$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json) Hash identifier: B6A7KH6KVNi4V3sriEeVMN8P/R6xiFXXGxEShaSS+CA= Subject key identifier: FA:BF:75:FE:B7:E0:EC:3B:0A:AA:7D:37:23:D0:6C:15:CA:A8:95:03 Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft Manifest number: 015F Signing time: Mon 27 Jul 2026 06:56:43 +0000 Manifest this update: Mon 27 Jul 2026 06:56:43 +0000 Manifest next update: Mon 03 Aug 2026 06:56:43 +0000 Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: 06k6lWqX71diZALi3cVoHwBzp6cYP0TGocapngt60n4=) 2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: VHajbTjmwkX2RW0fXipdm5sMeEnHYksBbQ58cyoCp5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: Jul 27 06:56:43 2026 GMT Not After : Aug 3 06:56:43 2026 GMT Subject: CN=6a67012b-12b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:5a:ce:eb:3b:7f:8c:62:de:34:5d:33:9c: aa:38:f7:f7:9c:cf:1f:43:b4:0a:50:d7:1b:f6:da: 96:74:5b:ae:86:5f:1e:06:f1:a7:de:4a:a9:1f:13: 8e:11:cb:cb:d3:c4:53:de:12:ef:c6:3b:d1:9e:d4: c7:39:a4:d7:67:62:d7:b7:fb:34:99:a3:05:29:84: e9:4b:d0:e2:c0:61:98:e2:2c:e9:c0:02:bc:4e:ca: 37:93:f1:38:78:1e:cf:c1:2a:c1:a9:b1:b8:b0:ce: 75:d6:b2:c5:06:c6:60:a9:44:fc:36:5b:6c:26:dc: 4b:3f:99:b4:1a:24:b1:09:e2:c2:1f:1a:d8:22:3d: 72:53:be:ff:ec:d5:1c:57:87:d8:65:d3:e3:ac:80: ee:35:8c:e5:27:43:ff:bc:09:d3:6e:f9:f7:83:69: c0:87:51:6f:90:a0:29:da:bb:bb:bc:66:bf:ca:01: 3a:a4:c9:3f:63:97:d3:f6:a5:55:1e:cd:cf:8d:c0: 03:d0:04:c0:53:23:55:0a:0f:1c:41:a9:e8:d4:a5: 21:3b:51:60:d7:3f:19:31:5e:5f:84:78:36:eb:36: 2d:66:5d:a1:2b:86:b1:ad:30:65:2e:a6:8f:d4:11: 3a:ed:5d:db:64:57:81:c6:7a:d7:94:97:69:39:c1: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:75:FE:B7:E0:EC:3B:0A:AA:7D:37:23:D0:6C:15:CA:A8:95:03 X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b6:d3:54:91:b2:0b:7c:4c:9e:43:d1:53:78:cc:3e:2c:cb: fe:2a:f9:a2:7e:02:b4:07:1e:43:7f:c1:38:34:99:fa:eb:7e: 2e:de:5a:c8:b3:5e:5f:2a:48:a1:ef:9c:10:45:ff:00:1d:7d: a4:84:c4:85:e9:d2:6a:18:1c:b1:82:1d:d0:3f:fa:75:8d:b6: fe:10:b2:9a:c2:3a:93:0c:e3:70:ed:f8:06:0f:a8:a6:05:58: b6:e7:5e:5f:13:da:f4:bf:92:be:e0:7d:ed:56:da:af:6c:8c: be:3d:3a:75:3a:25:63:7a:e7:64:e2:3e:ef:44:aa:c8:ed:88: 5f:13:a7:37:89:91:b0:8e:7a:66:27:61:4b:76:5f:90:75:a2: eb:13:8d:af:37:1e:9c:f8:36:1a:67:de:e1:23:72:1e:9f:80: 23:66:f7:a1:66:97:b5:e8:7e:34:8d:b1:a4:2c:d8:1b:9b:3e: 82:5a:2b:59:c1:5d:ad:f6:43:1a:86:05:93:32:88:c2:dc:85: b7:06:5f:e7:a1:f3:9f:81:db:42:0f:b5:74:6b:38:5b:91:a4: 17:4b:9e:34:fc:0f:cd:a4:8f:b9:b9:d8:af:15:5e:f8:4a:bd: b1:5c:51:70:dd:58:c4:f7:2e:8b:76:0a:06:66:26:a7:b9:34: 5b:7f:9e:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3 N0EwNkNFOEMwHhcNMjYwNzI3MDY1NjQzWhcNMjYwODAzMDY1NjQzWjAYMRYwFAYD VQQDEw02YTY3MDEyYi0xMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQFazus7f4xi3jRdM5yqOPf3nM8fQ7QKUNcb9tqWdFuuhl8eBvGn3kqpHxOO EcvL08RT3hLvxjvRntTHOaTXZ2LXt/s0maMFKYTpS9DiwGGY4izpwAK8Tso3k/E4 eB7PwSrBqbG4sM511rLFBsZgqUT8NltsJtxLP5m0GiSxCeLCHxrYIj1yU77/7NUc V4fYZdPjrIDuNYzlJ0P/vAnTbvn3g2nAh1FvkKAp2ru7vGa/ygE6pMk/Y5fT9qVV Hs3PjcAD0ATAUyNVCg8cQano1KUhO1Fg1z8ZMV5fhHg26zYtZl2hK4axrTBlLqaP 1BE67V3bZFeBxnrXlJdpOcGXpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPq/df63 4Ow7Cqp9NyPQbBXKqJUDMB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6 b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzlCRi9CRTFENEEzNDdCNEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQ Zkx4aWNzWEdsX04zb0d6b3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr7bTVJGyC3xMnkPRU3jMPizL/ir5on4CtAceQ3/BODSZ+ut+Lt5ayLNeXypI oe+cEEX/AB19pITEhenSahgcsYId0D/6dY22/hCymsI6kwzjcO34Bg+opgVYtude XxPa9L+SvuB97Vbar2yMvj06dTolY3rnZOI+70SqyO2IXxOnN4mRsI56ZidhS3Zf kHWi6xONrzcenPg2Gmfe4SNyHp+AI2b3oWaXteh+NI2xpCzYG5s+glorWcFdrfZD GoYFkzKIwtyFtwZf56Hzn4HbQg+1dGs4W5GkF0ueNPwPzaSPubnYrxVe+Eq9sVxR cN1YxPcui3YKBmYmp7k0W3+eqw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:31 2026 by rpki-client