$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: Ia7kQL5duIJ74IoN2HWK20+5uhJfktudUR6j5daYPWg= Subject key identifier: 9C:62:6E:7E:D3:94:44:A4:6C:42:91:AC:18:32:96:0C:6F:DB:B0:CA Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 352B Signing time: Tue 24 Mar 2026 14:39:09 +0000 Manifest this update: Tue 24 Mar 2026 14:39:08 +0000 Manifest next update: Tue 31 Mar 2026 14:39:08 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: zkG01dJlkpbZCUvllrJyoeFojz0MCvQ+kNhnqQVEpYU=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: lk8+oDVmkh0IMVihDlSAF01esZtzK+ueFBrIlPTYmfg=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: +9NKbw4Yf5cbYoj9nHJEgGLqyGEjkbYD3jkxgLpPwwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13624 (0x3538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Mar 24 14:39:08 2026 GMT Not After : Mar 31 14:39:08 2026 GMT Subject: CN=69c2a20d-cc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:dd:d0:a6:1f:25:46:53:ef:1f:ab:08:90: 63:f1:85:11:ef:b8:5e:48:1e:45:bd:51:ee:20:36: 82:39:81:44:99:45:27:2c:22:0f:68:c3:71:1e:fd: 92:c1:8a:9f:8b:fe:86:43:d2:05:e4:7b:43:8b:4a: c2:78:b9:ac:f3:f2:7e:38:fa:10:94:61:48:bf:fb: 25:74:c5:32:95:ab:3e:3b:b7:15:c6:67:9e:61:00: 1d:86:17:03:75:a8:15:a3:a4:77:e6:15:f9:5a:94: 9e:d9:d3:38:2d:d0:b4:f5:d3:05:13:4e:0f:cd:05: 8d:fa:c2:a3:72:26:96:ec:f0:7c:4a:d8:b0:40:08: b1:42:a7:71:0a:8e:f2:e0:97:0b:ed:9e:32:d7:ae: b6:3e:4d:a7:63:73:62:14:c3:08:b1:6a:92:87:f5: 39:c3:9b:1e:ba:e6:a9:cd:fb:4b:14:3b:57:5f:48: 44:cb:a4:7f:c4:10:1d:ce:bc:94:f2:63:aa:90:7c: ab:94:34:12:39:42:8d:d2:f8:0f:d9:75:e8:72:f0: 41:bd:80:f8:71:d1:95:a9:6e:92:48:a6:f3:cb:18: 85:33:4a:6b:ac:6f:5d:b5:c7:bd:a1:ac:b3:d4:7f: b3:60:8c:0c:9b:44:da:00:6f:e3:69:0d:6c:de:3b: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:62:6E:7E:D3:94:44:A4:6C:42:91:AC:18:32:96:0C:6F:DB:B0:CA X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e4:bc:04:a2:c6:56:67:e1:b0:57:dd:f7:4f:43:fb:c1:0d: d9:66:15:9a:60:b6:18:b7:dc:9b:8d:a9:e1:e3:c5:4f:0b:4b: 00:09:63:d1:c0:84:ea:d3:de:68:b5:b1:87:17:fc:ae:c4:49: ca:b5:38:5a:83:4d:73:55:9c:7c:d9:a6:fe:a9:cf:6f:a2:49: c5:4d:4f:7d:d8:1e:d8:ac:b2:37:6a:c1:66:9f:88:13:38:93: 18:07:eb:68:75:d4:04:5c:de:ca:f0:0b:33:7e:a0:1f:3b:94: bd:6f:24:f2:a5:f7:cc:c4:fd:a0:ff:50:fa:67:03:37:e9:f2: 02:55:6b:e2:45:6c:60:eb:bb:0a:52:38:51:a6:23:aa:d5:34: 52:1f:46:4c:cb:45:17:ee:ba:92:a9:bc:17:c8:e2:88:6d:41: cd:f4:92:18:c8:e7:19:69:7c:aa:42:cf:83:30:d3:54:87:d6: 15:3e:86:c9:d0:68:5c:19:08:80:e6:60:95:bb:c6:d1:8a:18: 69:b2:fd:65:33:53:bc:19:1b:5b:f2:aa:d1:28:d2:6c:5d:2b: 7c:c2:ed:be:83:59:b4:96:9d:e4:df:ff:84:29:77:a6:17:53: 2b:19:b5:5b:a1:c4:97:d9:4a:55:e2:2c:0e:09:bb:36:6a:b5: 3a:a1:f0:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwMzI0MTQzOTA4WhcNMjYwMzMxMTQzOTA4WjAYMRYwFAYD VQQDEw02OWMyYTIwZC1jYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqprd0KYfJUZT7x+rCJBj8YUR77heSB5FvVHuIDaCOYFEmUUnLCIPaMNxHv2S wYqfi/6GQ9IF5HtDi0rCeLms8/J+OPoQlGFIv/sldMUylas+O7cVxmeeYQAdhhcD dagVo6R35hX5WpSe2dM4LdC09dMFE04PzQWN+sKjciaW7PB8StiwQAixQqdxCo7y 4JcL7Z4y1662Pk2nY3NiFMMIsWqSh/U5w5seuuapzftLFDtXX0hEy6R/xBAdzryU 8mOqkHyrlDQSOUKN0vgP2XXocvBBvYD4cdGVqW6SSKbzyxiFM0prrG9dtce9oayz 1H+zYIwMm0TaAG/jaQ1s3juIWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxibn7T lESkbEKRrBgylgxv27DKMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZOS8BKLGVmfhsFfd909D+8EN2WYVmmC2GLfcm42p4ePFTwtLAAlj0cCE6tPe aLWxhxf8rsRJyrU4WoNNc1WcfNmm/qnPb6JJxU1Pfdge2KyyN2rBZp+IEziTGAfr aHXUBFzeyvALM36gHzuUvW8k8qX3zMT9oP9Q+mcDN+nyAlVr4kVsYOu7ClI4UaYj qtU0Uh9GTMtFF+66kqm8F8jiiG1BzfSSGMjnGWl8qkLPgzDTVIfWFT6GydBoXBkI gOZglbvG0YoYabL9ZTNTvBkbW/Kq0SjSbF0rfMLtvoNZtJad5N//hCl3phdTKxm1 W6HEl9lKVeIsDgm7Nmq1OqHw2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:31 2026 by rpki-client