$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: ATJN7lssornSYCFFElIFyKeuxFyiQJ4Sqkgsbfmexjw= Subject key identifier: 8E:0D:12:53:70:E8:37:A0:07:3F:53:0E:59:A3:C4:57:93:CA:78:BC Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 35CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 35A3 Signing time: Sun 04 Oct 2026 14:16:53 +0000 Manifest this update: Sun 04 Oct 2026 14:16:52 +0000 Manifest next update: Sun 11 Oct 2026 14:16:52 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: IlFPUuyojc6veMVH+q6D/naJqhSYvoJetN4EcgyMJ7Q=) 2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=) 3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 14:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13775 (0x35cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Oct 4 14:16:52 2026 GMT Not After : Oct 11 14:16:52 2026 GMT Subject: CN=6ac25fd4-706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:2f:d4:c4:1f:2e:5d:87:1f:74:74:49:e7: 2a:58:89:b2:2d:ff:d6:0f:5f:4f:6e:f3:01:e1:90: 75:27:19:46:81:11:e6:2f:be:e0:bb:2a:a2:63:48: 99:9b:45:f2:07:86:47:7b:df:14:db:a0:d7:af:a1: e4:4c:aa:84:55:37:50:69:cd:f0:57:ca:7f:e7:d5: 25:17:f5:50:a8:f2:d6:39:a1:14:51:1e:3c:34:82: 08:b4:4a:99:eb:44:80:50:5d:eb:ad:c6:fc:24:6e: 10:2f:80:fe:0d:84:9f:da:cd:1d:14:79:67:14:0e: 3c:12:f5:5b:4d:a6:9f:3b:b2:f4:77:04:fa:50:88: c3:a4:93:df:bd:f5:d6:76:e7:85:26:bc:52:d5:9e: c1:95:83:16:49:4a:ca:33:53:62:e2:8b:7f:1d:53: a7:b4:a4:96:27:a3:95:24:24:61:aa:ce:68:bb:9f: b3:62:24:2c:8f:19:70:84:a8:47:74:5b:d6:29:0d: 60:18:01:03:6b:df:50:a3:5f:37:1c:b1:26:3e:be: c3:a4:cb:fb:31:49:ee:93:7c:48:ea:da:42:27:74: 8a:96:12:25:91:ac:f2:8b:94:7c:71:f5:17:b1:a3: 30:33:77:a1:51:14:f6:8e:77:65:eb:c3:29:0e:42: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0D:12:53:70:E8:37:A0:07:3F:53:0E:59:A3:C4:57:93:CA:78:BC X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d0:c6:41:14:2a:99:41:45:da:9d:56:60:51:ad:ac:5b:c1: 02:28:9c:f1:63:17:5f:26:5f:1b:b7:99:f5:5e:2a:56:6c:88: 33:dc:d6:c7:20:5a:b9:54:8d:eb:75:a1:42:5b:80:1b:df:a7: 49:6c:09:04:a2:4a:a6:b3:87:64:e4:73:fc:c7:6e:ca:39:8e: e0:1f:d2:7a:3e:94:23:85:77:f1:ec:c9:ef:1f:d8:2f:fc:a0: 6b:b5:d1:52:87:4a:66:f2:aa:53:a9:5b:2a:c5:8a:87:dd:5d: af:8f:7c:e1:35:b5:49:7f:23:4f:53:89:80:9b:85:b2:63:ae: be:0d:dd:fc:6c:7f:74:4f:7f:3c:e1:4d:ba:10:55:ec:97:2a: d6:eb:69:7b:17:a2:1d:0f:02:5e:50:7a:0c:02:6b:3e:24:d0: 7d:56:29:6b:47:50:64:23:91:87:47:0e:a5:64:27:95:ee:63: f1:4e:8d:c8:e6:09:a8:5f:dc:90:0f:8e:c8:bd:ca:67:89:5b: c8:54:85:6e:69:23:82:ca:37:c0:a9:ad:5d:46:ca:51:32:1d: 67:6e:76:e5:20:8b:95:f1:03:5b:fe:68:db:a9:2b:fc:24:43: 86:de:59:e9:70:3e:7d:41:5f:15:fb:40:3c:04:10:15:3f:13: 19:e3:53:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjYxMDA0MTQxNjUyWhcNMjYxMDExMTQxNjUyWjAYMRYwFAYD VQQDEw02YWMyNWZkNC03MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhY0v1MQfLl2HH3R0SecqWImyLf/WD19PbvMB4ZB1JxlGgRHmL77guyqiY0iZ m0XyB4ZHe98U26DXr6HkTKqEVTdQac3wV8p/59UlF/VQqPLWOaEUUR48NIIItEqZ 60SAUF3rrcb8JG4QL4D+DYSf2s0dFHlnFA48EvVbTaafO7L0dwT6UIjDpJPfvfXW dueFJrxS1Z7BlYMWSUrKM1Ni4ot/HVOntKSWJ6OVJCRhqs5ou5+zYiQsjxlwhKhH dFvWKQ1gGAEDa99Qo183HLEmPr7DpMv7MUnuk3xI6tpCJ3SKlhIlkazyi5R8cfUX saMwM3ehURT2jndl68MpDkJcnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4NElNw 6DegBz9TDlmjxFeTyni8MB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAftDGQRQqmUFF2p1WYFGtrFvBAiic8WMXXyZfG7eZ9V4qVmyIM9zWxyBauVSN 63WhQluAG9+nSWwJBKJKprOHZORz/MduyjmO4B/Sej6UI4V38ezJ7x/YL/yga7XR UodKZvKqU6lbKsWKh91dr4984TW1SX8jT1OJgJuFsmOuvg3d/Gx/dE9/POFNuhBV 7Jcq1utpexeiHQ8CXlB6DAJrPiTQfVYpa0dQZCORh0cOpWQnle5j8U6NyOYJqF/c kA+OyL3KZ4lbyFSFbmkjgso3wKmtXUbKUTIdZ2525SCLlfEDW/5o26kr/CRDht5Z 6XA+fUFfFftAPAQQFT8TGeNTow== -----END CERTIFICATE-----Generated at Tue Oct 6 14:18:45 2026 by rpki-client