$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json) Hash identifier: ihQDktbQXPXTPzTKibWE6r4NxWrD+ZyEUm3g4WEtHAA= Subject key identifier: 9B:C0:E1:E7:CA:0E:DD:7C:29:5E:05:88:56:8C:42:4D:9B:65:E3:7E Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft Manifest number: 5E Signing time: Fri 15 May 2026 08:12:48 +0000 Manifest this update: Fri 15 May 2026 08:12:48 +0000 Manifest next update: Fri 22 May 2026 08:12:48 +0000 Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: eiI3K708TWcF/W+BNuhkyQrJ3VIQU1LrHnMJ2GO5yfs=) 2: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=) 3: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=) 4: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 08:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Validity Not Before: May 15 08:12:48 2026 GMT Not After : May 22 08:12:48 2026 GMT Subject: CN=6a06d580-4c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:22:4b:fd:0f:7a:8d:74:85:53:dd:67:dd: c8:47:64:d2:2b:50:84:02:18:be:df:91:be:5d:65: 54:87:37:9d:ed:c1:8d:ba:b2:c3:f5:18:11:eb:4c: f0:3f:d1:6c:4e:6f:8f:f6:12:ec:4e:43:2d:b2:e2: c1:59:05:06:2d:a3:e9:c9:cd:b5:f3:cf:49:0b:1b: c4:d3:9d:fa:ff:a1:ea:7d:3c:4d:e4:f0:58:75:8a: a2:3b:bd:b5:71:6b:ec:be:72:a8:d9:ec:e9:d7:65: 56:ba:f4:6c:f8:7e:3f:30:41:29:9e:41:6d:f8:84: 31:0c:70:18:d7:c1:37:39:a0:b0:e3:8a:d1:61:5a: ed:d4:dc:3d:bc:06:6d:96:16:0c:3a:ee:8d:d4:48: 89:68:12:8b:36:10:60:a2:b8:f1:ae:d3:eb:4b:cb: 14:ce:aa:ab:6f:87:3f:94:e4:1a:dd:ed:5d:21:88: 4f:a1:7c:05:70:d2:dd:90:61:78:2f:90:75:95:86: 6a:4b:38:c5:c8:ff:f8:c5:33:d2:f6:c0:6b:6e:1e: 62:d3:e1:8c:07:97:03:9c:60:4e:d6:98:dc:a8:29: ea:a2:2c:16:4b:a3:72:e8:c1:a9:a7:a4:4e:8c:15: e4:d1:00:b4:49:c8:f5:0a:b7:10:9f:56:86:06:3a: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:E1:E7:CA:0E:DD:7C:29:5E:05:88:56:8C:42:4D:9B:65:E3:7E X509v3 Authority Key Identifier: keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:23:ee:61:3c:aa:5c:74:1d:ab:40:c8:d8:cd:42:9b:81:5d: 32:6b:2b:e9:b2:17:34:5f:4e:56:01:77:70:6c:c1:a9:00:7c: b4:17:8b:4e:3b:fe:ce:f2:ba:bc:91:34:8b:ce:34:48:10:92: 96:be:c2:2f:e6:d9:dc:2a:df:7b:e4:2a:6b:d1:74:66:de:69: f7:26:4a:3a:c3:e8:2b:e5:4d:55:5d:ce:8d:39:cc:58:49:28: b3:ab:60:7d:1f:14:e1:86:41:7a:89:8f:b2:75:ab:dd:b2:2c: 74:fa:57:5e:7b:52:88:47:55:b5:d2:a8:00:1d:40:59:0a:a1: 54:13:2a:16:e9:cb:aa:91:81:6a:55:0f:3d:11:0b:42:3e:a1: 07:ee:4c:e0:ee:9d:f8:da:21:be:0f:6e:fe:b2:16:41:83:bb: 5c:30:2f:98:c4:67:16:69:1c:af:81:af:39:51:7e:c7:7c:13: c1:ea:0f:b2:94:0b:dc:59:4a:ad:b2:c0:66:36:f0:05:11:67: b4:dd:43:ee:89:ee:f6:ba:ac:f7:ca:7b:8e:c7:b5:0b:08:57: 3d:4d:e4:f9:1e:3f:2c:12:82:ed:f6:f7:16:d9:47:40:c1:99: 25:41:d3:d5:bf:4c:ef:bd:e4:6e:b6:38:94:ce:d9:d4:24:fc: ff:6a:56:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Mjk4QzExMC8GA1UEBRMoNUZDMjZCOTI4REVEQzkwQzM5MUNDNEY1MjlCQTdCOUUw OUE1MDQ2RTAeFw0yNjA1MTUwODEyNDhaFw0yNjA1MjIwODEyNDhaMBgxFjAUBgNV BAMTDTZhMDZkNTgwLTRjMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLZyJL/Q96jXSFU91n3chHZNIrUIQCGL7fkb5dZVSHN53twY26ssP1GBHrTPA/ 0WxOb4/2EuxOQy2y4sFZBQYto+nJzbXzz0kLG8TTnfr/oep9PE3k8Fh1iqI7vbVx a+y+cqjZ7OnXZVa69Gz4fj8wQSmeQW34hDEMcBjXwTc5oLDjitFhWu3U3D28Bm2W Fgw67o3USIloEos2EGCiuPGu0+tLyxTOqqtvhz+U5Brd7V0hiE+hfAVw0t2QYXgv kHWVhmpLOMXI//jFM9L2wGtuHmLT4YwHlwOcYE7WmNyoKeqiLBZLo3LowamnpE6M FeTRALRJyPUKtxCfVoYGOs8DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm8Dh58oO 3XwpXgWIVoxCTZtl434wHwYDVR0jBBgwFoAUX8Jrko3tyQw5HMT1Kbp7ngmlBG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOThDL0FDNUU4QUMyQzZE MDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhKcmtvM3R5UXc1SE1UMUticDduZ21sQkc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy OThDL0FDNUU4QUMyQzZEMDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3 NUhNVDFLYnA3bmdtbEJHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeI+5hPKpcdB2rQMjYzUKbgV0yayvpshc0X05WAXdwbMGpAHy0F4tOO/7O8rq8 kTSLzjRIEJKWvsIv5tncKt975Cpr0XRm3mn3Jko6w+gr5U1VXc6NOcxYSSizq2B9 HxThhkF6iY+ydavdsix0+ldee1KIR1W10qgAHUBZCqFUEyoW6cuqkYFqVQ89EQtC PqEH7kzg7p342iG+D27+shZBg7tcMC+YxGcWaRyvga85UX7HfBPB6g+ylAvcWUqt ssBmNvAFEWe03UPuie72uqz3ynuOx7ULCFc9TeT5Hj8sEoLt9vcW2UdAwZklQdPV v0zvveRutjiUztnUJPz/alZb -----END CERTIFICATE-----Generated at Sat May 16 21:14:08 2026 by rpki-client