$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json) Hash identifier: R4lGoqQZrCQb2+FkSkcLdpSjX0AMrFvtp/NY/2idKiU= Subject key identifier: 84:59:24:10:03:5F:8E:0A:88:3E:D9:F3:A3:8A:5A:6A:3B:FF:66:D0 Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Certificate serial: 0FB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft Manifest number: 0F9D Signing time: Tue 18 Aug 2026 17:43:34 +0000 Manifest this update: Tue 18 Aug 2026 17:43:33 +0000 Manifest next update: Tue 25 Aug 2026 17:43:33 +0000 Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: 3xcWDf5yigRsIgMy4jAem09L9IALUgpU2iQVPDWAYHM=) 2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: RliNwJOrh8ohq0egdtLbM01dmRkfXxaSAwBvI0aDXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4023 (0xfb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Validity Not Before: Aug 18 17:43:33 2026 GMT Not After : Aug 25 17:43:33 2026 GMT Subject: CN=6a8499c5-685a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:db:f7:bc:a8:a3:2e:53:67:af:21:00:f7: 8a:9a:8d:35:2f:76:ac:f8:99:8f:fe:4c:03:f7:3d: 76:fd:39:9d:4e:3a:c3:3b:c6:62:e7:d1:df:9f:cc: 20:57:fd:a4:0a:62:32:60:d1:60:3e:2b:48:42:ca: 2f:c0:0c:2e:da:14:16:9d:8c:fd:51:71:fc:ab:29: 9e:2c:5d:5d:92:71:00:12:ca:25:22:7c:f4:ca:a3: d0:52:cf:1a:67:f3:fb:28:22:7d:c2:f2:2c:14:cd: 34:08:23:85:f4:f8:70:6d:8d:20:2f:83:31:9c:9c: c5:81:23:2a:f0:73:57:d0:b4:6a:31:61:a4:b3:a0: e2:88:53:53:78:ac:a5:fa:c2:c9:04:4c:ae:42:82: cc:f1:80:8b:1d:d4:42:7c:c0:05:8b:a1:f9:e5:52: 5b:29:d6:d0:6e:d9:e3:db:20:05:e1:f3:b3:30:ca: 2f:53:1a:61:c4:85:83:f1:90:b1:da:3c:4f:e2:6c: cf:e9:bf:74:39:dc:b6:b8:11:22:42:47:c7:94:39: 2e:72:0a:b9:08:57:03:b3:7c:10:c2:d5:79:59:38: 7d:0c:12:55:3b:fc:9c:f5:c0:5d:87:db:cd:7d:cd: 9f:07:c4:cf:bb:3d:df:2b:9c:e3:3c:97:29:d5:35: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:59:24:10:03:5F:8E:0A:88:3E:D9:F3:A3:8A:5A:6A:3B:FF:66:D0 X509v3 Authority Key Identifier: keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8a:3e:1a:56:33:39:95:d9:88:54:36:bd:10:cf:bb:8b:f5: 49:89:e5:b1:a6:61:2f:bb:7e:62:5b:1e:31:f8:dc:b1:e4:50: af:1e:43:c1:e5:be:cc:3d:0c:47:7d:a5:6b:b6:c4:3c:e7:f4: 74:42:f8:8c:be:9c:f1:bf:5e:45:e0:6f:a2:6e:e8:c0:a9:5c: 1d:5c:5a:b7:54:c6:49:ce:3c:6a:f0:e0:27:4b:ff:af:8b:98: ee:99:b9:00:e5:95:ad:2e:56:2a:52:00:41:a8:31:aa:e2:fa: c9:22:8c:45:ff:e6:7a:88:d0:fc:16:d9:ea:e2:13:c5:5d:0f: ed:b9:c5:3d:18:5d:c4:0c:a1:37:46:76:bf:52:07:9f:81:29: 04:14:b0:c9:11:21:3c:82:e3:52:94:e5:b2:05:be:e0:e3:07: 21:a7:94:40:bd:1a:48:d7:35:57:c9:21:86:0c:4c:3c:ca:14: 5b:fe:cd:e5:df:a1:d2:1b:22:d5:09:30:18:87:06:32:b0:4e: 9c:0b:43:2a:e0:00:63:35:01:9e:1f:ca:00:fa:17:61:be:65: 3b:dc:22:78:91:65:d0:bf:6d:89:3c:20:5f:3f:4b:29:94:fb: 70:29:c4:85:a1:9a:7d:ba:a8:0d:c5:7c:f5:52:9b:95:6c:89: da:1d:99:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMzUxMTAvBgNVBAUTKDI3QjkxNzZENzUwMUFDNDZGREEwMTkyNkJBQkU3RUJG MDk1RjkyOEUwHhcNMjYwODE4MTc0MzMzWhcNMjYwODI1MTc0MzMzWjAYMRYwFAYD VQQDEw02YTg0OTljNS02ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7Lb97yooy5TZ68hAPeKmo01L3as+JmP/kwD9z12/TmdTjrDO8Zi59Hfn8wg V/2kCmIyYNFgPitIQsovwAwu2hQWnYz9UXH8qymeLF1dknEAEsolInz0yqPQUs8a Z/P7KCJ9wvIsFM00CCOF9PhwbY0gL4MxnJzFgSMq8HNX0LRqMWGks6DiiFNTeKyl +sLJBEyuQoLM8YCLHdRCfMAFi6H55VJbKdbQbtnj2yAF4fOzMMovUxphxIWD8ZCx 2jxP4mzP6b90Ody2uBEiQkfHlDkucgq5CFcDs3wQwtV5WTh9DBJVO/yc9cBdh9vN fc2fB8TPuz3fK5zjPJcp1TXQbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRZJBAD X44KiD7Z86OKWmo7/2bQMB8GA1UdIwQYMBaAFCe5F211AaxG/aAZJrq+fr8JX5KO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzNS9FQTREQ0ExQzhF REExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJFYjlvQmttdXI1LXZ3bGZr bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3a1hiWFVCckViOW9Ca211cjUtdndsZmtvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzNS9FQTREQ0ExQzhFREExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJF YjlvQmttdXI1LXZ3bGZrbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPYo+GlYzOZXZiFQ2vRDPu4v1SYnlsaZhL7t+YlseMfjcseRQrx5DweW+zD0M R32la7bEPOf0dEL4jL6c8b9eReBvom7owKlcHVxat1TGSc48avDgJ0v/r4uY7pm5 AOWVrS5WKlIAQagxquL6ySKMRf/meojQ/BbZ6uITxV0P7bnFPRhdxAyhN0Z2v1IH n4EpBBSwyREhPILjUpTlsgW+4OMHIaeUQL0aSNc1V8khhgxMPMoUW/7N5d+h0hsi 1QkwGIcGMrBOnAtDKuAAYzUBnh/KAPoXYb5lO9wieJFl0L9tiTwgXz9LKZT7cCnE haGafbqoDcV89VKblWyJ2h2ZGQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:56 2026 by rpki-client