$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: 0g3nQg4X89Uh6h6TBpABjETzS/45zi5uc9ZzEK6UZ3Y= Subject key identifier: E9:10:34:8B:EC:90:AE:D2:C9:09:0D:D9:E9:1D:84:89:E6:17:1A:E9 Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 60 Signing time: Thu 03 Sep 2026 08:18:55 +0000 Manifest this update: Thu 03 Sep 2026 08:18:55 +0000 Manifest next update: Thu 10 Sep 2026 08:18:55 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: EGJwUzC5nGW5rRgjA5MrCwrR9QV68n73PrlipawO5K8=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Sep 3 08:18:55 2026 GMT Not After : Sep 10 08:18:55 2026 GMT Subject: CN=6a992d6f-8ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:ac:d4:e3:37:97:ba:aa:fb:51:c0:9e:06: 9c:48:77:71:6d:ce:af:d2:7c:9a:30:0c:8a:c3:b2: 99:de:6f:a3:be:20:39:69:d5:e2:17:3b:58:99:60: e9:20:82:c5:e3:25:8b:bc:72:2e:02:1f:e8:58:f9: 7e:1a:1e:4d:7c:02:19:56:b2:59:a0:df:fb:e8:95: 20:28:db:6c:91:67:71:8e:fe:ff:e0:90:38:da:7b: 37:f0:0c:18:a7:69:db:ac:5b:c5:a4:95:ba:80:99: 4b:f2:59:07:74:fa:be:a5:d8:b8:c3:39:61:bd:1b: 32:ab:e9:86:94:dc:ad:d5:f3:31:fc:81:fc:65:8d: 4e:51:e5:9d:17:bf:1d:ad:db:47:46:17:e0:b8:92: 11:41:b8:e2:94:e5:1b:f1:93:5d:35:36:fb:2f:c0: 6a:ba:d7:32:fc:a3:12:13:fa:38:1e:42:48:cf:f1: 54:d3:f2:65:d9:d6:f4:24:3d:19:28:4d:48:80:74: 76:2f:3d:44:b7:73:22:1e:90:00:8e:58:11:4e:9e: 67:f3:ae:b2:73:30:b2:07:17:a0:db:f1:6c:56:6e: 37:a6:d1:23:dd:d1:fe:9d:2a:74:94:f6:af:c0:fb: 4f:31:99:78:02:3f:06:44:9e:8f:61:f2:f7:ee:46: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:10:34:8B:EC:90:AE:D2:C9:09:0D:D9:E9:1D:84:89:E6:17:1A:E9 X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:82:70:74:88:04:fb:35:a2:f6:d2:52:28:37:01:8c:fc:8a: 69:6b:46:92:6d:ee:31:7e:b8:03:f4:98:02:9d:b3:fa:6f:a7: e4:83:ea:c4:3c:59:b7:ea:49:75:02:72:32:6f:f1:ab:55:99: b6:da:b8:d3:dd:e9:61:f1:b1:80:8e:91:03:48:20:11:ea:f5: 72:0e:df:19:c6:c9:fb:a4:cf:5c:91:2c:12:ce:64:30:b1:40: c3:09:1e:2b:89:3c:b9:84:78:b9:2b:5b:cc:4a:7f:0d:bb:0e: d3:93:68:61:38:d8:69:b4:f0:90:07:5c:03:cd:49:67:5d:7e: 1b:7f:20:b2:28:e3:dd:13:9f:9a:29:ed:64:d1:8f:38:0e:c8: 61:64:53:99:1d:aa:45:99:bb:f5:06:70:e9:e0:02:5a:62:18: 25:37:81:13:5a:6a:f3:b3:0b:d0:43:4e:a9:b0:69:71:68:be: 7f:1d:76:80:c4:5a:0c:bf:cc:11:1f:87:50:9e:d2:9c:7a:b6: 25:54:ac:57:0b:ce:fc:a5:7f:18:45:ad:1f:4b:aa:9f:21:78: 37:49:a2:46:0b:b8:6b:cb:df:89:05:76:ee:33:5a:9c:09:c8: 73:79:82:0c:fe:70:d1:5a:a4:6f:f9:73:c8:05:fb:6a:7f:fc: 55:9a:93:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjA5MDMwODE4NTVaFw0yNjA5MTAwODE4NTVaMBgxFjAUBgNV BAMTDTZhOTkyZDZmLThhZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRtqzU4zeXuqr7UcCeBpxId3Ftzq/SfJowDIrDspneb6O+IDlp1eIXO1iZYOkg gsXjJYu8ci4CH+hY+X4aHk18AhlWslmg3/volSAo22yRZ3GO/v/gkDjaezfwDBin adusW8WklbqAmUvyWQd0+r6l2LjDOWG9GzKr6YaU3K3V8zH8gfxljU5R5Z0Xvx2t 20dGF+C4khFBuOKU5Rvxk101NvsvwGq61zL8oxIT+jgeQkjP8VTT8mXZ1vQkPRko TUiAdHYvPUS3cyIekACOWBFOnmfzrrJzMLIHF6Db8WxWbjem0SPd0f6dKnSU9q/A +08xmXgCPwZEno9h8vfuRv2VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6RA0i+yQ rtLJCQ3Z6R2EieYXGukwHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0gnB0iAT7NaL20lIoNwGM/Ippa0aSbe4xfrgD9JgCnbP6b6fkg+rEPFm36kl1 AnIyb/GrVZm22rjT3elh8bGAjpEDSCAR6vVyDt8Zxsn7pM9ckSwSzmQwsUDDCR4r iTy5hHi5K1vMSn8Nuw7Tk2hhONhptPCQB1wDzUlnXX4bfyCyKOPdE5+aKe1k0Y84 DshhZFOZHapFmbv1BnDp4AJaYhglN4ETWmrzswvQQ06psGlxaL5/HXaAxFoMv8wR H4dQntKcerYlVKxXC878pX8YRa0fS6qfIXg3SaJGC7hry9+JBXbuM1qcCchzeYIM /nDRWqRv+XPIBftqf/xVmpMe -----END CERTIFICATE-----Generated at Sat Sep 5 10:35:27 2026 by rpki-client