$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: AQ2mvCNOIjzyP6SJ3vC0+fEG2bt9zb3Pi3dPO96qVP4= Subject key identifier: 11:CE:92:78:12:ED:9F:F1:63:82:D8:1E:E1:BF:64:5B:7A:DB:F4:0D Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 3587 Signing time: Sun 20 Sep 2026 14:38:33 +0000 Manifest this update: Sun 20 Sep 2026 14:38:32 +0000 Manifest next update: Sun 27 Sep 2026 14:38:32 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: 2/6EV57Gw2pU9RsXGPjfFp0oPYqjnfvBfbBxBLhlWCs=) 2: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: +9NKbw4Yf5cbYoj9nHJEgGLqyGEjkbYD3jkxgLpPwwo=) 3: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: lk8+oDVmkh0IMVihDlSAF01esZtzK+ueFBrIlPTYmfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13716 (0x3594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Sep 20 14:38:32 2026 GMT Not After : Sep 27 14:38:32 2026 GMT Subject: CN=6aafefe8-df42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:9c:67:e7:e4:94:ea:6c:02:d5:ed:32:e2: 21:47:94:eb:f9:26:5f:6e:90:b7:3e:18:56:93:1b: 36:f8:3b:c6:6f:dd:af:d3:f3:1c:70:bf:b1:91:d9: d9:f4:94:1c:0c:03:d9:fa:df:46:03:4a:ad:23:20: 78:f4:98:e3:63:98:c9:95:a6:18:db:3a:d1:6d:fe: f4:5f:18:0f:84:96:10:73:01:a2:0c:f0:b3:63:44: d4:14:b6:2a:7b:55:9f:7c:bb:02:3c:07:97:75:91: cb:a9:22:15:d2:5a:8b:ff:72:f2:78:6e:d0:0a:9f: 96:29:0f:17:2a:2b:67:83:d8:f3:f8:32:8e:cd:0b: 24:a9:7a:cf:8b:c5:d8:5f:1a:1c:5c:ab:62:d7:79: 0b:48:2e:a3:f8:13:67:c8:b8:c2:a2:78:00:ce:db: 2f:a1:4b:6b:37:e9:40:c8:22:f1:a8:02:7f:d7:e6: 61:9a:9f:15:ce:1d:c6:16:13:74:4d:e8:e0:4c:eb: f6:e7:25:e1:f5:61:0a:a6:ce:b2:43:05:82:a2:b4: d3:fa:e2:9c:ce:cf:87:5c:6c:dd:78:cc:2c:c9:9f: aa:6a:54:d6:0c:71:8f:c6:4b:6a:ea:90:4a:aa:dd: 76:5b:d2:e5:b9:15:75:dc:59:43:fa:14:cb:f3:9f: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CE:92:78:12:ED:9F:F1:63:82:D8:1E:E1:BF:64:5B:7A:DB:F4:0D X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:fb:1c:b3:ee:cb:c8:22:2e:3d:b0:10:0b:4d:f9:33:54:66: ea:ab:55:65:e3:35:0e:91:d0:e1:1f:c2:92:b7:5a:c1:1b:eb: d5:05:10:cd:c1:b2:4b:8f:6e:3f:1e:95:f1:fc:f9:b7:30:ee: 68:45:f0:c5:ac:4a:d0:18:ac:4e:c5:7b:49:d4:94:b4:17:2b: a2:b7:d5:58:f3:52:5e:d6:7e:28:60:1c:ba:6b:f5:9c:b9:db: bf:f2:88:6a:eb:72:5f:6f:b3:ab:76:dd:d6:0c:11:24:a2:42: 4c:cb:58:6d:3d:d0:25:6e:78:6b:90:11:f2:60:29:41:3c:46: ab:d3:5f:b4:f3:f4:1d:bf:80:1b:75:0b:72:7d:bd:8d:b3:97: d7:bd:73:b0:d0:9e:2e:aa:f1:85:f6:74:c3:21:57:4a:60:06: 3f:25:45:5c:8c:52:e1:49:7b:d5:65:03:d6:d9:89:19:b3:57: e6:35:24:36:10:49:fc:ea:ff:42:ac:e5:59:b7:a9:4a:64:6a: 4f:02:b0:d7:f9:5b:1d:56:18:5e:1f:ab:d1:d7:5d:f9:4d:9d: cc:30:19:b0:fa:2b:09:73:96:c7:ab:f7:70:0d:2c:61:aa:89: 97:a7:9f:41:c6:ea:d2:c6:4a:7a:d3:2c:6f:e8:51:0a:80:66: 72:65:0a:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwOTIwMTQzODMyWhcNMjYwOTI3MTQzODMyWjAYMRYwFAYD VQQDEw02YWFmZWZlOC1kZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX2cZ+fklOpsAtXtMuIhR5Tr+SZfbpC3PhhWkxs2+DvGb92v0/MccL+xkdnZ 9JQcDAPZ+t9GA0qtIyB49JjjY5jJlaYY2zrRbf70XxgPhJYQcwGiDPCzY0TUFLYq e1WffLsCPAeXdZHLqSIV0lqL/3LyeG7QCp+WKQ8XKitng9jz+DKOzQskqXrPi8XY XxocXKti13kLSC6j+BNnyLjCongAztsvoUtrN+lAyCLxqAJ/1+Zhmp8Vzh3GFhN0 TejgTOv25yXh9WEKps6yQwWCorTT+uKczs+HXGzdeMwsyZ+qalTWDHGPxktq6pBK qt12W9LluRV13FlD+hTL85/C6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHOkngS 7Z/xY4LYHuG/ZFt62/QNMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA/scs+7LyCIuPbAQC035M1Rm6qtVZeM1DpHQ4R/CkrdawRvr1QUQzcGyS49u Px6V8fz5tzDuaEXwxaxK0BisTsV7SdSUtBcrorfVWPNSXtZ+KGAcumv1nLnbv/KI autyX2+zq3bd1gwRJKJCTMtYbT3QJW54a5AR8mApQTxGq9NftPP0Hb+AG3ULcn29 jbOX171zsNCeLqrxhfZ0wyFXSmAGPyVFXIxS4Ul71WUD1tmJGbNX5jUkNhBJ/Or/ QqzlWbepSmRqTwKw1/lbHVYYXh+r0ddd+U2dzDAZsPorCXOWx6v3cA0sYaqJl6ef Qcbq0sZKetMsb+hRCoBmcmUKfA== -----END CERTIFICATE-----Generated at Tue Sep 22 14:47:52 2026 by rpki-client