$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: /7wrtK2oV6JlB9pFkBvG0M3cX9WpImMDoKtkJEztDOA= Subject key identifier: 6B:36:C0:7E:D5:45:C4:56:C0:DC:8D:E4:5C:F0:DE:1F:BA:7A:C0:E9 Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 7A Signing time: Sun 25 Oct 2026 08:09:09 +0000 Manifest this update: Sun 25 Oct 2026 08:09:09 +0000 Manifest next update: Sun 01 Nov 2026 08:09:09 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: dnYiphrgku/V9iR+DVMeiohRa9hz6BaVFcVVLOyRnMo=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Oct 25 08:09:09 2026 GMT Not After : Nov 1 08:09:09 2026 GMT Subject: CN=6addb925-5274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:c6:91:86:a8:b6:02:9f:3b:e0:f9:3b:9d: bc:a7:10:de:9c:88:4c:66:a9:f4:23:bb:03:b3:32: 78:d8:c2:a8:9b:72:f4:14:0f:1e:ed:f0:03:42:ab: 5a:fe:ac:0e:ba:e6:77:81:31:78:ae:95:5f:8a:2b: 6e:1c:9e:d2:c7:09:34:04:3e:7f:9a:b9:2d:ab:93: 49:d6:fc:46:5c:32:e5:d6:27:1f:41:6a:d3:0b:de: 8c:42:83:aa:02:ee:9d:f5:c6:79:c7:05:1a:48:38: 8c:0a:0f:21:f4:29:2a:fe:62:49:de:b5:d5:a5:f5: 99:24:09:e8:5c:6d:e2:a7:ca:6a:55:45:6e:b9:47: e2:d9:46:37:34:aa:a3:20:21:0e:43:dc:00:8f:da: d7:b8:2b:2d:12:e1:28:36:c6:c6:d5:e9:a3:69:e0: 04:5e:bb:78:bc:f7:0b:d9:ba:12:10:53:f8:56:07: c0:66:64:36:43:ca:b9:10:3c:1e:b0:a6:b5:11:cf: ca:e7:31:53:19:d6:74:44:ef:54:ae:5c:5b:74:7c: 87:45:a3:91:2b:cc:e3:1d:e9:da:a6:fa:f6:de:3c: 2e:ae:09:11:58:91:0c:5b:ce:b7:44:62:90:0d:df: 7b:cd:e1:f9:e3:b2:45:81:e9:89:05:55:c3:48:94: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:36:C0:7E:D5:45:C4:56:C0:DC:8D:E4:5C:F0:DE:1F:BA:7A:C0:E9 X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b9:52:ef:20:a1:28:c5:0e:21:16:57:66:1b:64:c0:7f:f8: bf:db:32:e6:73:f8:9c:cf:e3:e8:60:db:39:bc:76:2b:ef:52: 0a:12:ce:79:ae:b9:8d:5d:cf:29:f8:3f:98:2a:db:51:ed:13: 01:e0:63:94:38:1e:a9:f1:90:35:c2:67:59:6b:aa:2c:fd:f0: f2:ff:1b:27:cd:24:80:31:a5:ed:39:b8:e1:07:06:b2:4d:f1: cf:61:a1:27:4b:c6:27:13:75:36:56:a3:88:f2:67:fe:aa:1c: 4b:9b:84:4b:9f:a1:1a:05:6e:63:93:8a:93:f7:3c:2b:11:88: f4:3a:d3:68:0b:e0:e0:e6:59:d1:05:f9:f1:6c:64:e5:62:a9: b6:9e:d2:fc:d7:fc:fd:09:f6:ff:d2:90:83:ed:95:72:19:ac: 4a:b2:17:97:b6:c2:6a:01:46:fb:16:59:59:55:bd:80:55:d9: 59:6d:10:77:e5:17:5f:fd:b4:e0:8b:60:0f:53:53:9c:cc:86: 16:c4:0a:ef:66:b8:e8:a8:d4:44:91:19:9d:9f:1a:09:fc:01: 12:98:d8:20:45:41:b8:02:02:e2:9e:9f:45:c2:42:a6:6f:0d: f5:39:f1:c9:d1:e6:5b:83:50:45:84:75:58:51:b9:5b:6a:88: 7e:a2:31:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjEwMjUwODA5MDlaFw0yNjExMDEwODA5MDlaMBgxFjAUBgNV BAMTDTZhZGRiOTI1LTUyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjGcaRhqi2Ap874Pk7nbynEN6ciExmqfQjuwOzMnjYwqibcvQUDx7t8ANCq1r+ rA665neBMXiulV+KK24cntLHCTQEPn+auS2rk0nW/EZcMuXWJx9BatML3oxCg6oC 7p31xnnHBRpIOIwKDyH0KSr+YknetdWl9ZkkCehcbeKnympVRW65R+LZRjc0qqMg IQ5D3ACP2te4Ky0S4Sg2xsbV6aNp4AReu3i89wvZuhIQU/hWB8BmZDZDyrkQPB6w prURz8rnMVMZ1nRE71SuXFt0fIdFo5ErzOMd6dqm+vbePC6uCRFYkQxbzrdEYpAN 33vN4fnjskWB6YkFVcNIlOrrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUazbAftVF xFbA3I3kXPDeH7p6wOkwHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0uVLvIKEoxQ4hFldmG2TAf/i/2zLmc/icz+PoYNs5vHYr71IKEs55rrmNXc8p +D+YKttR7RMB4GOUOB6p8ZA1wmdZa6os/fDy/xsnzSSAMaXtObjhBwayTfHPYaEn S8YnE3U2VqOI8mf+qhxLm4RLn6EaBW5jk4qT9zwrEYj0OtNoC+Dg5lnRBfnxbGTl Yqm2ntL81/z9Cfb/0pCD7ZVyGaxKsheXtsJqAUb7FllZVb2AVdlZbRB35Rdf/bTg i2APU1OczIYWxArvZrjoqNREkRmdnxoJ/AESmNggRUG4AgLinp9FwkKmbw31OfHJ 0eZbg1BFhHVYUblbaoh+ojHX -----END CERTIFICATE-----Generated at Sun Oct 25 14:32:43 2026 by rpki-client