$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: YWgCKFp74qGtu8cPwkO6FtEAHN9DVnjFCB7dZB+jzDc= Subject key identifier: 54:C8:4B:74:69:5D:36:25:D4:68:63:7D:2B:0C:A6:08:79:CC:0C:D7 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 357F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 3562 Signing time: Wed 20 May 2026 14:47:58 +0000 Manifest this update: Wed 20 May 2026 14:47:57 +0000 Manifest next update: Wed 27 May 2026 14:47:57 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: lJYONzUk7f7BdW0uvqnSDDdzC15ke3KDTwobhoztedA=) 2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=) 3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13695 (0x357f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: May 20 14:47:57 2026 GMT Not After : May 27 14:47:57 2026 GMT Subject: CN=6a0dc99e-ed4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:02:63:ac:ce:ef:7a:52:4b:d7:b1:81:94: ac:60:df:2d:53:60:55:ec:a9:ae:46:97:28:ec:06: 8f:9a:1b:05:92:9a:14:45:de:e9:af:e8:05:ce:e9: 67:f7:f4:29:51:84:67:67:44:95:f1:23:6c:42:53: b0:31:b8:74:45:63:e0:78:de:f4:97:7d:b5:e7:cc: 10:b6:8c:06:dd:1b:64:69:36:2f:4b:f9:3d:b8:e8: 3c:87:e0:71:92:5e:09:02:a7:12:a0:f1:b1:2e:b1: 23:9b:1a:d0:aa:8f:fb:d7:97:19:e1:7f:3f:c0:d3: 63:fc:76:91:e7:c9:55:9a:c5:41:92:bd:6d:ae:c6: 23:70:02:26:61:41:30:6a:08:53:6f:3e:c1:93:bc: f4:99:50:1c:8f:ec:c0:05:6f:98:94:d3:3f:35:a6: a7:22:ae:06:89:54:1a:16:7d:43:71:ec:e6:d2:db: fa:0b:54:00:4d:5d:d6:a8:95:92:ff:f6:82:c1:28: 64:a2:e4:1c:72:00:34:f6:62:54:ea:81:28:04:e0: c6:5c:d0:b2:16:2e:7d:d0:d6:33:d1:74:09:78:37: b8:d8:01:43:24:d3:6a:41:01:fe:87:86:33:c5:b2: ed:9a:3e:d1:17:32:f3:da:df:3b:76:37:5a:2e:71: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C8:4B:74:69:5D:36:25:D4:68:63:7D:2B:0C:A6:08:79:CC:0C:D7 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:aa:e8:0f:8b:04:32:4a:d6:e5:c3:db:f1:e4:47:4e:cb:55: ba:d6:5d:15:a1:1d:31:d8:9d:d7:91:f1:04:14:42:45:87:c1: f2:fd:ad:5f:43:58:1d:81:d8:e1:cf:11:1c:cb:77:dd:23:74: 68:18:81:d9:4f:79:36:08:fb:98:f7:bf:83:38:38:50:1d:e7: 69:b4:63:7e:49:bb:9e:d4:d2:ba:b6:5d:56:6f:10:5a:db:93: 2e:ca:86:38:e2:06:87:33:a5:bb:ee:46:41:7d:0f:80:db:65: 27:35:17:dc:a4:6a:23:c4:78:50:27:97:fb:ae:48:8e:56:d0: e6:c4:f8:0b:fb:b0:15:08:eb:21:6a:12:c0:8b:5a:97:24:53: 5b:14:19:4b:82:c6:07:29:da:6b:c1:79:c5:44:8c:13:21:52: 03:55:7a:14:5d:9e:9c:4d:20:41:97:92:2e:7a:af:eb:05:91: 30:48:66:d7:f5:fc:3e:e4:93:f6:c8:8b:11:04:3f:98:16:21: 4d:b4:6e:22:c3:9b:89:62:f0:f0:36:cf:98:ef:19:b2:7e:79: 8c:64:85:12:99:a1:3e:87:46:aa:a8:12:95:a4:6d:7a:00:82: b2:55:d8:98:6f:9a:a8:f1:98:3c:2d:20:6e:c4:03:37:d5:9e: 33:e6:25:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwNTIwMTQ0NzU3WhcNMjYwNTI3MTQ0NzU3WjAYMRYwFAYD VQQDEw02YTBkYzk5ZS1lZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUoCY6zO73pSS9exgZSsYN8tU2BV7KmuRpco7AaPmhsFkpoURd7pr+gFzuln 9/QpUYRnZ0SV8SNsQlOwMbh0RWPgeN70l32158wQtowG3RtkaTYvS/k9uOg8h+Bx kl4JAqcSoPGxLrEjmxrQqo/715cZ4X8/wNNj/HaR58lVmsVBkr1trsYjcAImYUEw aghTbz7Bk7z0mVAcj+zABW+YlNM/NaanIq4GiVQaFn1Dcezm0tv6C1QATV3WqJWS //aCwShkouQccgA09mJU6oEoBODGXNCyFi590NYz0XQJeDe42AFDJNNqQQH+h4Yz xbLtmj7RFzLz2t87djdaLnG7pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTIS3Rp XTYl1GhjfSsMpgh5zAzXMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHqroD4sEMkrW5cPb8eRHTstVutZdFaEdMdid15HxBBRCRYfB8v2tX0NYHYHY 4c8RHMt33SN0aBiB2U95Ngj7mPe/gzg4UB3nabRjfkm7ntTSurZdVm8QWtuTLsqG OOIGhzOlu+5GQX0PgNtlJzUX3KRqI8R4UCeX+65IjlbQ5sT4C/uwFQjrIWoSwIta lyRTWxQZS4LGBynaa8F5xUSMEyFSA1V6FF2enE0gQZeSLnqv6wWRMEhm1/X8PuST 9siLEQQ/mBYhTbRuIsObiWLw8DbPmO8Zsn55jGSFEpmhPodGqqgSlaRtegCCslXY mG+aqPGYPC0gbsQDN9WeM+YlcA== -----END CERTIFICATE-----Generated at Thu May 21 13:24:01 2026 by rpki-client