$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: SsBK8egFrdvkX3NHZ0xBkf+b5H61BrREwyyH4x9MNG8= Subject key identifier: 85:94:C8:E9:A1:92:DE:80:1B:C6:2F:07:F9:0B:A7:8F:35:7C:86:1A Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 351D Signing time: Sun 01 Mar 2026 22:34:48 +0000 Manifest this update: Sun 01 Mar 2026 22:34:47 +0000 Manifest next update: Sun 08 Mar 2026 22:34:47 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: Smb5xPyOOBMhY5O/Oo90Y8w2zmE/tioCvidj7X3DJA4=) 2: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: ROgLkRP1tOcHFkqxOeh01GNto182KOpWtZrjTxms8VE=) 3: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: euCCdyYJiWPEjkmAjzMYoX1d4ynKi6CgtwknbIb6P7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Mar 1 22:34:47 2026 GMT Not After : Mar 8 22:34:47 2026 GMT Subject: CN=69a4bf08-e8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:f1:8d:67:ab:b6:4b:89:ef:96:51:33:5f: 86:42:c4:56:ae:ca:7a:fe:7b:1e:72:59:39:5c:21: 18:69:0b:08:b9:f6:89:83:9a:78:61:4f:6a:02:58: ff:54:a8:27:ef:9e:ca:c1:24:17:9b:cd:31:e9:22: b6:8f:5d:12:ce:ae:4d:98:5b:94:b7:a6:f2:cd:c1: d9:f2:b1:26:46:ba:a5:70:38:b4:93:e5:ad:c9:69: 30:c6:78:8f:99:7b:f2:0a:1c:89:e5:9d:a8:bb:9d: 66:24:37:0c:2f:f4:65:a2:97:04:0d:9c:a0:89:8e: 94:29:67:a7:5f:43:e6:20:96:49:63:e5:89:52:2a: e7:94:e9:46:65:cb:42:9a:c2:7a:43:2c:2b:01:d2: b2:e3:69:75:46:0b:96:cf:80:fc:81:22:53:c7:d8: 74:2e:1e:cb:4f:86:f9:5d:96:19:55:fd:49:9b:72: bb:49:bf:63:1d:95:ae:c4:fd:ef:29:d5:70:3a:3a: 69:5b:8d:ae:de:72:e7:19:d1:68:d3:63:f6:bf:40: f3:be:4c:95:27:41:b0:05:5f:60:93:ef:91:00:99: 9e:06:f2:fc:52:c6:75:55:3f:5c:7f:0e:6e:fb:1a: bf:28:65:b4:19:52:33:b7:85:c1:3b:75:93:88:d3: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:C8:E9:A1:92:DE:80:1B:C6:2F:07:F9:0B:A7:8F:35:7C:86:1A X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:62:e2:ff:68:b8:b4:43:6f:c8:fb:b1:59:19:91:2c:04:51: 85:6e:0e:4b:bc:47:3b:72:10:e0:ac:33:e3:e4:0a:22:3a:59: 8e:cd:b4:73:d5:52:fd:ad:e2:cc:e2:01:fd:24:ec:f9:8e:04: 06:8f:b9:bb:fa:c3:72:46:50:8c:4e:d7:aa:89:3a:29:b9:96: 7b:35:cd:bf:89:86:e3:01:f7:79:6f:58:b6:60:95:9e:6e:cd: fe:30:5c:24:41:ee:83:b0:95:14:a3:0c:a4:82:b8:22:a9:b5: 36:41:06:f5:6f:8a:09:da:7b:fb:bd:9e:7d:0f:45:db:fe:c8: 91:9d:d7:0d:23:5d:4d:a9:13:67:ad:49:64:c6:ed:71:51:8f: a0:10:17:8e:f7:ae:8a:5d:7c:d0:43:4a:b1:21:46:8d:2b:f3: 3a:be:3a:9b:f3:04:d7:86:1b:64:81:94:4f:72:22:ec:95:3b: 3b:6a:eb:33:75:bb:7a:76:b7:2c:90:df:7f:2b:81:d7:99:3f: 80:3a:d7:c2:46:11:0a:ef:6c:7b:33:4f:43:b1:f2:94:93:8d: 55:ff:75:96:1d:8f:35:ca:0f:b7:95:02:c3:db:c4:11:1e:14: e8:8f:7c:82:7b:7f:da:78:48:76:3a:8a:0a:9a:0f:79:ee:f5: 0b:f0:db:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwMzAxMjIzNDQ3WhcNMjYwMzA4MjIzNDQ3WjAYMRYwFAYD VQQDEw02OWE0YmYwOC1lOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2efxjWertkuJ75ZRM1+GQsRWrsp6/nseclk5XCEYaQsIufaJg5p4YU9qAlj/ VKgn757KwSQXm80x6SK2j10Szq5NmFuUt6byzcHZ8rEmRrqlcDi0k+WtyWkwxniP mXvyChyJ5Z2ou51mJDcML/RlopcEDZygiY6UKWenX0PmIJZJY+WJUirnlOlGZctC msJ6QywrAdKy42l1RguWz4D8gSJTx9h0Lh7LT4b5XZYZVf1Jm3K7Sb9jHZWuxP3v KdVwOjppW42u3nLnGdFo02P2v0DzvkyVJ0GwBV9gk++RAJmeBvL8UsZ1VT9cfw5u +xq/KGW0GVIzt4XBO3WTiNN73QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWUyOmh kt6AG8YvB/kLp481fIYaMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM2Li/2i4tENvyPuxWRmRLARRhW4OS7xHO3IQ4Kwz4+QKIjpZjs20c9VS/a3i zOIB/STs+Y4EBo+5u/rDckZQjE7Xqok6KbmWezXNv4mG4wH3eW9YtmCVnm7N/jBc JEHug7CVFKMMpIK4Iqm1NkEG9W+KCdp7+72efQ9F2/7IkZ3XDSNdTakTZ61JZMbt cVGPoBAXjveuil180ENKsSFGjSvzOr46m/ME14YbZIGUT3Ii7JU7O2rrM3W7ena3 LJDffyuB15k/gDrXwkYRCu9sezNPQ7HylJONVf91lh2PNcoPt5UCw9vEER4U6I98 gnt/2nhIdjqKCpoPee71C/DbYQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:49 2026 by rpki-client