$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft File: cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json) Hash identifier: Rzf4by8Nnvr3OUxg77HCKuP+jMWW9WAVUROTarPJZSw= Subject key identifier: 41:7C:9E:CE:E5:23:66:F7:3A:6D:84:93:D8:26:C8:01:11:47:43:0B Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft Manifest number: 27 Signing time: Thu 11 Jun 2026 11:08:30 +0000 Manifest this update: Thu 11 Jun 2026 11:08:30 +0000 Manifest next update: Thu 18 Jun 2026 11:08:30 +0000 Files and hashes: 1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: SDuiFWkhDGJVOe6SlWtl876Zhe0HE5281+0tSx+4MaU=) 2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Validity Not Before: Jun 11 11:08:30 2026 GMT Not After : Jun 18 11:08:30 2026 GMT Subject: CN=6a2a972e-f8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:a3:75:3d:e4:44:a4:c9:22:4d:f9:eb:3e: f0:01:64:08:72:fc:be:12:63:23:d9:bb:ae:d9:a0: 1b:d1:16:07:e4:93:3b:c5:6e:c0:45:7d:90:9f:db: d7:9b:b4:09:1d:a0:be:70:b9:a6:34:e4:33:4c:40: ae:3c:ed:ef:9c:97:4c:72:d0:59:60:71:f2:4f:3d: 1b:b0:9b:1f:d1:cb:be:9b:f2:59:04:74:b0:21:e1: b2:47:65:9b:3b:54:9b:56:25:ac:e8:06:b0:ac:4e: fb:d6:94:26:3f:9a:42:e9:25:b8:15:4e:49:63:2a: bd:bb:46:8c:d7:37:90:89:96:2a:52:cc:fb:a9:96: 4f:06:00:5c:2b:a6:a4:d8:c0:5e:99:6d:f1:72:8d: c8:f3:20:1a:7e:1b:12:f1:93:db:d1:c3:e8:33:a0: 5e:aa:9f:89:c0:2c:1c:ff:6b:5f:ac:48:53:4c:6d: da:0a:bb:35:75:ee:bf:f7:45:e4:7a:c6:84:ff:17: a9:84:95:8a:83:a9:ea:0a:06:38:71:85:06:d9:aa: 86:6d:64:7d:5b:e6:73:19:be:a3:83:de:61:7e:2c: 21:1a:cb:2d:37:8f:13:28:59:24:d3:00:e9:7d:0f: 09:d0:d3:3a:b5:4f:e6:af:46:ea:51:cb:2b:22:09: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7C:9E:CE:E5:23:66:F7:3A:6D:84:93:D8:26:C8:01:11:47:43:0B X509v3 Authority Key Identifier: keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:e8:e3:e1:6b:a5:78:bd:ed:b8:8e:31:41:ae:98:35:a4: bc:34:67:41:8c:a3:8e:4e:55:0a:7d:55:31:35:25:8e:5a:b6: 23:d5:35:70:bc:0a:a3:87:57:09:82:a3:2b:9e:1e:bd:90:1f: 80:c9:42:34:5a:47:cd:23:9e:34:3c:b2:fc:4f:b7:45:b1:1b: af:f4:77:ac:28:52:09:79:40:a0:60:24:30:7e:49:d7:f1:4a: 84:ce:e4:0a:e5:32:1e:93:7a:1c:7d:d4:81:23:ed:1b:cc:1a: 08:b6:d0:ec:ee:ac:da:4c:2f:32:ae:be:e6:bc:3f:16:96:96: 27:bf:7e:c5:b5:d4:be:ab:df:fd:06:f4:a3:6c:7b:bb:c7:48: 03:4d:e2:93:25:3a:81:86:85:1f:12:a7:64:95:d6:a6:69:37: 60:3f:7b:50:d4:6c:b5:f7:b2:6d:55:cf:06:92:e9:8b:3e:76: b7:2c:3c:96:3e:c2:6f:2e:16:a9:88:f6:66:2e:33:c2:71:9a: 54:a9:1f:29:d1:2d:74:97:5f:6c:03:44:42:be:63:bd:36:17: 3b:57:fb:56:09:9d:70:c6:a7:3c:52:ed:34:fd:06:e6:61:ff: 96:cf:42:60:b3:24:0c:21:47:28:4d:08:8b:0f:f4:98:32:64: 28:86:d2:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjA0QzExMC8GA1UEBRMoNzMxM0VCRjVDMDFGNEI3OTZEOTA1OEJBQzNDNjVGNTVC MzA1Q0E3NzAeFw0yNjA2MTExMTA4MzBaFw0yNjA2MTgxMTA4MzBaMBgxFjAUBgNV BAMTDTZhMmE5NzJlLWY4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ/qN1PeREpMkiTfnrPvABZAhy/L4SYyPZu67ZoBvRFgfkkzvFbsBFfZCf29eb tAkdoL5wuaY05DNMQK487e+cl0xy0FlgcfJPPRuwmx/Ry76b8lkEdLAh4bJHZZs7 VJtWJazoBrCsTvvWlCY/mkLpJbgVTkljKr27RozXN5CJlipSzPuplk8GAFwrpqTY wF6ZbfFyjcjzIBp+GxLxk9vRw+gzoF6qn4nALBz/a1+sSFNMbdoKuzV17r/3ReR6 xoT/F6mElYqDqeoKBjhxhQbZqoZtZH1b5nMZvqOD3mF+LCEayy03jxMoWSTTAOl9 DwnQ0zq1T+avRupRyysiCToRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQXyezuUj Zvc6bYST2CbIARFHQwswHwYDVR0jBBgwFoAUcxPr9cAfS3ltkFi6w8ZfVbMFyncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMDRDL0Y2MDQxQTNDMkMy NjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNsdGtGaTZ3OFpmVmJNRnlu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hQcjljQWZTM2x0a0ZpNnc4WmZWYk1GeW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MDRDL0Y2MDQxQTNDMkMyNjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNs dGtGaTZ3OFpmVmJNRnluYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4uujj4WuleL3tuI4xQa6YNaS8NGdBjKOOTlUKfVUxNSWOWrYj1TVwvAqjh1cJ gqMrnh69kB+AyUI0WkfNI540PLL8T7dFsRuv9HesKFIJeUCgYCQwfknX8UqEzuQK 5TIek3ocfdSBI+0bzBoIttDs7qzaTC8yrr7mvD8WlpYnv37FtdS+q9/9BvSjbHu7 x0gDTeKTJTqBhoUfEqdkldamaTdgP3tQ1Gy197JtVc8GkumLPna3LDyWPsJvLhap iPZmLjPCcZpUqR8p0S10l19sA0RCvmO9Nhc7V/tWCZ1wxqc8Uu00/QbmYf+Wz0Jg syQMIUcoTQiLD/SYMmQohtJ3 -----END CERTIFICATE-----Generated at Sat Jun 13 09:17:13 2026 by rpki-client