$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: 8Uj5U0zeea+veC0Til2Un1b2mv9mC3gT7ew2n5zfg90= Subject key identifier: E7:E9:0E:2B:C7:5F:60:EA:33:E8:D9:97:3D:F4:A9:B3:2F:34:DA:7D Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 4C Signing time: Mon 27 Jul 2026 10:38:08 +0000 Manifest this update: Mon 27 Jul 2026 10:38:08 +0000 Manifest next update: Mon 03 Aug 2026 10:38:08 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: u8425foRsZc63MG5tByDvZoMIqPU8P/UfaZDDCZZEK0=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Jul 27 10:38:08 2026 GMT Not After : Aug 3 10:38:08 2026 GMT Subject: CN=6a673510-c67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:1e:87:19:a8:3c:a5:9b:0d:79:fb:4e:e7: 25:81:5e:b1:15:81:d3:0e:ca:50:ab:fb:03:95:75: 9f:55:b6:8f:8d:31:85:5c:e0:8a:41:c7:df:81:3c: 1c:25:91:39:07:7a:2a:cb:4f:64:2a:01:db:2a:2c: 8e:d8:68:2a:e6:59:6f:e0:84:ad:29:50:d4:df:7d: d4:a0:86:46:3c:3d:6a:1a:4a:b9:66:f8:53:ac:92: 0f:fe:77:8b:88:8b:7c:8d:d5:36:17:d6:6d:bd:e8: 3a:a8:8c:09:ee:8e:6b:6f:05:8e:35:d6:1a:85:1f: 4f:ee:ef:cd:15:5c:84:ed:36:1c:91:e9:5e:02:80: 05:d3:a2:c2:05:70:b7:95:92:4b:4a:05:39:85:ae: 25:3f:79:6a:9a:2d:50:57:41:e6:dd:1e:b5:f8:e6: 85:27:1b:54:f4:70:5a:f0:ce:22:92:9b:82:78:a5: 9d:ac:07:64:13:ff:6c:da:29:e6:7c:ba:44:f7:d8: 4e:30:f4:5c:66:49:1b:f0:5e:24:f1:e1:7c:86:ff: 97:ba:35:85:6a:99:c2:31:52:66:0b:6a:ec:5d:67: 45:63:94:51:d4:00:75:9e:d6:38:32:c9:b1:f0:31: f0:ba:81:18:8a:14:33:96:c1:5a:b1:73:5d:85:c8: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:0E:2B:C7:5F:60:EA:33:E8:D9:97:3D:F4:A9:B3:2F:34:DA:7D X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3b:fc:2b:3b:f1:5c:f8:1b:f1:41:bb:19:95:c8:d6:45:6f: 59:53:ae:24:a9:8d:eb:57:b8:c0:0c:78:4f:2c:b1:e5:b1:38: 0e:fe:8a:1e:d8:ab:b9:96:36:d3:71:6f:d7:0b:fd:31:96:dd: 64:85:ca:01:00:29:5a:52:a2:4d:e5:22:d9:83:57:36:3e:ec: 3f:dd:f4:0e:a3:fd:6e:20:21:af:cd:c9:cf:8b:d8:a7:42:d4: 06:7b:61:73:66:a1:f9:87:01:69:21:8f:bf:db:e7:1e:87:b1: 9e:de:4f:b7:05:7f:4d:9b:3e:ec:c2:f4:66:07:da:3d:7d:5b: a7:82:26:c6:82:5c:8a:0c:0c:f7:e8:85:c6:f7:41:96:f3:5c: cd:ec:5a:ba:f6:c3:1e:e7:e1:ab:7f:57:d6:b2:c9:fb:c6:32: 93:bf:fe:c0:c7:5f:30:dc:0e:83:c8:17:2f:56:ab:cb:7f:ea: 95:ef:12:83:ec:87:35:4b:19:4c:a0:5e:a4:68:90:97:bb:38: 8c:32:33:89:4b:9b:a6:6d:88:0b:58:7d:ea:f0:c4:cb:fb:86: 62:fa:d0:c6:4e:a3:ed:9c:c4:53:bc:77:2d:40:ab:42:2e:6d: d9:72:5a:e5:16:69:85:50:4d:50:30:65:fd:c0:a5:22:38:83: a1:98:3a:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjA3MjcxMDM4MDhaFw0yNjA4MDMxMDM4MDhaMBgxFjAUBgNV BAMTDTZhNjczNTEwLWM2N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCurB6HGag8pZsNeftO5yWBXrEVgdMOylCr+wOVdZ9Vto+NMYVc4IpBx9+BPBwl kTkHeirLT2QqAdsqLI7YaCrmWW/ghK0pUNTffdSghkY8PWoaSrlm+FOskg/+d4uI i3yN1TYX1m296DqojAnujmtvBY411hqFH0/u780VXITtNhyR6V4CgAXTosIFcLeV kktKBTmFriU/eWqaLVBXQebdHrX45oUnG1T0cFrwziKSm4J4pZ2sB2QT/2zaKeZ8 ukT32E4w9FxmSRvwXiTx4XyG/5e6NYVqmcIxUmYLauxdZ0VjlFHUAHWe1jgyybHw MfC6gRiKFDOWwVqxc12FyAo3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5+kOK8df YOoz6NmXPfSpsy802n0wHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsO/wrO/Fc+BvxQbsZlcjWRW9ZU64kqY3rV7jADHhPLLHlsTgO/ooe2Ku5ljbT cW/XC/0xlt1khcoBAClaUqJN5SLZg1c2Puw/3fQOo/1uICGvzcnPi9inQtQGe2Fz ZqH5hwFpIY+/2+ceh7Ge3k+3BX9Nmz7swvRmB9o9fVungibGglyKDAz36IXG90GW 81zN7Fq69sMe5+Grf1fWssn7xjKTv/7Ax18w3A6DyBcvVqvLf+qV7xKD7Ic1SxlM oF6kaJCXuziMMjOJS5umbYgLWH3q8MTL+4Zi+tDGTqPtnMRTvHctQKtCLm3Zclrl FmmFUE1QMGX9wKUiOIOhmDoP -----END CERTIFICATE-----Generated at Wed Jul 29 07:06:00 2026 by rpki-client