$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft File: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft (raw, json) Hash identifier: SmIU8yohRvdZE3bqyAfppJPrzR6x7+2L2VQUCP2hIj8= Subject key identifier: AE:BC:8F:16:34:AA:06:4A:6B:33:3F:32:2B:DF:01:1C:55:66:0A:8E Authority key identifier: 20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A Certificate issuer: /CN=A917B23B/serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft Manifest number: 0F Signing time: Mon 21 Sep 2026 09:06:25 +0000 Manifest this update: Mon 21 Sep 2026 09:06:25 +0000 Manifest next update: Mon 28 Sep 2026 09:06:25 +0000 Files and hashes: 1: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl (hash: kAJ9DCUIoUpIVTVe3uhFdfjT4UhbPooxQVEQinpFVpI=) 2: 99F2CE74A1F011F1BB91A1DB3E11F970.roa (hash: 0f/muL4dbsS2xjRlJDf6C/ZSy3ovWH7NqcxlwtnGGaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B23B, serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A Validity Not Before: Sep 21 09:06:25 2026 GMT Not After : Sep 28 09:06:25 2026 GMT Subject: CN=6ab0f391-85e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:81:e0:28:9b:a4:1c:fa:74:7c:df:c1:e7: 0b:5a:85:20:52:dc:34:a9:71:6a:9b:3d:f1:4a:e1: 33:8f:1c:27:62:45:99:84:fa:0d:c0:35:67:98:38: a0:0b:f7:f6:98:b2:81:2a:7f:48:49:8e:42:51:26: 57:4f:50:d8:ad:22:29:91:3b:74:30:32:05:f0:1e: 93:d9:b9:e2:10:06:3d:5e:71:5d:d9:ce:ae:2b:5d: 9d:7c:12:c0:70:9f:59:21:db:de:ff:14:34:4b:a5: 8b:46:b4:27:e6:da:bc:72:33:b3:1b:89:a0:46:fc: 4d:f0:b5:44:43:a9:85:93:2c:ab:c4:39:f9:cc:6d: 44:97:be:98:fa:3c:bd:aa:4e:f4:8c:eb:80:2f:85: 7b:bf:4e:0e:f6:3f:02:95:4e:be:49:ac:67:97:32: 07:c5:95:5a:ee:9f:49:60:96:91:5a:13:17:f1:72: b1:87:94:be:f1:7a:dc:43:45:00:e9:39:28:f4:18: fa:3f:74:4d:b3:01:c4:f6:3f:85:98:2e:ab:4f:d8: 5c:64:5a:ea:45:09:d0:3a:1b:a7:4f:49:5f:51:2d: 2f:1a:ce:4f:fe:e8:52:60:fd:73:82:c6:68:7a:15: 44:fb:f2:e9:8c:05:77:09:52:ec:d8:94:fd:7a:4e: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:8F:16:34:AA:06:4A:6B:33:3F:32:2B:DF:01:1C:55:66:0A:8E X509v3 Authority Key Identifier: keyid:20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f9:90:fe:3b:c8:70:35:3d:97:03:b7:63:5f:f6:86:07:1e: c8:cb:63:04:14:51:55:60:85:4d:50:10:3d:48:4c:f4:c6:c9: ef:c7:5e:9c:c3:b6:65:ce:ab:f1:2e:c4:68:97:69:b8:f1:21: 62:37:8a:84:36:c4:ec:06:66:ba:89:e4:09:af:d8:71:41:49: a8:ad:04:a3:34:d7:3e:e8:65:1d:14:94:f5:a9:21:16:bd:4b: 31:fc:90:e9:44:40:5b:0f:1c:6e:16:59:0d:ff:cc:a0:5f:a1: 1c:3e:e5:aa:fd:7b:92:a8:47:0f:0b:d7:ab:fb:b4:f8:3f:ce: 6b:1c:83:56:a0:e8:bd:28:6b:36:a2:67:96:42:22:6b:fa:5d: b4:11:94:e6:b7:4d:41:e6:b6:01:e9:d3:c7:85:9b:32:7d:ad: 3a:0e:66:25:a3:17:cc:66:07:80:77:e3:64:72:02:b9:9c:46: c9:32:03:37:9b:60:6c:38:76:4b:ea:b5:81:ac:04:13:ee:41: 9a:b3:cb:3e:a6:72:68:84:57:b1:1e:4b:e9:7b:e1:5a:0f:77: 15:8a:6b:00:4f:10:35:1f:cb:f9:9a:45:99:37:0b:99:6c:56: 30:11:02:f2:1e:7d:1e:9c:93:6a:ab:4b:77:d0:36:4f:53:47: a0:b0:41:01 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjIzQjExMC8GA1UEBRMoMjBCNjVGMzU4NjdEMTVDRTBGNzlGMUU4MzA4RjZGNjVF NjREMjUxQTAeFw0yNjA5MjEwOTA2MjVaFw0yNjA5MjgwOTA2MjVaMBgxFjAUBgNV BAMTDTZhYjBmMzkxLTg1ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQComoHgKJukHPp0fN/B5wtahSBS3DSpcWqbPfFK4TOPHCdiRZmE+g3ANWeYOKAL 9/aYsoEqf0hJjkJRJldPUNitIimRO3QwMgXwHpPZueIQBj1ecV3Zzq4rXZ18EsBw n1kh297/FDRLpYtGtCfm2rxyM7MbiaBG/E3wtURDqYWTLKvEOfnMbUSXvpj6PL2q TvSM64AvhXu/Tg72PwKVTr5JrGeXMgfFlVrun0lglpFaExfxcrGHlL7xetxDRQDp OSj0GPo/dE2zAcT2P4WYLqtP2FxkWupFCdA6G6dPSV9RLS8azk/+6FJg/XOCxmh6 FUT78umMBXcJUuzYlP16TgrzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrryPFjSq BkprMz8yK98BHFVmCo4wHwYDVR0jBBgwFoAUILZfNYZ9Fc4PefHoMI9vZeZNJRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMjNCLzIzREE2QUU0QTFG MDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0UGVmSG9NSTl2WmVaTkpS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUxaZk5ZWjlGYzRQZWZIb01JOXZaZVpOSlJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MjNCLzIzREE2QUU0QTFGMDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0 UGVmSG9NSTl2WmVaTkpSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7+ZD+O8hwNT2XA7djX/aGBx7Iy2MEFFFVYIVNUBA9SEz0xsnvx16cw7Zlzqvx LsRol2m48SFiN4qENsTsBma6ieQJr9hxQUmorQSjNNc+6GUdFJT1qSEWvUsx/JDp REBbDxxuFlkN/8ygX6EcPuWq/XuSqEcPC9er+7T4P85rHINWoOi9KGs2omeWQiJr +l20EZTmt01B5rYB6dPHhZsyfa06DmYloxfMZgeAd+NkcgK5nEbJMgM3m2BsOHZL 6rWBrAQT7kGas8s+pnJohFexHkvpe+FaD3cVimsATxA1H8v5mkWZNwuZbFYwEQLy Hn0enJNqq0t30DZPU0egsEEB -----END CERTIFICATE-----Generated at Tue Sep 22 15:12:35 2026 by rpki-client