$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: topVtlCl2rEbsyqZ7Ye4GjfbSw2MCjfFmEPm1o3Q99E= Subject key identifier: D3:FB:A2:80:94:D4:A8:CC:CB:E0:C2:F8:32:8E:15:3A:86:CC:63:91 Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 1C Signing time: Tue 21 Apr 2026 08:41:32 +0000 Manifest this update: Tue 21 Apr 2026 08:41:32 +0000 Manifest next update: Tue 28 Apr 2026 08:41:32 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: 00SXhuUY+NsDGHNRFlWCzOifa0D/q8xkvpzGSHxWf5s=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Apr 21 08:41:32 2026 GMT Not After : Apr 28 08:41:32 2026 GMT Subject: CN=69e7383c-6335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:a9:0c:1f:22:82:be:f4:f5:5d:91:24:38: 9f:ae:92:f2:e6:d2:b5:62:ee:72:8c:e9:ad:4b:db: 83:fd:f8:91:47:1a:ce:49:a5:01:e4:2e:3a:2e:79: 45:71:75:e5:f9:ce:58:2d:58:c3:eb:0d:b2:28:b1: 12:ba:d0:fa:78:3e:9c:aa:82:45:09:1d:73:e1:fa: 16:f0:07:40:65:bb:de:2c:cc:fc:0c:6e:1b:b9:ec: 49:16:a6:f1:86:3c:34:f2:40:78:58:aa:f5:e9:8f: 15:b0:e6:03:78:e2:b6:ab:e8:fe:d8:97:31:80:2e: d8:05:27:b5:30:4c:94:ac:e8:e2:15:93:ec:8a:d3: 1d:bc:45:5f:d8:58:b0:80:89:cb:c6:29:09:dd:e1: 9b:84:fd:75:4d:39:83:e5:8b:95:62:1c:9f:6c:73: 1f:e6:c9:52:6f:83:30:bd:50:45:4a:93:1d:47:39: 01:23:80:a7:f2:6c:f3:96:60:53:25:41:63:b8:78: 21:bc:9a:c1:40:b9:46:40:eb:b4:51:9b:ef:25:34: f5:6a:1f:d1:20:4f:75:3f:9d:43:1d:83:3e:db:51: 9f:2b:68:6d:f5:ea:25:38:3a:46:44:49:50:81:4a: 62:cd:47:52:72:ef:05:84:d0:52:ab:e2:c7:1a:81: 0b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FB:A2:80:94:D4:A8:CC:CB:E0:C2:F8:32:8E:15:3A:86:CC:63:91 X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:2d:32:b1:20:dd:a0:78:23:02:72:aa:fc:50:d6:86:ef: 5c:de:ed:c0:5c:1f:28:b6:f0:8c:a3:78:95:33:56:95:4a:2a: 37:2c:bc:e8:63:08:da:fa:3b:36:53:3d:ac:38:0b:c3:22:ba: 76:d8:c9:de:b4:b5:8a:32:e6:f0:46:72:f8:9e:0c:00:97:eb: 04:71:da:77:fa:8b:82:25:49:f3:f8:ec:a4:63:1c:3a:c2:b8: ef:f6:6d:93:25:9d:60:b8:24:be:ae:2f:70:30:43:4e:0f:fc: d3:f0:de:c7:f8:88:b6:de:81:1f:7d:31:3e:08:c5:e3:8b:6c: 8a:75:d7:a2:f2:fa:ec:59:7e:c2:f3:3b:b6:be:60:7d:7e:0c: ac:3e:6f:3e:ea:77:b9:d4:f2:85:f7:b3:a1:3d:25:ed:6e:d3: 27:4c:b7:45:f1:09:f6:52:ed:03:40:79:10:91:2b:d3:73:4a: 14:d3:f4:37:ef:e2:ea:3b:69:03:ee:98:1c:a2:88:d1:5e:99: 8f:a1:37:0c:6f:14:8a:13:e4:2f:f1:69:c5:9d:32:49:e5:6d: db:ae:33:35:02:66:3a:64:86:e8:5c:13:4f:78:9b:13:0d:41: 36:52:e9:27:b6:fb:b0:98:59:a0:03:e8:ec:7e:83:54:5b:9f: 74:ca:c6:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjA0MjEwODQxMzJaFw0yNjA0MjgwODQxMzJaMBgxFjAUBgNV BAMTDTY5ZTczODNjLTYzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXWakMHyKCvvT1XZEkOJ+ukvLm0rVi7nKM6a1L24P9+JFHGs5JpQHkLjoueUVx deX5zlgtWMPrDbIosRK60Pp4PpyqgkUJHXPh+hbwB0Blu94szPwMbhu57EkWpvGG PDTyQHhYqvXpjxWw5gN44rar6P7YlzGALtgFJ7UwTJSs6OIVk+yK0x28RV/YWLCA icvGKQnd4ZuE/XVNOYPli5ViHJ9scx/myVJvgzC9UEVKkx1HOQEjgKfybPOWYFMl QWO4eCG8msFAuUZA67RRm+8lNPVqH9EgT3U/nUMdgz7bUZ8raG316iU4OkZESVCB SmLNR1Jy7wWE0FKr4scagQuLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0/uigJTU qMzL4ML4Mo4VOobMY5EwHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBv9S0ysSDdoHgjAnKq/FDWhu9c3u3AXB8otvCMo3iVM1aVSio3LLzoYwja+js2 Uz2sOAvDIrp22MnetLWKMubwRnL4ngwAl+sEcdp3+ouCJUnz+OykYxw6wrjv9m2T JZ1guCS+ri9wMENOD/zT8N7H+Ii23oEffTE+CMXji2yKddei8vrsWX7C8zu2vmB9 fgysPm8+6ne51PKF97OhPSXtbtMnTLdF8Qn2Uu0DQHkQkSvTc0oU0/Q37+LqO2kD 7pgcoojRXpmPoTcMbxSKE+Qv8WnFnTJJ5W3brjM1AmY6ZIboXBNPeJsTDUE2Uukn tvuwmFmgA+jsfoNUW590ysaw -----END CERTIFICATE-----Generated at Wed Apr 22 09:01:30 2026 by rpki-client