$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: /53Sx+qaALC9oGBU5tDzBYdc89MPGvCmAJAcZCwHvao= Subject key identifier: E2:6E:E2:E0:DB:E1:B3:D8:0F:D5:CB:38:AD:DE:D7:77:4D:4E:EA:28 Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 0448 Signing time: Thu 21 May 2026 00:21:04 +0000 Manifest this update: Thu 21 May 2026 00:21:04 +0000 Manifest next update: Thu 28 May 2026 00:21:04 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: WzvFDdopPQ0AT+XTmxYQJOd4J7ZyvX1Vp7CNNLJslPM=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: RLT4OavkIPlkhOt4yNgRmjMZlXgnd7ZiolTVU7K89ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: May 21 00:21:04 2026 GMT Not After : May 28 00:21:04 2026 GMT Subject: CN=6a0e4ff0-f65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:4c:7d:9a:72:3e:3b:66:3b:9f:0c:33:50: 79:1e:9b:de:70:8d:f8:41:6d:c6:8e:f1:34:c4:4b: 93:67:78:55:d4:a9:c5:10:c1:72:0c:1f:e9:ee:ad: 11:29:d1:a1:e3:b6:1e:1a:52:7e:b5:c2:c3:55:38: cb:cc:65:2a:36:71:77:f3:87:cf:11:26:a4:50:ac: f9:31:2c:83:22:b3:00:42:b2:67:52:e7:6a:c2:72: 30:e1:f0:d7:30:45:12:cf:07:53:fa:2e:b7:20:a7: 61:41:e0:c1:74:bc:d1:fe:a4:a5:74:58:de:d9:8b: ad:54:43:fa:b3:c0:30:30:f8:dd:c4:52:0c:73:ad: 03:4c:c8:0e:cc:4c:f9:3b:68:e5:60:d2:a6:cc:8f: 86:3f:b6:32:72:0e:42:b8:69:56:0d:9f:30:eb:6a: e0:1d:fc:3d:8f:d8:62:af:b3:6a:54:19:e2:b1:c3: 96:63:0e:4f:49:b1:f0:cb:aa:49:6c:ea:df:bc:6f: d4:34:1e:08:bf:71:df:fb:f6:e1:5a:0f:40:b0:69: e2:ae:5e:a9:8e:32:56:8f:2a:7b:bb:17:dd:2c:f1: b1:5b:a8:2c:2c:0c:1e:da:bb:ec:67:25:ac:d9:cf: 97:5d:74:ab:60:28:37:a9:f0:75:bc:25:36:5e:b6: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6E:E2:E0:DB:E1:B3:D8:0F:D5:CB:38:AD:DE:D7:77:4D:4E:EA:28 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:17:88:e9:0d:a9:23:6f:1e:10:28:47:e0:fa:66:6b:12: 62:a3:a8:29:53:ac:8d:75:fe:61:d5:43:28:d3:38:06:a7:e6: 8a:d7:d2:11:ca:3e:92:8f:fa:5c:7c:bb:2b:2d:00:0b:9a:5b: 7a:01:47:64:58:1b:64:0d:8b:f4:6d:bb:08:2d:77:3e:27:69: 30:11:74:75:43:82:35:7e:5f:75:09:15:22:fb:1f:3c:90:62: 78:cf:5f:45:38:af:aa:90:ab:ae:47:21:89:e5:27:a6:1d:97: 2f:74:19:7f:6b:79:9d:6a:30:00:ad:04:98:c0:ef:02:3f:d3: cc:d9:f3:46:87:f1:39:7c:40:d9:19:02:ae:26:79:da:da:a7: 45:fb:b5:2c:97:ea:46:04:ab:98:c2:30:94:e1:81:47:22:d9: 85:11:73:e8:17:75:1c:ac:10:ea:bb:1a:12:f3:1e:80:77:1d: ac:7c:ab:54:74:45:18:73:6a:f8:7a:50:78:3d:4a:4b:fc:4c: bf:01:29:19:f6:2b:f9:0e:54:c8:69:d6:03:04:0b:e5:d6:bc: 95:78:a5:cb:76:a1:bf:ed:eb:22:59:70:e0:fe:c8:5a:46:fa: 70:90:e0:3a:c9:2e:b4:41:8c:44:b9:b9:db:02:cd:e0:3b:14: fb:3e:e0:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwNTIxMDAyMTA0WhcNMjYwNTI4MDAyMTA0WjAYMRYwFAYD VQQDEw02YTBlNGZmMC1mNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2xMfZpyPjtmO58MM1B5HpvecI34QW3GjvE0xEuTZ3hV1KnFEMFyDB/p7q0R KdGh47YeGlJ+tcLDVTjLzGUqNnF384fPESakUKz5MSyDIrMAQrJnUudqwnIw4fDX MEUSzwdT+i63IKdhQeDBdLzR/qSldFje2YutVEP6s8AwMPjdxFIMc60DTMgOzEz5 O2jlYNKmzI+GP7Yycg5CuGlWDZ8w62rgHfw9j9hir7NqVBniscOWYw5PSbHwy6pJ bOrfvG/UNB4Iv3Hf+/bhWg9AsGnirl6pjjJWjyp7uxfdLPGxW6gsLAwe2rvsZyWs 2c+XXXSrYCg3qfB1vCU2Xra7gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJu4uDb 4bPYD9XLOK3e13dNTuooMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKYMXiOkNqSNvHhAoR+D6ZmsSYqOoKVOsjXX+YdVDKNM4BqfmitfSEco+ko/6 XHy7Ky0AC5pbegFHZFgbZA2L9G27CC13PidpMBF0dUOCNX5fdQkVIvsfPJBieM9f RTivqpCrrkchieUnph2XL3QZf2t5nWowAK0EmMDvAj/TzNnzRofxOXxA2RkCriZ5 2tqnRfu1LJfqRgSrmMIwlOGBRyLZhRFz6Bd1HKwQ6rsaEvMegHcdrHyrVHRFGHNq +HpQeD1KS/xMvwEpGfYr+Q5UyGnWAwQL5da8lXily3ahv+3rIllw4P7IWkb6cJDg OskutEGMRLm52wLN4DsU+z7gYQ== -----END CERTIFICATE-----Generated at Thu May 21 09:37:59 2026 by rpki-client