$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft File: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft (raw, json) Hash identifier: GSngF6aZm2SXMPMj2aCL1hO3BLt4WloZkRSn6iGWupg= Subject key identifier: CE:46:7D:85:B1:7F:14:20:24:71:A9:F9:67:47:D9:A3:93:F6:5B:FB Authority key identifier: E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F Certificate issuer: /CN=A917BAC9/serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft Manifest number: 09 Signing time: Wed 19 Aug 2026 09:55:20 +0000 Manifest this update: Wed 19 Aug 2026 09:55:19 +0000 Manifest next update: Wed 26 Aug 2026 09:55:19 +0000 Files and hashes: 1: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl (hash: QjeMCNkDYlo5HIF/KSLmPBXW9R7nIVfLzwF8SX/x7hM=) 2: A3F5B386915C11F1B31E34186B11F970.roa (hash: ZUF0HTnqvtt1SvtzMivVLP03khbxNjJ+Nf1N85kohao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Validity Not Before: Aug 19 09:55:19 2026 GMT Not After : Aug 26 09:55:19 2026 GMT Subject: CN=6a857d88-51d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:67:03:59:46:ee:b4:fc:c1:38:52:5c:5e: 81:5d:4a:af:dc:2c:4e:21:3e:f5:31:ab:75:14:fd: 8b:53:a0:f9:10:1d:d9:91:10:88:42:19:42:93:6b: e1:42:06:0d:87:f1:42:1d:fc:7f:42:c3:9b:bd:da: db:79:81:e4:c6:81:02:ed:88:4a:ee:2c:8f:fe:94: da:9d:78:43:ba:df:f2:a7:5f:c1:0c:e7:a3:0a:69: d1:c2:ee:85:24:74:5f:6c:eb:b4:9c:3a:e3:c3:0c: a9:f8:d3:e3:98:35:b1:e4:68:e4:31:f7:62:25:e5: 31:80:0f:ec:0c:c6:5e:1e:c6:1a:2c:bb:ab:99:42: 2a:2e:f4:0d:78:fc:95:14:09:a1:bf:03:bc:39:c8: b0:a4:c7:05:df:37:08:bc:b1:eb:87:9c:86:cf:68: 7f:c0:98:5c:b9:3c:fc:58:18:8d:0e:0d:f4:a0:78: a5:f0:f6:36:67:46:2e:8d:c7:99:b8:3f:24:a2:4d: 9e:ea:58:f1:b7:4b:aa:b8:30:cc:cb:fe:cd:e4:43: d8:c8:c4:d6:9c:95:ca:5d:7c:37:e4:09:ca:60:82: f1:53:7b:fd:eb:3b:38:e8:e7:01:2b:26:fa:2b:bf: 1f:bc:c5:0f:cb:e7:e4:c9:eb:16:78:85:2d:6a:93: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:46:7D:85:B1:7F:14:20:24:71:A9:F9:67:47:D9:A3:93:F6:5B:FB X509v3 Authority Key Identifier: keyid:E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2f:06:d5:f7:fd:7e:58:77:99:1b:ed:9d:f2:81:bb:d7:c8: c6:58:d6:93:93:14:14:28:60:8d:c2:df:7b:67:17:e7:58:57: 30:af:5d:d7:6f:6f:6d:6e:8a:05:80:30:3a:82:f6:8a:0b:74: 83:49:e7:23:fd:0e:40:59:18:9f:78:7e:c8:1d:72:60:f5:f1: 09:1b:a2:07:a4:f2:d6:6b:95:59:9a:c9:1a:96:3b:20:82:62: 47:a7:77:8a:e4:0d:47:25:10:9a:88:d1:4d:de:1f:4e:ac:e8: 1d:87:e3:d6:49:c1:bd:39:33:80:3e:a2:a4:ca:3f:58:b5:1d: 78:f3:91:ca:0b:48:0c:2e:eb:f7:43:e4:7c:5c:7c:80:0c:77: 5f:b1:8b:25:a5:56:54:24:32:12:9f:d0:2e:9f:28:d6:ff:74: 5f:6f:af:45:86:38:c5:db:e0:29:18:e3:3e:a5:9c:a2:df:f2: 82:93:c6:fa:04:32:32:0c:b8:7a:03:c8:2a:4c:76:ed:86:01: 2b:8d:bd:80:1c:fd:65:2b:89:41:ab:29:42:ce:21:a4:bf:f8: b1:ef:49:9a:46:3a:83:68:a1:a7:0e:a2:2d:34:4d:f4:91:c3: 28:8e:95:f8:ba:70:8d:62:3f:e7:8d:dd:90:c6:1c:bb:cb:51: b5:24:92:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoRTE3MkVEMjA5ODZDQTI4RUQ0OTI0N0IyNTRDNENGOTU2 RTZEMDA1RjAeFw0yNjA4MTkwOTU1MTlaFw0yNjA4MjYwOTU1MTlaMBgxFjAUBgNV BAMTDTZhODU3ZDg4LTUxZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzL2cDWUbutPzBOFJcXoFdSq/cLE4hPvUxq3UU/YtToPkQHdmREIhCGUKTa+FC Bg2H8UId/H9Cw5u92tt5geTGgQLtiEruLI/+lNqdeEO63/KnX8EM56MKadHC7oUk dF9s67ScOuPDDKn40+OYNbHkaOQx92Il5TGAD+wMxl4exhosu6uZQiou9A14/JUU CaG/A7w5yLCkxwXfNwi8seuHnIbPaH/AmFy5PPxYGI0ODfSgeKXw9jZnRi6Nx5m4 PySiTZ7qWPG3S6q4MMzL/s3kQ9jIxNaclcpdfDfkCcpggvFTe/3rOzjo5wErJvor vx+8xQ/L5+TJ6xZ4hS1qkzTLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzkZ9hbF/ FCAkcan5Z0fZo5P2W/swHwYDVR0jBBgwFoAU4XLtIJhsoo7UkkeyVMTPlW5tAF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5Lzg0Q0Y2OTU2OTE1 ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283VWtrZXlWTVRQbFc1dEFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNFhMdElKaHNvbzdVa2tleVZNVFBsVzV0QUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QUM5Lzg0Q0Y2OTU2OTE1ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283 VWtrZXlWTVRQbFc1dEFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBULwbV9/1+WHeZG+2d8oG718jGWNaTkxQUKGCNwt97ZxfnWFcwr13Xb29tbooF gDA6gvaKC3SDSecj/Q5AWRifeH7IHXJg9fEJG6IHpPLWa5VZmskaljsggmJHp3eK 5A1HJRCaiNFN3h9OrOgdh+PWScG9OTOAPqKkyj9YtR1485HKC0gMLuv3Q+R8XHyA DHdfsYslpVZUJDISn9AunyjW/3Rfb69FhjjF2+ApGOM+pZyi3/KCk8b6BDIyDLh6 A8gqTHbthgErjb2AHP1lK4lBqylCziGkv/ix70maRjqDaKGnDqItNE30kcMojpX4 unCNYj/njd2Qxhy7y1G1JJLX -----END CERTIFICATE-----Generated at Wed Aug 19 15:59:47 2026 by rpki-client