$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: VpSjXbFROgtyIN1isgZLykfKMfxD2zrDsHUWcUdb++U= Subject key identifier: 4A:01:F3:FD:9A:22:17:06:5D:D8:7D:D7:52:75:5B:2B:6C:EC:BB:28 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 3585 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 3559 Signing time: Tue 12 May 2026 14:16:50 +0000 Manifest this update: Tue 12 May 2026 14:16:50 +0000 Manifest next update: Tue 19 May 2026 14:16:50 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: 5fgQ7cgrvrthSAhaJBQMuOIL5AEwKdBFpta6fo0Afls=) 2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=) 3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13701 (0x3585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: May 12 14:16:50 2026 GMT Not After : May 19 14:16:50 2026 GMT Subject: CN=6a033652-c343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:d6:88:0d:a7:66:ce:ea:a2:65:e2:b0:3f: a5:a8:55:5f:9f:da:b7:bf:a4:95:74:45:e9:9b:91: eb:43:74:81:53:0f:dd:0b:cb:c1:9d:d8:56:fc:17: 6d:39:04:71:b3:a7:24:8a:3d:41:e7:f3:49:9a:f8: 3e:4a:56:cb:af:5c:97:be:fc:99:54:74:4d:14:71: 67:6b:45:5f:19:0f:56:10:61:80:ea:c5:67:5c:a6: bf:50:b5:8a:91:f8:c1:b4:11:fa:4b:64:79:e1:71: f2:fe:19:d7:e4:9f:ae:20:b2:32:15:a3:cf:9a:65: 67:85:a7:51:05:f9:f7:36:6f:86:78:55:62:b4:db: 3e:f7:4f:d1:74:e7:95:60:f0:bf:3e:83:7c:d3:5b: 7b:6b:f2:28:6e:0f:f5:4e:05:f2:ec:39:a4:82:8f: 16:5f:09:96:0d:7c:5d:e7:bc:29:df:e4:e4:27:43: a6:c6:de:1b:d9:0e:de:4c:4c:f3:da:32:6b:8f:f0: 2d:ad:b6:69:db:c6:56:8c:32:cb:71:e9:d0:b3:b5: 62:01:48:30:ab:dc:c8:40:c0:3b:e8:95:f1:7e:a5: 7b:49:66:12:0b:f6:64:53:46:0d:2a:4a:b1:0d:73: 3f:ab:de:a5:36:14:26:28:96:ca:8b:0a:03:a5:d6: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:01:F3:FD:9A:22:17:06:5D:D8:7D:D7:52:75:5B:2B:6C:EC:BB:28 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:45:02:9f:3e:f5:a4:ce:c8:0c:99:ce:76:40:12:c8:78:55: c4:b2:61:94:13:cd:6b:e1:b9:34:98:eb:dd:3c:41:fe:ec:12: 9c:34:5b:29:f9:44:ce:69:71:b1:6b:7b:54:a9:be:04:99:18: 11:ec:e0:18:9a:74:18:24:9b:10:25:9a:70:b5:8d:8b:86:9a: 48:44:08:88:eb:de:0c:70:0a:ad:86:a1:cb:53:40:c6:82:2b: 7c:11:ce:6c:42:20:94:c0:40:cf:af:83:d8:c6:d3:4b:66:37: fe:53:a2:54:d9:97:2a:de:07:e8:79:1a:36:4c:96:58:45:10: 72:97:b5:c8:61:02:1f:b6:01:36:22:90:1f:d8:56:b9:4b:ae: 9e:33:3a:a4:9d:a8:9b:34:4b:61:68:49:7d:4f:2d:cf:8d:11: 8a:bc:5f:de:a4:6c:14:37:fe:45:b0:9f:bf:e4:db:34:9a:c6: fc:2f:0b:8e:12:d4:b4:66:c4:02:bb:37:a9:8d:e5:e6:1d:c5: 57:72:64:d7:c4:cb:1d:0f:7e:82:9d:ec:7d:20:06:54:e9:2a: 1c:f2:b6:f7:39:72:43:e7:80:2e:bf:28:99:c6:e2:94:60:d3: 18:e1:34:22:cb:f4:da:44:bd:7d:67:8e:57:ef:4e:36:76:0e: e9:0f:15:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjYwNTEyMTQxNjUwWhcNMjYwNTE5MTQxNjUwWjAYMRYwFAYD VQQDEw02YTAzMzY1Mi1jMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6TWiA2nZs7qomXisD+lqFVfn9q3v6SVdEXpm5HrQ3SBUw/dC8vBndhW/Bdt OQRxs6ckij1B5/NJmvg+SlbLr1yXvvyZVHRNFHFna0VfGQ9WEGGA6sVnXKa/ULWK kfjBtBH6S2R54XHy/hnX5J+uILIyFaPPmmVnhadRBfn3Nm+GeFVitNs+90/RdOeV YPC/PoN801t7a/Iobg/1TgXy7Dmkgo8WXwmWDXxd57wp3+TkJ0Omxt4b2Q7eTEzz 2jJrj/AtrbZp28ZWjDLLcenQs7ViAUgwq9zIQMA76JXxfqV7SWYSC/ZkU0YNKkqx DXM/q96lNhQmKJbKiwoDpdY44QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoB8/2a IhcGXdh911J1Wyts7LsoMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgUUCnz71pM7IDJnOdkASyHhVxLJhlBPNa+G5NJjr3TxB/uwSnDRbKflEzmlx sWt7VKm+BJkYEezgGJp0GCSbECWacLWNi4aaSEQIiOveDHAKrYahy1NAxoIrfBHO bEIglMBAz6+D2MbTS2Y3/lOiVNmXKt4H6HkaNkyWWEUQcpe1yGECH7YBNiKQH9hW uUuunjM6pJ2omzRLYWhJfU8tz40Rirxf3qRsFDf+RbCfv+TbNJrG/C8LjhLUtGbE Ars3qY3l5h3FV3Jk18TLHQ9+gp3sfSAGVOkqHPK29zlyQ+eALr8omcbilGDTGOE0 Isv02kS9fWeOV+9ONnYO6Q8VoA== -----END CERTIFICATE-----Generated at Wed May 13 12:33:39 2026 by rpki-client