$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json) Hash identifier: VBPrEhSlEZ8fdgSn0YeQmxXyMjG74eBiDVS7AtVGOLk= Subject key identifier: C8:25:BF:91:89:01:34:49:C8:4C:5F:6B:E9:C7:F9:41:EB:2F:76:91 Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft Manifest number: 03E1 Signing time: Wed 23 Sep 2026 00:06:24 +0000 Manifest this update: Wed 23 Sep 2026 00:06:23 +0000 Manifest next update: Wed 30 Sep 2026 00:06:23 +0000 Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: 8kkozRv0OHDUaCQRIQaAdI0n0igToJoa4+x27AWhagU=) 2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: 6M3nHh1tBkWrtavTbv5/PbKrcEdBIhYQxQIZdYCN4/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: Sep 23 00:06:23 2026 GMT Not After : Sep 30 00:06:23 2026 GMT Subject: CN=6ab31800-f9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:5c:9d:95:85:09:6c:90:3a:f2:23:f9:3b: 8d:96:b4:47:f5:d7:23:ee:0a:b8:66:e6:23:27:f6: 5b:2d:d5:90:a0:42:66:4b:99:63:f9:ea:df:29:cd: ed:2f:68:f1:5f:3c:bd:a3:3c:3a:76:c0:ab:df:56: 22:ee:ea:77:45:9c:79:95:47:7b:76:9f:56:46:0c: a9:88:b3:1f:04:14:98:18:32:b2:15:8e:62:f3:16: b6:7c:6a:ed:70:b7:0e:47:82:82:14:15:b8:2b:7e: 97:45:8b:24:1a:a3:fc:0b:bf:46:d4:ca:32:4b:f3: 02:f5:71:c7:13:fe:86:a1:9e:76:88:c9:3e:86:c6: eb:a1:e0:f1:c9:ff:e7:63:e6:4b:f6:30:27:9f:9e: 1c:64:68:42:90:28:3e:ec:c7:02:a8:ee:74:cc:79: 28:81:70:e2:a9:fa:ae:b2:2c:2f:93:d9:b9:c0:52: 54:6a:4f:0c:47:4a:f1:8a:4a:3a:5d:1b:29:40:bc: da:35:26:e8:d4:f3:3c:60:a3:6d:02:0b:17:a5:65: 33:79:92:df:0f:1e:b7:8b:8a:68:21:93:f7:0b:a6: e3:6f:9c:a1:15:45:c1:a1:1a:d5:17:57:4f:02:40: b6:e4:02:ae:28:26:3f:bb:7c:8b:98:5e:2a:63:37: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:BF:91:89:01:34:49:C8:4C:5F:6B:E9:C7:F9:41:EB:2F:76:91 X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:42:5f:a3:f3:ba:37:c8:e7:a3:70:ef:8c:8c:7c:ae:06:b0: 37:b7:96:65:38:23:c9:c1:5f:0e:06:20:8a:95:79:f3:e1:9e: 84:62:13:74:9e:37:0e:2f:10:c8:b5:58:6d:cc:21:4b:82:6c: 95:e2:00:f9:14:8e:b2:c8:c3:13:6f:55:24:c8:91:f5:0f:9f: 30:b7:28:8b:9b:79:2e:99:38:49:0e:58:56:92:ce:60:fb:90: 10:e8:31:1f:6f:7a:27:8d:33:ce:64:69:09:41:55:ba:4a:75: 77:eb:a8:cc:d2:24:43:33:64:b2:c0:40:bf:c6:5f:fa:24:74: 45:58:a5:5a:30:a8:d7:fb:82:c7:3d:51:31:93:f3:f9:cc:5c: 86:53:cb:fa:7c:bc:f4:18:ac:bf:66:2f:3a:51:ea:2f:26:9f: aa:f2:27:87:0d:09:e6:9b:41:54:ea:c6:2b:de:30:95:75:c4: ca:42:6a:90:88:80:b0:25:04:0a:eb:cc:40:26:76:bc:32:68: 33:43:c1:05:a9:3e:58:ba:63:e9:c4:96:d3:cb:df:b8:c7:aa: 52:c8:61:e5:b4:93:4e:b2:f8:45:7e:d7:19:90:80:a9:8c:c5: 6e:c2:4c:5e:a9:35:f3:9c:69:31:18:d8:5f:20:75:eb:1a:a5: 0a:db:f1:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjYwOTIzMDAwNjIzWhcNMjYwOTMwMDAwNjIzWjAYMRYwFAYD VQQDEw02YWIzMTgwMC1mOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjuhcnZWFCWyQOvIj+TuNlrRH9dcj7gq4ZuYjJ/ZbLdWQoEJmS5lj+erfKc3t L2jxXzy9ozw6dsCr31Yi7up3RZx5lUd7dp9WRgypiLMfBBSYGDKyFY5i8xa2fGrt cLcOR4KCFBW4K36XRYskGqP8C79G1MoyS/MC9XHHE/6GoZ52iMk+hsbroeDxyf/n Y+ZL9jAnn54cZGhCkCg+7McCqO50zHkogXDiqfqusiwvk9m5wFJUak8MR0rxiko6 XRspQLzaNSbo1PM8YKNtAgsXpWUzeZLfDx63i4poIZP3C6bjb5yhFUXBoRrVF1dP AkC25AKuKCY/u3yLmF4qYzea+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMglv5GJ ATRJyExfa+nH+UHrL3aRMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2 ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvkJfo/O6N8jno3DvjIx8rgawN7eWZTgjycFfDgYgipV58+GehGITdJ43Di8Q yLVYbcwhS4JsleIA+RSOssjDE29VJMiR9Q+fMLcoi5t5Lpk4SQ5YVpLOYPuQEOgx H296J40zzmRpCUFVukp1d+uozNIkQzNkssBAv8Zf+iR0RVilWjCo1/uCxz1RMZPz +cxchlPL+ny89Bisv2YvOlHqLyafqvInhw0J5ptBVOrGK94wlXXEykJqkIiAsCUE CuvMQCZ2vDJoM0PBBak+WLpj6cSW08vfuMeqUshh5bSTTrL4RX7XGZCAqYzFbsJM Xqk185xpMRjYXyB16xqlCtvxRQ== -----END CERTIFICATE-----Generated at Thu Sep 24 11:12:29 2026 by rpki-client