$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: 3LPLNRX0qnq8ofuftbEmZjxy8NcUqteCFs+zSNKGQC4= Subject key identifier: 9F:BC:B7:35:A3:36:96:A2:A1:78:88:AD:B4:45:1C:86:A1:61:D4:51 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 043D Signing time: Tue 05 May 2026 00:23:29 +0000 Manifest this update: Tue 05 May 2026 00:23:28 +0000 Manifest next update: Tue 12 May 2026 00:23:28 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: RifO400BnjT6SwbvuenmqWNyTlu4ndFFIVtdYpcKKdU=) 2: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=) 3: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: May 5 00:23:28 2026 GMT Not After : May 12 00:23:28 2026 GMT Subject: CN=69f93880-49e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:4f:c1:6b:d7:6c:b8:19:be:a5:83:65:c4: e2:c0:82:53:67:92:35:ef:f5:42:4e:ba:c8:3c:85: 17:a6:fd:32:d3:47:9f:06:ef:6f:16:e8:b4:bb:83: 84:e4:68:c3:e0:5c:b8:46:1b:0b:8b:bd:1f:1a:81: 48:86:9a:a2:c1:81:80:34:de:a0:d5:a1:b9:92:88: 18:f3:de:64:c1:1a:a5:97:e3:b5:56:95:48:43:c9: f5:e4:f9:b4:12:a0:db:02:07:ba:39:e3:0b:39:2e: df:e4:e3:2c:f0:e2:8d:bb:cf:f9:55:ef:e4:1c:d3: 74:86:78:bd:84:f5:9a:78:96:ef:fe:f3:3b:f9:b9: b0:a1:b2:a9:2c:87:62:ea:f7:9d:e0:2d:f8:4d:d5: 44:6b:18:43:6b:11:d5:1f:36:7f:d1:02:b8:eb:64: 96:ca:f7:32:65:d0:c0:ac:38:83:cb:b8:33:b8:e5: 54:d3:b6:63:ef:37:fe:15:1d:a5:7b:6d:af:df:2c: d7:aa:1b:75:8c:da:00:18:9a:3d:54:13:4a:0a:ee: cc:a7:94:16:5b:38:a1:2a:b7:36:a5:19:f8:62:bd: 2e:d2:53:3f:bd:b5:e0:db:af:5b:6d:1e:16:0f:81: 2d:33:f2:48:91:06:21:3f:c4:7c:50:87:69:bb:62: 9c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BC:B7:35:A3:36:96:A2:A1:78:88:AD:B4:45:1C:86:A1:61:D4:51 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5f:4a:98:cc:98:56:23:3e:26:00:09:fe:a3:9b:39:ce:90: 83:22:3e:34:05:48:61:74:3c:fb:f0:ab:8a:b7:81:3b:e7:e4: 29:05:35:97:40:5f:f0:f6:99:15:88:bb:e9:70:f7:5a:a2:16: d0:a9:c2:a2:1c:1f:ac:04:c8:4e:fd:56:3e:e4:07:b5:b1:73: d8:82:89:2e:56:74:a1:d6:b3:49:d1:52:3b:79:6b:8b:3a:c4: c9:ac:19:d1:e9:bb:71:fb:09:8c:5c:f1:89:aa:89:d6:ae:87: fe:7f:77:00:28:74:1a:9b:84:41:75:81:39:72:80:bd:29:5c: e9:f8:71:87:00:fa:86:ad:6e:c9:8e:61:9a:15:14:dd:c4:3a: 7d:39:c8:ef:09:15:cc:ea:9e:6a:49:92:32:81:a6:79:a0:55: 5c:8b:97:f4:0a:d4:8c:c5:e3:9a:6b:21:f6:31:5d:08:77:cc: 53:35:5d:3e:c0:b2:cc:5f:b9:92:3f:f3:f4:36:89:53:3a:ba: b9:c8:4f:98:4c:83:ce:05:35:a5:1e:c5:eb:a5:16:f7:8b:90: c5:35:86:d4:76:dd:a6:0c:51:c3:03:ff:eb:40:1e:5b:5f:9c: 18:da:93:ac:c9:9d:9f:3c:24:1f:3a:6d:b9:ba:d6:72:97:23: 83:47:3f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwNTA1MDAyMzI4WhcNMjYwNTEyMDAyMzI4WjAYMRYwFAYD VQQDEw02OWY5Mzg4MC00OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPJPwWvXbLgZvqWDZcTiwIJTZ5I17/VCTrrIPIUXpv0y00efBu9vFui0u4OE 5GjD4Fy4RhsLi70fGoFIhpqiwYGANN6g1aG5kogY895kwRqll+O1VpVIQ8n15Pm0 EqDbAge6OeMLOS7f5OMs8OKNu8/5Ve/kHNN0hni9hPWaeJbv/vM7+bmwobKpLIdi 6ved4C34TdVEaxhDaxHVHzZ/0QK462SWyvcyZdDArDiDy7gzuOVU07Zj7zf+FR2l e22v3yzXqht1jNoAGJo9VBNKCu7Mp5QWWzihKrc2pRn4Yr0u0lM/vbXg269bbR4W D4EtM/JIkQYhP8R8UIdpu2KcZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+8tzWj NpaioXiIrbRFHIahYdRRMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjl9KmMyYViM+JgAJ/qObOc6QgyI+NAVIYXQ8+/CrireBO+fkKQU1l0Bf8PaZ FYi76XD3WqIW0KnCohwfrATITv1WPuQHtbFz2IKJLlZ0odazSdFSO3lrizrEyawZ 0em7cfsJjFzxiaqJ1q6H/n93ACh0GpuEQXWBOXKAvSlc6fhxhwD6hq1uyY5hmhUU 3cQ6fTnI7wkVzOqeakmSMoGmeaBVXIuX9ArUjMXjmmsh9jFdCHfMUzVdPsCyzF+5 kj/z9DaJUzq6uchPmEyDzgU1pR7F66UW94uQxTWG1HbdpgxRwwP/60AeW1+cGNqT rMmdnzwkHzptubrWcpcjg0c/ew== -----END CERTIFICATE-----Generated at Wed May 6 13:23:56 2026 by rpki-client