$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: p/EorG3FEsfPzlvoDOEhyv9VUEyABYANmT2CT9yCPcM= Subject key identifier: 59:A4:6A:77:DE:22:E2:61:3A:2C:FE:2C:5F:18:8B:1A:09:26:91:A5 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 02A2 Signing time: Thu 21 May 2026 01:38:16 +0000 Manifest this update: Thu 21 May 2026 01:38:15 +0000 Manifest next update: Thu 28 May 2026 01:38:15 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: qbDLLdcGqWxoVP+mRYaKlq7N0RXC1r9CVoxt1t5FXyM=) 2: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: uMB1cvVhprKp86XWev+HO3mpwPNrzk9do4ee899gfzY=) 3: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: oF8S7Pot7FDKo2GEEMdlADVMTbeltD2yj2mRKY200Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: May 21 01:38:15 2026 GMT Not After : May 28 01:38:15 2026 GMT Subject: CN=6a0e6207-1036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:8a:8e:21:39:d4:42:51:82:c7:80:b2:7c: 06:e0:96:e5:d7:fa:a5:43:1e:aa:97:7f:47:df:f8: 3a:10:e4:c2:82:52:c8:39:34:64:a5:33:2c:0a:9c: 73:50:fd:8e:c2:b0:de:6a:80:d4:48:df:39:7f:c1: 90:6a:26:0b:f6:4e:85:92:18:21:ad:47:81:2f:0d: 45:63:94:ad:df:9f:ce:8e:50:0e:da:51:e3:bb:8e: da:60:02:e9:2c:1b:a0:0f:24:dc:b8:4a:50:55:85: a6:70:55:2d:0a:da:3e:e7:28:4d:71:1f:55:5f:81: de:28:16:70:47:a2:68:d3:a4:22:81:c1:a6:66:13: bc:6e:f3:9c:ae:0e:47:7b:6d:33:7e:bc:8d:40:98: ab:b1:cc:92:66:85:9b:c9:85:c6:9b:ac:52:dd:9c: c2:12:00:42:03:97:a8:b7:60:34:40:75:5d:b2:76: 6e:dd:6d:0a:82:6c:e7:41:1a:db:c9:d0:27:69:5c: 7b:61:9a:c9:87:54:d7:4d:ec:63:4d:10:1c:5a:f6: 86:ab:47:bb:6b:cb:ab:d7:7e:a0:fc:ae:10:62:92: 6a:5b:48:83:79:62:38:f3:df:ab:3d:83:59:a9:fa: 6e:5c:48:a5:f3:99:1a:31:c9:ae:aa:b9:5c:d7:22: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A4:6A:77:DE:22:E2:61:3A:2C:FE:2C:5F:18:8B:1A:09:26:91:A5 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9f:91:bb:dd:43:3b:69:a3:02:8a:fc:6b:02:5a:43:d2:49: 22:95:96:b7:b9:13:64:fb:08:4d:4e:fb:ff:c3:57:fe:8c:42: d9:7f:5b:e3:c6:7f:e0:e1:4c:93:ad:d8:53:af:6b:2d:04:a6: 6b:4e:9f:a4:e6:ac:49:58:64:7c:7a:fc:1d:c5:4f:ce:69:66: 89:c0:62:a7:a4:69:3c:be:12:31:fb:28:45:be:79:77:56:77: c9:1c:29:c1:a5:23:bb:00:de:e9:10:1f:60:8e:b4:39:79:d8: ac:c9:bf:38:f5:cf:7a:db:49:eb:45:25:9b:d9:56:79:37:ef: ec:f1:f1:e4:66:9d:c6:fc:31:b9:a3:fe:41:02:fe:10:b6:ef: 2b:d5:b0:9a:54:b8:b3:51:7c:cf:c5:c7:82:80:ab:ba:06:1a: 8e:41:e6:08:b0:0c:dd:21:f7:ef:7f:06:42:0c:76:e6:74:a6: 19:bf:a8:6d:47:f7:d5:df:35:96:23:80:c5:b1:ac:b5:57:57: fd:69:c4:34:27:be:cc:6d:f4:bf:c2:7a:28:bb:ed:93:f2:ff: b5:84:2b:9a:46:d6:52:3a:69:91:3a:ca:49:84:f1:7f:04:5c: df:0f:8d:3b:d7:bf:96:35:a0:a5:a2:f7:ac:41:ed:38:51:3b: 4a:29:37:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwNTIxMDEzODE1WhcNMjYwNTI4MDEzODE1WjAYMRYwFAYD VQQDEw02YTBlNjIwNy0xMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjKKjiE51EJRgseAsnwG4Jbl1/qlQx6ql39H3/g6EOTCglLIOTRkpTMsCpxz UP2OwrDeaoDUSN85f8GQaiYL9k6FkhghrUeBLw1FY5St35/OjlAO2lHju47aYALp LBugDyTcuEpQVYWmcFUtCto+5yhNcR9VX4HeKBZwR6Jo06QigcGmZhO8bvOcrg5H e20zfryNQJirscySZoWbyYXGm6xS3ZzCEgBCA5eot2A0QHVdsnZu3W0KgmznQRrb ydAnaVx7YZrJh1TXTexjTRAcWvaGq0e7a8ur136g/K4QYpJqW0iDeWI489+rPYNZ qfpuXEil85kaMcmuqrlc1yL73QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmkanfe IuJhOiz+LF8YixoJJpGlMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAZ+Ru91DO2mjAor8awJaQ9JJIpWWt7kTZPsITU77/8NX/oxC2X9b48Z/4OFM k63YU69rLQSma06fpOasSVhkfHr8HcVPzmlmicBip6RpPL4SMfsoRb55d1Z3yRwp waUjuwDe6RAfYI60OXnYrMm/OPXPettJ60Ulm9lWeTfv7PHx5GadxvwxuaP+QQL+ ELbvK9WwmlS4s1F8z8XHgoCrugYajkHmCLAM3SH3738GQgx25nSmGb+obUf31d81 liOAxbGstVdX/WnENCe+zG30v8J6KLvtk/L/tYQrmkbWUjppkTrKSYTxfwRc3w+N O9e/ljWgpaL3rEHtOFE7Sik3MQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:06 2026 by rpki-client