$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft File: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft (raw, json) Hash identifier: bgCNSmEXLVu0IVXJiuqnOKAFW+58tYycXJDhaaNDAqU= Subject key identifier: 9C:93:4B:9A:9B:58:28:40:C8:D6:E2:EF:98:6D:AA:20:D1:E0:28:9C Authority key identifier: 0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91 Certificate issuer: /CN=A91201F1/serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft Manifest number: 39 Signing time: Tue 19 May 2026 08:27:27 +0000 Manifest this update: Tue 19 May 2026 08:27:27 +0000 Manifest next update: Tue 26 May 2026 08:27:27 +0000 Files and hashes: 1: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl (hash: PGIOmFlPIQGUNORPqr7tXZ7a7P5OHiEVWIXhiNcETjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201F1, serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791 Validity Not Before: May 19 08:27:27 2026 GMT Not After : May 26 08:27:27 2026 GMT Subject: CN=6a0c1eef-5789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:f2:00:ba:79:2f:61:e3:4c:83:be:2c:ab: 1a:b5:b2:c1:b9:9f:c9:ae:fd:fe:91:b4:0b:3b:94: bf:45:a2:ea:4e:d4:40:ec:42:6b:7a:be:50:77:e0: 8b:43:da:4e:eb:7e:2f:e7:6a:bd:72:2e:76:b5:7a: 31:2f:ba:fa:fe:09:32:db:6e:ea:51:06:94:7e:9a: cd:4e:d0:bd:91:fa:6e:f8:e7:31:f9:c2:8c:7d:00: 8d:b4:59:d1:6b:78:9b:4a:b5:e2:a7:af:96:1f:85: 98:32:48:55:a6:c9:32:5e:11:70:62:c0:ff:0f:18: 5a:b9:62:64:4f:c6:16:dd:ac:e3:78:f0:03:db:a1: 8d:fe:13:dc:5b:ff:2b:f1:e7:e1:c7:9f:75:83:f1: 6d:ba:1f:10:ee:41:13:93:53:3d:5f:c9:d5:fb:fa: 7c:90:a6:c4:bb:8f:69:38:ee:f6:4a:46:a5:fa:7e: 18:1b:34:56:ab:fb:13:d6:c6:aa:f4:73:77:52:68: 45:c4:fd:d3:54:8d:0a:68:e8:77:52:97:54:17:dd: 8c:b3:44:89:be:8c:61:70:58:ae:f3:0e:62:29:c7: f3:54:4b:a4:9d:0f:bb:52:b9:59:55:4a:ff:dc:cc: af:b1:d8:4e:02:a7:38:b6:33:81:67:9d:2c:52:98: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:4B:9A:9B:58:28:40:C8:D6:E2:EF:98:6D:AA:20:D1:E0:28:9C X509v3 Authority Key Identifier: keyid:0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6a:2f:65:2d:bc:a6:5d:3b:76:59:51:4f:aa:1c:73:14:6f: d9:2a:ca:7f:a1:70:f1:b6:a3:5f:5c:62:a2:83:60:7b:73:d5: f5:30:62:89:79:79:d4:d6:1f:55:c1:43:c8:b0:44:35:fa:34: db:c2:57:96:43:94:a4:5d:d1:76:73:a8:a7:81:b1:53:e1:69: b3:ac:3c:c5:6c:41:6e:7f:c8:e8:2d:73:80:6b:b5:12:3f:fd: dc:56:e3:58:8b:c2:52:09:71:f9:da:18:66:dd:f3:4f:2a:9a: 18:e5:8c:d7:40:3d:b6:1f:48:30:41:69:5c:c9:44:cd:41:ea: b2:8b:3f:f8:97:d7:3e:b0:b6:97:0c:bb:46:4b:a7:bb:18:56: ac:ce:a2:88:20:99:3a:2b:26:79:1e:d6:8e:da:b0:01:66:3b: 84:d7:f7:fb:9a:4e:64:6b:02:4b:1d:7e:83:64:21:4b:df:4d: cc:af:33:c0:05:a9:78:35:c6:52:5b:1b:6a:26:ef:81:77:0d: 18:6d:36:3e:98:74:87:59:d3:8c:0e:52:cc:5e:88:f5:b0:5e: 39:96:f7:96:fb:06:d7:a9:9d:f2:b9:24:00:30:77:f6:94:a4: 50:56:2b:b0:61:d7:a0:62:d4:bf:da:03:ff:48:79:cd:a8:a7: 73:7f:a3:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFGMTExMC8GA1UEBRMoMEIxNDEyRUYxMjZCRkQ4RjA4RkQ4NEEyRjYwMjRDODA2 QURCMTc5MTAeFw0yNjA1MTkwODI3MjdaFw0yNjA1MjYwODI3MjdaMBgxFjAUBgNV BAMTDTZhMGMxZWVmLTU3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrDvIAunkvYeNMg74sqxq1ssG5n8mu/f6RtAs7lL9FoupO1EDsQmt6vlB34ItD 2k7rfi/nar1yLna1ejEvuvr+CTLbbupRBpR+ms1O0L2R+m745zH5wox9AI20WdFr eJtKteKnr5YfhZgySFWmyTJeEXBiwP8PGFq5YmRPxhbdrON48APboY3+E9xb/yvx 5+HHn3WD8W26HxDuQROTUz1fydX7+nyQpsS7j2k47vZKRqX6fhgbNFar+xPWxqr0 c3dSaEXE/dNUjQpo6HdSl1QX3YyzRIm+jGFwWK7zDmIpx/NUS6SdD7tSuVlVSv/c zK+x2E4Cpzi2M4FnnSxSmN+XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnJNLmptY KEDI1uLvmG2qINHgKJwwHwYDVR0jBBgwFoAUCxQS7xJr/Y8I/YSi9gJMgGrbF5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUYxLzU4MkFEOTgwMDBE QTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4SV9ZU2k5Z0pNZ0dyYkY1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3hRUzd4SnJfWThJX1lTaTlnSk1nR3JiRjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUYxLzU4MkFEOTgwMDBEQTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4 SV9ZU2k5Z0pNZ0dyYkY1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBgai9lLbymXTt2WVFPqhxzFG/ZKsp/oXDxtqNfXGKig2B7c9X1MGKJeXnU1h9V wUPIsEQ1+jTbwleWQ5SkXdF2c6ingbFT4WmzrDzFbEFuf8joLXOAa7USP/3cVuNY i8JSCXH52hhm3fNPKpoY5YzXQD22H0gwQWlcyUTNQeqyiz/4l9c+sLaXDLtGS6e7 GFaszqKIIJk6KyZ5HtaO2rABZjuE1/f7mk5kawJLHX6DZCFL303MrzPABal4NcZS WxtqJu+Bdw0YbTY+mHSHWdOMDlLMXoj1sF45lveW+wbXqZ3yuSQAMHf2lKRQViuw YdegYtS/2gP/SHnNqKdzf6PB -----END CERTIFICATE-----Generated at Thu May 21 10:20:22 2026 by rpki-client