$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json) Hash identifier: IGisyZLd/zr9YcZBhzccHARTF0XkLx4Eqar174JDjGU= Subject key identifier: 38:42:08:99:9E:99:5E:A2:F5:FA:54:BF:BD:26:A7:D6:22:9B:2C:64 Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft Manifest number: 053D Signing time: Thu 04 Jun 2026 23:35:27 +0000 Manifest this update: Thu 04 Jun 2026 23:35:27 +0000 Manifest next update: Thu 11 Jun 2026 23:35:27 +0000 Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: bv8S0z68dstKnGGR39E8vTWinYPDBg/UAw2NLTV3MuE=) 2: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=) 3: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=) 4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 23:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Jun 4 23:35:27 2026 GMT Not After : Jun 11 23:35:27 2026 GMT Subject: CN=6a220bbf-8dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:24:1e:3d:1a:be:1d:cd:2b:e7:fe:f6:72: 2b:21:6d:8c:c5:b5:3d:3f:1b:7f:d6:65:df:53:6f: c4:92:5f:65:c0:df:1c:f8:a3:ea:ee:ef:bb:7d:2b: 30:69:8d:d9:3e:6b:ff:27:91:84:b6:a1:f4:bc:4c: dd:a5:a3:74:5f:a1:36:7b:cf:55:47:dd:9b:0e:9f: 05:8f:a0:d7:e8:09:73:b3:8c:50:66:87:2a:32:4f: 78:c1:50:a7:dd:6f:ad:4c:85:8d:c2:ba:22:0d:0f: 32:65:82:7a:ed:d9:81:da:27:16:fa:ba:0e:ce:ab: 79:6b:dd:2d:9b:40:6d:d5:1d:4f:ff:a7:16:3c:95: 44:ed:46:f1:8c:83:ca:ad:73:fd:69:9e:b7:88:50: c6:51:0d:12:cb:ac:bd:b4:f3:22:73:02:5e:f7:c5: c1:09:79:69:35:bc:d2:6c:87:66:44:22:67:52:00: 29:0a:8a:40:bf:c3:ae:6f:e4:d5:fc:95:35:1e:9c: 9c:56:1c:50:18:c4:c2:01:80:a8:3b:b5:ab:96:ef: e0:1f:8e:8e:c7:d6:ab:89:37:c9:fa:67:f6:de:00: 67:85:54:7e:cf:71:14:0a:21:d9:15:60:1a:05:d4: 20:77:44:f0:d5:90:fe:2b:43:59:4c:b3:ad:cc:47: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:08:99:9E:99:5E:A2:F5:FA:54:BF:BD:26:A7:D6:22:9B:2C:64 X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:07:48:b2:30:e4:6f:f4:bf:9e:43:79:4c:52:c8:0e:b0:ca: b0:7a:e2:bf:01:df:3e:54:7d:34:1c:1c:1c:0f:e9:6e:05:25: 73:e6:04:e4:53:09:eb:26:da:d5:3d:f5:98:f1:4b:48:29:79: 7d:67:36:2e:b1:7e:dc:c9:58:0a:59:54:a4:16:91:a2:96:63: 25:d0:3f:90:41:91:82:0d:56:e8:55:ed:74:e6:65:90:f4:76: 06:0a:72:84:53:19:33:5a:34:4b:33:31:32:ad:1c:a7:c8:59: 15:d3:19:69:37:79:ca:5b:1f:2b:67:20:61:69:ac:d2:77:af: f8:c9:9a:dc:01:18:e1:59:1c:b9:83:70:a8:cc:69:56:20:69: e8:f6:1b:3d:aa:4b:54:70:9d:36:a6:c7:59:b1:20:eb:53:ea: 82:d8:39:10:86:75:41:08:d8:8b:e3:83:fd:31:16:6f:64:89: 8a:92:76:b4:35:d8:8b:87:e5:4c:f5:19:1c:db:09:79:7c:33: 2d:2c:c4:3f:9e:6c:63:ef:e2:0f:de:31:ba:75:2f:18:a4:bd: b3:2e:cb:3e:a2:3b:47:32:76:3c:4c:2c:25:b3:a2:f8:e1:23: 78:df:d0:e8:3d:6d:d2:07:79:96:d3:c5:01:a2:24:ef:99:ff: 5a:e6:2c:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjYwNjA0MjMzNTI3WhcNMjYwNjExMjMzNTI3WjAYMRYwFAYD VQQDEw02YTIyMGJiZi04ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwkkHj0avh3NK+f+9nIrIW2MxbU9Pxt/1mXfU2/Ekl9lwN8c+KPq7u+7fSsw aY3ZPmv/J5GEtqH0vEzdpaN0X6E2e89VR92bDp8Fj6DX6Alzs4xQZocqMk94wVCn 3W+tTIWNwroiDQ8yZYJ67dmB2icW+roOzqt5a90tm0Bt1R1P/6cWPJVE7UbxjIPK rXP9aZ63iFDGUQ0Sy6y9tPMicwJe98XBCXlpNbzSbIdmRCJnUgApCopAv8Oub+TV /JU1HpycVhxQGMTCAYCoO7Wrlu/gH46Ox9ariTfJ+mf23gBnhVR+z3EUCiHZFWAa BdQgd0Tw1ZD+K0NZTLOtzEfRXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhCCJme mV6i9fpUv70mp9YimyxkMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0 QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgdIsjDkb/S/nkN5TFLIDrDKsHrivwHfPlR9NBwcHA/pbgUlc+YE5FMJ6yba 1T31mPFLSCl5fWc2LrF+3MlYCllUpBaRopZjJdA/kEGRgg1W6FXtdOZlkPR2Bgpy hFMZM1o0SzMxMq0cp8hZFdMZaTd5ylsfK2cgYWms0nev+Mma3AEY4VkcuYNwqMxp ViBp6PYbPapLVHCdNqbHWbEg61Pqgtg5EIZ1QQjYi+OD/TEWb2SJipJ2tDXYi4fl TPUZHNsJeXwzLSzEP55sY+/iD94xunUvGKS9sy7LPqI7RzJ2PEwsJbOi+OEjeN/Q 6D1t0gd5ltPFAaIk75n/WuYsfw== -----END CERTIFICATE-----Generated at Sat Jun 6 07:05:09 2026 by rpki-client