$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: beicSPeCP95e63IvWGQqnpoXRL2uTd/ktvnvfSdJRBM= Subject key identifier: C7:67:2B:3C:97:15:1F:B9:79:8C:4E:AA:6D:EE:63:75:3F:64:A9:A6 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 086A Signing time: Tue 24 Mar 2026 20:26:07 +0000 Manifest this update: Tue 24 Mar 2026 20:26:06 +0000 Manifest next update: Tue 31 Mar 2026 20:26:06 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: N/eBbzlcM1UytMlQHLz6+pKvs5WH8G5ZnCtEpG5JaEU=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: lC334cY9EMmAFpDjMGOVox+anBwp/MsafgG6UuonwHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Mar 24 20:26:06 2026 GMT Not After : Mar 31 20:26:06 2026 GMT Subject: CN=69c2f35f-f3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:15:c3:17:7b:ac:5f:17:66:e2:2f:1c:bc: 47:9c:9d:01:f3:53:47:25:e5:51:8a:39:9d:c0:56: 4b:09:cc:4a:44:57:58:6f:4a:7e:b5:c9:44:15:4d: cc:d4:83:0b:8d:a5:20:a0:6a:bc:db:45:92:09:5e: 7a:ac:7b:63:6b:39:d3:cb:0a:e5:6b:33:30:4c:28: ac:9c:c6:8c:56:6b:a7:82:38:60:23:f2:c5:e4:0c: e1:36:da:4e:70:ec:54:21:1f:76:b9:69:c4:62:e6: 7d:8c:d0:61:ee:6f:75:67:5f:4a:4d:a1:8f:41:14: 62:88:45:d0:4c:28:60:42:86:db:2a:7b:46:ff:a7: e2:e9:bd:d8:b5:05:ed:47:5b:a0:ed:f9:8f:16:e5: e0:5b:d6:68:bb:46:7b:de:26:5d:bd:07:cf:bc:6f: 97:16:90:ce:74:4f:3a:83:14:95:9b:77:48:8f:30: 7a:2a:32:a5:95:fb:27:14:b0:9c:77:f5:74:cf:fb: 0e:a5:5c:97:3c:5c:e4:f7:1d:52:4a:02:52:1d:af: 31:ac:74:72:75:ce:bd:7b:06:d8:8d:a9:df:16:31: 46:83:5d:13:2f:93:7a:5d:3c:3a:4b:c0:48:cf:71: e5:9b:42:c7:55:85:b6:eb:11:6d:8a:e5:a1:26:b1: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:67:2B:3C:97:15:1F:B9:79:8C:4E:AA:6D:EE:63:75:3F:64:A9:A6 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5c:e6:97:96:3c:3f:5c:13:55:a4:58:8b:07:45:30:38:7a: 7d:6b:bf:62:d2:63:d1:81:db:16:5a:fb:f0:c3:2c:08:b9:3b: 92:98:1f:71:4a:a4:be:1e:2e:fd:7e:12:f3:7d:8e:ec:3a:51: 7d:4a:56:8b:2a:df:6d:23:d8:1d:f2:0c:e8:2c:dc:2b:3c:4f: 12:be:8f:f9:e6:c1:e8:16:79:42:9e:83:dc:84:21:ce:9e:3a: ab:5b:96:41:cc:fb:fe:10:45:67:ff:d3:8a:81:7f:03:f7:05: ee:a5:ae:25:37:07:a4:c7:78:9c:3f:8f:14:5e:6b:85:16:31: e9:16:95:d8:c8:51:4c:e9:99:1c:b4:8c:75:8a:77:9d:b0:46: 85:18:9e:47:a4:be:62:6f:ef:8a:c8:21:35:ff:1c:ac:c3:41: 04:05:20:09:b6:7f:c2:95:ff:80:ef:d6:2b:14:2e:b8:77:87: 85:ad:16:8e:39:cf:6e:eb:3d:87:d9:09:5e:ac:51:fb:da:5b: b7:bb:1b:5c:c7:69:d8:ff:95:d0:09:61:ec:97:7d:52:c1:4a: 7b:8e:ee:a3:f7:45:58:de:bc:b7:20:58:44:ac:62:a5:a3:e7: 7b:40:b7:66:4f:21:35:22:17:5f:07:28:12:48:8f:11:67:3b: 23:53:f2:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjYwMzI0MjAyNjA2WhcNMjYwMzMxMjAyNjA2WjAYMRYwFAYD VQQDEw02OWMyZjM1Zi1mM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvEVwxd7rF8XZuIvHLxHnJ0B81NHJeVRijmdwFZLCcxKRFdYb0p+tclEFU3M 1IMLjaUgoGq820WSCV56rHtjaznTywrlazMwTCisnMaMVmungjhgI/LF5AzhNtpO cOxUIR92uWnEYuZ9jNBh7m91Z19KTaGPQRRiiEXQTChgQobbKntG/6fi6b3YtQXt R1ug7fmPFuXgW9Zou0Z73iZdvQfPvG+XFpDOdE86gxSVm3dIjzB6KjKllfsnFLCc d/V0z/sOpVyXPFzk9x1SSgJSHa8xrHRydc69ewbYjanfFjFGg10TL5N6XTw6S8BI z3Hlm0LHVYW26xFtiuWhJrF4AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdnKzyX FR+5eYxOqm3uY3U/ZKmmMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAlzml5Y8P1wTVaRYiwdFMDh6fWu/YtJj0YHbFlr78MMsCLk7kpgfcUqkvh4u /X4S832O7DpRfUpWiyrfbSPYHfIM6CzcKzxPEr6P+ebB6BZ5Qp6D3IQhzp46q1uW Qcz7/hBFZ//TioF/A/cF7qWuJTcHpMd4nD+PFF5rhRYx6RaV2MhRTOmZHLSMdYp3 nbBGhRieR6S+Ym/visghNf8crMNBBAUgCbZ/wpX/gO/WKxQuuHeHha0WjjnPbus9 h9kJXqxR+9pbt7sbXMdp2P+V0Alh7Jd9UsFKe47uo/dFWN68tyBYRKxipaPne0C3 Zk8hNSIXXwcoEkiPEWc7I1Py8Q== -----END CERTIFICATE-----Generated at Thu Mar 26 05:24:57 2026 by rpki-client