$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: 5cMpGjMZ5MU8anPc9gU569YZ3YBRjegUW29s7pLxY00= Subject key identifier: D2:68:59:15:D5:86:A1:8F:F6:CA:45:76:45:0B:C3:2C:0E:42:A1:C7 Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 0234 Signing time: Thu 21 May 2026 02:41:54 +0000 Manifest this update: Thu 21 May 2026 02:41:54 +0000 Manifest next update: Thu 28 May 2026 02:41:54 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: LYBcROkOnVzqmhkRiUxf4NrplODeK+Dl0Ou5ETxwb9c=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: S7EFe1sgFH61v/a81YrHbtFivxIl1XM26yAjrHoTBik=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: RwcLbhPNncbctra9BJj47907e1FtaKD2ImyIJgGExWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: May 21 02:41:54 2026 GMT Not After : May 28 02:41:54 2026 GMT Subject: CN=6a0e70f2-cc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:bc:a9:b6:a1:12:99:cc:a7:ca:c0:05:b2: 85:ad:96:c9:e4:bc:fe:c6:b3:44:9a:28:57:f2:45: 89:72:ec:20:d3:26:a2:f6:0b:02:9a:cd:cd:dc:8e: 1c:76:55:87:d9:2f:b1:0e:88:a5:57:e6:f5:49:00: 07:12:37:a2:a3:86:9b:d2:9a:ab:35:c9:d7:19:3a: 8f:3d:e1:d5:a0:2c:a9:fe:05:33:55:3c:58:9d:6f: f9:2f:41:bf:ce:00:f3:c8:e6:1e:ae:f6:b8:c0:23: c5:b1:5b:19:ec:c1:c8:bf:5e:69:f9:95:b7:b4:79: 19:30:e9:df:9f:a9:d2:1b:74:75:c3:0e:d6:9f:60: b7:c3:d9:fc:3c:5a:1c:b7:44:21:d1:6c:d1:30:5b: 26:e9:40:9d:5b:f0:4a:c4:d3:be:35:b3:aa:8b:f1: 4e:d2:47:fb:59:43:18:77:e4:fb:03:ba:f2:a1:d1: d3:f6:37:df:12:df:2a:5e:17:5f:6b:3d:7d:27:47: 44:e8:38:04:b2:51:a5:91:74:c6:dc:d0:14:c7:33: 94:ae:4b:b0:63:4a:6f:53:ff:f0:55:3d:a5:69:cb: 2f:08:6c:2c:6e:a5:4d:6c:19:c0:10:cb:a4:e9:01: e8:9f:0d:9f:ca:bd:a2:f2:e9:89:7f:2e:f6:19:77: 82:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:59:15:D5:86:A1:8F:F6:CA:45:76:45:0B:C3:2C:0E:42:A1:C7 X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:53:d8:3e:35:d3:53:b6:87:bd:a4:7f:cb:f7:d8:34:41:2a: 4e:f4:ae:0e:cf:61:07:c9:7d:76:47:04:5f:3f:6e:84:e3:b5: ce:59:02:e1:3f:56:3f:fe:64:2d:9e:17:6f:e0:e8:47:b5:22: 1b:66:28:8d:a5:0d:04:e8:37:74:b7:64:53:27:05:67:60:ff: 4e:0b:ea:f0:47:85:bb:5e:57:29:ec:98:ed:df:c7:95:ef:93: 28:10:c2:e0:bc:da:9d:af:d2:7d:20:6c:c3:d4:ef:b4:65:1c: 4c:d5:18:f2:64:7a:b9:e9:f3:c4:bb:32:87:a4:70:56:1a:ef: 72:f3:cf:41:ee:d6:cf:b1:4f:14:19:72:65:90:31:aa:21:78: db:a7:d7:e7:b5:26:97:9d:08:0b:91:c8:aa:85:e2:f4:68:4c: ce:78:2d:11:e6:c9:c8:fb:3b:62:1b:b6:e1:76:a3:10:b1:78: 41:32:f8:ec:29:b8:90:ee:6e:54:f7:6a:a7:80:4c:9d:6c:ea: fc:04:c0:f6:c8:00:4a:6b:6d:9e:a7:00:f8:9c:58:ff:ee:b6: 15:e2:dd:a3:4f:4c:ee:c9:bb:6a:42:6a:b6:6f:55:02:8e:6a: e3:b8:8f:35:4c:26:b3:12:98:37:42:7b:ec:82:e3:73:c1:d7: 5b:3b:de:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjYwNTIxMDI0MTU0WhcNMjYwNTI4MDI0MTU0WjAYMRYwFAYD VQQDEw02YTBlNzBmMi1jYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgK8qbahEpnMp8rABbKFrZbJ5Lz+xrNEmihX8kWJcuwg0yai9gsCms3N3I4c dlWH2S+xDoilV+b1SQAHEjeio4ab0pqrNcnXGTqPPeHVoCyp/gUzVTxYnW/5L0G/ zgDzyOYerva4wCPFsVsZ7MHIv15p+ZW3tHkZMOnfn6nSG3R1ww7Wn2C3w9n8PFoc t0Qh0WzRMFsm6UCdW/BKxNO+NbOqi/FO0kf7WUMYd+T7A7ryodHT9jffEt8qXhdf az19J0dE6DgEslGlkXTG3NAUxzOUrkuwY0pvU//wVT2lacsvCGwsbqVNbBnAEMuk 6QHonw2fyr2i8umJfy72GXeCRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJoWRXV hqGP9spFdkULwywOQqHHMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASFPYPjXTU7aHvaR/y/fYNEEqTvSuDs9hB8l9dkcEXz9uhOO1zlkC4T9WP/5k LZ4Xb+DoR7UiG2YojaUNBOg3dLdkUycFZ2D/Tgvq8EeFu15XKeyY7d/Hle+TKBDC 4Lzana/SfSBsw9TvtGUcTNUY8mR6uenzxLsyh6RwVhrvcvPPQe7Wz7FPFBlyZZAx qiF426fX57Uml50IC5HIqoXi9GhMzngtEebJyPs7Yhu24XajELF4QTL47Cm4kO5u VPdqp4BMnWzq/ATA9sgASmttnqcA+JxY/+62FeLdo09M7sm7akJqtm9VAo5q47iP NUwmsxKYN0J77ILjc8HXWzvekA== -----END CERTIFICATE-----Generated at Thu May 21 10:29:34 2026 by rpki-client