$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: ENFCIKzMFLQ4bwJGb7RCUDpq8wDKFuyPtnYWT0f3UE4= Subject key identifier: 8F:A6:05:35:F6:C7:14:57:32:0C:66:F3:61:4D:CC:09:D8:D2:42:FD Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0D67 Signing time: Sun 20 Sep 2026 17:58:55 +0000 Manifest this update: Sun 20 Sep 2026 17:58:54 +0000 Manifest next update: Sun 27 Sep 2026 17:58:54 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: /eJZdT6i7zEoY+DhwBq7Yp3uxgpHMNC3rwl6yr9z43g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Sep 20 17:58:54 2026 GMT Not After : Sep 27 17:58:54 2026 GMT Subject: CN=6ab01edf-aa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:4f:ee:ab:78:99:26:00:4f:0a:70:c9:18: 77:5a:24:c0:27:05:02:59:a7:2e:0d:ba:fc:2a:e7: 65:b6:42:bb:40:7d:62:2a:13:49:3f:63:7c:49:4e: ea:62:45:44:4b:e3:4d:1a:2c:44:66:61:c1:9f:e2: 51:d1:e1:93:31:fd:28:38:ba:38:c2:a6:a6:d9:89: 56:9b:f6:33:7e:37:c4:80:b1:1d:15:a7:ce:5c:f5: 3f:cb:3b:7c:98:f2:b8:64:9e:f4:82:60:e8:8b:0d: 03:33:eb:16:a6:63:28:0e:82:84:eb:2e:77:78:bd: b8:8f:d1:fe:68:bd:94:67:de:5a:08:b2:4c:dc:5f: b0:e2:65:24:87:ff:61:ab:db:0b:02:9b:f2:32:95: 1d:81:d6:cf:ca:a6:81:e7:49:8c:68:a2:44:53:99: 94:27:33:0d:6f:23:48:79:f7:5f:01:10:72:b0:ef: 26:a6:b0:0f:9f:0e:22:38:f7:75:86:5b:48:c9:5e: e2:15:b7:ab:d3:02:c1:88:9b:b6:2d:94:90:3d:54: ad:bb:06:6e:4f:21:ed:2c:a7:6b:94:82:44:4d:43: fe:e4:78:c6:50:bf:4b:4a:cb:76:45:f5:f0:97:6d: 1f:4f:29:1a:92:d6:bf:e0:74:f7:95:5e:95:48:58: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A6:05:35:F6:C7:14:57:32:0C:66:F3:61:4D:CC:09:D8:D2:42:FD X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:44:a0:c2:89:96:d3:90:9e:f3:b5:e4:f6:f4:a9:40:36:ab: fa:d8:ac:31:1f:de:8a:c7:ff:d6:75:87:d8:6d:09:70:11:55: 4a:4a:92:39:10:72:89:9f:3d:7b:a9:ef:6b:dc:51:35:50:1e: 8b:12:bd:70:30:67:a9:c0:94:64:24:15:b0:e6:98:62:fd:2e: 40:54:80:c2:3f:d1:69:8f:03:e7:85:67:1c:5a:f8:22:98:74: c4:9e:ef:17:34:4f:97:08:15:74:dc:5f:8e:9c:f5:58:cd:9b: 17:c4:ad:bc:f3:8c:31:eb:15:33:1e:ec:03:95:2f:a4:7d:b5: dd:26:46:33:1b:82:81:91:8d:a6:56:92:2a:3d:43:f6:43:cb: b7:7a:bb:72:96:4f:4a:fc:b2:f8:59:42:78:2e:d4:66:68:d8: 16:e3:4b:59:d9:ad:a7:72:35:7f:80:f5:2a:71:19:aa:c9:38: 2f:70:54:87:50:70:1c:fe:59:39:a7:06:f2:ed:38:dc:df:45: d7:74:1c:f5:19:32:99:52:75:f2:95:f1:29:27:bc:97:07:43: 6c:08:cf:ca:d7:e8:52:06:ed:e5:c6:c6:44:0a:73:c0:dd:6d: ea:54:67:7e:b2:fb:29:5c:34:b1:45:15:a0:01:7b:fb:dd:40: 5c:a6:e7:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjYwOTIwMTc1ODU0WhcNMjYwOTI3MTc1ODU0WjAYMRYwFAYD VQQDEw02YWIwMWVkZi1hYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEpP7qt4mSYATwpwyRh3WiTAJwUCWacuDbr8KudltkK7QH1iKhNJP2N8SU7q YkVES+NNGixEZmHBn+JR0eGTMf0oOLo4wqam2YlWm/YzfjfEgLEdFafOXPU/yzt8 mPK4ZJ70gmDoiw0DM+sWpmMoDoKE6y53eL24j9H+aL2UZ95aCLJM3F+w4mUkh/9h q9sLApvyMpUdgdbPyqaB50mMaKJEU5mUJzMNbyNIefdfARBysO8mprAPnw4iOPd1 hltIyV7iFber0wLBiJu2LZSQPVStuwZuTyHtLKdrlIJETUP+5HjGUL9LSst2RfXw l20fTykakta/4HT3lV6VSFj3MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+mBTX2 xxRXMgxm82FNzAnY0kL9MB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY0SgwomW05Ce87Xk9vSpQDar+tisMR/eisf/1nWH2G0JcBFVSkqSORByiZ89 e6nva9xRNVAeixK9cDBnqcCUZCQVsOaYYv0uQFSAwj/RaY8D54VnHFr4Iph0xJ7v FzRPlwgVdNxfjpz1WM2bF8StvPOMMesVMx7sA5UvpH213SZGMxuCgZGNplaSKj1D 9kPLt3q7cpZPSvyy+FlCeC7UZmjYFuNLWdmtp3I1f4D1KnEZqsk4L3BUh1BwHP5Z OacG8u043N9F13Qc9RkymVJ18pXxKSe8lwdDbAjPytfoUgbt5cbGRApzwN1t6lRn frL7KVw0sUUVoAF7+91AXKbnGg== -----END CERTIFICATE-----Generated at Tue Sep 22 14:10:32 2026 by rpki-client