$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json) Hash identifier: ScgiKsKpJHIoIIelFZwKg9u9Gi8gkszmohEUrhvtK0g= Subject key identifier: 3A:11:76:06:BD:3F:3C:0A:1D:92:CE:7D:7F:F0:0D:DD:AD:AB:79:9C Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft Manifest number: 015D Signing time: Thu 23 Jul 2026 06:39:16 +0000 Manifest this update: Thu 23 Jul 2026 06:39:15 +0000 Manifest next update: Thu 30 Jul 2026 06:39:15 +0000 Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: IAd5cnB5gRB7dU9iO/i2uTLRb4zfuUU3I3Vh+itOO3I=) 2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: VHajbTjmwkX2RW0fXipdm5sMeEnHYksBbQ58cyoCp5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: Jul 23 06:39:15 2026 GMT Not After : Jul 30 06:39:15 2026 GMT Subject: CN=6a61b714-1ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:6d:4d:9d:b1:f9:42:b1:5b:85:b5:d2:da: c8:5f:a9:89:03:72:fa:45:18:f5:3a:e9:6b:85:bb: e9:54:b2:80:b8:6e:9f:3d:c8:2f:45:df:80:dd:d1: 3d:90:8e:fd:f0:88:db:95:ee:60:b7:eb:22:77:4c: 53:be:1b:39:b2:7c:f2:5f:97:2f:02:d2:54:0d:29: d5:93:1a:2e:00:3a:b2:d6:01:1d:d2:07:28:5a:30: e0:37:df:96:1f:8e:b3:54:54:da:e4:1c:a1:0b:5c: 93:7d:e6:3d:c9:80:03:02:e1:f3:47:b0:ab:0a:2d: 66:42:00:cd:d1:5a:a4:ac:a9:ae:25:28:ec:58:6a: 82:80:6d:52:25:74:2e:7b:d0:d3:6e:35:b1:cc:4c: 9a:1e:4f:2d:27:c7:52:45:24:bf:44:9c:88:2d:a4: 8f:23:86:d3:5e:3c:21:da:ec:34:cc:56:61:17:30: 45:bc:db:c4:79:91:0e:f5:66:64:32:a1:46:df:69: 2a:97:33:e8:a0:49:07:6c:8d:c0:4e:a8:e1:84:91: 28:bc:d8:a8:ba:75:c9:d8:78:70:fb:65:45:f2:77: b3:22:fe:6c:01:b0:da:ad:8c:8e:37:27:8d:51:99: 0a:ba:c3:02:5b:36:f9:01:15:19:6f:16:54:bc:13: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:76:06:BD:3F:3C:0A:1D:92:CE:7D:7F:F0:0D:DD:AD:AB:79:9C X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a0:25:2f:1d:5b:74:6d:e5:f4:01:3c:f7:70:6c:45:74:ff: 7e:b6:50:87:1a:af:51:ca:11:db:fd:c0:5c:bc:12:9b:22:3e: dd:3c:a8:ad:b4:bd:6d:31:94:07:a3:f4:b2:b1:9e:3e:ee:70: a7:cb:6b:95:79:12:30:0d:98:58:1e:55:a0:41:86:2a:6c:22: d5:2b:f5:96:e8:66:4b:db:7b:a5:f8:1c:52:c1:04:7f:ae:4e: a5:1e:f1:35:ba:9b:a1:28:b4:28:4c:f7:de:c0:72:e0:b7:5e: 1e:b1:1d:a9:60:ca:f0:1a:36:aa:6b:b1:c6:8a:ce:aa:58:0b: 60:80:c7:9f:3e:e2:93:4b:dc:76:70:6a:ab:58:2f:b1:2c:9f: dc:b9:d8:98:83:6f:7b:f9:af:e7:11:e0:56:fc:9b:7f:13:6a: 63:78:b3:e5:31:37:d0:f9:3f:d6:d6:52:85:a1:eb:6b:42:6d: 40:17:b8:2c:89:f2:d5:36:e8:ea:30:66:e7:1e:fc:43:27:8b: 8b:01:cc:54:ee:de:74:1b:3e:fb:29:a8:be:1e:ae:6a:57:9b: bc:fa:ca:48:8d:8c:f9:f3:9c:e7:b9:f5:d5:72:29:f3:04:b5: dd:aa:78:e7:13:33:94:2a:cc:50:6e:d2:24:c1:d3:19:f7:20: aa:8b:16:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3 N0EwNkNFOEMwHhcNMjYwNzIzMDYzOTE1WhcNMjYwNzMwMDYzOTE1WjAYMRYwFAYD VQQDEw02YTYxYjcxNC0xYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkVtTZ2x+UKxW4W10trIX6mJA3L6RRj1OulrhbvpVLKAuG6fPcgvRd+A3dE9 kI798Ijble5gt+sid0xTvhs5snzyX5cvAtJUDSnVkxouADqy1gEd0gcoWjDgN9+W H46zVFTa5ByhC1yTfeY9yYADAuHzR7CrCi1mQgDN0VqkrKmuJSjsWGqCgG1SJXQu e9DTbjWxzEyaHk8tJ8dSRSS/RJyILaSPI4bTXjwh2uw0zFZhFzBFvNvEeZEO9WZk MqFG32kqlzPooEkHbI3ATqjhhJEovNiounXJ2Hhw+2VF8nezIv5sAbDarYyONyeN UZkKusMCWzb5ARUZbxZUvBMsTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoRdga9 PzwKHZLOfX/wDd2tq3mcMB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6 b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzlCRi9CRTFENEEzNDdCNEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQ Zkx4aWNzWEdsX04zb0d6b3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMKAlLx1bdG3l9AE893BsRXT/frZQhxqvUcoR2/3AXLwSmyI+3TyorbS9bTGU B6P0srGePu5wp8trlXkSMA2YWB5VoEGGKmwi1Sv1luhmS9t7pfgcUsEEf65OpR7x NbqboSi0KEz33sBy4LdeHrEdqWDK8Bo2qmuxxorOqlgLYIDHnz7ik0vcdnBqq1gv sSyf3LnYmINve/mv5xHgVvybfxNqY3iz5TE30Pk/1tZShaHra0JtQBe4LIny1Tbo 6jBm5x78QyeLiwHMVO7edBs++ymovh6ualebvPrKSI2M+fOc57n11XIp8wS13ap4 5xMzlCrMUG7SJMHTGfcgqosWDg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:18 2026 by rpki-client