$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: o/jeyHOcvsYpPujNTiYknWpEWZ778XEZLJsqfagICWM= Subject key identifier: A5:2A:61:2F:48:A0:6E:C1:7F:2A:0A:3C:1D:0C:A8:93:B3:E1:2E:23 Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 26 Signing time: Mon 11 May 2026 08:58:20 +0000 Manifest this update: Mon 11 May 2026 08:58:19 +0000 Manifest next update: Mon 18 May 2026 08:58:19 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: 9c/Hci96N2TxEydAlm/ydMajVOy0hfRHDANNKJRU8Dg=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: May 11 08:58:19 2026 GMT Not After : May 18 08:58:19 2026 GMT Subject: CN=6a019a2c-5f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:b5:d4:0f:65:7a:d9:b5:fe:07:8e:9b:8e: 5d:f7:8e:21:28:9a:62:00:17:3d:38:4d:8f:01:d6: ec:b8:2e:75:fa:e2:aa:44:75:73:af:5a:95:8c:3f: f3:12:94:ca:9d:b0:3d:e9:0d:7b:e2:b3:b7:59:a3: e2:35:05:c3:12:d8:6c:fd:13:33:ad:94:cf:0e:25: c4:cc:87:31:0a:21:ff:45:ae:ab:5b:72:66:aa:5e: 64:47:bf:56:96:7f:8a:9b:36:78:08:bc:c1:1b:4c: e8:8e:f0:4d:8a:94:5d:db:33:e5:ba:5c:9d:05:f8: 94:4f:a9:90:b3:2b:f5:cb:0f:ee:96:68:58:53:7a: fc:3e:65:c4:67:5f:06:2f:68:2a:bd:8f:be:b2:f5: 3c:da:61:99:99:ad:b3:9d:95:b0:e1:c8:98:e6:8d: 2c:22:fc:fc:41:23:79:3f:1c:f4:5b:ff:a9:f1:5d: b0:fa:c1:80:5c:3c:b4:40:30:ed:07:32:0b:ab:4a: e7:d2:7f:3f:91:53:4f:f6:3a:cd:3e:dd:40:a5:27: ac:f7:70:19:51:2e:03:32:ef:b2:cb:44:79:5e:73: 0f:ba:17:79:a5:8e:ba:a1:27:1d:39:bb:41:af:25: 66:02:91:ac:a3:03:5a:de:45:85:48:24:b9:8d:c3: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:61:2F:48:A0:6E:C1:7F:2A:0A:3C:1D:0C:A8:93:B3:E1:2E:23 X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:57:1b:dd:84:f3:70:21:8c:5e:3d:fb:aa:6b:cd:e8:b5:39: 67:e1:62:97:a6:dc:9f:77:9d:45:03:d9:64:a1:dd:1d:bb:8b: f1:96:9f:67:a0:44:0f:d5:83:a1:0e:2d:41:cf:ee:e2:7e:6e: b6:94:f8:75:f2:b2:aa:6b:3c:dd:27:4c:09:c9:22:b5:bf:b0: 69:97:d4:d2:06:50:27:bc:1d:08:03:b0:ef:26:cb:6b:b2:8d: cb:cb:82:bc:45:60:86:b8:de:3c:2d:38:09:f1:24:f7:64:ed: 2e:d4:5c:85:d5:bf:61:c0:46:ff:b1:73:e6:3f:0f:b4:95:5b: 01:96:60:16:27:7a:f2:7c:fa:eb:01:b9:78:53:0f:7d:5f:5b: 04:7e:78:fd:94:1b:a3:23:79:35:4f:37:5b:05:00:76:f8:19: 20:7b:62:8a:7e:bc:3f:02:7b:55:87:0e:46:38:fa:3e:80:8a: 01:80:72:1e:9c:30:f3:e0:91:e5:0c:ad:89:4e:2f:77:ca:4f: 95:a5:7e:2d:36:56:cc:42:2c:47:b9:b8:ab:db:cc:d8:4d:59: c1:34:ad:ea:f2:a2:f1:29:db:70:ff:75:39:aa:6a:ac:7d:d8: b7:d3:7b:44:29:7f:c2:62:7c:6e:83:98:4c:b3:33:ce:9f:95: c0:f9:7c:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjA1MTEwODU4MTlaFw0yNjA1MTgwODU4MTlaMBgxFjAUBgNV BAMTDTZhMDE5YTJjLTVmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsQrXUD2V62bX+B46bjl33jiEommIAFz04TY8B1uy4LnX64qpEdXOvWpWMP/MS lMqdsD3pDXvis7dZo+I1BcMS2Gz9EzOtlM8OJcTMhzEKIf9FrqtbcmaqXmRHv1aW f4qbNngIvMEbTOiO8E2KlF3bM+W6XJ0F+JRPqZCzK/XLD+6WaFhTevw+ZcRnXwYv aCq9j76y9TzaYZmZrbOdlbDhyJjmjSwi/PxBI3k/HPRb/6nxXbD6wYBcPLRAMO0H MgurSufSfz+RU0/2Os0+3UClJ6z3cBlRLgMy77LLRHlecw+6F3mljrqhJx05u0Gv JWYCkayjA1reRYVIJLmNw4+7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpSphL0ig bsF/Kgo8HQyok7PhLiMwHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFVxvdhPNwIYxePfuqa83otTln4WKXptyfd51FA9lkod0du4vxlp9noEQP1YOh Di1Bz+7ifm62lPh18rKqazzdJ0wJySK1v7Bpl9TSBlAnvB0IA7DvJstrso3Ly4K8 RWCGuN48LTgJ8ST3ZO0u1FyF1b9hwEb/sXPmPw+0lVsBlmAWJ3ryfPrrAbl4Uw99 X1sEfnj9lBujI3k1TzdbBQB2+Bkge2KKfrw/AntVhw5GOPo+gIoBgHIenDDz4JHl DK2JTi93yk+VpX4tNlbMQixHubir28zYTVnBNK3q8qLxKdtw/3U5qmqsfdi303tE KX/CYnxug5hMszPOn5XA+Xxv -----END CERTIFICATE-----Generated at Wed May 13 04:38:23 2026 by rpki-client