$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: n8k2hDxtdkx5XvioUEAuq2hIgY/d3aypnQvJu5NRFzA= Subject key identifier: 13:50:4D:6E:8D:9D:BE:88:5B:EF:90:F9:FB:62:3D:DD:C9:A7:41:AB Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 358C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 357F Signing time: Fri 04 Sep 2026 14:38:37 +0000 Manifest this update: Fri 04 Sep 2026 14:38:37 +0000 Manifest next update: Fri 11 Sep 2026 14:38:37 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: U6x8hJRLJ7TOyCivpw4KODzS6D3npOyMnwBA1emZ2x8=) 2: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: +9NKbw4Yf5cbYoj9nHJEgGLqyGEjkbYD3jkxgLpPwwo=) 3: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: lk8+oDVmkh0IMVihDlSAF01esZtzK+ueFBrIlPTYmfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13708 (0x358c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Sep 4 14:38:37 2026 GMT Not After : Sep 11 14:38:37 2026 GMT Subject: CN=6a9ad7ed-bedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:f0:50:04:f7:cc:e5:a3:84:b0:28:b4:b0: a2:38:80:1b:6e:01:1d:a7:93:a1:06:e4:c3:21:54: 5a:03:02:24:7c:03:54:3a:06:a4:38:91:7c:24:fc: 6f:85:c9:93:3b:d0:9a:5c:a4:25:d0:5f:5a:ce:bc: c7:ec:ab:ee:6b:55:e3:b6:b4:69:2a:54:a7:7f:1d: 4d:ef:be:8b:4a:85:cb:71:d1:98:aa:56:cb:3c:4c: 33:15:76:f2:b6:94:11:48:ed:de:38:a0:98:91:08: 52:e2:da:97:aa:55:4a:58:e9:16:7e:cb:91:be:38: 33:65:fe:d1:e4:8d:97:54:89:9f:03:4c:74:d8:1f: 6e:b0:93:99:8b:d1:ef:5e:a6:37:41:5c:9b:20:f3: 91:2f:38:a6:54:09:ab:62:af:39:e7:55:c3:09:ff: 55:f0:8b:e7:63:dc:b7:61:ce:f4:60:31:a4:55:95: 84:92:df:4c:39:7c:a5:75:fd:78:1a:da:0b:cc:56: 49:1b:6c:e8:fb:aa:b8:e2:76:ca:b7:9c:28:50:80: f2:a3:d1:b4:c0:21:05:ea:1e:f4:6d:ac:a9:7c:2c: c2:dd:02:8d:f2:46:7e:1f:65:66:7e:1a:45:ba:29: 12:1b:38:89:ec:56:44:14:67:42:70:53:f5:b7:3a: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:50:4D:6E:8D:9D:BE:88:5B:EF:90:F9:FB:62:3D:DD:C9:A7:41:AB X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:38:2a:5a:1e:a4:a6:18:83:99:a6:ff:bb:d4:3d:ad:11:b7: f1:08:b7:a7:8a:43:90:59:6f:03:da:fe:39:ea:52:d9:c8:cf: 00:e2:6c:c6:f9:e3:6c:fa:73:65:3f:c7:88:c4:fb:6a:f3:db: 9d:78:8f:27:16:93:b7:ff:8b:4d:72:f9:d6:55:0d:6c:34:8b: 35:27:20:d3:20:32:31:5f:a8:ef:b9:6f:9b:df:b5:dd:ce:4c: 2e:ab:e5:2e:65:65:82:c4:13:d0:c4:08:fe:2e:49:e1:5b:c0: 6d:51:42:78:ba:a6:15:73:0a:c1:92:26:9f:dd:37:26:a5:0c: f0:75:34:e8:97:76:2a:eb:94:7d:52:dc:15:53:9d:27:eb:95: a8:42:a7:22:cd:d3:81:8f:af:a1:2e:e0:6f:3b:94:02:6f:83: 9b:52:4b:44:a0:c8:ec:c1:28:00:36:86:bd:98:38:a9:69:4a: 5f:ff:f1:0c:87:57:0a:7a:99:22:83:e2:c1:46:dd:c0:30:61: 82:e5:96:a2:8d:6e:1f:3f:9d:a3:a2:ed:e0:f5:a9:ca:2e:88: 94:c0:65:dd:31:41:09:5f:8e:cf:58:02:6d:c5:0c:0c:8e:45: 6f:b4:b2:a9:52:c8:d1:21:8c:9c:ec:2f:cd:e6:dc:54:43:44: 12:de:09:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwOTA0MTQzODM3WhcNMjYwOTExMTQzODM3WjAYMRYwFAYD VQQDEw02YTlhZDdlZC1iZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkHjwUAT3zOWjhLAotLCiOIAbbgEdp5OhBuTDIVRaAwIkfANUOgakOJF8JPxv hcmTO9CaXKQl0F9azrzH7Kvua1XjtrRpKlSnfx1N776LSoXLcdGYqlbLPEwzFXby tpQRSO3eOKCYkQhS4tqXqlVKWOkWfsuRvjgzZf7R5I2XVImfA0x02B9usJOZi9Hv XqY3QVybIPORLzimVAmrYq8551XDCf9V8IvnY9y3Yc70YDGkVZWEkt9MOXyldf14 GtoLzFZJG2zo+6q44nbKt5woUIDyo9G0wCEF6h70baypfCzC3QKN8kZ+H2VmfhpF uikSGziJ7FZEFGdCcFP1tzq6xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNQTW6N nb6IW++Q+ftiPd3Jp0GrMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJjgqWh6kphiDmab/u9Q9rRG38Qi3p4pDkFlvA9r+OepS2cjPAOJsxvnjbPpz ZT/HiMT7avPbnXiPJxaTt/+LTXL51lUNbDSLNScg0yAyMV+o77lvm9+13c5MLqvl LmVlgsQT0MQI/i5J4VvAbVFCeLqmFXMKwZImn903JqUM8HU06Jd2KuuUfVLcFVOd J+uVqEKnIs3TgY+voS7gbzuUAm+Dm1JLRKDI7MEoADaGvZg4qWlKX//xDIdXCnqZ IoPiwUbdwDBhguWWoo1uHz+do6Lt4PWpyi6IlMBl3TFBCV+Oz1gCbcUMDI5Fb7Sy qVLI0SGMnOwvzebcVENEEt4JuQ== -----END CERTIFICATE-----Generated at Fri Sep 4 22:23:17 2026 by rpki-client