$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: LD1ZSlSy8N1nA/ri7kbleQXV9deSwh5DjXaPcseg4CQ= Subject key identifier: A7:CC:C2:33:E2:BD:7C:27:21:1D:74:FF:71:E9:31:3F:7B:35:FD:70 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0462 Signing time: Tue 05 May 2026 00:25:12 +0000 Manifest this update: Tue 05 May 2026 00:25:11 +0000 Manifest next update: Tue 12 May 2026 00:25:11 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: c3/iglQLmbzm1/2J3SVF+DXSU//gJWs+5Tf7FFtkfXU=) 2: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 3: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 4: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 5: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 7: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) 8: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 9: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: May 5 00:25:11 2026 GMT Not After : May 12 00:25:11 2026 GMT Subject: CN=69f938e8-551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:29:d3:b8:5b:91:b6:69:5f:3f:c6:76:5a: f9:f0:c9:a3:71:79:67:a0:7c:e0:1b:27:85:e1:08: fa:22:1f:1a:35:97:ad:86:86:41:b3:7c:99:ed:a7: c6:35:6e:40:dd:68:f0:e5:42:bb:53:d7:0a:4d:62: ef:f7:b7:7f:f0:4b:b2:e6:4b:40:2e:9f:5d:b0:28: 5c:bf:77:1c:24:96:48:14:6f:81:65:a8:01:f3:66: 7c:66:76:3e:93:f2:5f:15:b2:da:60:d7:3a:d4:87: 64:d8:ed:81:f7:f4:c9:18:58:70:9b:b5:2a:d9:01: 10:c8:36:6f:cd:70:91:f4:90:98:03:5a:18:d5:92: 54:20:96:1f:d6:62:a7:83:1e:e5:6c:68:0e:60:f3: 50:cd:db:a6:42:ac:d8:92:b0:7c:53:0d:c4:f6:f3: d6:e8:ad:70:ab:42:85:50:2c:98:a6:f5:e9:2b:81: b5:47:45:38:01:72:99:a2:46:91:4b:5c:70:6e:f5: 43:20:ba:aa:90:b8:fb:d9:da:a8:d9:c9:ed:aa:a9: 97:23:25:7a:13:8d:4b:7b:2b:1a:ee:54:c1:41:40: f8:15:d0:1f:be:5a:b9:6a:95:1f:0d:3d:5a:69:50: fb:b9:99:35:51:e1:67:ac:79:19:28:ed:54:bb:55: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CC:C2:33:E2:BD:7C:27:21:1D:74:FF:71:E9:31:3F:7B:35:FD:70 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:99:f9:55:44:ad:e3:07:73:a2:a3:18:da:33:b8:27:67:63: fa:81:73:4f:3b:99:6c:78:88:f4:0a:a2:56:5f:64:ba:18:1c: 44:e6:a9:33:09:cf:31:cf:df:7e:81:5b:76:98:19:21:d8:43: 34:dd:8a:e4:bb:3c:e0:7d:e1:2e:20:a5:70:5f:0a:d3:83:4c: 09:27:60:a9:9b:d9:05:31:09:be:64:e1:77:3d:15:3e:2c:05: dc:da:8d:60:6b:d7:e7:0c:1a:b6:f5:da:1e:b9:4d:99:ba:f8: cc:7a:38:6a:8e:e6:d0:1c:4c:d6:e6:02:3c:d9:07:30:b6:43: 59:79:ef:b3:04:11:4f:43:89:fe:de:15:ac:9e:b0:9d:68:b4: ee:4d:55:a9:8a:02:f5:fd:23:c9:28:98:9f:cb:d4:f7:77:ab: 57:d0:99:c1:82:bd:9e:f0:4f:73:71:31:87:20:a3:9f:d2:d7: b3:6d:bd:46:0c:01:4e:b7:dd:39:03:c3:26:fa:0a:2b:45:20: ce:e9:f6:ea:99:56:c8:52:10:97:5a:78:1e:b3:83:19:78:5e: ae:2e:57:ee:37:e2:77:2e:13:83:eb:1c:93:51:97:d9:ef:86: 2f:8e:c5:b9:88:56:d9:26:d8:14:a5:da:53:96:05:85:37:68: 50:28:c1:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwNTA1MDAyNTExWhcNMjYwNTEyMDAyNTExWjAYMRYwFAYD VQQDEw02OWY5MzhlOC01NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFcp07hbkbZpXz/Gdlr58MmjcXlnoHzgGyeF4Qj6Ih8aNZethoZBs3yZ7afG NW5A3Wjw5UK7U9cKTWLv97d/8Euy5ktALp9dsChcv3ccJJZIFG+BZagB82Z8ZnY+ k/JfFbLaYNc61Idk2O2B9/TJGFhwm7Uq2QEQyDZvzXCR9JCYA1oY1ZJUIJYf1mKn gx7lbGgOYPNQzdumQqzYkrB8Uw3E9vPW6K1wq0KFUCyYpvXpK4G1R0U4AXKZokaR S1xwbvVDILqqkLj72dqo2cntqqmXIyV6E41Leysa7lTBQUD4FdAfvlq5apUfDT1a aVD7uZk1UeFnrHkZKO1Uu1WXJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfMwjPi vXwnIR10/3HpMT97Nf1wMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuJn5VUSt4wdzoqMY2jO4J2dj+oFzTzuZbHiI9AqiVl9kuhgcROapMwnPMc/f foFbdpgZIdhDNN2K5Ls84H3hLiClcF8K04NMCSdgqZvZBTEJvmThdz0VPiwF3NqN YGvX5wwatvXaHrlNmbr4zHo4ao7m0BxM1uYCPNkHMLZDWXnvswQRT0OJ/t4VrJ6w nWi07k1VqYoC9f0jySiYn8vU93erV9CZwYK9nvBPc3ExhyCjn9LXs229RgwBTrfd OQPDJvoKK0Ugzun26plWyFIQl1p4HrODGXheri5X7jfidy4Tg+sck1GX2e+GL47F uYhW2SbYFKXaU5YFhTdoUCjBTQ== -----END CERTIFICATE-----Generated at Tue May 5 20:11:03 2026 by rpki-client