$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft File: x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft (raw, json) Hash identifier: nJBtdUKGLdKAFixP9qZy5YgnOMLeKPQgfMVp5VYcwoY= Subject key identifier: 58:39:53:F3:FD:5F:36:50:5D:A0:71:C5:A3:C6:65:C2:A1:52:0B:0A Authority key identifier: C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11 Certificate issuer: /CN=A917CD13/serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft Manifest number: 20 Signing time: Mon 21 Sep 2026 08:51:17 +0000 Manifest this update: Mon 21 Sep 2026 08:51:16 +0000 Manifest next update: Mon 28 Sep 2026 08:51:16 +0000 Files and hashes: 1: x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl (hash: w9gXULU7g1wLjKGtgvLFmDkWk1uF+h7DVR9d/lXQJBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD13, serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11 Validity Not Before: Sep 21 08:51:16 2026 GMT Not After : Sep 28 08:51:16 2026 GMT Subject: CN=6ab0f005-7e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:4d:01:17:5a:f5:18:ee:8d:3f:e7:80:ea: 57:fe:d9:d2:33:1b:2a:2f:81:a9:bb:af:25:24:8a: 3b:96:65:65:0e:5c:c8:bb:b4:42:e9:e6:b0:35:9b: 38:90:ff:00:0e:b9:ec:39:04:2f:61:8e:cc:0f:b8: 4c:c4:51:1d:54:60:8e:e7:5e:8e:3a:22:13:d7:9b: 35:03:f5:a1:49:95:7a:1c:85:ed:18:93:54:04:b8: 95:62:f6:cf:4a:a4:52:3b:09:57:d3:00:16:09:49: f7:39:57:e3:1d:aa:91:15:58:63:f1:47:83:6f:95: 8e:80:75:cb:d7:4d:4d:39:49:e7:aa:3e:76:54:06: 7d:ea:62:54:cb:60:3e:fc:59:29:e4:e6:8d:83:cd: 1d:a8:68:08:d0:87:ec:7f:a9:b4:ff:21:f1:54:2d: 6c:40:d1:ae:23:eb:85:44:b4:1a:f5:1a:a2:57:43: 33:55:ed:f9:c0:33:91:cd:28:7b:4f:8c:df:a0:a0: 27:a3:6b:ad:29:3a:6e:ca:07:c1:67:a3:75:12:0c: a7:7b:e0:7e:cd:0b:7c:84:40:51:70:6f:94:f4:6a: f2:be:fd:86:5b:5b:a8:81:27:fe:3b:db:f9:2e:c1: ad:4f:1b:7e:c4:be:33:a3:6d:76:68:fe:e4:ea:04: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:53:F3:FD:5F:36:50:5D:A0:71:C5:A3:C6:65:C2:A1:52:0B:0A X509v3 Authority Key Identifier: keyid:C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:19:93:f5:10:8b:0e:d7:46:76:38:53:28:7c:34:d0:d3:0f: 5c:de:57:31:f0:a6:c2:df:ea:28:46:8a:fd:ec:fb:fd:73:9e: 61:bf:fc:7a:41:dd:52:db:01:cf:a1:97:6a:18:bf:5a:3a:dc: f4:ec:7c:74:23:7c:51:52:cb:11:dd:4d:fe:e7:75:96:98:07: 65:17:93:3f:61:62:85:9a:fc:02:1a:99:9d:99:3d:20:4b:ee: 02:9b:06:5e:a8:d8:8b:59:73:da:7c:bd:c2:d0:23:84:c1:ac: 71:04:87:eb:67:b1:a9:6f:49:83:4a:11:dd:1b:01:db:12:44: 92:86:e6:68:5e:b8:61:57:cb:c3:10:74:b2:f5:27:f8:37:2b: 07:aa:5b:40:cd:f6:8f:4b:61:1b:0e:bd:7e:5b:f0:ff:27:a0: d5:99:d9:de:35:32:84:64:8d:a4:8f:1d:6c:d0:2d:c4:fc:26: b2:39:a4:39:1a:a4:94:85:85:1b:bb:cf:a6:62:8e:4e:f6:43: 9b:1b:72:64:90:b4:8c:87:90:2b:47:ca:ca:8c:99:0a:2d:35: c8:70:c2:a7:9a:5d:b1:0f:c8:fe:17:82:7c:7b:fd:dd:37:97: bb:4a:cc:7b:ed:67:de:0d:59:d0:d1:e5:74:0c:8b:a7:d2:71: 21:2d:83:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Q0QxMzExMC8GA1UEBRMoQzdFN0RGOUQ4MDk3RjFFNDc0RTcyRTgzQzkxMzEzRTE5 QzVCNUMxMTAeFw0yNjA5MjEwODUxMTZaFw0yNjA5MjgwODUxMTZaMBgxFjAUBgNV BAMTDTZhYjBmMDA1LTdlODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClO00BF1r1GO6NP+eA6lf+2dIzGyovgam7ryUkijuWZWUOXMi7tELp5rA1mziQ /wAOuew5BC9hjswPuEzEUR1UYI7nXo46IhPXmzUD9aFJlXoche0Yk1QEuJVi9s9K pFI7CVfTABYJSfc5V+MdqpEVWGPxR4NvlY6AdcvXTU05SeeqPnZUBn3qYlTLYD78 WSnk5o2DzR2oaAjQh+x/qbT/IfFULWxA0a4j64VEtBr1GqJXQzNV7fnAM5HNKHtP jN+goCeja60pOm7KB8Fno3USDKd74H7NC3yEQFFwb5T0avK+/YZbW6iBJ/472/ku wa1PG37EvjOjbXZo/uTqBFwpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWDlT8/1f NlBdoHHFo8ZlwqFSCwowHwYDVR0jBBgwFoAUx+ffnYCX8eR05y6DyRMT4ZxbXBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDRDEzL0NEQzUwMTY2ODk3 NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVSMDV5NkR5Uk1UNFp4YlhC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveC1mZm5ZQ1g4ZVIwNXk2RHlSTVQ0WnhiWEJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD RDEzL0NEQzUwMTY2ODk3NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVS MDV5NkR5Uk1UNFp4YlhCRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKGZP1EIsO10Z2OFMofDTQ0w9c3lcx8KbC3+ooRor97Pv9c55hv/x6Qd1S2wHP oZdqGL9aOtz07Hx0I3xRUssR3U3+53WWmAdlF5M/YWKFmvwCGpmdmT0gS+4CmwZe qNiLWXPafL3C0COEwaxxBIfrZ7Gpb0mDShHdGwHbEkSShuZoXrhhV8vDEHSy9Sf4 NysHqltAzfaPS2EbDr1+W/D/J6DVmdneNTKEZI2kjx1s0C3E/CayOaQ5GqSUhYUb u8+mYo5O9kObG3JkkLSMh5ArR8rKjJkKLTXIcMKnml2xD8j+F4J8e/3dN5e7Ssx7 7WfeDVnQ0eV0DIun0nEhLYPT -----END CERTIFICATE-----Generated at Wed Sep 23 02:28:47 2026 by rpki-client