$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json) Hash identifier: suCLZGeSIeghdy0U00NTXsw9QuG3tL4sigtshRj+Ho8= Subject key identifier: D4:B4:9A:FB:BD:DA:5F:2A:06:A9:B7:FA:6C:A7:78:19:18:8E:88:A8 Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft Manifest number: 03A1 Signing time: Thu 21 May 2026 00:48:56 +0000 Manifest this update: Thu 21 May 2026 00:48:56 +0000 Manifest next update: Thu 28 May 2026 00:48:56 +0000 Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: RrRqccsz3fGSQ+t4iyiHm3psMvhpv4bkOoXIFJpa+K0=) 2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: 6M3nHh1tBkWrtavTbv5/PbKrcEdBIhYQxQIZdYCN4/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: May 21 00:48:56 2026 GMT Not After : May 28 00:48:56 2026 GMT Subject: CN=6a0e5678-5e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:f1:4c:36:91:68:60:b3:6e:90:35:02:f5: cd:54:a0:ee:cb:d5:58:51:ad:30:99:eb:01:26:71: c3:7e:ca:f7:6c:10:42:44:48:42:42:59:98:0a:6f: e0:68:92:20:6a:61:b7:5a:d8:08:3d:d6:6c:37:ab: 8f:df:c4:fd:73:24:c9:85:2a:d3:04:92:0d:74:41: a6:7e:d0:0e:00:f3:c5:57:ba:41:05:18:bf:e6:7f: 2b:6e:06:7d:23:53:aa:a8:9c:dc:6c:d0:0a:55:ec: 69:2e:d9:90:f5:d0:4b:31:bc:60:14:6c:68:8c:9d: 9b:f7:36:de:5d:0f:0d:ab:52:44:eb:e7:0b:70:fd: 5c:ff:73:45:e6:bd:26:29:a3:36:ba:e0:d4:87:9d: 14:99:48:14:f2:a4:72:43:27:07:8b:e2:0e:84:7d: 85:f5:c2:b4:ff:e0:25:99:cd:ce:bd:4a:5e:76:fb: 96:f9:b1:9d:b4:74:25:00:19:bc:12:22:fa:0f:3f: 1c:53:a1:34:dd:6f:81:c1:74:55:f6:ed:c5:35:09: f9:3b:2f:6e:cc:80:e9:78:0b:ec:1a:5e:7c:d3:c5: 71:09:cb:f5:b2:77:bb:e8:ec:fd:72:ce:19:91:3f: e2:54:7a:0d:3f:2b:36:12:9d:20:2e:c0:d1:f3:b7: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:9A:FB:BD:DA:5F:2A:06:A9:B7:FA:6C:A7:78:19:18:8E:88:A8 X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a6:2f:7d:33:6a:2c:eb:4b:0f:e6:2b:a4:c5:77:64:7a:35: 4c:3f:49:d0:d6:d0:bf:81:34:49:d1:93:1e:9f:2a:4c:62:18: 3d:51:b2:4d:cc:f3:f6:f1:23:58:86:14:c9:d9:81:59:79:61: 04:98:5c:8d:eb:91:8e:c8:a5:a1:50:a8:65:23:2f:7c:f3:5b: 17:63:f1:d6:dc:64:ec:dc:98:ae:7e:6e:a3:00:c2:38:59:01: 42:90:22:ae:99:ab:b6:f7:e7:1c:22:38:ee:83:65:e9:80:cf: f8:5a:93:14:c6:3a:a5:b0:21:7a:5a:85:b1:38:34:9d:ce:5a: c9:da:70:e0:e0:c1:87:c1:1b:58:58:b8:f5:2a:cf:dd:58:ae: 66:ae:4d:44:73:83:15:29:76:d6:dd:df:82:2c:a7:70:ac:9f: f1:ae:98:57:85:a2:8b:c3:7f:99:ce:8e:48:49:be:40:25:21: bb:b4:b0:a3:c1:16:11:11:6f:7c:5b:26:54:42:93:51:9c:e7: 55:ba:b7:72:a5:0c:52:8d:95:7a:e3:ec:e2:22:cd:8a:22:1b: d1:cf:55:4b:2b:22:a2:e8:d1:da:53:03:cb:57:66:9a:43:c8: 90:fe:94:c7:ab:db:8f:f2:c5:7a:61:ef:77:e8:cc:da:bb:15: 74:43:e8:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjYwNTIxMDA0ODU2WhcNMjYwNTI4MDA0ODU2WjAYMRYwFAYD VQQDEw02YTBlNTY3OC01ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbnxTDaRaGCzbpA1AvXNVKDuy9VYUa0wmesBJnHDfsr3bBBCREhCQlmYCm/g aJIgamG3WtgIPdZsN6uP38T9cyTJhSrTBJINdEGmftAOAPPFV7pBBRi/5n8rbgZ9 I1OqqJzcbNAKVexpLtmQ9dBLMbxgFGxojJ2b9zbeXQ8Nq1JE6+cLcP1c/3NF5r0m KaM2uuDUh50UmUgU8qRyQycHi+IOhH2F9cK0/+Almc3OvUpedvuW+bGdtHQlABm8 EiL6Dz8cU6E03W+BwXRV9u3FNQn5Oy9uzIDpeAvsGl5808VxCcv1sne76Oz9cs4Z kT/iVHoNPys2Ep0gLsDR87d3NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS0mvu9 2l8qBqm3+myneBkYjoioMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2 ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADKYvfTNqLOtLD+YrpMV3ZHo1TD9J0NbQv4E0SdGTHp8qTGIYPVGyTczz9vEj WIYUydmBWXlhBJhcjeuRjsiloVCoZSMvfPNbF2Px1txk7NyYrn5uowDCOFkBQpAi rpmrtvfnHCI47oNl6YDP+FqTFMY6pbAhelqFsTg0nc5aydpw4ODBh8EbWFi49SrP 3ViuZq5NRHODFSl21t3fgiyncKyf8a6YV4Wii8N/mc6OSEm+QCUhu7Swo8EWERFv fFsmVEKTUZznVbq3cqUMUo2VeuPs4iLNiiIb0c9VSysioujR2lMDy1dmmkPIkP6U x6vbj/LFemHvd+jM2rsVdEPogg== -----END CERTIFICATE-----Generated at Thu May 21 10:15:00 2026 by rpki-client