$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: APpE0F3x3HKDhVA/aXWu/MZYQ6s5VcD7BHvXeFEHQk8= Subject key identifier: 1F:27:13:36:4C:70:E6:FD:AD:13:A3:F4:54:6F:BF:BE:9E:6D:63:69 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: C2 Signing time: Mon 01 Jun 2026 07:44:23 +0000 Manifest this update: Mon 01 Jun 2026 07:44:22 +0000 Manifest next update: Mon 08 Jun 2026 07:44:22 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: s9UhJQ8MXgSO/dxAAO6cpxN5KXhD7gi925L33k1i7gM=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jun 1 07:44:22 2026 GMT Not After : Jun 8 07:44:22 2026 GMT Subject: CN=6a1d3857-4fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:fa:9a:67:19:91:53:bf:44:01:f2:30:8a: c5:d5:11:85:67:76:91:3b:aa:88:dc:c5:47:31:15: cd:59:8f:12:78:67:53:b8:cf:6a:6e:dd:db:dd:d9: 0d:31:c0:16:f2:9c:d5:38:33:69:b1:74:63:b8:bf: 21:13:76:dd:0d:74:ee:5e:5d:3a:1d:a8:fd:f2:3c: f3:1a:83:7b:2a:d0:75:e9:97:d9:2a:f5:9a:81:44: e6:87:c6:a9:fe:50:4d:3f:7d:6d:2d:39:3b:0b:cd: e6:ac:43:ef:52:75:4e:e6:a2:77:e7:f3:88:c4:2c: 7c:3c:7b:46:3c:69:d1:7b:b4:4b:66:b7:e6:2a:9a: 43:0b:69:96:35:70:4b:30:fc:e8:57:e2:71:c3:a0: 53:1f:e8:23:97:fe:ae:af:15:68:d4:11:d0:39:ca: 8a:28:a7:f4:70:62:77:eb:6d:d2:d5:34:9d:f0:77: 14:3d:6c:d5:4c:c8:05:8d:74:f7:19:09:be:0e:b7: 9b:57:5e:23:f6:ca:52:58:a6:68:fc:29:b1:f6:6b: 01:3e:01:5f:65:c7:54:d2:72:b2:9f:4f:47:1c:c9: 73:e2:51:52:91:d5:50:64:65:86:b4:39:ca:78:23: 9a:67:b4:3b:6d:0f:64:01:eb:2f:0a:1e:2d:77:6c: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:13:36:4C:70:E6:FD:AD:13:A3:F4:54:6F:BF:BE:9E:6D:63:69 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:8a:81:37:ee:23:9f:f1:81:e2:64:15:63:f0:e9:d2:eb:b1: ba:72:7a:80:9b:de:cf:5b:d4:6e:13:f3:d4:2c:ca:a6:4c:97: 83:0e:cb:8a:04:91:0c:49:25:8f:4d:73:80:12:c3:ea:0a:3e: b0:eb:a9:eb:dd:03:0f:37:9f:73:dc:fe:86:81:7a:f8:f4:2f: 37:3a:37:de:58:f2:18:57:26:f4:04:e5:cb:6b:cb:9f:d9:ff: de:07:aa:9c:aa:be:f3:67:a5:93:bb:42:f6:62:2e:cc:a9:4e: 7a:c7:88:9d:b4:4b:4b:0b:d0:24:59:3e:2b:fb:b5:db:aa:d1: a9:17:e0:84:13:c9:49:15:1f:43:ec:89:51:b2:b2:09:8f:d5: 86:58:1e:f5:fc:5a:b2:ff:0b:03:5e:b3:98:bf:04:00:fc:bb: 45:e3:b0:f6:70:f2:6c:6c:e0:df:d5:30:1c:eb:b3:80:ff:9a: 6c:45:23:24:cd:58:a8:20:b1:18:c5:83:9d:59:17:4f:d6:b5: d5:75:48:c5:5f:d2:6e:8f:64:d0:f9:4e:ac:8e:f0:6f:64:10: fc:99:72:b1:56:c2:f8:5b:c9:83:ca:bc:cf:bb:93:57:ec:66: ae:27:62:d1:01:a4:a9:30:b4:a2:13:ee:e0:15:de:24:d7:fe: 48:c6:35:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNjAxMDc0NDIyWhcNMjYwNjA4MDc0NDIyWjAYMRYwFAYD VQQDEw02YTFkMzg1Ny00ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxML6mmcZkVO/RAHyMIrF1RGFZ3aRO6qI3MVHMRXNWY8SeGdTuM9qbt3b3dkN McAW8pzVODNpsXRjuL8hE3bdDXTuXl06Haj98jzzGoN7KtB16ZfZKvWagUTmh8ap /lBNP31tLTk7C83mrEPvUnVO5qJ35/OIxCx8PHtGPGnRe7RLZrfmKppDC2mWNXBL MPzoV+Jxw6BTH+gjl/6urxVo1BHQOcqKKKf0cGJ3623S1TSd8HcUPWzVTMgFjXT3 GQm+DrebV14j9spSWKZo/Cmx9msBPgFfZcdU0nKyn09HHMlz4lFSkdVQZGWGtDnK eCOaZ7Q7bQ9kAesvCh4td2zAZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8nEzZM cOb9rROj9FRvv76ebWNpMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2YqBN+4jn/GB4mQVY/Dp0uuxunJ6gJvez1vUbhPz1CzKpkyXgw7LigSRDEkl j01zgBLD6go+sOup690DDzefc9z+hoF6+PQvNzo33ljyGFcm9ATly2vLn9n/3geq nKq+82elk7tC9mIuzKlOeseInbRLSwvQJFk+K/u126rRqRfghBPJSRUfQ+yJUbKy CY/Vhlge9fxasv8LA16zmL8EAPy7ReOw9nDybGzg39UwHOuzgP+abEUjJM1YqCCx GMWDnVkXT9a11XVIxV/Sbo9k0PlOrI7wb2QQ/JlysVbC+FvJg8q8z7uTV+xmridi 0QGkqTC0ohPu4BXeJNf+SMY1Tg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:37 2026 by rpki-client