$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json) Hash identifier: MqNVJxPH21ha02+dcdnJfgitaIM3B9hF7QmVHr+LlvA= Subject key identifier: 24:15:B5:D6:D4:E3:17:EB:BA:00:01:80:B9:8F:AD:5A:97:D0:47:55 Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft Manifest number: 0192 Signing time: Sun 01 Nov 2026 05:36:22 +0000 Manifest this update: Sun 01 Nov 2026 05:36:22 +0000 Manifest next update: Sun 08 Nov 2026 05:36:22 +0000 Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: skt8g+wbQKOhSyb4UEMNayfz5agE7bpwOrR2sTlzZts=) 2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: 5QPe8ncIbmOtpv/0UagKDEsBkTPo/vp1GJpaE7hkl9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 05:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: Nov 1 05:36:22 2026 GMT Not After : Nov 8 05:36:22 2026 GMT Subject: CN=6ae6cfd6-b943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:d4:ae:dd:4a:9b:13:d6:8c:a5:85:5d:19: 31:b2:bd:8f:02:db:14:59:67:10:de:86:65:6d:4f: 6b:69:2a:c4:ea:f5:3e:6c:08:ab:d6:56:a7:c9:aa: 32:af:97:b5:04:86:4d:64:29:cc:19:94:a7:88:62: e9:82:77:33:6b:e7:19:0d:da:c6:c2:a9:0e:a0:e7: b0:e2:73:83:78:de:b4:05:35:66:f2:1d:5d:fb:81: b1:46:20:7a:4a:08:d8:c1:df:0e:a6:8d:12:11:77: 58:28:71:7b:a0:44:4d:08:58:ed:b1:40:93:c4:a0: ef:b0:07:f6:b3:cd:81:6d:b9:67:0d:4f:da:ae:43: ca:18:79:44:ee:a3:79:25:99:63:f4:62:b8:59:a5: c7:93:0d:69:6d:52:e4:4f:4d:87:8c:c8:37:75:1b: bf:9f:a7:fc:37:b1:6d:42:80:d9:be:de:63:d2:0a: 08:f6:80:c6:e9:71:33:56:23:5b:39:33:7f:e3:46: d2:8a:e8:34:fe:4d:89:30:f8:77:70:28:9d:fd:76: b7:eb:93:e0:0d:70:f5:6e:cc:7c:48:13:00:32:a1: e2:1b:2e:a6:c1:e9:a3:cc:e7:97:63:45:34:3c:89: c8:fc:21:e9:51:34:dc:c4:fa:f4:0c:55:2f:fd:64: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:15:B5:D6:D4:E3:17:EB:BA:00:01:80:B9:8F:AD:5A:97:D0:47:55 X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:c7:b4:a8:58:1b:19:35:47:42:b7:b1:11:73:c1:83:df: 2f:a9:0e:73:fa:ff:f2:09:54:4e:15:dc:dc:22:0e:89:52:1e: aa:63:0b:d4:03:9e:a6:ef:f5:a5:cc:f1:17:e9:2f:3f:47:d6: 8d:c9:98:49:d4:92:32:7f:b9:54:7e:d6:b3:1e:c1:bb:1a:d6: 64:57:da:ee:a7:98:81:1e:97:c6:9a:d2:1b:09:5a:22:33:70: 9b:90:27:65:6a:a8:04:4a:fb:93:b4:93:13:46:a7:3a:10:a2: 28:39:7a:5e:27:b2:01:ac:5d:99:e9:30:c4:de:99:7f:06:1c: 93:2a:ef:9e:3c:bc:d7:07:2b:a4:8d:8f:3d:a2:06:66:75:20: c6:25:0c:35:90:15:09:d0:93:d0:fa:22:81:07:f6:a9:8c:4f: 25:10:e0:d2:cb:72:50:db:e2:31:25:25:f0:69:13:23:e0:2f: 6e:47:42:8a:88:52:4a:f4:69:66:b8:a3:8c:6a:af:89:9b:2d: 28:bf:09:18:09:9b:23:b4:75:1e:85:7b:dc:b8:c2:a6:9f:fb: 6e:77:0e:db:51:a6:c2:46:d8:47:76:75:5f:f2:ed:78:15:3b: d4:1e:8a:67:4e:cb:fe:a3:0b:49:2d:70:b4:d3:8a:13:e5:37: 69:03:df:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3 N0EwNkNFOEMwHhcNMjYxMTAxMDUzNjIyWhcNMjYxMTA4MDUzNjIyWjAYMRYwFAYD VQQDEw02YWU2Y2ZkNi1iOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIHUrt1KmxPWjKWFXRkxsr2PAtsUWWcQ3oZlbU9raSrE6vU+bAir1lanyaoy r5e1BIZNZCnMGZSniGLpgncza+cZDdrGwqkOoOew4nODeN60BTVm8h1d+4GxRiB6 SgjYwd8Opo0SEXdYKHF7oERNCFjtsUCTxKDvsAf2s82BbblnDU/arkPKGHlE7qN5 JZlj9GK4WaXHkw1pbVLkT02HjMg3dRu/n6f8N7FtQoDZvt5j0goI9oDG6XEzViNb OTN/40bSiug0/k2JMPh3cCid/Xa365PgDXD1bsx8SBMAMqHiGy6mwemjzOeXY0U0 PInI/CHpUTTcxPr0DFUv/WQUMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQVtdbU 4xfrugABgLmPrVqX0EdVMB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6 b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzlCRi9CRTFENEEzNDdCNEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQ Zkx4aWNzWEdsX04zb0d6b3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADV7HtKhYGxk1R0K3sRFzwYPfL6kOc/r/8glUThXc3CIOiVIeqmML1AOepu/1 pczxF+kvP0fWjcmYSdSSMn+5VH7Wsx7BuxrWZFfa7qeYgR6XxprSGwlaIjNwm5An ZWqoBEr7k7STE0anOhCiKDl6XieyAaxdmekwxN6ZfwYckyrvnjy81wcrpI2PPaIG ZnUgxiUMNZAVCdCT0PoigQf2qYxPJRDg0styUNviMSUl8GkTI+AvbkdCiohSSvRp ZrijjGqviZstKL8JGAmbI7R1HoV73LjCpp/7bncO21GmwkbYR3Z1X/LteBU71B6K Z07L/qMLSS1wtNOKE+U3aQPfVg== -----END CERTIFICATE-----Generated at Mon Nov 2 11:49:46 2026 by rpki-client