$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json) Hash identifier: LW6f9GxuwxT/0WeOp0ANq+3Xkex1VuYgFHp6MJNiOCY= Subject key identifier: 14:57:8E:BD:12:F7:D8:D6:0E:76:E7:45:56:52:68:1E:41:96:E0:CD Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Certificate serial: 25FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft Manifest number: 25FC Signing time: Sun 20 Sep 2026 14:16:34 +0000 Manifest this update: Sun 20 Sep 2026 14:16:33 +0000 Manifest next update: Sun 27 Sep 2026 14:16:33 +0000 Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: Wt2YwqYlnFSlfHw/S4ZK9Kvb+7BzXeiGQN+YK1AJgow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9724 (0x25fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Validity Not Before: Sep 20 14:16:33 2026 GMT Not After : Sep 27 14:16:33 2026 GMT Subject: CN=6aafeac2-b636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:37:2e:67:1b:87:fe:75:3b:e5:81:dc:80: 24:a6:5c:95:28:2b:36:55:66:13:f4:2e:33:4c:c0: d9:37:6e:7f:05:6b:29:3f:8d:c4:35:75:3b:ee:a2: 40:14:34:11:d5:50:a4:20:8f:fe:45:33:38:b6:c5: df:9d:13:79:8e:ba:b3:25:00:cd:69:f0:5b:ef:dd: a1:f8:c1:29:8e:be:6e:a8:d4:88:46:96:2d:e6:83: eb:d8:c1:58:31:58:ff:64:fe:4c:a1:cc:3f:97:a0: d6:6c:b2:c1:69:02:71:38:6a:29:ee:a4:17:da:b7: 17:38:62:de:db:aa:42:ca:5c:32:a9:92:4a:bb:ba: 0d:f1:38:e8:3b:a1:67:f8:75:89:ea:98:ab:4d:10: da:45:2c:a2:c5:aa:06:54:7b:d6:bd:e8:49:94:f9: c0:52:1e:1f:f9:5a:b9:ac:27:4a:4e:ff:ce:59:a5: 2b:5e:dc:06:3d:cd:a5:9d:c4:b4:50:07:2f:62:5e: f1:ac:02:0e:58:81:97:b9:45:f3:f1:1d:56:d6:c4: 3b:3e:61:a4:eb:2e:a7:14:be:52:a8:17:f7:78:c4: 7a:b2:33:f6:18:32:06:40:c1:4a:7b:20:2e:8b:81: ba:be:e8:78:75:9c:6a:1c:1d:18:f6:ae:a2:26:c1: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:57:8E:BD:12:F7:D8:D6:0E:76:E7:45:56:52:68:1E:41:96:E0:CD X509v3 Authority Key Identifier: keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:15:0d:06:0e:04:84:ef:39:a3:bf:6e:f6:d0:16:84:a1:57: b2:5e:84:06:4c:7a:7e:1c:b6:ab:65:55:e7:b5:f2:e4:3c:f7: 53:4c:71:02:b2:8b:f2:71:ba:1b:de:2d:1a:a1:99:ac:7d:9b: e2:ac:67:57:01:c5:1a:8d:9a:fd:54:ea:af:69:57:8b:49:51: fa:f1:a5:95:ff:a4:96:41:d3:03:17:4b:54:06:f6:9f:ff:6f: af:4a:e9:05:6c:21:ec:46:71:4f:60:3b:b2:5e:eb:af:3b:13: 89:50:b6:54:9e:1c:67:32:bb:44:e6:1a:7b:6b:23:de:94:cf: 5e:c9:56:bf:9d:da:1d:38:0f:8d:1d:24:f3:e2:0f:34:b5:81: 20:13:c5:bd:89:a9:82:94:d9:26:7f:3c:28:7f:52:df:c2:01: 50:7f:a6:63:d3:ba:8d:db:cc:66:6e:8f:91:48:78:48:34:6e: e5:19:df:74:62:23:44:23:6f:3b:7e:0e:08:ed:bf:9c:ff:c3: 94:b3:2d:28:0e:64:b4:f7:bb:7a:57:04:da:9f:8b:06:f6:e1: e0:c2:c0:9f:6c:a0:ed:30:d2:08:25:3a:9e:e3:db:e7:19:21: 5c:b3:41:1d:d4:d6:ed:8c:e3:cc:ed:f2:7a:e2:5a:90:40:e4: 56:8a:c3:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDVDQjI5OEJDMUE3MDUwMTc4MDVDNTYxRjA5MEEwRDQ3 OTUwRTZBQkQwHhcNMjYwOTIwMTQxNjMzWhcNMjYwOTI3MTQxNjMzWjAYMRYwFAYD VQQDEw02YWFmZWFjMi1iNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumI3Lmcbh/51O+WB3IAkplyVKCs2VWYT9C4zTMDZN25/BWspP43ENXU77qJA FDQR1VCkII/+RTM4tsXfnRN5jrqzJQDNafBb792h+MEpjr5uqNSIRpYt5oPr2MFY MVj/ZP5Mocw/l6DWbLLBaQJxOGop7qQX2rcXOGLe26pCylwyqZJKu7oN8TjoO6Fn +HWJ6pirTRDaRSyixaoGVHvWvehJlPnAUh4f+Vq5rCdKTv/OWaUrXtwGPc2lncS0 UAcvYl7xrAIOWIGXuUXz8R1W1sQ7PmGk6y6nFL5SqBf3eMR6sjP2GDIGQMFKeyAu i4G6vuh4dZxqHB0Y9q6iJsF5cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRXjr0S 99jWDnbnRVZSaB5BluDNMB8GA1UdIwQYMBaAFFyymLwacFAXgFxWHwkKDUeVDmq9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8zRjM0MjAzRTI5 MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VCZUFYRllmQ1FvTlI1VU9h cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hMS1l2QnB3VUJlQVhGWWZDUW9OUjVVT2FyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8zRjM0MjAzRTI5MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VC ZUFYRllmQ1FvTlI1VU9hcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjhUNBg4EhO85o79u9tAWhKFXsl6EBkx6fhy2q2VV57Xy5Dz3U0xxArKL8nG6 G94tGqGZrH2b4qxnVwHFGo2a/VTqr2lXi0lR+vGllf+klkHTAxdLVAb2n/9vr0rp BWwh7EZxT2A7sl7rrzsTiVC2VJ4cZzK7ROYae2sj3pTPXslWv53aHTgPjR0k8+IP NLWBIBPFvYmpgpTZJn88KH9S38IBUH+mY9O6jdvMZm6PkUh4SDRu5RnfdGIjRCNv O34OCO2/nP/DlLMtKA5ktPe7elcE2p+LBvbh4MLAn2yg7TDSCCU6nuPb5xkhXLNB HdTW7YzjzO3yeuJakEDkVorD2w== -----END CERTIFICATE-----Generated at Tue Sep 22 07:28:10 2026 by rpki-client