$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json) Hash identifier: m91amANonVT5KK7OH1SEqG12274PtnIKpWQ4qke5Y3Y= Subject key identifier: F5:F9:CA:71:04:AD:83:DE:FF:F2:0A:B4:CB:B0:AA:44:20:7A:A2:DE Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 03D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft Manifest number: 03CF Signing time: Wed 19 Aug 2026 00:55:02 +0000 Manifest this update: Wed 19 Aug 2026 00:55:01 +0000 Manifest next update: Wed 26 Aug 2026 00:55:01 +0000 Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: 5Ve9JO2wUNvyZu3zRYcbBbtpC+ajeWC0BVWRuWO+lDE=) 2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: 6M3nHh1tBkWrtavTbv5/PbKrcEdBIhYQxQIZdYCN4/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: Aug 19 00:55:01 2026 GMT Not After : Aug 26 00:55:01 2026 GMT Subject: CN=6a84fee6-6a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:cd:5d:63:5c:9c:b3:7f:e8:cb:20:06:a2: d2:e7:7f:6f:97:ce:c3:fd:f9:8f:e6:23:eb:8b:ec: d6:41:62:1e:55:32:78:7a:0f:30:51:03:26:4d:56: df:69:ed:ef:fe:d4:ff:2d:42:55:23:44:ca:f0:ef: fc:e0:5f:1b:f0:ea:3f:e4:41:b4:e2:96:6f:3a:cd: 22:82:0a:2a:7d:3f:71:be:30:de:49:79:5e:7b:83: f2:45:d7:b3:f6:5e:08:51:4f:58:ac:b0:a3:28:b7: 1e:41:10:9d:e7:74:4b:d1:5c:91:9e:04:13:5c:dc: fc:eb:e1:77:ea:e0:b3:81:87:80:51:5c:35:36:6e: 9b:ad:62:90:aa:9f:3f:45:28:17:43:e4:de:7c:4a: db:09:3f:f3:5f:39:39:38:61:40:c6:dc:b5:7a:28: 26:94:46:35:fb:cf:2b:f1:bc:fd:f1:c4:8b:d9:28: 2a:50:cb:24:c4:16:65:f2:4f:a9:d2:9e:3e:3e:a2: ee:aa:6f:80:9d:87:b3:47:97:29:ab:40:69:82:02: 4b:49:cb:a9:41:16:2a:c9:30:a9:2b:59:c5:cb:aa: 63:78:03:4b:05:5d:03:a4:75:c6:64:f2:6d:cb:bb: bb:2e:98:65:cc:1c:bd:ff:07:ce:70:b0:18:2d:75: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F9:CA:71:04:AD:83:DE:FF:F2:0A:B4:CB:B0:AA:44:20:7A:A2:DE X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:8f:02:22:76:e7:9f:b2:8e:b8:a4:52:fa:0e:7a:48:ab: 76:18:f4:2b:0e:20:f3:3c:ed:2d:fe:6c:f0:1c:1a:78:ab:47: 29:6e:ef:39:d2:81:9f:34:2e:70:44:c7:be:50:65:b0:42:cd: b5:b3:46:7e:f7:b5:51:56:cf:3d:91:18:c4:74:75:ef:53:b5: c9:be:5e:86:46:cb:6d:14:e5:35:4c:ec:30:1d:2f:3e:35:52: 7c:e0:3e:8f:a0:01:75:b2:2f:04:b7:27:ae:69:b8:0e:3f:fc: ad:09:22:17:06:3d:bd:6b:a1:77:e4:7e:ec:f5:a3:ec:50:42: 57:e5:16:28:47:60:1a:aa:05:be:10:cd:27:59:c5:d9:f9:92: 98:74:b3:c5:e5:5a:8c:0f:9b:48:ea:53:75:8d:0f:e2:74:34: 5f:18:99:b0:dc:6b:8e:fa:7a:ac:09:15:07:a8:d1:ba:16:57: 5a:58:2f:94:ce:ff:36:70:cd:9b:eb:e5:95:39:cc:bc:70:4a: 6f:8a:ef:d5:d2:ca:6f:29:a7:02:63:5c:09:ed:87:7a:4d:e3: b0:0d:40:03:82:bb:1c:69:54:e4:7f:9c:05:9a:a4:ad:68:73: f2:67:db:fa:25:c4:76:69:85:28:b4:55:01:2e:a8:81:bd:80: f0:57:ca:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjYwODE5MDA1NTAxWhcNMjYwODI2MDA1NTAxWjAYMRYwFAYD VQQDEw02YTg0ZmVlNi02YTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jXNXWNcnLN/6MsgBqLS539vl87D/fmP5iPri+zWQWIeVTJ4eg8wUQMmTVbf ae3v/tT/LUJVI0TK8O/84F8b8Oo/5EG04pZvOs0iggoqfT9xvjDeSXlee4PyRdez 9l4IUU9YrLCjKLceQRCd53RL0VyRngQTXNz86+F36uCzgYeAUVw1Nm6brWKQqp8/ RSgXQ+TefErbCT/zXzk5OGFAxty1eigmlEY1+88r8bz98cSL2SgqUMskxBZl8k+p 0p4+PqLuqm+AnYezR5cpq0BpggJLScupQRYqyTCpK1nFy6pjeANLBV0DpHXGZPJt y7u7LphlzBy9/wfOcLAYLXWmGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPX5ynEE rYPe//IKtMuwqkQgeqLeMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2 ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASTCPAiJ255+yjrikUvoOekirdhj0Kw4g8zztLf5s8BwaeKtHKW7vOdKBnzQu cETHvlBlsELNtbNGfve1UVbPPZEYxHR171O1yb5ehkbLbRTlNUzsMB0vPjVSfOA+ j6ABdbIvBLcnrmm4Dj/8rQkiFwY9vWuhd+R+7PWj7FBCV+UWKEdgGqoFvhDNJ1nF 2fmSmHSzxeVajA+bSOpTdY0P4nQ0XxiZsNxrjvp6rAkVB6jRuhZXWlgvlM7/NnDN m+vllTnMvHBKb4rv1dLKbymnAmNcCe2Hek3jsA1AA4K7HGlU5H+cBZqkrWhz8mfb +iXEdmmFKLRVAS6ogb2A8FfKCg== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:37 2026 by rpki-client