$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft File: cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json) Hash identifier: M5ZYWitBref748Qui5evSUeGxOfDvcrYG0LRx3t0/Hs= Subject key identifier: 81:88:A5:91:6A:1D:32:6B:AC:B8:7A:BB:BF:23:7E:03:87:78:76:E0 Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft Manifest number: 0C Signing time: Fri 17 Apr 2026 08:50:33 +0000 Manifest this update: Fri 17 Apr 2026 08:50:33 +0000 Manifest next update: Fri 24 Apr 2026 08:50:33 +0000 Files and hashes: 1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: W8ectElK2UI8HMNv2goaPRsh/2EcojvFbcBBYGiW28U=) 2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Validity Not Before: Apr 17 08:50:33 2026 GMT Not After : Apr 24 08:50:33 2026 GMT Subject: CN=69e1f459-cee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:a4:ed:00:12:e0:b2:56:23:84:c9:59:1b: f8:cf:90:2d:fa:8f:c0:aa:b1:bc:ab:77:6a:c6:c3: a9:31:a2:c0:95:f0:b0:8a:77:9a:88:5b:18:53:cd: d7:d9:4b:29:d0:9c:e6:2d:e4:c9:c1:b6:2b:c9:de: d7:d7:d0:e2:f2:e3:f7:34:4e:9d:00:54:bd:9c:ff: de:f9:89:17:39:e2:3b:25:94:b2:49:85:20:5e:38: 95:84:90:72:a2:1a:8d:fe:27:a2:d7:04:13:80:ed: d2:4e:64:00:2d:a1:4b:e6:fa:3c:08:55:a0:ef:28: 94:16:ce:ce:a2:70:a9:d2:e7:68:89:ef:91:81:79: 52:71:0b:5d:cc:a2:42:e9:73:fe:4f:e7:0d:0a:52: 34:a9:c1:2a:f0:02:fb:59:21:74:1b:d5:39:f9:cb: 6a:d6:c8:8d:43:cc:b8:0e:9c:7b:e4:ff:89:a7:3f: db:fc:f3:dc:5b:2f:7c:9f:65:e0:89:95:c1:3a:80: 58:9d:2d:35:d6:4a:14:3a:ed:48:2d:98:00:54:d0: 3c:b6:c2:87:55:21:f4:74:43:cd:f2:95:c9:8d:c6: 43:ce:f5:3e:cb:eb:f1:26:df:f7:ef:93:fd:5f:77: c0:3f:5f:0f:b5:d4:ef:3c:94:3a:03:2f:09:8b:3e: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:A5:91:6A:1D:32:6B:AC:B8:7A:BB:BF:23:7E:03:87:78:76:E0 X509v3 Authority Key Identifier: keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:c8:c0:e9:82:ed:e1:ec:bf:35:0b:cb:0d:b7:18:04:ba:bc: 4f:42:b5:79:47:63:f8:e5:cb:80:6b:a2:a5:2f:a4:9d:d7:cf: 58:da:67:f0:c1:16:70:aa:41:8d:01:6a:42:7b:14:42:97:ea: 53:ee:79:c4:a7:af:06:d2:05:ce:1a:46:f3:17:34:17:c9:98: 8c:64:a4:7a:b7:fa:ba:97:4d:8b:5d:91:33:46:2c:fd:cb:e7: a1:77:fb:f6:59:4b:39:d0:c2:74:75:84:69:f2:80:9c:7d:a1: 95:0a:fa:98:50:a7:3c:21:c9:69:5e:b6:8e:26:20:47:ed:04: 82:58:95:e3:a0:61:56:cb:3d:7c:ce:4d:bd:cd:e1:b4:55:ec: ef:67:32:ca:e0:37:db:5b:a7:c6:f9:99:5e:7b:04:ea:6c:4b: 68:54:68:ea:0f:1d:06:ed:56:32:17:c7:c1:fe:21:bf:40:1a: 35:ea:c6:52:bb:73:76:25:b6:09:b7:f6:76:f3:b0:fb:f4:35: 5a:91:eb:f9:6e:ea:f2:dc:4c:18:12:d9:15:3b:86:45:29:75: 66:9c:11:16:f0:9a:53:fe:56:03:55:aa:16:55:4c:e7:ef:12: 66:71:6d:5f:a1:1a:d5:3d:d1:ed:6d:01:b2:bd:5c:80:aa:bf: f5:38:02:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjA0QzExMC8GA1UEBRMoNzMxM0VCRjVDMDFGNEI3OTZEOTA1OEJBQzNDNjVGNTVC MzA1Q0E3NzAeFw0yNjA0MTcwODUwMzNaFw0yNjA0MjQwODUwMzNaMBgxFjAUBgNV BAMTDTY5ZTFmNDU5LWNlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRbqTtABLgslYjhMlZG/jPkC36j8Cqsbyrd2rGw6kxosCV8LCKd5qIWxhTzdfZ SynQnOYt5MnBtivJ3tfX0OLy4/c0Tp0AVL2c/975iRc54jsllLJJhSBeOJWEkHKi Go3+J6LXBBOA7dJOZAAtoUvm+jwIVaDvKJQWzs6icKnS52iJ75GBeVJxC13MokLp c/5P5w0KUjSpwSrwAvtZIXQb1Tn5y2rWyI1DzLgOnHvk/4mnP9v889xbL3yfZeCJ lcE6gFidLTXWShQ67UgtmABU0Dy2wodVIfR0Q83ylcmNxkPO9T7L6/Em3/fvk/1f d8A/Xw+11O88lDoDLwmLPouFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgYilkWod MmusuHq7vyN+A4d4duAwHwYDVR0jBBgwFoAUcxPr9cAfS3ltkFi6w8ZfVbMFyncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMDRDL0Y2MDQxQTNDMkMy NjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNsdGtGaTZ3OFpmVmJNRnlu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hQcjljQWZTM2x0a0ZpNnc4WmZWYk1GeW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MDRDL0Y2MDQxQTNDMkMyNjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNs dGtGaTZ3OFpmVmJNRnluYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDnyMDpgu3h7L81C8sNtxgEurxPQrV5R2P45cuAa6KlL6Sd189Y2mfwwRZwqkGN AWpCexRCl+pT7nnEp68G0gXOGkbzFzQXyZiMZKR6t/q6l02LXZEzRiz9y+ehd/v2 WUs50MJ0dYRp8oCcfaGVCvqYUKc8IclpXraOJiBH7QSCWJXjoGFWyz18zk29zeG0 VezvZzLK4DfbW6fG+ZleewTqbEtoVGjqDx0G7VYyF8fB/iG/QBo16sZSu3N2JbYJ t/Z287D79DVakev5bury3EwYEtkVO4ZFKXVmnBEW8JpT/lYDVaoWVUzn7xJmcW1f oRrVPdHtbQGyvVyAqr/1OAJL -----END CERTIFICATE-----Generated at Sun Apr 19 09:42:05 2026 by rpki-client