$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: d982PkQS2pzsG5xrdP6kEsTUqVaWCjHI29DLM6nIPjo= Subject key identifier: 1D:C2:15:55:B8:7A:DE:49:19:31:78:95:4E:0B:D5:E3:71:C5:69:9B Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 07DD Signing time: Wed 20 May 2026 21:24:23 +0000 Manifest this update: Wed 20 May 2026 21:24:22 +0000 Manifest next update: Wed 27 May 2026 21:24:22 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: wGQULqdsuzo0akYxI3xYPXKHLlp+KwGOz39llrIDC8U=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: cbziy5kL+sj+D8P7UhXxl7JFukexlK2Ww4yA68qkd2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: May 20 21:24:22 2026 GMT Not After : May 27 21:24:22 2026 GMT Subject: CN=6a0e2686-385b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:1a:dc:ed:dc:8a:ac:b2:97:7c:6d:ea:9c: a6:33:72:4b:86:7b:91:08:9b:49:fa:26:da:3c:49: e8:60:40:f8:ed:42:98:8c:eb:9b:83:e7:8f:04:b9: 63:4c:c2:16:c3:31:06:67:60:2b:3e:f8:a3:f4:f0: e2:8d:ff:96:b3:fb:32:31:96:02:3f:a8:67:e6:2d: 3b:45:ad:8c:54:1a:18:74:a6:b6:7d:6f:1d:af:df: b8:4d:73:b2:49:fa:e8:f2:d1:83:1d:a5:b8:a9:c0: ba:7a:21:ff:d6:0e:6b:d3:82:37:85:e4:07:b5:af: ce:fe:d3:45:36:4c:cd:f1:d9:f6:f9:45:63:ce:2b: 90:1e:44:fe:cf:5a:9c:5f:53:7d:2c:3d:45:9b:35: 59:0e:09:4a:55:1e:a7:7c:0e:79:bd:2e:7b:0a:b5: fc:13:6f:bd:9f:50:d7:71:ac:8b:03:ee:68:2c:5b: 46:ef:bf:03:62:5f:36:6d:4a:d4:2c:af:3c:de:ad: b3:7a:2e:56:76:ac:57:1a:71:13:ac:9e:b6:25:38: 75:c0:5e:e0:2d:22:6d:6b:e1:03:e8:63:f6:a6:1e: 16:89:81:4d:d9:98:b6:8c:64:8e:13:de:9d:8f:e1: a3:ba:33:f3:f8:28:a2:b7:67:6e:7a:4e:00:eb:40: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:15:55:B8:7A:DE:49:19:31:78:95:4E:0B:D5:E3:71:C5:69:9B X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b1:bf:41:28:45:92:fc:14:bc:6b:5b:bc:98:2c:a8:6a:4e: 1b:d5:57:6a:3a:3a:97:0b:c9:79:57:99:cd:74:4b:af:68:c7: 00:de:e3:14:5d:86:ac:7d:eb:9f:3a:05:50:ee:bd:b4:b4:1d: 11:2e:c8:ad:f0:ff:d2:6f:80:4d:4e:88:b4:d8:ed:d3:d4:87: af:56:e5:06:63:a4:21:a6:19:fe:af:bc:fb:0e:f1:5f:01:33: c5:b3:50:06:a1:6d:a9:e7:3c:88:18:78:42:dd:d2:49:5b:b3: a5:c7:7f:1f:fc:47:48:6c:fc:32:19:80:b2:75:85:69:51:16: 6d:2b:3b:75:c2:12:ba:7d:54:ae:69:53:a7:94:51:41:4e:3f: 85:87:48:25:97:62:f3:37:fb:2c:0b:7e:41:56:27:82:b3:65: 20:3b:e5:83:6a:7f:6f:a6:10:d5:39:df:db:0b:4b:c6:88:e7: 10:de:3b:aa:81:89:7e:d7:e5:83:1a:f5:c1:da:bb:84:67:66: 3a:7b:78:d9:2a:29:96:ee:57:f3:1d:67:31:ed:bc:dd:b7:7b: 65:be:a7:4e:53:4a:16:14:34:d3:2b:5d:4d:73:35:6b:c2:da: 05:e3:de:77:5d:ee:9a:51:09:a7:7c:27:c7:da:f0:be:3d:55: d0:71:ce:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjYwNTIwMjEyNDIyWhcNMjYwNTI3MjEyNDIyWjAYMRYwFAYD VQQDEw02YTBlMjY4Ni0zODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjDMa3O3ciqyyl3xt6pymM3JLhnuRCJtJ+ibaPEnoYED47UKYjOubg+ePBLlj TMIWwzEGZ2ArPvij9PDijf+Ws/syMZYCP6hn5i07Ra2MVBoYdKa2fW8dr9+4TXOy Sfro8tGDHaW4qcC6eiH/1g5r04I3heQHta/O/tNFNkzN8dn2+UVjziuQHkT+z1qc X1N9LD1FmzVZDglKVR6nfA55vS57CrX8E2+9n1DXcayLA+5oLFtG778DYl82bUrU LK883q2zei5WdqxXGnETrJ62JTh1wF7gLSJta+ED6GP2ph4WiYFN2Zi2jGSOE96d j+GjujPz+Ciit2duek4A60DbcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3CFVW4 et5JGTF4lU4L1eNxxWmbMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmrG/QShFkvwUvGtbvJgsqGpOG9VXajo6lwvJeVeZzXRLr2jHAN7jFF2GrH3r nzoFUO69tLQdES7IrfD/0m+ATU6ItNjt09SHr1blBmOkIaYZ/q+8+w7xXwEzxbNQ BqFtqec8iBh4Qt3SSVuzpcd/H/xHSGz8MhmAsnWFaVEWbSs7dcISun1UrmlTp5RR QU4/hYdIJZdi8zf7LAt+QVYngrNlIDvlg2p/b6YQ1Tnf2wtLxojnEN47qoGJftfl gxr1wdq7hGdmOnt42Soplu5X8x1nMe283bd7Zb6nTlNKFhQ00ytdTXM1a8LaBePe d13umlEJp3wnx9rwvj1V0HHOYg== -----END CERTIFICATE-----Generated at Thu May 21 11:59:09 2026 by rpki-client