$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: P8izGl+KhnIVVgbA6DvOqhFjEzEUIHpaORzuErdQ4rA= Subject key identifier: 63:45:63:A8:14:2C:19:28:38:1C:88:08:7B:0C:AF:C5:AE:A5:6E:D0 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0D20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0D17 Signing time: Thu 16 Apr 2026 18:01:48 +0000 Manifest this update: Thu 16 Apr 2026 18:01:48 +0000 Manifest next update: Thu 23 Apr 2026 18:01:48 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: v5iEzCMqkoweoOBBINgrZahwOGQWzT2zL6/SHMc9xiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Apr 16 18:01:48 2026 GMT Not After : Apr 23 18:01:48 2026 GMT Subject: CN=69e1240c-bd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:fb:a0:7e:40:71:ce:f5:03:84:31:39:d0: 25:98:16:84:36:16:f2:52:41:96:b9:3a:43:d2:fa: 68:20:57:64:04:97:61:85:ad:76:45:d1:4e:ee:36: 29:f8:6f:3b:bc:42:71:a0:c4:17:32:63:a0:df:c7: 33:97:b7:fa:ff:e9:64:98:fe:56:e3:06:97:a1:4c: 36:4f:a4:cc:7b:9a:d0:d3:59:86:8e:97:81:05:5c: a0:35:bc:d2:4f:55:b7:2b:76:7a:f0:7d:ad:78:e8: a1:84:18:db:3b:2b:a3:ff:3e:c9:17:32:06:b3:7d: ff:82:62:b0:7b:83:47:9e:c4:64:0b:b0:1d:8e:5f: 98:da:f6:81:94:f2:a1:e7:ef:ed:e2:d2:94:0a:22: 8e:1a:58:88:1c:bc:12:2b:c9:36:ca:3c:ec:27:c4: 55:11:fe:65:fd:21:75:85:ef:8a:30:36:65:b1:ad: 8e:56:94:70:be:78:18:0f:1c:e4:fb:e7:de:04:e9: 8c:15:12:97:d3:9a:62:29:81:1c:7e:87:41:00:df: 34:02:b7:e1:69:be:60:2d:43:ec:ea:60:b8:fd:da: e1:aa:db:2d:90:59:82:e9:57:8d:38:bb:17:8c:13: 65:32:00:cb:bd:d1:0a:7e:70:dd:58:85:a2:e6:70: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:45:63:A8:14:2C:19:28:38:1C:88:08:7B:0C:AF:C5:AE:A5:6E:D0 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9d:53:e4:b1:cf:1c:69:e1:9e:ef:bf:79:3a:92:98:e8:74: 2b:ff:67:ad:a2:bb:5f:22:ec:88:60:38:70:f4:a6:ac:c8:d0: c2:78:75:dd:ba:57:c8:fa:54:ac:3e:8a:ac:18:db:fc:3d:24: 3e:13:d9:d5:d7:70:61:4f:3f:9c:ef:82:2b:e3:00:ab:af:7f: 00:74:ae:a0:07:7d:28:ca:c2:ee:50:6b:46:ea:6c:0e:87:70: ae:4b:19:44:c0:11:9b:8f:14:1d:c0:ff:d2:bb:d5:f9:57:4b: 48:6d:2c:91:ab:c3:33:1f:9f:e4:15:70:56:7f:c5:74:69:12: 29:d6:19:76:04:9f:00:6e:ed:94:01:7e:a7:ff:fd:61:fc:ff: 8c:07:f1:50:fb:b4:83:93:4b:9f:8e:11:31:97:ef:21:26:6a: 90:78:0a:9e:f5:34:6e:05:87:85:0b:d3:5e:8a:0f:2e:b5:98: 44:f3:f5:d0:07:8d:de:0a:de:3a:c2:71:dd:17:1f:04:43:d2: 3e:02:be:af:30:f8:e0:d5:57:dc:b0:35:66:b7:09:bd:2b:09: d2:a4:d4:9a:ed:0e:54:39:e7:ae:68:5e:b1:9e:49:3c:9e:a5: e8:17:d9:55:4c:27:90:b0:d9:31:9e:4a:a3:69:d6:7a:29:8f: 17:70:de:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjYwNDE2MTgwMTQ4WhcNMjYwNDIzMTgwMTQ4WjAYMRYwFAYD VQQDEw02OWUxMjQwYy1iZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0f7oH5Acc71A4QxOdAlmBaENhbyUkGWuTpD0vpoIFdkBJdhha12RdFO7jYp +G87vEJxoMQXMmOg38czl7f6/+lkmP5W4waXoUw2T6TMe5rQ01mGjpeBBVygNbzS T1W3K3Z68H2teOihhBjbOyuj/z7JFzIGs33/gmKwe4NHnsRkC7Adjl+Y2vaBlPKh 5+/t4tKUCiKOGliIHLwSK8k2yjzsJ8RVEf5l/SF1he+KMDZlsa2OVpRwvngYDxzk ++feBOmMFRKX05piKYEcfodBAN80Arfhab5gLUPs6mC4/drhqtstkFmC6VeNOLsX jBNlMgDLvdEKfnDdWIWi5nBbfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNFY6gU LBkoOByICHsMr8WupW7QMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAep1T5LHPHGnhnu+/eTqSmOh0K/9nraK7XyLsiGA4cPSmrMjQwnh13bpXyPpU rD6KrBjb/D0kPhPZ1ddwYU8/nO+CK+MAq69/AHSuoAd9KMrC7lBrRupsDodwrksZ RMARm48UHcD/0rvV+VdLSG0skavDMx+f5BVwVn/FdGkSKdYZdgSfAG7tlAF+p//9 Yfz/jAfxUPu0g5NLn44RMZfvISZqkHgKnvU0bgWHhQvTXooPLrWYRPP10AeN3gre OsJx3RcfBEPSPgK+rzD44NVX3LA1ZrcJvSsJ0qTUmu0OVDnnrmhesZ5JPJ6l6BfZ VUwnkLDZMZ5Ko2nWeimPF3DeUw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:50 2026 by rpki-client