$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: XndnY83jV6IUk12faxRrJwBKB4mQNWYD8a/+WBjxpls= Subject key identifier: C5:80:69:8A:F5:E7:56:FB:19:85:4E:EE:6B:5C:47:12:60:A1:6F:BF Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 4A Signing time: Thu 23 Jul 2026 10:20:36 +0000 Manifest this update: Thu 23 Jul 2026 10:20:36 +0000 Manifest next update: Thu 30 Jul 2026 10:20:36 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: X2ctnDRjchKY4Y9wUzHVHkOs7cFO7ygEt9EDV08EfSM=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Jul 23 10:20:36 2026 GMT Not After : Jul 30 10:20:36 2026 GMT Subject: CN=6a61eaf4-3305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:9f:a9:1b:f7:be:e8:0c:93:04:b4:ea:58: d7:8c:31:0c:06:77:c2:fa:69:fc:bf:62:e4:6c:87: 2e:36:a6:ca:d3:05:f9:28:94:c4:10:b2:a6:b5:e1: b0:76:32:fd:de:95:57:ad:18:36:b0:39:8c:b7:8d: 7a:c0:c8:1f:d5:1a:ad:6b:ee:d3:71:c5:fe:11:a6: ca:65:8b:58:8e:b9:03:ac:64:1e:40:36:5f:3f:35: 45:4d:60:99:2c:14:b4:6d:b8:4d:5d:5c:b7:f7:70: 11:88:7e:4b:65:5d:91:52:5a:48:51:94:0d:3e:12: e4:e5:cc:9d:e8:88:93:8f:15:e0:af:4d:30:03:4d: 73:0b:ce:2f:15:b5:23:6d:fb:71:cb:72:73:e4:56: 0e:c9:ac:e5:bd:1c:a8:da:44:51:98:33:e6:63:c4: 2f:bd:26:13:6c:08:77:69:66:06:db:44:15:42:dd: 2b:4f:5d:ea:af:e9:d7:51:a3:c9:42:bd:c8:1a:47: eb:ae:f2:9a:70:60:57:a7:d3:c8:5b:60:37:5b:fe: 66:53:0a:af:2f:4a:5a:6a:19:8d:c8:12:e1:84:97: 69:6a:58:dd:ed:1e:c9:4f:09:b7:7f:15:70:ea:d5: 0f:1f:2d:6e:07:0d:97:1e:aa:04:7b:56:c2:8a:b3: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:80:69:8A:F5:E7:56:FB:19:85:4E:EE:6B:5C:47:12:60:A1:6F:BF X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:40:17:9e:61:77:39:6a:b4:32:42:64:23:79:2c:aa:ab:b4: af:2d:1d:6a:79:d5:8d:e8:8b:d2:58:1e:17:b7:ed:f2:d1:a7: 8c:32:20:c4:98:44:e9:00:d2:b7:58:81:54:44:5a:8d:8c:56: e2:35:2d:e3:de:35:10:c1:23:75:6c:0a:8e:3c:6f:45:b3:77: da:ca:7e:b1:06:64:e7:1c:7d:c6:81:f2:77:97:95:14:84:d4: 2a:ff:5f:25:cb:19:f0:17:fd:6b:ca:88:0e:0a:75:3b:34:f6: f0:1b:10:12:8a:91:40:00:62:9d:2e:22:01:5e:c0:82:dc:ae: fc:71:32:8c:ab:ba:68:48:f0:ca:8b:d9:f9:61:1c:2a:00:8c: 5b:73:05:39:10:4a:05:f0:d1:f1:f6:5d:22:75:7a:1d:37:f7: 11:a3:15:1f:77:59:83:00:a1:5a:92:ed:77:1a:e3:b6:b6:58: 62:7d:50:6a:40:4b:05:c5:2f:61:eb:80:69:2d:7e:59:43:cf: e5:37:85:2e:24:b2:cf:7d:a9:78:f9:de:0f:82:d4:13:a3:ed: d7:e1:78:90:fa:2a:08:27:df:db:51:b8:59:eb:0f:b9:0a:18: df:e9:71:3c:f3:ba:22:cf:cd:0e:d8:a3:98:85:0d:04:9e:7a: fe:b2:f6:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjA3MjMxMDIwMzZaFw0yNjA3MzAxMDIwMzZaMBgxFjAUBgNV BAMTDTZhNjFlYWY0LTMzMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD95+pG/e+6AyTBLTqWNeMMQwGd8L6afy/YuRshy42psrTBfkolMQQsqa14bB2 Mv3elVetGDawOYy3jXrAyB/VGq1r7tNxxf4Rpspli1iOuQOsZB5ANl8/NUVNYJks FLRtuE1dXLf3cBGIfktlXZFSWkhRlA0+EuTlzJ3oiJOPFeCvTTADTXMLzi8VtSNt +3HLcnPkVg7JrOW9HKjaRFGYM+ZjxC+9JhNsCHdpZgbbRBVC3StPXeqv6ddRo8lC vcgaR+uu8ppwYFen08hbYDdb/mZTCq8vSlpqGY3IEuGEl2lqWN3tHslPCbd/FXDq 1Q8fLW4HDZceqgR7VsKKsyk7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxYBpivXn VvsZhU7ua1xHEmChb78wHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBuQBeeYXc5arQyQmQjeSyqq7SvLR1qedWN6IvSWB4Xt+3y0aeMMiDEmETpANK3 WIFURFqNjFbiNS3j3jUQwSN1bAqOPG9Fs3fayn6xBmTnHH3GgfJ3l5UUhNQq/18l yxnwF/1ryogOCnU7NPbwGxASipFAAGKdLiIBXsCC3K78cTKMq7poSPDKi9n5YRwq AIxbcwU5EEoF8NHx9l0idXodN/cRoxUfd1mDAKFaku13GuO2tlhifVBqQEsFxS9h 64BpLX5ZQ8/lN4UuJLLPfal4+d4PgtQTo+3X4XiQ+ioIJ9/bUbhZ6w+5Chjf6XE8 87oiz80O2KOYhQ0Ennr+svb8 -----END CERTIFICATE-----Generated at Fri Jul 24 04:25:02 2026 by rpki-client