$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: rkqISqTk54RkIvIYvuCM+pBpHXIDZFTQL1QE3r8BfIs= Subject key identifier: CA:41:A1:B8:F5:6E:58:57:99:50:95:12:0F:8C:A3:6B:BD:3C:43:CC Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 1A Signing time: Fri 17 Apr 2026 08:38:14 +0000 Manifest this update: Fri 17 Apr 2026 08:38:14 +0000 Manifest next update: Fri 24 Apr 2026 08:38:14 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: ZaX0XmT5nMAshSLvhFiBffiRKTophQhw32OKxsJbGIQ=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Apr 17 08:38:14 2026 GMT Not After : Apr 24 08:38:14 2026 GMT Subject: CN=69e1f176-2b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:70:2d:d6:8c:8b:ff:ec:b6:45:19:66:cd: dc:0d:76:bd:55:07:84:a0:ba:e6:05:df:f0:af:a4: 22:a9:4f:f4:08:a2:1c:ed:fd:4a:59:68:e3:f4:50: 52:b5:05:55:e3:00:d5:d5:0e:43:70:ac:45:64:df: 19:8f:34:ee:bd:62:c1:a0:c1:d9:c0:6b:14:be:39: 5c:b4:6c:20:02:10:b7:d8:d3:b9:50:bc:4c:2a:1a: 2f:39:20:4f:40:d3:87:15:a0:03:03:a8:3c:02:d9: 20:4e:d7:de:f8:71:df:87:8e:6c:b4:9b:c1:d6:70: f5:96:bd:9f:94:c2:5e:f3:0a:a1:26:eb:b2:c8:a3: 5c:c0:1b:16:4f:9a:47:73:6f:61:11:c7:ae:52:3f: 6b:8a:30:1c:d9:bc:36:3f:27:f2:fa:2f:56:f1:7a: 40:81:31:c6:cb:00:c0:34:c2:61:46:02:df:5c:fb: 44:2e:d3:df:20:f9:3d:af:2a:bc:57:80:2c:74:7f: 15:57:60:c5:99:e5:d7:bc:1a:e7:ee:bb:d7:5d:c1: 2c:fc:24:22:18:da:b3:15:39:d4:01:74:c4:28:b3: 75:f4:7d:03:4e:21:1b:cf:02:cc:cc:b3:50:21:45: 8a:60:c6:9d:11:19:f8:49:96:fc:f2:cb:f2:2a:43: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:41:A1:B8:F5:6E:58:57:99:50:95:12:0F:8C:A3:6B:BD:3C:43:CC X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4d:24:24:35:f3:5a:4c:9e:25:b7:56:22:15:9b:97:71:d7: a1:73:a6:1f:60:ba:1c:0d:80:40:f6:98:5f:f6:a3:6f:ed:46: b6:61:23:76:d7:ec:0d:70:a8:ba:20:32:b5:2b:ae:fc:2e:2a: 49:81:16:0c:63:cc:c1:7b:05:b9:b4:b2:f4:4c:a7:28:57:be: 47:4a:28:3e:78:96:77:4c:2e:a0:6f:9a:be:a8:1c:01:64:67: 7f:d6:05:50:d4:e4:31:bb:53:1c:7f:10:db:46:5a:fd:76:d9: 17:ca:45:57:85:27:2f:ce:9f:2f:0a:5e:b3:40:52:2e:17:7d: 74:33:53:0d:f9:d3:cf:9f:68:49:72:ef:ff:b9:30:03:25:80: 88:7e:c2:4a:36:b4:dc:44:d4:16:88:03:f4:17:42:01:61:db: 10:22:25:c7:ad:08:b8:05:35:99:e9:3a:78:64:87:67:07:1e: 89:73:8b:d9:cb:ba:dc:ef:c4:03:60:9c:e1:53:f1:11:46:7b: 8a:95:3d:60:1d:c3:81:e8:d9:39:81:b9:d1:25:38:f2:ce:99: e3:5b:2e:d5:2e:1b:d1:fa:f7:a7:5d:cc:45:02:62:b6:52:1d: 69:83:32:49:94:eb:e2:e1:bb:08:d9:d2:20:81:bc:68:5d:b8: 97:3e:3d:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjA0MTcwODM4MTRaFw0yNjA0MjQwODM4MTRaMBgxFjAUBgNV BAMTDTY5ZTFmMTc2LTJiOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSC3At1oyL/+y2RRlmzdwNdr1VB4SguuYF3/CvpCKpT/QIohzt/UpZaOP0UFK1 BVXjANXVDkNwrEVk3xmPNO69YsGgwdnAaxS+OVy0bCACELfY07lQvEwqGi85IE9A 04cVoAMDqDwC2SBO1974cd+Hjmy0m8HWcPWWvZ+Uwl7zCqEm67LIo1zAGxZPmkdz b2ERx65SP2uKMBzZvDY/J/L6L1bxekCBMcbLAMA0wmFGAt9c+0Qu098g+T2vKrxX gCx0fxVXYMWZ5de8Gufuu9ddwSz8JCIY2rMVOdQBdMQos3X0fQNOIRvPAszMs1Ah RYpgxp0RGfhJlvzyy/IqQ8n/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUykGhuPVu WFeZUJUSD4yja708Q8wwHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACTSQkNfNaTJ4lt1YiFZuXcdehc6YfYLocDYBA9phf9qNv7Ua2YSN21+wNcKi6 IDK1K678LipJgRYMY8zBewW5tLL0TKcoV75HSig+eJZ3TC6gb5q+qBwBZGd/1gVQ 1OQxu1McfxDbRlr9dtkXykVXhScvzp8vCl6zQFIuF310M1MN+dPPn2hJcu//uTAD JYCIfsJKNrTcRNQWiAP0F0IBYdsQIiXHrQi4BTWZ6Tp4ZIdnBx6Jc4vZy7rc78QD YJzhU/ERRnuKlT1gHcOB6Nk5gbnRJTjyzpnjWy7VLhvR+venXcxFAmK2Uh1pgzJJ lOvi4bsI2dIggbxoXbiXPj1C -----END CERTIFICATE-----Generated at Sun Apr 19 09:04:39 2026 by rpki-client