$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: MK6Ozfqx/wF8la0fM9Y+5PjG2qmxvVo9PeG1xb1XRtg= Subject key identifier: DE:4D:4A:AA:64:EE:C2:79:29:92:D3:9B:A0:1E:93:F5:E7:9E:C6:BF Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 01CC Signing time: Thu 21 May 2026 03:47:32 +0000 Manifest this update: Thu 21 May 2026 03:47:32 +0000 Manifest next update: Thu 28 May 2026 03:47:32 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: P+l6nYiYx94y1Ik49kJzVAIi9QnystfnDyyS6/Es9WI=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: alib+UnyJdcp5QK+xSWFYIjYS/kjVCRiqsWyoxYGVsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: May 21 03:47:32 2026 GMT Not After : May 28 03:47:32 2026 GMT Subject: CN=6a0e8054-7e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9d:19:c3:c8:56:53:a2:cc:5c:12:3e:78:c5: 63:f1:b7:0c:c6:56:04:bd:14:33:9e:85:fc:91:08: ef:e6:ce:de:9f:5f:f5:34:ae:ed:1c:ba:e5:bc:e4: b6:8e:70:81:c7:47:4b:d6:c2:df:10:14:43:72:09: 3a:e1:06:5e:05:22:46:a2:75:7d:68:89:75:0a:94: 3d:ed:ec:d4:2c:c9:8c:d0:0d:03:9d:09:36:d2:4b: cf:19:a6:a6:f2:58:4b:46:cc:b5:d7:1e:91:c1:31: 12:b2:ed:04:a9:56:ec:2d:13:48:ec:c0:fb:e2:99: 0e:d8:b9:6c:eb:99:4d:53:a8:aa:c3:2e:64:a6:bf: 22:8b:f5:7c:e1:9a:87:05:3e:ed:d7:d2:48:cb:ec: e5:01:56:97:8e:64:a8:aa:2c:b4:4a:40:29:e0:f4: ea:7e:31:55:87:0c:72:c9:08:17:a9:83:f7:c7:88: 3f:9c:46:55:93:d7:45:bc:ba:97:ac:61:d4:14:b6: bd:79:df:91:9c:2c:8e:5c:e6:45:8c:ed:3c:5a:ae: 27:62:30:ea:4d:73:3c:2c:55:e2:ec:26:f9:ea:5b: ce:9f:be:b5:f9:6d:76:c5:ab:9e:c4:90:7e:40:f2: 48:23:a6:e0:ab:16:61:66:82:3f:66:e4:59:38:a2: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4D:4A:AA:64:EE:C2:79:29:92:D3:9B:A0:1E:93:F5:E7:9E:C6:BF X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b0:c6:00:b2:f1:2b:a3:2b:1f:97:69:48:b8:84:40:df:3d: ae:74:f2:6b:0d:c3:7e:32:18:43:3b:c3:7b:be:77:1f:06:98: ca:dc:d4:72:cb:b6:66:9f:de:e9:ae:ad:46:f8:e3:9a:dd:a2: 78:d9:d8:b6:c9:3d:e1:c3:13:53:f8:af:2b:b6:35:7c:90:b5: b4:77:ac:c5:a3:a4:a1:fd:11:8e:d4:e5:63:94:65:71:79:1b: 9e:19:a4:f7:ca:0c:54:5b:f7:d5:7c:59:05:42:e0:f7:48:e7: 17:1c:9a:f5:49:ac:ce:e2:fe:07:53:52:2c:42:76:ad:cc:04: 15:d3:df:7d:cf:bb:0f:07:6e:c6:6b:62:c9:3f:9f:29:27:1a: ee:5b:5d:ab:64:2d:a4:59:ad:1f:1f:f7:be:da:b5:15:de:df: 61:e3:55:7d:71:40:30:31:8e:eb:6e:09:d3:14:a1:fd:f8:20: ef:b5:0f:a9:24:0b:4c:1a:96:be:29:28:ce:a5:05:0d:2e:d6: d1:7e:d1:9d:79:8b:70:00:4e:54:d7:ec:27:7b:bb:f8:c0:91: c9:fe:2a:27:53:ed:d4:41:ab:e3:34:db:e9:10:4c:1b:d6:de: e7:fe:cb:5e:39:0d:49:4e:60:25:69:37:e4:64:8b:92:77:26: 99:e3:dd:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjYwNTIxMDM0NzMyWhcNMjYwNTI4MDM0NzMyWjAYMRYwFAYD VQQDEw02YTBlODA1NC03ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4J0Zw8hWU6LMXBI+eMVj8bcMxlYEvRQznoX8kQjv5s7en1/1NK7tHLrlvOS2 jnCBx0dL1sLfEBRDcgk64QZeBSJGonV9aIl1CpQ97ezULMmM0A0DnQk20kvPGaam 8lhLRsy11x6RwTESsu0EqVbsLRNI7MD74pkO2Lls65lNU6iqwy5kpr8ii/V84ZqH BT7t19JIy+zlAVaXjmSoqiy0SkAp4PTqfjFVhwxyyQgXqYP3x4g/nEZVk9dFvLqX rGHUFLa9ed+RnCyOXOZFjO08Wq4nYjDqTXM8LFXi7Cb56lvOn761+W12xauexJB+ QPJII6bgqxZhZoI/ZuRZOKJ8WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5NSqpk 7sJ5KZLTm6Aek/Xnnsa/MB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAebDGALLxK6MrH5dpSLiEQN89rnTyaw3DfjIYQzvDe753HwaYytzUcsu2Zp/e 6a6tRvjjmt2ieNnYtsk94cMTU/ivK7Y1fJC1tHesxaOkof0RjtTlY5RlcXkbnhmk 98oMVFv31XxZBULg90jnFxya9UmszuL+B1NSLEJ2rcwEFdPffc+7DwduxmtiyT+f KSca7ltdq2QtpFmtHx/3vtq1Fd7fYeNVfXFAMDGO624J0xSh/fgg77UPqSQLTBqW vikozqUFDS7W0X7RnXmLcABOVNfsJ3u7+MCRyf4qJ1Pt1EGr4zTb6RBMG9be5/7L XjkNSU5gJWk35GSLkncmmePd8Q== -----END CERTIFICATE-----Generated at Thu May 21 10:16:08 2026 by rpki-client