$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: J2l3ox6EDr5umU8bRSWKCaMG913H+qmJdVRhRhUCxnM= Subject key identifier: 1C:59:D1:2D:EC:F0:42:97:99:00:E9:CC:D8:D4:8F:F9:70:E1:AF:58 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0B35 Signing time: Thu 10 Sep 2026 19:13:40 +0000 Manifest this update: Thu 10 Sep 2026 19:13:40 +0000 Manifest next update: Thu 17 Sep 2026 19:13:40 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: Qk9eCJ78qpb+uVEaK5sAaOG+mDY1ci+AcMzNSW7n4u0=) 2: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw=) 3: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Sep 10 19:13:40 2026 GMT Not After : Sep 17 19:13:40 2026 GMT Subject: CN=6aa30164-e134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:ca:67:f6:f8:ce:97:cb:ff:ea:1a:cd:36: 73:4a:f8:a8:9d:40:f5:a9:c3:be:e5:bb:05:c8:6b: 7a:ae:bc:93:85:55:b4:71:0e:38:a8:54:05:bc:de: cc:8d:e4:98:7d:49:cf:39:e5:4b:b7:64:e5:88:fc: 6d:89:7a:69:be:7a:b2:0c:09:26:bd:1c:80:ef:6c: e2:12:e4:9b:f6:47:96:c5:31:a6:c3:2e:ab:1c:c6: 07:d3:8f:9e:4f:59:c9:3b:b2:24:c7:bd:be:cc:07: 44:6c:d1:f7:49:f0:0c:db:16:8e:b0:9d:ee:0d:53: 2c:9e:00:f5:53:bc:d8:0d:95:b3:70:61:86:ae:08: 02:9a:e0:f6:7b:d7:d2:bb:f5:6b:1d:25:16:5a:11: 5b:c6:79:e6:81:a4:3c:14:c9:42:83:d6:41:69:8c: 97:14:a5:80:d8:74:d7:be:5e:eb:2e:e6:b1:e7:3b: 37:7e:f4:5d:bc:09:0d:6c:be:ee:2a:fe:55:ca:4c: 11:a5:cb:05:74:ae:08:5c:2a:f0:8d:4c:32:df:45: 68:54:7f:48:a1:a2:8e:c2:82:2e:bb:46:e4:b3:7f: 9d:94:4d:b8:25:ec:b9:54:bd:ba:76:61:31:9c:91: a5:3f:fc:61:20:00:1a:f7:81:52:78:3a:64:10:c6: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:59:D1:2D:EC:F0:42:97:99:00:E9:CC:D8:D4:8F:F9:70:E1:AF:58 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:bf:db:88:0e:95:bc:bb:29:9e:24:ea:63:39:b8:3f:be: 61:5d:5a:b2:31:60:43:af:9e:62:5c:d7:30:c7:45:f1:86:7d: 23:96:d1:f1:78:46:7e:92:ea:2f:d5:06:06:36:2d:a2:dc:10: 27:dc:60:fc:94:29:30:44:00:19:ff:23:c1:96:e8:4b:fb:30: 4a:a3:dc:f7:2b:cc:a8:d4:e3:f2:37:d5:32:d7:c0:2b:8d:b7: 45:66:37:75:4c:83:3e:8b:ac:80:aa:26:b0:63:fd:27:d5:76: aa:70:9e:da:f1:e2:a4:fd:26:0d:de:a5:99:79:f2:9b:3e:32: cd:d3:24:13:9c:1e:71:1f:91:c4:22:0a:b1:0c:31:1d:c6:4e: 7f:75:87:05:d1:a4:fd:5e:05:00:9e:53:7f:2f:83:41:d0:b9: 98:a8:2f:9d:f5:52:95:af:ef:14:36:8d:18:ea:c2:34:13:00: 69:6d:5d:33:1e:37:0f:47:78:f7:7a:52:9c:e2:97:85:10:b5: 3e:e4:6a:e0:b9:b0:62:b5:fa:da:8c:96:09:9b:de:ce:63:ee: ea:07:4b:b0:87:88:54:9f:b9:83:c5:26:3b:51:f7:c2:de:3a: 23:b5:3f:fe:6d:a1:b9:73:17:4d:36:fb:b7:b7:00:7c:06:79: 88:0b:03:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjYwOTEwMTkxMzQwWhcNMjYwOTE3MTkxMzQwWjAYMRYwFAYD VQQDEw02YWEzMDE2NC1lMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoLKZ/b4zpfL/+oazTZzSvionUD1qcO+5bsFyGt6rryThVW0cQ44qFQFvN7M jeSYfUnPOeVLt2TliPxtiXppvnqyDAkmvRyA72ziEuSb9keWxTGmwy6rHMYH04+e T1nJO7Ikx72+zAdEbNH3SfAM2xaOsJ3uDVMsngD1U7zYDZWzcGGGrggCmuD2e9fS u/VrHSUWWhFbxnnmgaQ8FMlCg9ZBaYyXFKWA2HTXvl7rLuax5zs3fvRdvAkNbL7u Kv5VykwRpcsFdK4IXCrwjUwy30VoVH9IoaKOwoIuu0bks3+dlE24Jey5VL26dmEx nJGlP/xhIAAa94FSeDpkEMbJ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxZ0S3s 8EKXmQDpzNjUj/lw4a9YMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/m/24gOlby7KZ4k6mM5uD++YV1asjFgQ6+eYlzXMMdF8YZ9I5bR8XhGfpLq L9UGBjYtotwQJ9xg/JQpMEQAGf8jwZboS/swSqPc9yvMqNTj8jfVMtfAK423RWY3 dUyDPousgKomsGP9J9V2qnCe2vHipP0mDd6lmXnymz4yzdMkE5wecR+RxCIKsQwx HcZOf3WHBdGk/V4FAJ5Tfy+DQdC5mKgvnfVSla/vFDaNGOrCNBMAaW1dMx43D0d4 93pSnOKXhRC1PuRq4LmwYrX62oyWCZvezmPu6gdLsIeIVJ+5g8UmO1H3wt46I7U/ /m2huXMXTTb7t7cAfAZ5iAsDGQ== -----END CERTIFICATE-----Generated at Fri Sep 11 15:43:37 2026 by rpki-client