$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft File: cxPr9cAfS3ltkFi6w8ZfVbMFync.mft (raw, json) Hash identifier: rCB/YSNA/A8qjux0SbqVbF05VnyZ87jBIcl1xoG6T+Y= Subject key identifier: D8:FF:CD:17:E0:3A:C3:41:03:3E:26:81:6B:C9:AB:98:A0:05:53:2D Authority key identifier: 73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 Certificate issuer: /CN=A917B04C/serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft Manifest number: 3C Signing time: Thu 23 Jul 2026 10:34:17 +0000 Manifest this update: Thu 23 Jul 2026 10:34:17 +0000 Manifest next update: Thu 30 Jul 2026 10:34:17 +0000 Files and hashes: 1: cxPr9cAfS3ltkFi6w8ZfVbMFync.crl (hash: +7qkVWI/Es7kkjd/iKD16Mw7O2POgxAUTLEuSrqPbKA=) 2: CCC7F1622C2A11F198E8A6989D833773.roa (hash: QSfcVpUWR5oh2AgGQqDoWTBl1dJdxzS4MCnqdX7q4Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B04C, serialNumber=7313EBF5C01F4B796D9058BAC3C65F55B305CA77 Validity Not Before: Jul 23 10:34:17 2026 GMT Not After : Jul 30 10:34:17 2026 GMT Subject: CN=6a61ee29-e5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:cb:ed:a0:1b:81:d7:8d:9c:f6:2a:20:13: a2:1d:05:45:2f:f2:af:0c:6e:8e:f5:27:c3:4b:70: 6b:20:4e:cd:ac:14:4b:fe:ce:a1:d9:2c:59:b7:34: 3b:9a:0d:64:7e:aa:40:76:ec:25:fb:70:cf:19:12: b6:c4:63:e4:dd:d0:73:cd:8d:10:bd:45:08:5e:a5: 1b:8d:5a:6b:1c:4d:7e:c5:0c:d1:24:2f:27:18:1c: 02:a1:a2:e4:42:1d:5c:61:c3:9a:d6:c4:0d:a9:39: 2d:85:19:9e:da:ab:f6:ff:df:10:8b:44:e1:50:76: a1:7e:3b:eb:d0:87:47:04:a2:cc:66:43:26:cc:44: c3:4f:d4:b6:c1:44:48:ad:f0:75:f6:31:49:50:0e: 6e:ae:7a:8c:d7:8b:5c:e4:be:df:b0:24:a4:66:b7: 93:e4:13:51:f9:a7:a0:a8:25:a9:b1:44:cd:ad:a8: e2:ab:c7:c6:ef:36:89:58:8d:9f:3e:9b:80:1c:3e: 89:d2:28:09:46:5e:08:37:e4:44:28:ee:4d:ae:8d: 7e:89:d2:7b:b6:c9:df:02:85:cc:4c:84:6d:bb:f3: 50:65:59:da:93:aa:17:9c:ac:60:1f:36:98:89:fc: 3c:1f:8d:a8:48:cd:40:46:09:41:20:22:68:14:c2: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FF:CD:17:E0:3A:C3:41:03:3E:26:81:6B:C9:AB:98:A0:05:53:2D X509v3 Authority Key Identifier: keyid:73:13:EB:F5:C0:1F:4B:79:6D:90:58:BA:C3:C6:5F:55:B3:05:CA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxPr9cAfS3ltkFi6w8ZfVbMFync.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/F6041A3C2C2611F19BAFCA1D9C833773/cxPr9cAfS3ltkFi6w8ZfVbMFync.