$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: TtLVO5J0jBWNZIFUGwo4yX41OgRwORWkPcCZHPvNJbE= Subject key identifier: 30:2B:ED:C3:8F:82:09:37:28:04:67:CC:AF:5E:E4:30:D9:24:8C:C3 Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 20 Signing time: Fri 05 Jun 2026 09:19:37 +0000 Manifest this update: Fri 05 Jun 2026 09:19:36 +0000 Manifest next update: Fri 12 Jun 2026 09:19:36 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: wGQDrojsCLnjoqN7bwg/5IDNx+9wxvqa8JDKI5Udyog=) 2: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) 3: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Jun 5 09:19:36 2026 GMT Not After : Jun 12 09:19:36 2026 GMT Subject: CN=6a2294a8-9739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:43:d0:7b:96:34:78:d8:12:aa:21:66:9e: d1:da:bb:f2:a6:4d:08:97:c3:91:46:bf:86:e1:67: c5:59:ab:ff:76:ec:05:fa:ca:95:47:50:f9:cd:c8: 2c:94:9b:64:a9:65:54:b4:32:2d:3f:c3:58:73:47: 4b:ca:51:a6:b4:72:1c:62:33:ef:f3:c6:57:12:18: 9b:02:75:0c:35:50:2f:79:57:a7:7b:5a:94:00:df: 87:07:d2:b4:ae:47:41:34:db:f9:02:fb:73:95:b3: 1a:6b:0f:a0:29:7f:29:6b:90:1c:ef:85:4d:70:c3: f9:1b:2b:9a:a2:d7:26:77:ac:89:71:17:e6:5b:57: f5:14:7c:e9:b7:f2:18:8c:d2:cf:27:03:bd:42:73: bb:78:47:c3:92:5a:0b:35:9e:71:e3:2f:22:1e:27: 56:f5:22:14:0b:df:fc:eb:66:0e:cb:27:c1:3c:f2: e5:58:77:d8:d0:78:4d:28:88:5d:61:4e:e5:0f:71: cd:d0:75:76:bb:c2:99:c3:d1:88:64:ab:f9:27:87: b1:21:21:65:00:82:96:8e:44:7e:74:3a:93:fe:cf: c4:14:89:fa:cc:50:df:5d:e3:02:31:d0:8b:df:4c: 08:62:17:ed:3d:03:fa:f8:09:94:06:2c:d8:63:3c: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2B:ED:C3:8F:82:09:37:28:04:67:CC:AF:5E:E4:30:D9:24:8C:C3 X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:65:8b:64:81:21:40:b8:0f:9d:71:bc:7b:20:95:6c:dc: 16:fe:7e:74:ec:bf:84:46:48:8b:fc:50:bd:ab:9e:23:70:b1: 3a:68:18:ee:2b:96:e9:fb:b4:a7:cf:1c:5e:89:c4:e1:a5:4b: d9:38:ca:7d:8a:49:cd:e8:7c:b2:a6:4e:62:b5:1b:ea:e4:71: 88:d8:c1:c9:b6:0e:7b:dd:11:f3:c7:fe:e0:de:80:12:5f:6e: a2:b0:a6:56:8a:f3:7a:ac:b4:77:45:81:e8:cb:02:e0:4d:6e: 52:da:4b:6e:8f:90:10:fa:57:b5:84:4a:6c:e6:9e:1f:4f:10: 74:3b:f5:16:8b:2f:93:53:f8:12:34:32:26:ed:08:3f:21:21: 58:b3:54:4e:ab:0f:48:0a:e2:ce:e8:56:33:4a:08:fd:c6:d4: 8e:eb:55:22:94:1a:cb:a8:c9:01:a3:47:c4:33:a7:91:8b:9b: be:46:28:4c:ce:78:da:8e:f4:45:31:d0:5c:bc:58:99:9f:15: b1:e8:26:49:21:de:a0:8b:fb:5f:83:48:cb:38:b4:da:26:2a: 73:95:c6:6c:b9:bf:0e:7e:6d:26:18:67:9c:2c:0d:16:27:ca: c7:b3:08:37:80:ca:17:54:bd:65:5d:6e:e0:cc:af:80:78:a8: 73:d5:11:8e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA2MDUwOTE5MzZaFw0yNjA2MTIwOTE5MzZaMBgxFjAUBgNV BAMTDTZhMjI5NGE4LTk3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLkUPQe5Y0eNgSqiFmntHau/KmTQiXw5FGv4bhZ8VZq/927AX6ypVHUPnNyCyU m2SpZVS0Mi0/w1hzR0vKUaa0chxiM+/zxlcSGJsCdQw1UC95V6d7WpQA34cH0rSu R0E02/kC+3OVsxprD6ApfylrkBzvhU1ww/kbK5qi1yZ3rIlxF+ZbV/UUfOm38hiM 0s8nA71Cc7t4R8OSWgs1nnHjLyIeJ1b1IhQL3/zrZg7LJ8E88uVYd9jQeE0oiF1h TuUPcc3QdXa7wpnD0Yhkq/knh7EhIWUAgpaORH50OpP+z8QUifrMUN9d4wIx0Ivf TAhiF+09A/r4CZQGLNhjPNeHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMCvtw4+C CTcoBGfMr17kMNkkjMMwHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQpWWLZIEhQLgPnXG8eyCVbNwW/n507L+ERkiL/FC9q54jcLE6aBjuK5bp+7Sn zxxeicThpUvZOMp9iknN6Hyypk5itRvq5HGI2MHJtg573RHzx/7g3oASX26isKZW ivN6rLR3RYHoywLgTW5S2ktuj5AQ+le1hEps5p4fTxB0O/UWiy+TU/gSNDIm7Qg/ ISFYs1ROqw9ICuLO6FYzSgj9xtSO61UilBrLqMkBo0fEM6eRi5u+RihMznjajvRF MdBcvFiZnxWx6CZJId6gi/tfg0jLOLTaJipzlcZsub8Ofm0mGGecLA0WJ8rHswg3 gMoXVL1lXW7gzK+AeKhz1RGO -----END CERTIFICATE-----Generated at Sat Jun 6 13:29:47 2026 by rpki-client