$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: GEM6KbIONUAh9AKDJr3IpfOFpXM3HACv35T1Wn10NZc= Subject key identifier: 94:62:B3:6C:B0:C8:43:71:6E:62:D2:30:B7:DE:D9:91:24:5A:2A:2D Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 0A4C Signing time: Wed 20 May 2026 19:44:49 +0000 Manifest this update: Wed 20 May 2026 19:44:49 +0000 Manifest next update: Wed 27 May 2026 19:44:49 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: u1TnIgMYJ5gTiVZz3YNYPHqTe7VN2jfmuTenwR63ev4=) 2: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 72DcOTbzZF7+TCywcpXepZonikbAwf9INnwgkXqBzAU=) 3: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: WPLajparplJU8xXoLqj3sJQqQv2qTK7SmIP3Bri0gcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: May 20 19:44:49 2026 GMT Not After : May 27 19:44:49 2026 GMT Subject: CN=6a0e0f31-648d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:46:b7:39:d2:78:e3:49:c6:98:60:e9:ac: 73:c7:61:cf:fb:15:6e:f5:9f:ce:46:4d:1d:e9:91: 65:44:63:16:54:d5:30:66:8d:f4:1d:2f:d1:1e:9b: a8:b0:f2:00:bc:57:6c:9e:21:aa:16:a5:4b:b6:08: 1e:aa:26:fd:ce:ee:fd:12:07:e5:d4:6e:f2:2a:ed: 92:ef:29:ce:2e:41:53:ba:2d:0e:07:08:bd:59:df: 66:ab:42:23:b0:2b:fe:37:22:b4:8a:58:f9:9f:42: 56:80:8f:cf:09:72:1b:6e:a4:e7:1e:5d:32:10:90: 4f:0d:8d:72:ab:8e:9f:14:f9:f7:39:07:4d:4c:27: 58:6f:03:62:ca:18:14:db:97:bc:a5:db:38:c4:39: d2:95:c2:dd:61:db:05:09:a6:04:70:5e:96:e3:ba: 8e:e5:73:dc:22:a6:f0:f2:63:bc:a4:59:43:1e:ad: e6:8d:29:af:9e:7b:39:61:43:ca:be:6c:4c:44:d2: 0c:4d:d9:09:3d:a3:7b:27:c7:c5:30:01:f6:73:f0: 30:fc:8f:bb:92:97:a2:39:66:df:6f:95:dd:98:14: d8:cf:e9:3e:ad:73:62:dc:c3:f0:d6:11:fe:f4:b5: 4d:d4:53:36:96:43:7c:9a:13:83:86:fc:c6:d0:fd: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:62:B3:6C:B0:C8:43:71:6E:62:D2:30:B7:DE:D9:91:24:5A:2A:2D X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fd:ed:31:94:67:ea:18:a2:47:71:2d:7a:c7:37:bf:11:44: 16:3b:1b:80:99:32:b7:49:4d:86:c3:39:99:9f:bd:e5:a9:42: b5:56:d0:db:f7:42:5b:fe:0d:a0:dc:ab:c1:fc:aa:3c:54:12: 91:8f:1f:56:c8:0d:92:d9:94:73:7a:de:c5:c2:6a:49:84:98: 00:b3:07:5e:f4:cd:39:70:7d:5c:74:f1:70:06:f6:ca:68:9e: 54:24:6d:b2:c3:f6:c7:f9:b0:84:d8:c9:43:4e:bb:9c:b5:bd: 67:4d:29:91:b9:46:9e:78:25:88:ed:a4:7b:f4:7a:0c:d0:26: 60:66:f9:da:5d:b7:09:84:45:98:91:86:ad:58:40:26:51:89: 45:71:ca:db:99:96:47:37:29:b0:32:e8:d2:c3:9f:e2:9b:13: f9:f5:20:3c:8d:5e:77:2d:fd:75:ee:7d:48:27:b8:f3:08:15: 75:8b:15:81:0d:81:0d:31:d8:85:c2:a6:c3:b6:a7:98:fe:b2: cf:bf:d4:bd:35:02:fa:a9:44:6f:25:b7:a5:e8:4a:1b:29:7f: ff:03:6b:15:39:ae:0c:cf:42:ec:ee:fb:e0:c6:e9:71:06:03: c1:a4:09:5d:66:f4:3b:5a:0f:3c:5e:23:c0:a4:fc:b4:dc:45: b0:24:18:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjYwNTIwMTk0NDQ5WhcNMjYwNTI3MTk0NDQ5WjAYMRYwFAYD VQQDEw02YTBlMGYzMS02NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fpGtznSeONJxphg6axzx2HP+xVu9Z/ORk0d6ZFlRGMWVNUwZo30HS/RHpuo sPIAvFdsniGqFqVLtggeqib9zu79Egfl1G7yKu2S7ynOLkFTui0OBwi9Wd9mq0Ij sCv+NyK0ilj5n0JWgI/PCXIbbqTnHl0yEJBPDY1yq46fFPn3OQdNTCdYbwNiyhgU 25e8pds4xDnSlcLdYdsFCaYEcF6W47qO5XPcIqbw8mO8pFlDHq3mjSmvnns5YUPK vmxMRNIMTdkJPaN7J8fFMAH2c/Aw/I+7kpeiOWbfb5XdmBTYz+k+rXNi3MPw1hH+ 9LVN1FM2lkN8mhODhvzG0P1dLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRis2yw yENxbmLSMLfe2ZEkWiotMB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjv3tMZRn6hiiR3Etesc3vxFEFjsbgJkyt0lNhsM5mZ+95alCtVbQ2/dCW/4N oNyrwfyqPFQSkY8fVsgNktmUc3rexcJqSYSYALMHXvTNOXB9XHTxcAb2ymieVCRt ssP2x/mwhNjJQ067nLW9Z00pkblGnngliO2ke/R6DNAmYGb52l23CYRFmJGGrVhA JlGJRXHK25mWRzcpsDLo0sOf4psT+fUgPI1edy39de59SCe48wgVdYsVgQ2BDTHY hcKmw7anmP6yz7/UvTUC+qlEbyW3pehKGyl//wNrFTmuDM9C7O774MbpcQYDwaQJ XWb0O1oPPF4jwKT8tNxFsCQYbA== -----END CERTIFICATE-----Generated at Thu May 21 09:31:09 2026 by rpki-client