$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft File: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft (raw, json) Hash identifier: DPfHFlySAFQtuffoZ9fuzHBFjMbaaTPCbfA/QSomziY= Subject key identifier: 58:0B:F2:33:EE:AF:C0:3F:B1:D1:7A:FE:C5:62:FA:AE:42:58:B2:72 Authority key identifier: 20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A Certificate issuer: /CN=A917B23B/serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft Manifest number: 16 Signing time: Mon 05 Oct 2026 09:31:28 +0000 Manifest this update: Mon 05 Oct 2026 09:31:27 +0000 Manifest next update: Mon 12 Oct 2026 09:31:27 +0000 Files and hashes: 1: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl (hash: EojXSAAGj0TnocFwdpsZSUQVnQLVBWBPdhV8LLkqbN8=) 2: 99F2CE74A1F011F1BB91A1DB3E11F970.roa (hash: 0f/muL4dbsS2xjRlJDf6C/ZSy3ovWH7NqcxlwtnGGaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B23B, serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A Validity Not Before: Oct 5 09:31:27 2026 GMT Not After : Oct 12 09:31:27 2026 GMT Subject: CN=6ac36e70-06ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:39:c3:04:23:90:2d:3c:98:61:8d:b2:6f: 66:d1:33:fc:62:bb:db:7a:b0:cd:fe:cf:b3:68:8d: 1c:e0:ca:97:a5:69:d9:58:03:aa:8b:9b:da:40:06: 92:c5:80:6b:72:d1:01:40:44:2c:12:86:db:47:51: 43:39:56:73:c9:bc:a1:aa:7c:20:39:97:85:a7:b5: cf:b6:7a:d5:d6:03:fa:87:0a:c2:31:c9:a3:72:97: 07:1e:19:09:80:05:bb:8f:58:23:66:4c:4d:b7:1b: b6:2b:eb:33:ce:9d:b9:bc:0a:79:f2:1f:49:6c:18: 8d:99:4b:65:b9:f5:0a:b6:3a:88:91:48:8d:81:a2: 04:72:a5:8d:01:8a:4c:12:a0:db:f2:42:d9:10:03: bc:b9:24:dd:8a:2e:4a:a1:3f:10:78:e5:59:f2:33: 85:6f:db:c2:1b:8b:b5:34:90:ac:7f:a0:c6:9f:ff: be:62:cc:79:f4:6e:ff:ea:cc:11:5d:6f:bc:88:87: bd:74:9a:7c:59:33:d3:ee:44:a4:4d:fc:4b:b4:3b: 7f:19:3a:8c:60:1d:29:91:85:c6:51:4c:76:9e:80: 2b:76:ff:59:c1:7f:2b:e9:8a:d0:05:40:fa:1b:56: 78:62:c1:70:23:45:a4:cf:7d:56:0d:a1:4d:05:30: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:F2:33:EE:AF:C0:3F:B1:D1:7A:FE:C5:62:FA:AE:42:58:B2:72 X509v3 Authority Key Identifier: keyid:20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c7:08:f2:30:5c:18:89:3b:06:4c:39:f1:18:37:82:a2:7b: 9d:d5:c8:f6:81:63:38:68:5b:0a:65:17:21:8e:a0:85:c1:cc: bf:47:80:b1:75:73:43:24:d3:55:6b:df:06:43:01:51:48:b1: 21:97:76:f9:6e:a7:c9:d9:50:a4:ac:b2:0e:f3:12:82:92:6f: 3d:ca:d8:16:c7:2c:db:e7:1e:a8:20:f4:bf:31:68:e1:33:3b: 3f:17:20:eb:b0:a6:13:00:c7:d1:40:ba:b4:41:a8:08:16:1a: 20:32:fd:fe:0a:62:36:4a:2b:36:4d:b0:e6:1d:03:0f:47:5c: ad:71:81:f2:ac:be:f7:cb:ac:eb:02:ff:51:d7:e9:86:5e:8a: d9:d2:e0:df:7e:3e:4f:50:22:11:fb:b0:8f:1e:27:af:77:32: 55:0e:cd:85:32:17:be:c5:4a:0d:77:78:e0:0b:0b:3a:df:62: 80:8b:0e:0a:4a:f3:59:a6:3c:0d:67:1f:00:8a:d4:70:14:ef: 18:c0:67:2c:e0:84:0b:e3:68:59:cf:45:05:4e:29:e1:70:e6: 9e:db:77:43:72:f9:c6:5a:9b:8d:70:ad:f7:de:9a:cc:8a:c2: 1c:f0:90:83:90:b1:db:c8:52:5a:ae:30:7f:2d:4f:8e:61:e7: 06:bd:62:86 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjIzQjExMC8GA1UEBRMoMjBCNjVGMzU4NjdEMTVDRTBGNzlGMUU4MzA4RjZGNjVF NjREMjUxQTAeFw0yNjEwMDUwOTMxMjdaFw0yNjEwMTIwOTMxMjdaMBgxFjAUBgNV BAMTDTZhYzM2ZTcwLTA2YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE+znDBCOQLTyYYY2yb2bRM/xiu9t6sM3+z7NojRzgypeladlYA6qLm9pABpLF gGty0QFARCwShttHUUM5VnPJvKGqfCA5l4Wntc+2etXWA/qHCsIxyaNylwceGQmA BbuPWCNmTE23G7Yr6zPOnbm8CnnyH0lsGI2ZS2W59Qq2OoiRSI2BogRypY0BikwS oNvyQtkQA7y5JN2KLkqhPxB45VnyM4Vv28Ibi7U0kKx/oMaf/75izHn0bv/qzBFd b7yIh710mnxZM9PuRKRN/Eu0O38ZOoxgHSmRhcZRTHaegCt2/1nBfyvpitAFQPob VnhiwXAjRaTPfVYNoU0FMC5zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWAvyM+6v wD+x0Xr+xWL6rkJYsnIwHwYDVR0jBBgwFoAUILZfNYZ9Fc4PefHoMI9vZeZNJRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMjNCLzIzREE2QUU0QTFG MDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0UGVmSG9NSTl2WmVaTkpS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUxaZk5ZWjlGYzRQZWZIb01JOXZaZVpOSlJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MjNCLzIzREE2QUU0QTFGMDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0 UGVmSG9NSTl2WmVaTkpSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvxwjyMFwYiTsGTDnxGDeConud1cj2gWM4aFsKZRchjqCFwcy/R4CxdXNDJNNV a98GQwFRSLEhl3b5bqfJ2VCkrLIO8xKCkm89ytgWxyzb5x6oIPS/MWjhMzs/FyDr sKYTAMfRQLq0QagIFhogMv3+CmI2Sis2TbDmHQMPR1ytcYHyrL73y6zrAv9R1+mG XorZ0uDffj5PUCIR+7CPHievdzJVDs2FMhe+xUoNd3jgCws632KAiw4KSvNZpjwN Zx8AitRwFO8YwGcs4IQL42hZz0UFTinhcOae23dDcvnGWpuNcK333prMisIc8JCD kLHbyFJarjB/LU+OYecGvWKG -----END CERTIFICATE-----Generated at Tue Oct 6 20:04:50 2026 by rpki-client