$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: DgGEczoP5lKxAn0mGbJG9WKWusSsqim2nyG+rBhZN7E= Subject key identifier: 33:B0:9C:1A:5D:A2:15:A1:18:6B:17:85:2E:57:BB:0A:40:49:CB:70 Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 0628 Signing time: Tue 29 Sep 2026 01:01:15 +0000 Manifest this update: Tue 29 Sep 2026 01:01:14 +0000 Manifest next update: Tue 06 Oct 2026 01:01:14 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: Y2VmvPzv7fh2tAbaOGzCSnTv9694Nz0lF2MS4hMnj7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Sep 29 01:01:14 2026 GMT Not After : Oct 6 01:01:14 2026 GMT Subject: CN=6abb0ddb-df0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:cd:25:f7:6c:8e:84:6b:2e:34:c4:da:c4: f1:4f:8d:42:f1:be:05:c1:1b:c7:8e:45:8d:89:1f: 1e:3b:61:3d:e8:96:53:61:ce:bc:37:f7:d0:2e:07: 16:36:49:1f:ab:75:bb:14:84:20:82:b5:3c:1d:1e: 27:05:9a:69:9f:e0:8d:c9:c9:81:a5:ce:be:5b:73: 0e:96:f8:63:83:e6:06:9e:0c:c2:82:3f:e0:fb:a9: 49:9f:a9:da:29:58:e4:0a:2d:13:6c:49:27:32:6c: d6:df:a7:f5:c9:bd:88:7e:b1:56:c2:e5:ad:a4:07: b9:0f:5f:a9:3f:35:53:6c:04:12:4b:6f:56:99:ca: b3:02:9c:b9:b3:42:98:e9:99:76:c8:cd:61:4a:4e: 47:32:91:16:36:5d:f7:fd:db:1c:13:d5:e2:ca:65: ee:1f:61:86:40:f5:2d:71:09:cc:72:44:1e:93:e3: 24:99:25:ad:d3:8a:ad:4f:00:7f:98:18:13:7e:0f: 6f:d3:33:00:e2:0d:4a:a6:aa:42:04:73:cd:7b:83: b8:1d:fd:ac:8f:25:58:d8:17:1e:be:8e:a9:d0:c2: 7a:bc:06:e0:f2:ca:59:41:aa:e9:43:23:9e:90:b4: aa:3c:f9:79:b2:00:56:7c:72:25:f3:39:93:66:75: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:9C:1A:5D:A2:15:A1:18:6B:17:85:2E:57:BB:0A:40:49:CB:70 X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:38:d6:07:27:e1:7e:1e:33:3a:26:77:5b:94:85:30:7e:29: 6f:bf:e5:f5:65:42:33:83:eb:78:5f:ec:1d:94:c1:e3:cf:c8: 38:19:b3:58:23:cc:3b:25:59:29:12:a7:8e:ed:da:8f:44:4e: 3e:c4:61:53:b6:b0:12:9a:25:8f:53:f2:bd:fa:f8:c5:f0:8e: 92:7a:42:b1:87:8e:c6:d2:e6:87:89:f6:f1:84:f5:9e:78:26: 7e:bc:85:77:c8:6c:ed:a9:54:14:ad:45:09:54:2c:b8:6e:d7: d3:74:13:17:b8:52:1b:17:61:5a:5a:34:db:20:82:68:5f:29: d9:24:3f:c9:11:11:73:af:a3:c8:f5:bc:e6:6c:19:8c:af:94: 26:83:b0:99:59:a7:78:78:e3:9a:71:75:7e:d1:39:41:71:af: 58:a7:d9:d4:24:b7:64:07:df:7e:1f:60:cf:01:01:ee:3c:50: 3b:4b:0d:68:d7:44:b5:de:56:8d:fc:70:01:c7:26:98:65:37: db:54:fc:02:78:c6:76:3a:da:7c:4d:92:97:d4:7e:5b:6e:25: e2:12:6f:29:89:af:e2:88:fa:80:64:d8:0e:a6:47:10:5e:5f: 55:25:aa:d8:47:a4:4f:2a:9c:4a:98:b6:aa:33:b5:ce:52:10: 8a:8e:8e:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjYwOTI5MDEwMTE0WhcNMjYxMDA2MDEwMTE0WjAYMRYwFAYD VQQDEw02YWJiMGRkYi1kZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0K3NJfdsjoRrLjTE2sTxT41C8b4FwRvHjkWNiR8eO2E96JZTYc68N/fQLgcW Nkkfq3W7FIQggrU8HR4nBZppn+CNycmBpc6+W3MOlvhjg+YGngzCgj/g+6lJn6na KVjkCi0TbEknMmzW36f1yb2IfrFWwuWtpAe5D1+pPzVTbAQSS29WmcqzApy5s0KY 6Zl2yM1hSk5HMpEWNl33/dscE9XiymXuH2GGQPUtcQnMckQek+MkmSWt04qtTwB/ mBgTfg9v0zMA4g1KpqpCBHPNe4O4Hf2sjyVY2Bcevo6p0MJ6vAbg8spZQarpQyOe kLSqPPl5sgBWfHIl8zmTZnVBFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOwnBpd ohWhGGsXhS5XuwpASctwMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgzjWByfhfh4zOiZ3W5SFMH4pb7/l9WVCM4PreF/sHZTB48/IOBmzWCPMOyVZ KRKnju3aj0ROPsRhU7awEpolj1Pyvfr4xfCOknpCsYeOxtLmh4n28YT1nngmfryF d8hs7alUFK1FCVQsuG7X03QTF7hSGxdhWlo02yCCaF8p2SQ/yRERc6+jyPW85mwZ jK+UJoOwmVmneHjjmnF1ftE5QXGvWKfZ1CS3ZAfffh9gzwEB7jxQO0sNaNdEtd5W jfxwAccmmGU321T8AnjGdjrafE2Sl9R+W24l4hJvKYmv4oj6gGTYDqZHEF5fVSWq 2EekTyqcSpi2qjO1zlIQio6OXg== -----END CERTIFICATE-----Generated at Tue Sep 29 11:52:14 2026 by rpki-client