$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: h+F0wVXRpBqPqZJOtZBEW05RgxOxpROWhn8XX14/INY= Subject key identifier: 79:70:D0:26:8B:F8:00:F0:71:D8:F4:C8:F6:ED:63:02:5B:95:3D:F0 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 3589 Signing time: Thu 24 Sep 2026 14:38:56 +0000 Manifest this update: Thu 24 Sep 2026 14:38:55 +0000 Manifest next update: Thu 01 Oct 2026 14:38:55 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: X3eu3/ZABKUqPPL2zChPIqhrKSNoDT1TpTcWqI3es7I=) 2: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: +9NKbw4Yf5cbYoj9nHJEgGLqyGEjkbYD3jkxgLpPwwo=) 3: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: lk8+oDVmkh0IMVihDlSAF01esZtzK+ueFBrIlPTYmfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Sep 24 14:38:55 2026 GMT Not After : Oct 1 14:38:55 2026 GMT Subject: CN=6ab535ff-b34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:58:cb:c0:94:cc:79:12:b1:da:ff:71:38: d2:fd:78:6a:b9:0d:12:d8:99:cb:f5:ef:63:c7:d2: 70:68:28:63:31:be:9b:38:64:ef:ba:e8:45:01:f9: 03:ec:e7:a6:a0:06:6b:9e:1b:48:2b:61:c5:49:60: 29:fc:1e:a1:87:87:1e:28:5d:13:d2:4f:cd:08:ec: 8f:80:13:1d:bd:c4:3b:59:e0:08:c7:09:d5:c7:ba: 03:ca:fd:46:84:ea:bb:c0:c4:e9:15:3a:e5:02:8b: 11:41:9c:67:e8:33:53:ea:e7:67:34:7b:15:8d:7c: 31:95:32:91:71:92:f1:e0:3e:d1:10:19:fe:2a:74: ec:f3:b0:8d:e5:0c:c0:49:d2:bc:12:83:7a:d8:9a: 20:7e:b5:4a:88:43:b3:85:ab:55:8e:c2:f7:e5:6a: f1:fe:60:18:1a:db:f7:38:f4:ec:b4:c4:63:4c:68: e6:00:39:ba:2b:2c:ad:9d:e8:ea:13:33:8b:6a:00: c1:88:45:cd:e1:33:e5:38:a1:db:be:ac:81:d1:d0: d5:96:0d:33:74:f2:a9:d0:37:21:d9:c2:02:a6:22: c8:3f:95:5e:52:19:b1:c1:57:4a:90:82:c3:dc:c3: f6:ec:6b:06:59:63:a6:56:3d:ab:b7:41:71:13:cb: 39:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:70:D0:26:8B:F8:00:F0:71:D8:F4:C8:F6:ED:63:02:5B:95:3D:F0 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:22:d6:19:27:ce:6f:3f:46:48:1d:7d:03:f1:43:97:74:30: fe:de:ca:09:1a:35:dc:d5:c7:d0:5d:a2:77:42:a9:1b:57:9a: 2f:94:06:8c:56:d9:20:dc:d4:30:fe:ee:8c:cf:c9:99:73:db: c0:6d:7c:1d:89:5d:c6:c7:5e:61:f0:db:0a:8c:1c:e1:ea:e9: 35:e3:b7:f8:af:34:03:5e:8b:85:19:2c:a0:61:88:a1:ad:02: e7:53:36:86:1e:79:20:df:fb:7d:47:79:db:57:21:c1:2b:7f: ea:e5:35:d6:42:6b:bd:10:b7:77:ca:31:e4:14:ec:af:23:64: 9b:58:78:b8:70:40:c3:30:6e:65:76:9e:9b:2b:b2:84:f8:19: 68:17:37:db:ee:d0:84:47:61:a6:ef:86:24:ff:7c:98:03:d0: f8:61:e3:95:b0:43:cf:b6:d0:c2:5e:40:db:85:20:66:d5:5c: 1f:9e:66:88:3f:32:c0:20:5b:82:9b:74:f3:d0:4f:53:55:19: 0a:c0:8a:8a:8b:17:2b:e5:10:53:27:87:06:85:86:bc:b1:3d: b4:80:b6:cc:b9:bb:ce:22:bf:b7:2e:5f:65:54:07:37:ee:63: 4c:41:8f:b4:3c:9a:5d:b8:50:33:5b:42:87:3b:02:fb:35:71: 8c:36:34:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwOTI0MTQzODU1WhcNMjYxMDAxMTQzODU1WjAYMRYwFAYD VQQDEw02YWI1MzVmZi1iMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeRYy8CUzHkSsdr/cTjS/XhquQ0S2JnL9e9jx9JwaChjMb6bOGTvuuhFAfkD 7OemoAZrnhtIK2HFSWAp/B6hh4ceKF0T0k/NCOyPgBMdvcQ7WeAIxwnVx7oDyv1G hOq7wMTpFTrlAosRQZxn6DNT6udnNHsVjXwxlTKRcZLx4D7REBn+KnTs87CN5QzA SdK8EoN62JogfrVKiEOzhatVjsL35Wrx/mAYGtv3OPTstMRjTGjmADm6Kyytnejq EzOLagDBiEXN4TPlOKHbvqyB0dDVlg0zdPKp0Dch2cICpiLIP5VeUhmxwVdKkILD 3MP27GsGWWOmVj2rt0FxE8s5MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlw0CaL +ADwcdj0yPbtYwJblT3wMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqCLWGSfObz9GSB19A/FDl3Qw/t7KCRo13NXH0F2id0KpG1eaL5QGjFbZINzU MP7ujM/JmXPbwG18HYldxsdeYfDbCowc4erpNeO3+K80A16LhRksoGGIoa0C51M2 hh55IN/7fUd521chwSt/6uU11kJrvRC3d8ox5BTsryNkm1h4uHBAwzBuZXaemyuy hPgZaBc32+7QhEdhpu+GJP98mAPQ+GHjlbBDz7bQwl5A24UgZtVcH55miD8ywCBb gpt089BPU1UZCsCKiosXK+UQUyeHBoWGvLE9tIC2zLm7ziK/ty5fZVQHN+5jTEGP tDyaXbhQM1tChzsC+zVxjDY0jg== -----END CERTIFICATE-----Generated at Fri Sep 25 10:36:43 2026 by rpki-client