$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: yUo2212NVUho3pXHerHKwnmJU1IbudM0kna7DLeH6s8= Subject key identifier: B9:0D:38:61:C1:3E:C1:CC:F8:4E:44:07:0D:CF:1E:16:83:AD:C7:7D Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 0122 Signing time: Thu 21 May 2026 05:50:28 +0000 Manifest this update: Thu 21 May 2026 05:50:27 +0000 Manifest next update: Thu 28 May 2026 05:50:27 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: UOFRdpGzGRJP8uhTcBsDVvZT64i4vGnRVN1MRvRuoNc=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: May 21 05:50:27 2026 GMT Not After : May 28 05:50:27 2026 GMT Subject: CN=6a0e9d24-b9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:5a:b8:fb:24:cd:4c:ad:86:45:2b:63:c3: 72:25:1f:51:13:14:56:e5:ec:1f:83:a8:00:c2:de: b9:a8:31:8b:e4:5a:47:a0:d0:da:79:fe:1d:82:fd: 3f:cc:9e:d0:6f:49:43:02:ce:b4:f9:f2:6e:cb:dd: e7:80:60:29:1b:d6:59:5f:8d:29:e6:53:45:31:df: bf:0a:5c:21:02:1f:f1:03:3f:53:87:af:7b:77:a0: d5:84:67:52:d0:e2:29:07:57:f5:e9:44:ce:fd:89: 6d:5f:75:06:43:58:c4:43:87:ad:a8:62:68:eb:6b: 59:01:41:ef:65:ea:69:0d:36:36:28:42:1b:fb:0a: 8a:bd:79:56:92:ba:67:63:d9:0b:fe:8f:96:8a:ca: 65:ba:13:f1:9f:08:90:d8:5b:f2:68:e6:8e:f0:a0: c6:ee:eb:1a:b1:d0:dc:86:1f:43:96:00:0c:94:a4: c2:bf:33:80:20:74:cc:5c:a1:9a:a6:30:18:25:35: cb:d1:5a:ab:4b:83:73:d2:84:68:32:b9:b2:d9:40: 94:06:7e:68:b1:7f:dd:83:56:15:e7:86:1c:e5:dc: 74:ca:8a:9d:7f:2d:85:98:ea:d1:d6:5b:e0:71:4d: 57:95:72:8b:fa:99:b1:d6:0e:80:d9:03:13:f6:d4: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:38:61:C1:3E:C1:CC:F8:4E:44:07:0D:CF:1E:16:83:AD:C7:7D X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:82:c5:0c:6e:39:eb:39:52:af:a3:54:d1:8b:96:c1:2b:db: 07:80:5e:d0:26:f8:b7:e2:be:53:98:05:ae:84:98:3b:7b:fa: b0:e0:d5:99:52:8a:e9:5d:64:c4:97:dc:2e:b5:d3:bb:1d:37: 31:6d:0d:6d:83:af:ff:91:6d:38:6c:bd:9b:a8:bf:43:66:f1: b3:b3:47:7b:36:6d:3c:82:85:3f:6e:81:bd:be:4f:02:c8:6c: 49:54:e2:88:c7:4d:25:ab:fa:1d:67:73:76:cd:b9:1b:a6:ff: 62:45:30:98:33:0d:aa:b7:8a:57:56:d9:4f:4e:5f:d4:04:ef: 5d:20:24:a1:a6:d0:c9:23:c4:a9:3d:b6:97:13:2b:9c:c5:ad: 46:d3:90:7f:b0:f4:d3:97:fa:ee:4f:01:a1:81:cf:cc:89:b3: f3:f0:53:6a:08:34:e3:dd:09:94:69:87:20:65:57:a8:09:48: 4d:2d:44:0a:be:7f:cc:81:c1:a4:f6:21:a5:7b:79:1e:26:14: 4c:14:8b:4a:a2:e4:03:9c:82:00:c8:f8:2a:a0:84:bd:ed:67: 7b:7a:71:44:91:7b:60:d4:c8:78:a9:ba:41:bd:e1:51:32:9f: 0f:ee:6d:c6:77:fd:d7:19:04:50:8a:9b:da:ff:74:fb:60:4d: 89:ba:ff:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjYwNTIxMDU1MDI3WhcNMjYwNTI4MDU1MDI3WjAYMRYwFAYD VQQDEw02YTBlOWQyNC1iOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8NauPskzUythkUrY8NyJR9RExRW5ewfg6gAwt65qDGL5FpHoNDaef4dgv0/ zJ7Qb0lDAs60+fJuy93ngGApG9ZZX40p5lNFMd+/ClwhAh/xAz9Th697d6DVhGdS 0OIpB1f16UTO/YltX3UGQ1jEQ4etqGJo62tZAUHvZeppDTY2KEIb+wqKvXlWkrpn Y9kL/o+WispluhPxnwiQ2FvyaOaO8KDG7usasdDchh9DlgAMlKTCvzOAIHTMXKGa pjAYJTXL0VqrS4Nz0oRoMrmy2UCUBn5osX/dg1YV54Yc5dx0yoqdfy2FmOrR1lvg cU1XlXKL+pmx1g6A2QMT9tSBgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkNOGHB PsHM+E5EBw3PHhaDrcd9MB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMoLFDG456zlSr6NU0YuWwSvbB4Be0Cb4t+K+U5gFroSYO3v6sODVmVKK6V1k xJfcLrXTux03MW0NbYOv/5FtOGy9m6i/Q2bxs7NHezZtPIKFP26Bvb5PAshsSVTi iMdNJav6HWdzds25G6b/YkUwmDMNqreKV1bZT05f1ATvXSAkoabQySPEqT22lxMr nMWtRtOQf7D005f67k8BoYHPzImz8/BTagg0490JlGmHIGVXqAlITS1ECr5/zIHB pPYhpXt5HiYUTBSLSqLkA5yCAMj4KqCEve1ne3pxRJF7YNTIeKm6Qb3hUTKfD+5t xnf91xkEUIqb2v90+2BNibr/xQ== -----END CERTIFICATE-----Generated at Thu May 21 10:16:18 2026 by rpki-client