$ rpki-client -vvf rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft File: cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft (raw, json) Hash identifier: RbqzbQ2gj1RlOTKyS/I7PrUkTeyxAvKr76g+5YKQd2I= Subject key identifier: A1:08:4F:3A:80:4D:36:75:0E:5B:39:4A:EA:65:4C:AC:D0:99:ED:75 Authority key identifier: 73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B Certificate issuer: /CN=A9112F94/serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft Manifest number: 1B Signing time: Mon 27 Jul 2026 11:25:26 +0000 Manifest this update: Mon 27 Jul 2026 11:25:25 +0000 Manifest next update: Mon 03 Aug 2026 11:25:25 +0000 Files and hashes: 1: cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl (hash: 1avqPVuXVObvzGmhIPuvFHi9UukdSaPwIKTCfKEPy0I=) 2: 1603FF2C6AE911F1B5ED47487247A888.roa (hash: 3qfyehPx18iZ+nZ3Fp3nstIPk0IChqfQZsM3HoTDXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112F94, serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B Validity Not Before: Jul 27 11:25:25 2026 GMT Not After : Aug 3 11:25:25 2026 GMT Subject: CN=6a674026-4d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:54:bb:76:bd:fc:bd:08:c3:1d:35:a0:4e: 97:f9:3b:6e:ec:e1:5e:b1:21:2f:bd:c7:96:df:66: 0e:50:fc:d6:74:c2:1a:02:20:b2:d4:b5:fc:fa:fa: aa:49:1d:3d:23:fd:c3:cc:4f:7e:7d:67:80:e2:77: ae:7e:af:ac:7c:c1:d4:69:3c:c6:cc:bf:c3:5f:6b: fa:cd:9b:d3:91:c9:0f:60:cb:62:a0:8c:43:ed:e4: b3:8e:ab:9e:44:cd:3a:b9:0a:5a:42:ad:b7:c8:a2: f0:36:62:e2:5c:15:b4:7e:b6:96:c9:f4:18:e3:b8: 67:7d:34:53:64:e6:ca:e9:06:28:96:c8:be:a0:57: ae:a2:ed:58:e6:9e:8c:73:78:e3:4e:50:fa:f0:6a: 18:47:27:66:aa:96:88:e2:83:3e:40:07:46:d4:92: ad:21:97:3b:07:75:d2:07:2c:69:45:8f:42:b6:1f: 0e:9c:e4:08:5a:05:20:47:00:1a:ea:8f:31:81:e9: be:97:0f:8c:1b:6f:65:76:4c:1f:28:db:67:4a:a8: 36:aa:39:0b:e6:6f:6d:74:99:d8:8c:94:92:ec:40: d0:f6:78:ef:f6:3a:4e:25:be:89:b9:2c:41:d5:c3: 2c:33:dc:37:c5:25:02:2e:7d:1a:fb:04:14:93:a2: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:08:4F:3A:80:4D:36:75:0E:5B:39:4A:EA:65:4C:AC:D0:99:ED:75 X509v3 Authority Key Identifier: keyid:73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:73:f9:5c:54:42:81:b7:46:6a:82:9f:e7:b3:5d:f5:5b: 76:9b:67:59:b1:4d:7b:cb:51:6b:f8:bf:21:71:2c:22:ba:9e: 15:2b:16:a0:44:42:dd:48:f5:96:df:9b:b1:1d:e0:da:ab:04: 1a:6e:88:03:d3:92:76:f2:64:30:67:d0:5b:bc:cc:2e:57:91: a0:28:b6:20:fa:db:0d:d1:3e:71:da:97:ea:b1:45:db:20:16: c7:d3:8f:f8:e8:67:e0:13:46:28:fb:69:37:77:7d:8b:f2:2a: 37:1d:0a:be:6e:47:6b:0c:37:0c:4a:4a:bf:1b:89:dc:d8:93: 39:46:d7:76:81:9e:f0:63:19:be:a8:71:6e:d1:60:a0:27:4e: 22:14:48:f6:b4:e3:a6:ee:77:87:df:77:4d:ca:02:e3:b3:04: eb:37:14:3e:0a:6e:8b:e9:9e:67:c4:49:02:8c:c7:eb:46:ec: f7:64:05:86:49:8c:19:2b:22:ca:ab:78:15:ab:63:d1:b4:ef: f3:69:9d:25:eb:42:83:46:a7:dc:fb:0c:da:c3:d1:d3:24:84: c5:4b:57:cf:da:84:fd:44:70:47:21:2a:7b:10:64:f0:8f:5d: 19:7a:ee:78:db:c0:a2:a6:40:f8:25:f3:37:56:33:38:f8:e5: 0e:52:c4:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkY5NDExMC8GA1UEBRMoNzMxQTVERDRENjRBNzBCNzFEMzhCMEI1NEJBNDU0NkI2 NjgzQTAxQjAeFw0yNjA3MjcxMTI1MjVaFw0yNjA4MDMxMTI1MjVaMBgxFjAUBgNV BAMTDTZhNjc0MDI2LTRkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvYVS7dr38vQjDHTWgTpf5O27s4V6xIS+9x5bfZg5Q/NZ0whoCILLUtfz6+qpJ HT0j/cPMT359Z4Did65+r6x8wdRpPMbMv8Nfa/rNm9ORyQ9gy2KgjEPt5LOOq55E zTq5ClpCrbfIovA2YuJcFbR+tpbJ9BjjuGd9NFNk5srpBiiWyL6gV66i7Vjmnoxz eONOUPrwahhHJ2aqlojigz5AB0bUkq0hlzsHddIHLGlFj0K2Hw6c5AhaBSBHABrq jzGB6b6XD4wbb2V2TB8o22dKqDaqOQvmb210mdiMlJLsQND2eO/2Ok4lvom5LEHV wywz3DfFJQIufRr7BBSTopvPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoQhPOoBN NnUOWzlK6mVMrNCZ7XUwHwYDVR0jBBgwFoAUcxpd1NZKcLcdOLC1S6RUa2aDoBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRjk0L0VBQUYyOEVBNkFE MTExRjE5NkJBNUUyRTZCNDdBODg4L2N4cGQxTlpLY0xjZE9MQzFTNlJVYTJhRG9C cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3hwZDFOWktjTGNkT0xDMVM2UlVhMmFEb0JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy Rjk0L0VBQUYyOEVBNkFEMTExRjE5NkJBNUUyRTZCNDdBODg4L2N4cGQxTlpLY0xj ZE9MQzFTNlJVYTJhRG9Ccy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMP3P5XFRCgbdGaoKf57Nd9Vt2m2dZsU17y1Fr+L8hcSwiup4VKxagRELdSPWW 35uxHeDaqwQabogD05J28mQwZ9BbvMwuV5GgKLYg+tsN0T5x2pfqsUXbIBbH04/4 6GfgE0Yo+2k3d32L8io3HQq+bkdrDDcMSkq/G4nc2JM5Rtd2gZ7wYxm+qHFu0WCg J04iFEj2tOOm7neH33dNygLjswTrNxQ+Cm6L6Z5nxEkCjMfrRuz3ZAWGSYwZKyLK q3gVq2PRtO/zaZ0l60KDRqfc+wzaw9HTJITFS1fP2oT9RHBHISp7EGTwj10Zeu54 28CipkD4JfM3VjM4+OUOUsQ7 -----END CERTIFICATE-----Generated at Tue Jul 28 15:37:18 2026 by rpki-client