$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json) Hash identifier: 28v6OUm+0jRik+Ya9FTB8cQrhrQnvr+H0sQcNyW5P0k= Subject key identifier: 70:CD:61:CA:4C:B6:A8:12:A9:EF:F0:47:7F:34:A3:76:AE:42:E0:C3 Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft Manifest number: 0160 Signing time: Wed 29 Jul 2026 06:19:55 +0000 Manifest this update: Wed 29 Jul 2026 06:19:54 +0000 Manifest next update: Wed 05 Aug 2026 06:19:54 +0000 Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: NYSx7Rc7XSwY8xYbmPynhElzcHerx9N19gwQtjJB8mo=) 2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: VHajbTjmwkX2RW0fXipdm5sMeEnHYksBbQ58cyoCp5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 06:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: Jul 29 06:19:54 2026 GMT Not After : Aug 5 06:19:54 2026 GMT Subject: CN=6a699b8b-65a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:bd:e9:34:2c:b7:2d:f7:00:2c:c9:85:da: 21:3f:e1:b2:9b:59:13:fc:be:57:15:05:9e:8b:68: c3:3e:3e:22:a2:97:c6:88:58:da:0b:7d:13:be:8f: 4d:e4:86:2e:5f:84:ac:6e:82:09:96:14:00:fb:ba: e5:3b:24:d4:a9:ec:f9:fe:62:82:4c:56:80:70:0c: a6:fe:ec:a2:40:b2:e3:96:cd:d0:2f:54:7f:d2:27: 9b:60:00:6a:bb:05:b1:89:6e:91:34:5b:b1:fd:30: 5e:74:f7:05:1c:3e:dc:0c:50:54:a7:11:e3:ea:7e: 06:7f:07:b7:1e:76:56:b6:12:2b:34:f8:02:4b:e0: da:62:41:94:9e:93:bc:e3:1b:62:21:60:d6:f1:96: 13:d3:77:3a:42:dc:41:ac:a1:98:32:8b:06:ba:eb: ea:87:21:10:da:af:8f:1a:4a:86:fc:d0:cb:72:86: 0c:a9:68:fb:8e:30:fc:c8:cc:66:63:58:31:04:ec: da:bf:06:84:40:87:79:df:2e:77:47:1e:fc:49:7e: f7:c9:d0:76:16:5a:3b:d6:68:6c:c2:65:8c:90:17: 97:fe:d9:16:03:1b:e4:e5:3e:ad:c6:ae:e5:31:e0: 95:d4:ed:63:0b:33:86:6c:66:a6:14:96:62:d1:d5: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CD:61:CA:4C:B6:A8:12:A9:EF:F0:47:7F:34:A3:76:AE:42:E0:C3 X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:64:f9:b0:24:87:55:61:49:4f:e1:74:52:a3:24:9c:34:fc: 73:42:6a:22:e0:a3:61:f6:80:da:1b:18:5e:4b:b7:a7:44:e4: e0:6e:8f:1e:c9:73:ae:4e:b1:80:f9:4f:42:f1:ea:38:b5:6f: 05:4f:56:f1:1d:2e:9e:81:38:40:5b:0e:64:8c:6e:29:85:af: ee:e8:9c:34:cc:68:a5:4f:6b:d5:ba:e8:36:de:6a:a9:46:bb: ef:4a:56:30:4c:4e:76:74:1e:95:a4:0f:f6:9c:f4:73:ed:52: d2:d6:36:e6:2a:8d:cd:4f:bc:3b:d0:de:ae:c2:4b:d7:f5:b3: 01:b0:17:d8:1f:82:31:9a:85:88:eb:63:63:19:51:fc:ea:7f: 46:85:6d:12:a1:2d:8a:95:41:3d:9b:7f:a8:ac:cd:81:98:83: 4e:86:fa:24:28:3d:fe:9e:0a:0c:fd:91:83:13:9d:db:c2:a0: 6d:de:8a:8b:20:b4:59:fa:4e:f9:d5:0e:0a:57:42:e9:39:73: 7f:fe:cc:ce:72:09:c8:24:12:f1:d8:10:d4:7a:14:c1:63:df: cb:2a:f7:84:27:ab:1c:f6:2d:0f:4d:b0:b5:99:69:fc:95:33: ea:3c:6c:7e:a1:7c:1b:fe:41:42:d0:64:7b:ca:ed:6c:e9:bc: ac:86:f9:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3 N0EwNkNFOEMwHhcNMjYwNzI5MDYxOTU0WhcNMjYwODA1MDYxOTU0WjAYMRYwFAYD VQQDEw02YTY5OWI4Yi02NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+e96TQsty33ACzJhdohP+Gym1kT/L5XFQWei2jDPj4iopfGiFjaC30Tvo9N 5IYuX4SsboIJlhQA+7rlOyTUqez5/mKCTFaAcAym/uyiQLLjls3QL1R/0iebYABq uwWxiW6RNFux/TBedPcFHD7cDFBUpxHj6n4Gfwe3HnZWthIrNPgCS+DaYkGUnpO8 4xtiIWDW8ZYT03c6QtxBrKGYMosGuuvqhyEQ2q+PGkqG/NDLcoYMqWj7jjD8yMxm Y1gxBOzavwaEQId53y53Rx78SX73ydB2Flo71mhswmWMkBeX/tkWAxvk5T6txq7l MeCV1O1jCzOGbGamFJZi0dWGIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDNYcpM tqgSqe/wR380o3auQuDDMB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6 b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzlCRi9CRTFENEEzNDdCNEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQ Zkx4aWNzWEdsX04zb0d6b3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASmT5sCSHVWFJT+F0UqMknDT8c0JqIuCjYfaA2hsYXku3p0Tk4G6PHslzrk6x gPlPQvHqOLVvBU9W8R0unoE4QFsOZIxuKYWv7uicNMxopU9r1broNt5qqUa770pW MExOdnQelaQP9pz0c+1S0tY25iqNzU+8O9DersJL1/WzAbAX2B+CMZqFiOtjYxlR /Op/RoVtEqEtipVBPZt/qKzNgZiDTob6JCg9/p4KDP2RgxOd28Kgbd6KiyC0WfpO +dUOCldC6Tlzf/7MznIJyCQS8dgQ1HoUwWPfyyr3hCerHPYtD02wtZlp/JUz6jxs fqF8G/5BQtBke8rtbOm8rIb5Sg== -----END CERTIFICATE-----Generated at Fri Jul 31 01:31:36 2026 by rpki-client