$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft File: cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json) Hash identifier: PgbqGWbHIoQPU/EFhDol3UjAChdycCN2FMxDq7kCoUE= Subject key identifier: 82:23:DD:0B:F7:1A:93:23:DD:76:34:B6:52:3B:26:4B:5A:7B:E8:32 Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft Manifest number: 4A Signing time: Wed 19 Aug 2026 09:06:53 +0000 Manifest this update: Wed 19 Aug 2026 09:06:52 +0000 Manifest next update: Wed 26 Aug 2026 09:06:52 +0000 Files and hashes: 1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: mkRaF7z9v3SInGVZ6WauQyd0u+oY+Xx8Uog1+FTbKn4=) 2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Validity Not Before: Aug 19 09:06:52 2026 GMT Not After : Aug 26 09:06:52 2026 GMT Subject: CN=6a85722d-54a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:d4:83:10:6e:35:7f:4a:14:87:65:b7:12: 72:21:1e:f2:7d:3a:8e:fa:b8:ea:fd:c4:60:35:e6: fe:6e:0d:d6:3b:f3:c0:aa:16:5b:8d:54:84:f3:a4: 32:6e:e8:77:cc:78:2d:7f:bb:90:a7:83:85:16:72: 77:75:93:f0:5c:e2:8d:0b:a7:0c:02:fd:a7:c1:61: 36:c3:b2:9d:2f:20:f2:3e:32:90:d3:68:be:db:09: 3f:1c:9a:56:1a:be:f8:96:0b:94:ab:85:70:b1:a0: c8:46:18:3e:ba:70:b3:cd:3a:62:89:e6:a8:e3:98: dd:5b:7c:4c:b1:33:e8:94:70:c9:ba:18:6e:cc:0b: 8e:9d:ab:05:68:69:13:dd:70:c2:c7:9b:76:57:59: ff:31:ea:e0:59:f8:79:91:a0:ee:28:15:39:37:2a: c6:67:26:8f:0c:1d:f1:53:7c:56:a5:60:ac:01:ae: 46:85:e3:53:83:3c:d5:b0:a4:5e:fe:34:c1:00:ff: 2c:9d:1d:6e:a9:a6:f5:e4:9d:3c:33:8e:80:1e:97: 00:37:11:5e:44:37:3a:e9:40:11:b8:b5:78:d7:c7: b7:b8:32:d9:c3:87:13:3d:f8:fb:b6:d4:16:c7:7f: e3:1d:42:cd:5c:31:8e:80:78:c4:c2:7c:43:93:74: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:DD:0B:F7:1A:93:23:DD:76:34:B6:52:3B:26:4B:5A:7B:E8:32 X509v3 Authority Key Identifier: keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6f:8d:55:c1:5e:b9:90:cf:2c:39:3f:f9:70:5f:93:3a:bf: 24:82:a5:64:11:68:55:81:93:81:74:37:0a:4c:1a:bb:6b:04: 22:80:3a:63:27:63:f1:e2:27:8f:a1:fb:16:71:5a:4e:3c:8a: 58:11:e4:0e:3e:23:1a:40:f1:64:38:83:da:b9:7e:b2:f7:97: 6a:db:2e:b9:62:dd:bf:f5:95:6a:15:e8:16:dc:47:38:12:f4: ef:55:36:4e:cb:17:56:81:78:ca:ec:d1:ff:42:59:26:0f:f0: c6:0a:6a:41:d9:4f:24:5d:5f:ee:78:c8:50:42:18:cb:8b:bb: 9a:ef:72:bb:64:63:05:01:b8:11:b2:42:17:70:ac:c5:2a:ba: 52:42:cc:96:33:60:d5:9a:4c:1b:01:20:fa:f2:53:c9:25:95: 2f:42:d3:bb:a1:b8:1d:04:88:1e:fd:23:05:3b:b8:6a:94:82: 29:b3:63:e2:39:90:ee:90:e6:4d:90:70:12:00:d1:ff:8f:3e: cd:0a:34:8d:d2:49:9d:e8:e7:aa:76:ba:d4:a7:58:a6:4a:60: 36:de:f9:83:21:7b:69:1a:bc:31:f3:42:68:2a:13:0a:47:1f: 1b:ea:59:e2:a1:57:e3:c6:52:32:18:8d:3f:49:47:3a:00:0c: 83:01:23:09 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjA0QzExMC8GA1UEBRMoNzMxM0VCRjVDMDFGNEI3OTZEOTA1OEJBQzNDNjVGNTVC MzA1Q0E3NzAeFw0yNjA4MTkwOTA2NTJaFw0yNjA4MjYwOTA2NTJaMBgxFjAUBgNV BAMTDTZhODU3MjJkLTU0YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8dtSDEG41f0oUh2W3EnIhHvJ9Oo76uOr9xGA15v5uDdY788CqFluNVITzpDJu 6HfMeC1/u5Cng4UWcnd1k/Bc4o0LpwwC/afBYTbDsp0vIPI+MpDTaL7bCT8cmlYa vviWC5SrhXCxoMhGGD66cLPNOmKJ5qjjmN1bfEyxM+iUcMm6GG7MC46dqwVoaRPd cMLHm3ZXWf8x6uBZ+HmRoO4oFTk3KsZnJo8MHfFTfFalYKwBrkaF41ODPNWwpF7+ NMEA/yydHW6ppvXknTwzjoAelwA3EV5ENzrpQBG4tXjXx7e4MtnDhxM9+Pu21BbH f+MdQs1cMY6AeMTCfEOTdGWVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgiPdC/ca kyPddjS2UjsmS1p76DIwHwYDVR0jBBgwFoAUcxPr9cAfS3ltkFi6w8ZfVbMFyncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMDRDL0Y2MDQxQTNDMkMy NjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNsdGtGaTZ3OFpmVmJNRnlu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hQcjljQWZTM2x0a0ZpNnc4WmZWYk1GeW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MDRDL0Y2MDQxQTNDMkMyNjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNs dGtGaTZ3OFpmVmJNRnluYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgb41VwV65kM8sOT/5cF+TOr8kgqVkEWhVgZOBdDcKTBq7awQigDpjJ2Px4ieP ofsWcVpOPIpYEeQOPiMaQPFkOIPauX6y95dq2y65Yt2/9ZVqFegW3Ec4EvTvVTZO yxdWgXjK7NH/QlkmD/DGCmpB2U8kXV/ueMhQQhjLi7ua73K7ZGMFAbgRskIXcKzF KrpSQsyWM2DVmkwbASD68lPJJZUvQtO7obgdBIge/SMFO7hqlIIps2PiOZDukOZN kHASANH/jz7NCjSN0kmd6OeqdrrUp1imSmA23vmDIXtpGrwx80JoKhMKRx8b6lni oVfjxlIyGI0/SUc6AAyDASMJ -----END CERTIFICATE-----Generated at Wed Aug 19 12:48:01 2026 by rpki-client