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e0:bf:45:9b:b0:98:f0:c9:45:77:28:5e:57:f3:ab:18:c7: 6b:28:dd:e2:08:76:3d:bf:3f:a1:e0:61:84:02:7a:86:6a:24: 85:52:15:aa:cd:6e:fe:d8:c2:3a:ce:d7:16:8d:78:ab:a0:17: 2f:09:20:ef:80:1f:77:ca:51:25:08:86:74:db:af:5e:c8:e4: 49:d6:6c:4b:a1:b3:0b:ae:20:83:0d:1c:00:80:da:98:10:ad: 5a:8d:46:80:81:1b:e0:61:21:7c:fa:29:49:d1:cb:2d:59:e4: b5:e2:2f:2d:82:d8:67:18:bb:c6:0c:df:a2:5c:05:14:53:81: 9f:32:0c:40:7c:d3:76:01:3a:ff:0c:2a:96:84:3a:42:ed:59: cf:84:c8:57:41:47:3f:9b:34:3c:cc:15:4c:33:71:19:d5:78: a3:7c:81:f8:3d:9b:da:4b:ba:32:bf:29:a8:05:86:67:ec:7e: 9b:85:a3:50:48:35:69:ae:b5:65:af:58:3f:30:bf:db:35:6c: 8b:36:ae:b1:05:80:b6:f6:07:79:de:1e:e7:37:07:9a:52:5a: 11:e9:b0:b3:b8:73:42:23:1a:10:46:8f:6d:44:ae:ac:e8:5b: c2:1b:10:f7:c6:41:4e:60:f7:b0:5b:b4:33:2d:91:17:ef:ec: 75:42:64:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjA0QzExMC8GA1UEBRMoNzMxM0VCRjVDMDFGNEI3OTZEOTA1OEJBQzNDNjVGNTVC MzA1Q0E3NzAeFw0yNjA3MjMxMDM0MTdaFw0yNjA3MzAxMDM0MTdaMBgxFjAUBgNV BAMTDTZhNjFlZTI5LWU1ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwZ8vtoBuB142c9iogE6IdBUUv8q8Mbo71J8NLcGsgTs2sFEv+zqHZLFm3NDua DWR+qkB27CX7cM8ZErbEY+Td0HPNjRC9RQhepRuNWmscTX7FDNEkLycYHAKhouRC HVxhw5rWxA2pOS2FGZ7aq/b/3xCLROFQdqF+O+vQh0cEosxmQybMRMNP1LbBREit 8HX2MUlQDm6ueozXi1zkvt+wJKRmt5PkE1H5p6CoJamxRM2tqOKrx8bvNolYjZ8+ m4AcPonSKAlGXgg35EQo7k2ujX6J0nu2yd8ChcxMhG2781BlWdqTqhecrGAfNpiJ /DwfjahIzUBGCUEgImgUwk7vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2P/NF+A6 w0EDPiaBa8mrmKAFUy0wHwYDVR0jBBgwFoAUcxPr9cAfS3ltkFi6w8ZfVbMFyncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMDRDL0Y2MDQxQTNDMkMy NjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNsdGtGaTZ3OFpmVmJNRnlu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hQcjljQWZTM2x0a0ZpNnc4WmZWYk1GeW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MDRDL0Y2MDQxQTNDMkMyNjExRjE5QkFGQ0ExRDlDODMzNzczL2N4UHI5Y0FmUzNs dGtGaTZ3OFpmVmJNRnluYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB24L9Fm7CY8MlFdyheV/OrGMdrKN3iCHY9vz+h4GGEAnqGaiSFUhWqzW7+2MI6 ztcWjXiroBcvCSDvgB93ylElCIZ0269eyORJ1mxLobMLriCDDRwAgNqYEK1ajUaA gRvgYSF8+ilJ0cstWeS14i8tgthnGLvGDN+iXAUUU4GfMgxAfNN2ATr/DCqWhDpC 7VnPhMhXQUc/mzQ8zBVMM3EZ1XijfIH4PZvaS7oyvymoBYZn7H6bhaNQSDVprrVl r1g/ML/bNWyLNq6xBYC29gd53h7nNweaUloR6bCzuHNCIxoQRo9tRK6s6FvCGxD3 xkFOYPewW7QzLZEX7+x1QmSr -----END CERTIFICATE-----Generated at Thu Jul 23 22:47:55 2026 by rpki-client