$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json) Hash identifier: UPiocL2rfN78PNzd4RrUPYT2pBXMYCPzeDoe3IbDsvs= Subject key identifier: 84:68:F1:D2:92:16:25:73:84:36:64:72:03:03:51:82:4F:70:D6:50 Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft Manifest number: 017E Signing time: Wed 23 Sep 2026 04:33:10 +0000 Manifest this update: Wed 23 Sep 2026 04:33:10 +0000 Manifest next update: Wed 30 Sep 2026 04:33:10 +0000 Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: niYAOKXzNx9zkVZlNMuq4wGaB3xx7GFnk6zYvoYPius=) 2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: 5QPe8ncIbmOtpv/0UagKDEsBkTPo/vp1GJpaE7hkl9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: Sep 23 04:33:10 2026 GMT Not After : Sep 30 04:33:10 2026 GMT Subject: CN=6ab35686-d782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8d:76:dd:78:d0:2e:a9:09:10:4e:d8:c6:f3: fa:11:e8:fc:da:c3:33:b0:b6:f5:dd:87:c9:9a:53: f7:ab:32:b8:80:36:84:9d:2d:ef:c2:4b:af:4b:67: 6c:1a:c6:25:f4:14:3f:57:24:73:7f:62:6f:84:e9: 8f:d8:3e:93:2b:af:2f:7a:6b:8e:a4:73:b1:63:0e: 66:4f:3a:0d:81:8d:87:5e:8f:32:62:f8:e7:d2:ea: 33:59:31:30:9e:64:f5:9b:e0:fc:d0:70:05:d8:6d: ce:62:3c:2b:59:27:a1:c8:6a:11:8e:da:55:4b:df: 52:43:3f:6a:a9:0f:7a:f8:3d:53:c5:ff:37:b1:fa: b6:87:43:b3:51:e6:c9:57:e5:60:ba:d5:9a:12:27: cd:d5:1e:ce:86:81:c7:9f:f4:48:a8:e7:71:5e:f8: f4:38:ec:bd:3f:35:03:24:bc:a2:f6:dc:0e:2f:db: 18:4f:1e:44:b6:98:90:28:4c:19:19:ae:ff:0a:18: 74:94:46:51:f1:c8:1c:5a:88:c1:48:2c:c6:20:1f: 01:38:02:f4:18:62:60:91:06:93:06:81:d1:62:96: b7:89:11:b2:19:e4:2e:a6:6b:ea:06:2e:b2:df:8f: fa:00:13:0e:d1:43:3c:19:47:40:b6:e1:37:2e:f3: 8c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:68:F1:D2:92:16:25:73:84:36:64:72:03:03:51:82:4F:70:D6:50 X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:95:6a:25:94:63:7a:6f:34:29:a1:1e:fe:a7:74:4b:09:dd: c7:8a:b3:5e:a5:0e:32:0e:2d:ff:a2:81:51:74:d9:b4:60:a6: fa:9a:b3:30:9e:fa:9a:74:a2:c3:80:36:3d:8c:83:58:02:2e: 67:cd:45:44:20:15:5b:35:fe:06:44:70:43:07:6d:5f:d3:28: f0:1e:d8:9f:67:15:50:ca:58:9d:a7:c6:a3:b1:9c:60:9e:f3: 8a:ea:3e:70:23:b2:42:21:91:b5:37:d3:d8:24:2f:18:1b:8f: 6d:a1:13:ea:da:2e:d2:3d:6e:a4:bc:0c:29:08:99:78:01:65: 4c:bf:85:4d:0e:c4:63:50:02:f0:78:3a:a4:9f:bc:55:08:44: 50:bb:24:b8:05:84:00:40:aa:db:80:06:1f:0a:28:21:2f:6e: 2b:b5:1f:29:26:4a:c5:3f:15:21:35:71:68:27:b1:bf:96:e2: 48:36:ba:4f:17:76:59:29:bd:23:7b:b5:a0:2b:bb:bd:c3:76: 6c:00:eb:21:88:ec:5c:52:c1:85:2a:49:ca:a5:62:b4:f4:68: bd:a9:56:8a:d8:d2:a2:7a:c5:83:d9:7d:01:e6:f7:5b:a8:7e: c0:b8:87:1e:3e:7c:6f:93:ff:1f:63:15:b7:c6:1e:02:49:c6: 29:db:8c:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3 N0EwNkNFOEMwHhcNMjYwOTIzMDQzMzEwWhcNMjYwOTMwMDQzMzEwWjAYMRYwFAYD VQQDEw02YWIzNTY4Ni1kNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I123XjQLqkJEE7YxvP6Eej82sMzsLb13YfJmlP3qzK4gDaEnS3vwkuvS2ds GsYl9BQ/VyRzf2JvhOmP2D6TK68vemuOpHOxYw5mTzoNgY2HXo8yYvjn0uozWTEw nmT1m+D80HAF2G3OYjwrWSehyGoRjtpVS99SQz9qqQ96+D1Txf83sfq2h0OzUebJ V+VgutWaEifN1R7OhoHHn/RIqOdxXvj0OOy9PzUDJLyi9twOL9sYTx5EtpiQKEwZ Ga7/Chh0lEZR8cgcWojBSCzGIB8BOAL0GGJgkQaTBoHRYpa3iRGyGeQupmvqBi6y 34/6ABMO0UM8GUdAtuE3LvOMwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRo8dKS FiVzhDZkcgMDUYJPcNZQMB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6 b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzlCRi9CRTFENEEzNDdCNEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQ Zkx4aWNzWEdsX04zb0d6b3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpVqJZRjem80KaEe/qd0Swndx4qzXqUOMg4t/6KBUXTZtGCm+pqzMJ76mnSi w4A2PYyDWAIuZ81FRCAVWzX+BkRwQwdtX9Mo8B7Yn2cVUMpYnafGo7GcYJ7ziuo+ cCOyQiGRtTfT2CQvGBuPbaET6tou0j1upLwMKQiZeAFlTL+FTQ7EY1AC8Hg6pJ+8 VQhEULskuAWEAECq24AGHwooIS9uK7UfKSZKxT8VITVxaCexv5biSDa6Txd2WSm9 I3u1oCu7vcN2bADrIYjsXFLBhSpJyqVitPRovalWitjSonrFg9l9Aeb3W6h+wLiH Hj58b5P/H2MVt8YeAknGKduMQw== -----END CERTIFICATE-----Generated at Wed Sep 23 08:06:12 2026 by rpki-client