$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json) Hash identifier: JElmIgaaCAhVJj+MEtVJMrkfosLgtsqU4STPIahPXpU= Subject key identifier: 32:25:31:3F:6F:33:1B:63:89:89:36:FF:7A:0C:52:15:00:B4:C1:BF Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft Manifest number: 4D Signing time: Fri 05 Jun 2026 08:48:01 +0000 Manifest this update: Fri 05 Jun 2026 08:48:00 +0000 Manifest next update: Fri 12 Jun 2026 08:48:00 +0000 Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: LtdI10MACpDOSuZkm7N9EC27uiDjRPi29lHeofYIO4A=) 2: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=) 3: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 08:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Validity Not Before: Jun 5 08:48:00 2026 GMT Not After : Jun 12 08:48:00 2026 GMT Subject: CN=6a228d41-b796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:4f:28:8f:8f:6d:81:88:b0:89:59:29:76: 30:5c:ec:76:b3:a8:8f:6b:e2:9d:0c:9d:64:33:fe: 84:77:d2:f4:f5:35:43:ae:1d:75:bf:ee:0c:66:33: 87:1b:9a:83:3d:77:e8:fc:b6:3a:29:ec:0d:92:84: 1c:34:3a:a4:d4:fb:44:1c:17:f1:c1:7f:62:53:08: 13:32:d7:8a:89:73:98:57:d8:1d:a0:33:9b:e3:43: 34:f3:78:01:ed:ea:75:bf:2a:9d:10:44:64:74:7b: 51:54:7d:c3:e2:87:ad:92:06:ea:14:b3:2e:7e:ef: ff:bc:4b:c8:ba:6f:0b:36:0c:07:59:00:58:49:f0: 06:21:5d:89:91:8f:ee:77:f3:81:96:9a:23:11:8e: 2f:7b:23:dc:a3:7d:21:bc:9d:fc:b1:b9:9a:86:48: 82:56:45:92:06:f5:24:32:30:50:30:73:e3:22:39: 95:82:ae:e9:32:06:5b:61:f0:3d:aa:39:cb:d7:39: 6a:bd:20:6e:90:17:ab:d4:89:55:cc:3d:8f:7e:5a: a5:1d:ff:fa:3a:c7:5f:20:79:f8:f1:1a:19:60:30: de:45:ca:61:a9:d4:29:ce:93:bb:6f:85:2c:52:6d: ad:65:c3:19:32:53:d0:6d:53:9e:cd:06:e8:46:81: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:31:3F:6F:33:1B:63:89:89:36:FF:7A:0C:52:15:00:B4:C1:BF X509v3 Authority Key Identifier: keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ee:76:3e:ba:b3:e2:05:9a:5f:79:7f:55:df:ae:2e:f8:e7: 68:61:7b:25:33:ac:e9:eb:a3:88:9d:8b:ec:5d:37:ee:0f:6b: 81:5e:0b:48:2f:e6:7b:87:80:14:85:3e:a2:1a:d4:b4:ad:54: 36:22:e3:76:c0:b3:5e:ac:56:33:14:87:12:a9:8a:08:e7:4d: f5:be:bb:d0:61:5c:fa:4b:e9:57:60:d4:5d:5e:c8:63:90:d6: 8c:9f:af:02:0a:7c:03:c1:70:d3:91:72:27:d1:b3:1d:ad:30: dc:07:a0:15:3f:df:36:f8:4f:27:af:1e:5d:e6:3c:5e:b3:24: 5f:26:0e:d8:b0:8e:fe:c9:98:7d:21:08:aa:b8:ea:c3:aa:45: 59:1a:35:99:94:0f:07:51:4f:db:0e:17:f0:d0:90:7c:32:08: 7a:f3:6a:56:e5:1a:5b:46:e0:b0:58:89:06:31:1c:01:65:cb: 42:24:d0:e3:4b:bf:d3:7f:60:04:07:2c:fe:bc:02:b7:49:d4: 0e:42:70:3d:e2:d1:e1:29:0c:6a:24:b3:74:2b:ac:fb:db:c2: 84:f9:be:3a:a5:02:9f:3e:c1:16:cb:a3:22:40:99:ad:8a:39: ac:0b:98:e9:32:07:47:01:2e:c0:da:31:84:8e:f6:ae:f4:5c: 5b:9b:a4:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIxMDdEODNGMjY2 NjMyQ0VFODAeFw0yNjA2MDUwODQ4MDBaFw0yNjA2MTIwODQ4MDBaMBgxFjAUBgNV BAMTDTZhMjI4ZDQxLWI3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkI08oj49tgYiwiVkpdjBc7HazqI9r4p0MnWQz/oR30vT1NUOuHXW/7gxmM4cb moM9d+j8tjop7A2ShBw0OqTU+0QcF/HBf2JTCBMy14qJc5hX2B2gM5vjQzTzeAHt 6nW/Kp0QRGR0e1FUfcPih62SBuoUsy5+7/+8S8i6bws2DAdZAFhJ8AYhXYmRj+53 84GWmiMRji97I9yjfSG8nfyxuZqGSIJWRZIG9SQyMFAwc+MiOZWCrukyBlth8D2q OcvXOWq9IG6QF6vUiVXMPY9+WqUd//o6x18gefjxGhlgMN5FymGp1CnOk7tvhSxS ba1lwxkyU9BtU57NBuhGgdz7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMiUxP28z G2OJiTb/egxSFQC0wb8wHwYDVR0jBBgwFoAUxeslRrtzrOaT4ZqxB9g/JmYyzugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QTU1L0IzMkI1MDI4RjdB NTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIveGVzbFJydHpyT2FUNFpxeEI5Z19KbVl5enVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QTU1L0IzMkI1MDI4RjdBNTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9h VDRacXhCOWdfSm1ZeXp1Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAf7nY+urPiBZpfeX9V364u+OdoYXslM6zp66OInYvsXTfuD2uBXgtIL+Z7h4AU hT6iGtS0rVQ2IuN2wLNerFYzFIcSqYoI5031vrvQYVz6S+lXYNRdXshjkNaMn68C CnwDwXDTkXIn0bMdrTDcB6AVP982+E8nrx5d5jxesyRfJg7YsI7+yZh9IQiquOrD qkVZGjWZlA8HUU/bDhfw0JB8Mgh682pW5RpbRuCwWIkGMRwBZctCJNDjS7/Tf2AE Byz+vAK3SdQOQnA94tHhKQxqJLN0K6z728KE+b46pQKfPsEWy6MiQJmtijmsC5jp MgdHAS7A2jGEjvau9Fxbm6Ti -----END CERTIFICATE-----Generated at Sat Jun 6 10:57:32 2026 by rpki-client