:09: 6b:ed:9c:76:e2:db:fa:13:bf:37:ae:a7:2a:88:27: ea:2b:25:00:4c:cf:89:32:bf:28:f4:8c:fb:31:2a: 06:09:2b:24:69:f3:ff:de:7a:66:77:d5:0f:8c:40: b5:43:92:60:dc:8b:7d:cb:23:c8:c8:85:21:c4:3b: 37:c0:cb:5b:16:26:ff:63:b6:08:dc:a7:38:8b:25: b8:42:ee:29:0e:af:8b:bb:c0:d9:b1:51:ea:ff:06: 1b:b5:ff:76:07:34:af:11:c7:e9:9e:52:42:76:10: b2:70:93:ce:57:97:9a:4c:33:6e:5c:31:e0:86:32: 41:a5:bb:d5:0c:11:4f:9a:6a:bc:33:74:d2:d8:d8: 47:05:41:4f:e2:4e:98:d3:6f:7e:83:fa:49:c0:4a: d7:2c:d7:6e:e8:6a:2f:7d:5c:df:a3:10:12:a9:e7: 82:c7:71:96:b0:96:67:6f:0f:71:90:84:47:b4:d6: 7d:a2:ca:ef:a6:df:85:fb:1a:ff:bf:0f:cf:36:28: de:3a:51:33:4c:a2:b9:4e:0f:52:c8:2b:19:d8:85: 2c:b1:04:7f:26:d2:48:82:44:eb:ab:8a:15:ff:71: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:A9:A4:D9:4B:84:24:D4:24:9A:C6:6C:9F:09:64:A9:E5:85:7D X509v3 Authority Key Identifier: keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f4:86:60:1a:19:2b:e5:41:be:13:d5:b0:11:29:e7:1d:c4: 53:66:a1:db:a1:39:ce:b3:f4:80:74:0c:1b:00:8b:92:13:9e: 40:ed:bb:bd:a4:e6:59:d4:ff:91:6c:b3:b8:df:7a:8e:75:9b: 5b:7f:7c:0d:13:28:7b:70:d5:3e:77:be:fa:57:8c:9b:59:04: 73:1a:68:e3:6f:7c:6e:78:93:48:50:48:6b:fc:d2:16:72:91: 40:0c:0e:61:1a:09:30:52:69:bf:7f:9d:85:1e:f2:31:4e:e0: 95:ac:b1:1c:b3:39:26:6a:10:22:60:10:e8:14:cb:a1:7f:5d: a4:30:c9:56:82:76:a5:b8:7e:9d:3d:c1:81:ae:9b:fc:1e:89: 21:70:a2:8b:1e:e5:0a:a6:48:51:99:cc:29:8e:90:9c:8d:c5: c7:84:fa:6d:4a:19:a5:03:46:2a:0e:d2:93:e8:a2:7b:8a:22: 74:17:aa:1a:b1:13:95:2a:83:71:90:d5:0c:18:c3:d3:2b:d4: ca:04:86:eb:31:8f:b5:05:cb:34:a1:67:63:9b:ee:44:5c:32: ba:f7:90:1c:f2:ef:06:75:82:89:48:b8:d4:9a:5d:4d:ed:fe: 30:d0:17:e6:e6:1a:09:97:07:56:0e:d3:55:dc:68:6f:31:09: 29:30:75:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDVDQjI5OEJDMUE3MDUwMTc4MDVDNTYxRjA5MEEwRDQ3 OTUwRTZBQkQwHhcNMjYwOTIyMTQxNjM5WhcNMjYwOTI5MTQxNjM5WjAYMRYwFAYD VQQDEw02YWIyOGRjNy0wMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE6iqUsZY2BHTdz3eRAkpo1utUHBJEOZdpl48glr7Zx24tv6E783rqcqiCfq KyUATM+JMr8o9Iz7MSoGCSskafP/3npmd9UPjEC1Q5Jg3It9yyPIyIUhxDs3wMtb Fib/Y7YI3Kc4iyW4Qu4pDq+Lu8DZsVHq/wYbtf92BzSvEcfpnlJCdhCycJPOV5ea TDNuXDHghjJBpbvVDBFPmmq8M3TS2NhHBUFP4k6Y029+g/pJwErXLNdu6GovfVzf oxASqeeCx3GWsJZnbw9xkIRHtNZ9osrvpt+F+xr/vw/PNijeOlEzTKK5Tg9SyCsZ 2IUssQR/JtJIgkTrq4oV/3GSxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVlqaTZ S4Qk1CSaxmyfCWSp5YV9MB8GA1UdIwQYMBaAFFyymLwacFAXgFxWHwkKDUeVDmq9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8zRjM0MjAzRTI5 MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VCZUFYRllmQ1FvTlI1VU9h cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hMS1l2QnB3VUJlQVhGWWZDUW9OUjVVT2FyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8zRjM0MjAzRTI5MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VC ZUFYRllmQ1FvTlI1VU9hcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG/SGYBoZK+VBvhPVsBEp5x3EU2ah26E5zrP0gHQMGwCLkhOeQO27vaTmWdT/ kWyzuN96jnWbW398DRMoe3DVPne++leMm1kEcxpo4298bniTSFBIa/zSFnKRQAwO YRoJMFJpv3+dhR7yMU7glayxHLM5JmoQImAQ6BTLoX9dpDDJVoJ2pbh+nT3Bga6b /B6JIXCiix7lCqZIUZnMKY6QnI3Fx4T6bUoZpQNGKg7Sk+iie4oidBeqGrETlSqD cZDVDBjD0yvUygSG6zGPtQXLNKFnY5vuRFwyuveQHPLvBnWCiUi41JpdTe3+MNAX 5uYaCZcHVg7TVdxobzEJKTB13w== -----END CERTIFICATE-----Generated at Wed Sep 23 01:01:31 2026 by rpki-client