$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft File: 17VzlML5jR0AnPY_E_yQB2jyGN4.mft (raw, json) Hash identifier: aSffCQPO6JW8LnEKSnlAP+JyM/vLAqgq+5rpWMQDgII= Subject key identifier: D7:BF:00:44:4A:B3:9F:8C:16:C2:50:E9:B3:97:3B:BA:B7:CA:D5:CE Authority key identifier: D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE Certificate issuer: /CN=A91B33AE/serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft Manifest number: 7F Signing time: Sun 11 Oct 2026 08:23:23 +0000 Manifest this update: Sun 11 Oct 2026 08:23:23 +0000 Manifest next update: Sun 18 Oct 2026 08:23:23 +0000 Files and hashes: 1: 17VzlML5jR0AnPY_E_yQB2jyGN4.crl (hash: 94+J0mEfkA7i37lKbcZ5HqOcO3q2lW2XVbAzweSXArQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B33AE, serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Validity Not Before: Oct 11 08:23:23 2026 GMT Not After : Oct 18 08:23:23 2026 GMT Subject: CN=6acb477b-f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a6:57:e4:21:72:da:88:ff:15:bf:11:dd:79: ea:8d:af:13:d5:87:4e:c2:e5:35:f3:02:78:a1:47: 25:f8:7c:3f:d6:9f:dd:4f:3a:d6:5d:c5:ae:8a:72: e4:27:a0:16:12:15:73:40:23:18:38:ad:f5:80:ce: 39:2f:42:3c:97:87:28:2e:8a:20:5e:0b:a8:cf:9e: 97:29:36:77:66:f2:de:81:9a:d5:1c:87:d9:85:58: 8d:7b:56:9d:ed:d4:51:0f:cb:ed:ff:31:04:4c:c9: 85:a5:b4:12:53:ee:46:45:8a:3e:4d:4b:04:67:33: e7:16:7f:38:c3:b8:f0:3f:5d:98:06:54:65:44:d3: b5:9e:0a:0e:5e:70:b2:d9:b9:5a:8d:0a:63:80:62: a6:62:8b:bc:0e:5a:5e:dc:fa:6e:60:c6:71:e9:93: c5:ab:89:d2:89:cc:55:24:22:db:4e:30:ca:b4:d4: 47:3f:4e:71:53:a4:31:46:c3:7a:df:a9:07:61:1b: 63:78:60:38:0b:02:9c:5e:f9:af:72:7f:dd:ed:2a: 34:ba:0a:42:b2:ae:a7:ab:58:3e:8b:37:bb:ed:05: 29:6d:09:50:6b:b6:50:3b:ab:dc:d8:a3:94:b7:92: b9:12:86:27:25:84:39:25:30:da:dd:8c:d7:3c:9f: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:00:44:4A:B3:9F:8C:16:C2:50:E9:B3:97:3B:BA:B7:CA:D5:CE X509v3 Authority Key Identifier: keyid:D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:20:6c:00:c4:e8:13:7f:ab:e0:5b:96:b2:e7:34:14:c9:28: a0:36:05:8b:f9:7d:1c:e4:44:50:85:1d:d1:95:33:55:12:ed: 17:05:85:4d:b0:85:22:47:e1:29:30:34:c6:c5:2a:5e:05:7e: c0:07:dd:d5:5c:38:ed:fe:8a:71:20:94:a0:13:9f:93:02:d7: d1:c5:4f:64:5c:db:85:85:f7:21:c3:ff:eb:16:41:5f:d0:12: 8b:52:00:88:91:09:c5:ab:d4:84:88:18:c1:82:ab:cc:bb:15: 41:61:ec:f0:4a:ba:55:07:23:63:c7:8e:fd:c8:ff:63:35:26: 5d:ea:12:db:52:1d:0e:d4:1f:63:d6:56:04:e9:d8:5d:80:8f: 26:0d:00:1b:be:4f:8c:e7:9c:26:e1:86:d3:5c:bf:45:02:8f: c4:fa:be:eb:e8:66:43:11:85:23:5d:a1:ff:a8:6d:05:f7:56: 4a:3a:d4:fa:a4:29:8c:89:a1:e4:69:c5:d5:98:4b:1f:ce:cf: 75:88:15:4b:2e:c1:d7:e7:ed:70:c9:e7:70:a2:07:ff:9f:e2: d5:5e:04:a2:da:e3:75:b2:72:bd:d6:7a:9b:e9:cd:77:3f:de: 66:a2:c2:81:e4:3b:c1:bc:6f:95:46:7c:9b:58:62:16:4a:4d: 60:b3:77:f7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzNBRTExMC8GA1UEBRMoRDdCNTczOTRDMkY5OEQxRDAwOUNGNjNGMTNGQzkwMDc2 OEYyMThERTAeFw0yNjEwMTEwODIzMjNaFw0yNjEwMTgwODIzMjNaMBgxFjAUBgNV BAMTDTZhY2I0NzdiLWY5OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuplfkIXLaiP8VvxHdeeqNrxPVh07C5TXzAnihRyX4fD/Wn91POtZdxa6KcuQn oBYSFXNAIxg4rfWAzjkvQjyXhyguiiBeC6jPnpcpNndm8t6BmtUch9mFWI17Vp3t 1FEPy+3/MQRMyYWltBJT7kZFij5NSwRnM+cWfzjDuPA/XZgGVGVE07WeCg5ecLLZ uVqNCmOAYqZii7wOWl7c+m5gxnHpk8WridKJzFUkIttOMMq01Ec/TnFTpDFGw3rf qQdhG2N4YDgLApxe+a9yf93tKjS6CkKyrqerWD6LN7vtBSltCVBrtlA7q9zYo5S3 krkShiclhDklMNrdjNc8n87hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU178AREqz n4wWwlDps5c7urfK1c4wHwYDVR0jBBgwFoAU17VzlML5jR0AnPY/E/yQB2jyGN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzM0FFLzg4MEEzQjgwMEIz QjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIwQW5QWV9FX3lRQjJqeUdO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTdWemxNTDVqUjBBblBZX0VfeVFCMmp5R040LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz M0FFLzg4MEEzQjgwMEIzQjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIw QW5QWV9FX3lRQjJqeUdONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjIGwAxOgTf6vgW5ay5zQUySigNgWL+X0c5ERQhR3RlTNVEu0XBYVNsIUiR+Ep MDTGxSpeBX7AB93VXDjt/opxIJSgE5+TAtfRxU9kXNuFhfchw//rFkFf0BKLUgCI kQnFq9SEiBjBgqvMuxVBYezwSrpVByNjx479yP9jNSZd6hLbUh0O1B9j1lYE6dhd gI8mDQAbvk+M55wm4YbTXL9FAo/E+r7r6GZDEYUjXaH/qG0F91ZKOtT6pCmMiaHk acXVmEsfzs91iBVLLsHX5+1wyedwogf/n+LVXgSi2uN1snK91nqb6c13P95mosKB 5DvBvG+VRnybWGIWSk1gs3f3 -----END CERTIFICATE-----Generated at Sun Oct 11 17:46:39 2026 by rpki-client