$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft File: x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft (raw, json) Hash identifier: um/AehaL6c/lPDHSh0pD9dMReVLA+8RB0cfIE4x95yo= Subject key identifier: 2F:48:1A:6F:CB:BB:8D:37:6B:D1:9F:9C:CA:D1:2C:26:7A:00:94:5B Authority key identifier: C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11 Certificate issuer: /CN=A917CD13/serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft Manifest number: 21 Signing time: Wed 23 Sep 2026 08:36:45 +0000 Manifest this update: Wed 23 Sep 2026 08:36:45 +0000 Manifest next update: Wed 30 Sep 2026 08:36:45 +0000 Files and hashes: 1: x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl (hash: cucohFCtqf7YPRd+vbqKh44PUk9rYmV7pDD83MbFnWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD13, serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11 Validity Not Before: Sep 23 08:36:45 2026 GMT Not After : Sep 30 08:36:45 2026 GMT Subject: CN=6ab38f9d-5890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:4f:36:ad:4c:51:7d:d8:51:eb:89:a0:5b: 5f:6c:55:57:ec:c7:3e:fb:71:88:e0:ad:ab:cb:95: b6:5e:0d:cb:9f:a0:76:a1:5b:eb:45:40:e5:d4:9b: fc:98:1d:c8:b7:a7:7c:de:2c:cd:b1:e8:4e:5d:85: 1f:4a:0a:94:88:85:fc:d9:30:be:43:bb:42:17:67: f6:88:cc:cf:14:27:48:c5:14:a4:00:c1:6a:68:18: 86:2a:4e:14:9b:0a:b4:80:9b:cb:21:9b:79:01:ba: a2:6f:35:4a:f4:bd:06:bd:21:c2:e2:58:ac:22:d2: 2b:27:c6:98:88:8e:61:95:29:1e:03:3c:2e:a5:39: 60:7b:74:16:9c:a3:49:e7:5b:6a:9b:d5:1c:41:78: 52:6b:82:2d:ee:48:e4:b1:9e:8c:c9:6a:de:a0:f3: 3a:ce:f3:4e:7c:d0:33:8f:7b:d1:9c:a0:09:a8:aa: 86:b0:82:b9:dc:66:52:a6:45:16:e8:d9:09:ca:ea: c6:d1:e1:64:1b:9c:20:e3:b1:98:d9:6e:36:10:1c: 4a:11:f4:27:95:0f:fd:a6:7a:62:e8:c4:21:ad:bf: bf:51:cb:f2:98:01:e8:e6:c4:e2:ee:8b:c0:6a:78: 0e:ab:29:cd:68:c8:da:65:8b:60:1f:04:0b:5f:b2: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:48:1A:6F:CB:BB:8D:37:6B:D1:9F:9C:CA:D1:2C:26:7A:00:94:5B X509v3 Authority Key Identifier: keyid:C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d1:e1:21:cd:ff:b1:11:17:47:b9:39:56:74:50:53:23:f3: 86:b4:81:9b:16:ce:37:11:f9:47:4c:f2:ab:ec:0b:4d:16:cd: e6:0c:10:1a:c9:46:68:ab:4c:62:38:51:98:e0:80:bb:1a:0d: 43:a6:b1:82:f9:61:8a:38:0c:e8:2b:60:3b:e3:38:b3:07:91: d5:0e:ce:b4:a3:49:3b:fe:16:e1:af:a2:91:e0:ab:0d:38:80: cb:75:30:5f:4b:20:14:ff:7f:b3:03:fc:5b:22:5a:8a:ca:91: b7:92:13:2b:e7:d5:62:51:e2:bc:eb:39:21:d3:9a:5f:b6:f8: 7b:b8:82:70:2a:30:db:1e:69:55:20:19:da:32:40:dc:93:87: 94:1b:28:b3:95:a0:9f:6f:bc:51:a5:cf:d0:a3:f3:5c:4e:02: e9:a4:a3:8c:df:8c:ab:5f:71:f5:fb:78:2f:94:87:89:36:8f: ad:40:82:55:37:51:ee:14:b2:34:64:41:65:a6:28:3f:9e:b1: 1f:f2:92:84:4b:b4:43:46:37:1f:a1:49:ba:1a:4f:1d:b6:81: 95:32:dd:dd:81:0d:ab:a4:6a:bf:51:c9:ea:34:52:f3:30:68: a7:ca:32:cb:ab:09:72:72:97:3b:5d:bc:d9:b6:5d:c0:bb:a5: ad:6f:9e:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Q0QxMzExMC8GA1UEBRMoQzdFN0RGOUQ4MDk3RjFFNDc0RTcyRTgzQzkxMzEzRTE5 QzVCNUMxMTAeFw0yNjA5MjMwODM2NDVaFw0yNjA5MzAwODM2NDVaMBgxFjAUBgNV BAMTDTZhYjM4ZjlkLTU4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz9U82rUxRfdhR64mgW19sVVfsxz77cYjgravLlbZeDcufoHahW+tFQOXUm/yY Hci3p3zeLM2x6E5dhR9KCpSIhfzZML5Du0IXZ/aIzM8UJ0jFFKQAwWpoGIYqThSb CrSAm8shm3kBuqJvNUr0vQa9IcLiWKwi0isnxpiIjmGVKR4DPC6lOWB7dBaco0nn W2qb1RxBeFJrgi3uSOSxnozJat6g8zrO80580DOPe9GcoAmoqoawgrncZlKmRRbo 2QnK6sbR4WQbnCDjsZjZbjYQHEoR9CeVD/2memLoxCGtv79Ry/KYAejmxOLui8Bq eA6rKc1oyNpli2AfBAtfsrJ3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL0gab8u7 jTdr0Z+cytEsJnoAlFswHwYDVR0jBBgwFoAUx+ffnYCX8eR05y6DyRMT4ZxbXBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDRDEzL0NEQzUwMTY2ODk3 NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVSMDV5NkR5Uk1UNFp4YlhC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveC1mZm5ZQ1g4ZVIwNXk2RHlSTVQ0WnhiWEJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD RDEzL0NEQzUwMTY2ODk3NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVS MDV5NkR5Uk1UNFp4YlhCRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAU0eEhzf+xERdHuTlWdFBTI/OGtIGbFs43EflHTPKr7AtNFs3mDBAayUZoq0xi OFGY4IC7Gg1DprGC+WGKOAzoK2A74zizB5HVDs60o0k7/hbhr6KR4KsNOIDLdTBf SyAU/3+zA/xbIlqKypG3khMr59ViUeK86zkh05pftvh7uIJwKjDbHmlVIBnaMkDc k4eUGyizlaCfb7xRpc/Qo/NcTgLppKOM34yrX3H1+3gvlIeJNo+tQIJVN1HuFLI0 ZEFlpig/nrEf8pKES7RDRjcfoUm6Gk8dtoGVMt3dgQ2rpGq/UcnqNFLzMGinyjLL qwlycpc7XbzZtl3Au6Wtb56Z -----END CERTIFICATE-----Generated at Thu Sep 24 10:44:26 2026 by rpki-client