$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: Z76pIQl/R1hHkwn6tK7X7dLaIdo9RdCJSJU3puyvD/A= Subject key identifier: 79:0D:14:48:F0:52:99:00:C2:13:B4:64:33:54:44:9F:CF:4B:40:9D Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 3568 Signing time: Wed 22 Jul 2026 14:41:20 +0000 Manifest this update: Wed 22 Jul 2026 14:41:20 +0000 Manifest next update: Wed 29 Jul 2026 14:41:20 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: z9h9J19SktuMZXD+Pz8YLU5SClory9tY17c1BdwQP+Q=) 2: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: +9NKbw4Yf5cbYoj9nHJEgGLqyGEjkbYD3jkxgLpPwwo=) 3: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: lk8+oDVmkh0IMVihDlSAF01esZtzK+ueFBrIlPTYmfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Jul 22 14:41:20 2026 GMT Not After : Jul 29 14:41:20 2026 GMT Subject: CN=6a60d690-0d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:a4:55:a2:33:8c:17:ee:6e:3c:fb:33:36: 6f:0a:58:c7:26:09:41:59:e3:de:11:4d:db:06:ca: 06:fe:3c:8b:ea:98:a4:98:5d:47:dd:f5:ee:a5:89: ef:7e:d0:fe:3a:43:41:8c:2f:e9:8d:a7:bb:72:e8: 6a:9f:3f:89:1c:df:02:8e:30:0e:d5:fe:12:97:ef: 1e:c6:8c:d5:35:5f:ba:4f:7c:27:d0:4f:b6:90:cd: e2:d6:12:2a:52:09:a1:a1:d8:89:a8:b4:22:e0:3d: e5:4c:f3:9d:13:e1:e5:87:12:76:a3:05:38:ab:64: 67:7b:e6:c1:65:3b:a1:bd:13:1a:a6:cd:25:27:51: 4e:bb:d0:ee:ae:c9:03:c3:68:c7:81:4e:01:0a:d5: 04:79:37:dc:a3:96:b5:40:1d:fe:6a:f4:7c:3d:53: 7f:e0:b9:3b:ce:09:af:6c:e4:f9:45:ac:ba:76:73: e9:fa:3f:01:3c:ab:d5:8c:7a:65:4c:42:d3:db:47: 5d:bc:35:ee:13:f9:6b:2b:8b:7a:dd:b8:60:b1:20: ff:a2:35:e9:82:f5:d1:3c:0b:7f:f2:7b:ed:d9:1e: 37:c7:4b:e1:8a:cf:c4:4e:59:24:05:65:d5:28:fd: 7a:ac:7f:3a:72:f3:21:6c:72:14:59:e5:c8:d6:60: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0D:14:48:F0:52:99:00:C2:13:B4:64:33:54:44:9F:CF:4B:40:9D X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:55:7b:f0:09:d8:fa:00:01:1d:70:58:91:3b:f3:8a:30:6d: 12:3d:5f:77:14:ba:3f:2b:d0:8d:9c:89:9c:dc:e6:89:10:56: 7f:d6:c9:81:5f:cb:18:dc:ad:0c:bc:5a:c4:46:fa:d0:79:a6: 1f:3a:48:dc:66:7f:49:ae:1e:06:f9:1a:8c:0c:ea:6a:c3:07: fe:10:16:79:4f:4d:75:b2:e2:1f:5b:f3:4a:d0:5a:d3:c5:b1: 9f:56:be:2e:a4:0b:5b:f1:9d:42:fe:46:ba:11:d5:0f:02:96: 62:97:47:61:a8:62:fe:d0:eb:eb:fc:1c:d8:13:5d:6a:b5:91: 29:2e:d8:72:2d:2d:7a:7a:a2:9c:01:4b:ed:cc:25:de:ef:98: 54:9b:ca:e7:4b:fa:fc:a7:b1:ed:3f:d6:7f:3d:5c:e6:55:4c: da:79:8d:86:73:11:e8:bd:f5:15:37:c2:b5:21:7f:f7:d9:d3: 8d:c6:17:d8:e7:0d:c9:5d:04:7c:6d:f1:44:df:29:c5:f8:96: 59:0f:6f:31:5b:06:86:3c:ac:eb:a5:20:53:41:6e:32:fa:65: 00:46:4f:2b:2e:34:12:e9:6b:b1:42:ac:ca:d0:4c:7d:5c:4d: a2:8b:09:bc:9d:3a:20:88:0c:88:30:9d:58:10:02:3a:c1:fa: 31:9a:d4:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjYwNzIyMTQ0MTIwWhcNMjYwNzI5MTQ0MTIwWjAYMRYwFAYD VQQDEw02YTYwZDY5MC0wZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9CkVaIzjBfubjz7MzZvCljHJglBWePeEU3bBsoG/jyL6pikmF1H3fXupYnv ftD+OkNBjC/pjae7cuhqnz+JHN8CjjAO1f4Sl+8exozVNV+6T3wn0E+2kM3i1hIq UgmhodiJqLQi4D3lTPOdE+HlhxJ2owU4q2Rne+bBZTuhvRMaps0lJ1FOu9DurskD w2jHgU4BCtUEeTfco5a1QB3+avR8PVN/4Lk7zgmvbOT5Ray6dnPp+j8BPKvVjHpl TELT20ddvDXuE/lrK4t63bhgsSD/ojXpgvXRPAt/8nvt2R43x0vhis/ETlkkBWXV KP16rH86cvMhbHIUWeXI1mCHgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkNFEjw UpkAwhO0ZDNURJ/PS0CdMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFV78AnY+gABHXBYkTvzijBtEj1fdxS6PyvQjZyJnNzmiRBWf9bJgV/LGNyt DLxaxEb60HmmHzpI3GZ/Sa4eBvkajAzqasMH/hAWeU9NdbLiH1vzStBa08Wxn1a+ LqQLW/GdQv5GuhHVDwKWYpdHYahi/tDr6/wc2BNdarWRKS7Yci0tenqinAFL7cwl 3u+YVJvK50v6/Kex7T/Wfz1c5lVM2nmNhnMR6L31FTfCtSF/99nTjcYX2OcNyV0E fG3xRN8pxfiWWQ9vMVsGhjys66UgU0FuMvplAEZPKy40EulrsUKsytBMfVxNoosJ vJ06IIgMiDCdWBACOsH6MZrUXg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:44:06 2026 by rpki-client