$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: yHNAAsaCVky4iL6y6sXjKjcuFFBJZCYSUtU5MJwEJpk= Subject key identifier: C7:C4:F3:22:6C:DD:FA:A5:9A:F8:AE:DC:BA:31:A2:02:13:EF:B6:06 Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 08A1 Signing time: Wed 20 May 2026 20:33:45 +0000 Manifest this update: Wed 20 May 2026 20:33:44 +0000 Manifest next update: Wed 27 May 2026 20:33:44 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: MrYHn+3yEgoQk/DUizBEgJhYBEEIvi5nO454fwZ6+ws=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: HgX4tCn4FMdl0R/ylo4Q2his11f507x0EEUUjL+i3vA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: May 20 20:33:44 2026 GMT Not After : May 27 20:33:44 2026 GMT Subject: CN=6a0e1aa9-e4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:e7:04:65:48:c2:79:80:f0:34:be:85:84: dc:cf:3c:c4:42:ac:0e:ee:f8:15:9c:fa:f2:2d:4d: 91:af:bf:4e:71:41:b4:a7:ae:95:44:a8:f8:24:2e: 9c:9b:a3:e1:b4:66:d6:f0:1d:98:75:70:68:57:18: d8:b7:82:c7:2b:1a:b3:fd:a3:91:7b:8e:3f:ac:25: c9:98:22:44:4a:68:7b:43:92:70:92:ef:c8:a3:00: 94:fc:19:8a:13:e4:2a:4d:d9:76:6a:71:f8:ab:02: c3:fe:05:bd:19:bf:91:12:6b:77:a2:b7:e9:84:83: 67:6f:24:95:71:2b:e0:43:69:3f:ec:2d:65:47:e4: 77:05:84:68:71:0c:67:07:06:42:70:a9:cd:e9:2a: 02:f5:00:b4:79:bf:6f:ac:34:cf:1c:77:ec:d5:a0: 6a:6b:bf:f1:ca:da:cb:8c:55:0b:73:b3:75:e6:dc: 86:49:2d:e1:8f:70:25:ee:6d:de:ba:42:3d:7d:4d: 15:fd:16:5a:95:81:0e:95:cb:25:1e:d5:40:32:b8: 58:6a:c4:60:9d:3a:3e:38:53:0d:d6:73:58:b8:93: 56:1a:bc:b1:bf:9d:19:a3:8b:58:14:3f:21:70:5e: 67:70:94:de:a4:57:f3:2a:24:3f:dc:77:70:0e:e3: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C4:F3:22:6C:DD:FA:A5:9A:F8:AE:DC:BA:31:A2:02:13:EF:B6:06 X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:79:2f:1f:a5:0f:e3:44:e5:45:02:59:51:2d:e2:40:a6:0f: 2f:67:5d:f1:b6:0b:bb:66:06:bf:47:28:d9:c9:62:4f:a0:10: 10:82:df:11:25:5f:12:0c:cc:b6:37:25:55:62:9e:6a:4e:ac: 6a:8a:dd:4b:1e:26:00:70:0b:04:90:fb:ef:8f:ba:2b:6c:16: 9b:59:14:b9:03:1f:e3:21:5d:39:9e:16:33:0d:86:7c:f9:e0: 3f:26:01:e9:b6:e0:39:d8:50:6d:c7:67:ae:49:7a:00:77:42: c7:df:0d:c2:77:3d:73:41:2c:2c:99:f3:b7:b2:b2:79:a4:d7: 0e:d3:8a:3b:5e:9a:0c:09:86:03:ba:f2:4b:91:e7:82:4e:3c: a7:50:bf:89:bd:c5:87:5b:2d:ba:d6:7b:64:f4:e8:26:6c:34: 24:4e:20:6c:dd:92:3b:4b:be:a2:14:ab:df:31:0d:41:d2:62: 77:5b:10:0d:df:a3:71:cd:8b:25:4e:4a:77:90:85:78:3f:dd: e6:e9:1d:24:1f:b3:41:bd:56:b1:62:6d:1a:35:f4:11:df:de: 87:e0:1b:e2:8e:d4:a9:f1:16:8e:fd:2d:7b:29:0d:61:85:e6: 6a:7b:cb:d1:56:0e:4d:63:c0:f6:34:e5:35:6e:dc:e9:55:50: 4a:db:47:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjYwNTIwMjAzMzQ0WhcNMjYwNTI3MjAzMzQ0WjAYMRYwFAYD VQQDEw02YTBlMWFhOS1lNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbTnBGVIwnmA8DS+hYTczzzEQqwO7vgVnPryLU2Rr79OcUG0p66VRKj4JC6c m6PhtGbW8B2YdXBoVxjYt4LHKxqz/aORe44/rCXJmCJESmh7Q5Jwku/IowCU/BmK E+QqTdl2anH4qwLD/gW9Gb+REmt3orfphINnbySVcSvgQ2k/7C1lR+R3BYRocQxn BwZCcKnN6SoC9QC0eb9vrDTPHHfs1aBqa7/xytrLjFULc7N15tyGSS3hj3Al7m3e ukI9fU0V/RZalYEOlcslHtVAMrhYasRgnTo+OFMN1nNYuJNWGryxv50Zo4tYFD8h cF5ncJTepFfzKiQ/3HdwDuNZaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfE8yJs 3fqlmviu3LoxogIT77YGMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnkvH6UP40TlRQJZUS3iQKYPL2dd8bYLu2YGv0co2cliT6AQEILfESVfEgzM tjclVWKeak6saordSx4mAHALBJD774+6K2wWm1kUuQMf4yFdOZ4WMw2GfPngPyYB 6bbgOdhQbcdnrkl6AHdCx98Nwnc9c0EsLJnzt7KyeaTXDtOKO16aDAmGA7ryS5Hn gk48p1C/ib3Fh1stutZ7ZPToJmw0JE4gbN2SO0u+ohSr3zENQdJid1sQDd+jcc2L JU5Kd5CFeD/d5ukdJB+zQb1WsWJtGjX0Ed/eh+Ab4o7UqfEWjv0teykNYYXmanvL 0VYOTWPA9jTlNW7c6VVQSttH2A== -----END CERTIFICATE-----Generated at Thu May 21 09:39:14 2026 by rpki-client