$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft File: cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json) Hash identifier: J3sEgz6P45vt2x8wnnaBPMxoVUbSLETrDGWplPUyZCg= Subject key identifier: C9:FA:E3:CF:C5:9D:19:52:D1:1C:91:18:D1:6A:BD:09:CA:91:DF:5B Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 Certificate issuer: /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft Manifest number: 0E Signing time: Wed 25 Mar 2026 08:15:59 +0000 Manifest this update: Wed 25 Mar 2026 08:15:58 +0000 Manifest next update: Wed 01 Apr 2026 08:15:58 +0000 Files and hashes: 1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: vAU1nZBgdRIxdDvpl8ln4L8BpQn7l84araPuU8x14r0=) 2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01 Validity Not Before: Mar 25 08:15:58 2026 GMT Not After : Apr 1 08:15:58 2026 GMT Subject: CN=69c399bf-a0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:4b:78:a3:82:7a:88:14:b1:ce:7d:1a:e5: 9a:47:54:bc:b1:35:86:a0:4b:c8:74:47:79:1b:dd: bb:72:96:49:c3:5c:d4:18:d6:0f:28:fe:9e:8b:c3: 60:d1:19:4e:06:cc:84:9b:ff:94:f7:7c:1f:41:1f: 0f:39:b4:7c:4b:39:eb:09:b2:6b:ff:f4:dd:c4:f0: 5e:62:15:39:cb:11:f0:b2:7b:2b:5d:e4:e6:b0:8b: e2:7c:4d:c7:32:98:45:d1:83:92:93:62:88:9d:83: 88:84:14:13:f1:fa:e8:4b:2b:72:9f:6b:41:b2:f2: 16:cd:ae:c2:32:bc:4a:fb:30:f4:70:ec:b7:ff:c3: 4d:ba:46:fb:35:74:2c:1e:26:81:c1:b4:57:08:13: 35:3a:55:45:29:fa:a0:5d:ef:14:d3:0f:49:97:c8: 5d:ad:69:60:e1:f1:43:50:fa:7e:4e:69:4f:b2:8e: 57:23:e6:0d:e7:71:69:1a:61:8c:56:da:0e:62:76: c4:71:fa:cd:da:93:81:40:c5:30:db:50:c6:42:35: 4c:71:d9:9e:db:6b:66:be:03:c1:98:58:15:41:bc: 06:2e:72:04:90:41:6a:dd:41:ed:5b:54:2f:c4:fc: 17:21:4c:92:5e:c2:20:ab:a0:de:bc:9a:25:9e:de: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FA:E3:CF:C5:9D:19:52:D1:1C:91:18:D1:6A:BD:09:CA:91:DF:5B X509v3 Authority Key Identifier: keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:03:91:b6:6e:66:64:41:7b:8a:00:35:03:65:8d:4d:eb: 6b:0b:39:71:28:ba:df:aa:ee:83:24:42:d1:c3:44:58:84:34: 2f:45:0f:af:e5:f2:72:80:af:4d:ee:ac:58:ba:a1:11:15:88: da:02:d2:3b:bf:41:31:41:72:93:b6:bb:7a:01:ba:1e:3b:4b: 9b:f7:6e:3f:46:99:4f:83:b7:62:a3:e3:01:47:5b:d9:0b:57: 33:55:6d:1e:13:55:f4:39:1a:30:6b:f3:66:af:66:dc:55:70: ac:fe:cb:3d:f2:47:fb:5c:5c:2e:8a:c8:31:b0:bd:f1:e4:34: 7e:80:8f:03:33:e5:d3:68:0e:88:b6:42:76:70:13:d2:71:19: 81:c3:cd:21:f7:89:01:9c:6f:05:84:c4:dd:bb:50:10:66:c4: 28:53:85:e7:18:f3:a9:c9:f7:30:7a:c9:88:56:71:30:61:b3: 7c:54:f8:0e:a6:74:17:81:80:cd:30:4d:02:48:93:b0:57:a0: 0a:0d:84:c2:a8:d9:f0:12:b3:d3:ef:89:8a:9e:67:89:37:0b: fe:04:12:c5:ff:5a:cb:f3:20:e1:d6:77:9f:29:51:86:1c:34: 2c:27:1b:08:6c:51:a4:39:fd:98:65:6e:0d:d9:04:71:47:79: 60:fd:65:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzdCOTExMC8GA1UEBRMoNzMxMEVGQUQ3RjI4QTY3RjE0MTQxOEM5QjExMDY5NTBC MUYxOUQwMTAeFw0yNjAzMjUwODE1NThaFw0yNjA0MDEwODE1NThaMBgxFjAUBgNV BAMTDTY5YzM5OWJmLWEwYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY9Ut4o4J6iBSxzn0a5ZpHVLyxNYagS8h0R3kb3btylknDXNQY1g8o/p6Lw2DR GU4GzISb/5T3fB9BHw85tHxLOesJsmv/9N3E8F5iFTnLEfCyeytd5Oawi+J8Tccy mEXRg5KTYoidg4iEFBPx+uhLK3Kfa0Gy8hbNrsIyvEr7MPRw7Lf/w026Rvs1dCwe JoHBtFcIEzU6VUUp+qBd7xTTD0mXyF2taWDh8UNQ+n5OaU+yjlcj5g3ncWkaYYxW 2g5idsRx+s3ak4FAxTDbUMZCNUxx2Z7ba2a+A8GYWBVBvAYucgSQQWrdQe1bVC/E /BchTJJewiCroN68miWe3kYZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyfrjz8Wd GVLRHJEY0Wq9CcqR31swHwYDVR0jBBgwFoAUcxDvrX8opn8UFBjJsRBpULHxnQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDN0I5LzdBMzUxOUU4MTVG NTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44VUZCakpzUkJwVUxIeG5R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hEdnJYOG9wbjhVRkJqSnNSQnBVTEh4blFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD N0I5LzdBMzUxOUU4MTVGNTExRjFBQ0I4MURERDIxM0Q4QzY3L2N4RHZyWDhvcG44 VUZCakpzUkJwVUxIeG5RRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqOQORtm5mZEF7igA1A2WNTetrCzlxKLrfqu6DJELRw0RYhDQvRQ+v5fJygK9N 7qxYuqERFYjaAtI7v0ExQXKTtrt6AboeO0ub924/RplPg7dio+MBR1vZC1czVW0e E1X0ORowa/Nmr2bcVXCs/ss98kf7XFwuisgxsL3x5DR+gI8DM+XTaA6ItkJ2cBPS cRmBw80h94kBnG8FhMTdu1AQZsQoU4XnGPOpyfcwesmIVnEwYbN8VPgOpnQXgYDN ME0CSJOwV6AKDYTCqNnwErPT74mKnmeJNwv+BBLF/1rL8yDh1nefKVGGHDQsJxsI bFGkOf2YZW4N2QRxR3lg/WVy -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:44 2026 by rpki-client