$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: 0qWxhWpKXYklRcXOxjTW3SuD8YVDEznPExFmIFfD2tM= Subject key identifier: 80:45:A2:36:A8:19:85:AE:58:3A:22:80:FD:F4:CA:CE:CB:90:BB:3F Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 01DA Signing time: Thu 21 May 2026 03:45:29 +0000 Manifest this update: Thu 21 May 2026 03:45:29 +0000 Manifest next update: Thu 28 May 2026 03:45:29 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: 2DIq/quM7DP9OuSuo1j4pA+pj4F1GELXx6HOMaJbHC0=) 2: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) 3: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: May 21 03:45:29 2026 GMT Not After : May 28 03:45:29 2026 GMT Subject: CN=6a0e7fd9-42a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:d5:f6:e4:f3:ae:05:f3:62:ac:3e:a7:c4: ef:d4:ba:dd:1f:99:e9:1d:ce:e7:86:6e:4a:3e:eb: 08:bf:71:e2:5a:84:68:e6:7c:30:bb:d9:18:de:49: 8c:42:c1:d5:9d:4e:ae:11:f3:f4:5c:83:18:37:e4: e5:f7:9c:d6:6e:d5:90:c0:28:7b:90:c8:2d:4e:af: 33:4c:c2:10:ff:f9:1b:57:88:bc:a3:f4:5a:c5:05: 93:d8:c6:d2:c7:d2:2b:95:e7:b6:01:95:44:98:9d: 4d:a1:d1:a9:b6:d4:57:93:74:9c:2a:13:f5:10:26: 8f:01:3a:ad:c1:6f:5a:2b:60:83:0c:21:01:1d:cd: c9:6f:48:64:3d:5a:90:39:07:2f:0f:a8:19:51:a1: 0e:4c:4f:21:7b:47:03:93:0a:5b:aa:bf:ab:5f:47: bd:29:32:a3:72:c9:d1:b0:21:e9:be:a1:f4:fa:37: 37:b9:a6:ee:d8:36:f4:cb:f3:8b:93:11:72:1d:cc: 8f:c0:7d:99:63:1c:f9:46:1c:c6:5e:9d:70:ab:27: 1b:9b:7c:15:7e:40:ee:9c:15:ca:62:73:ff:66:79: 5f:bb:f6:bf:9a:4d:56:ae:72:8a:e6:9c:5b:33:ee: 61:a8:13:e0:e7:ca:a9:b4:2d:ca:57:fd:ee:f9:a5: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:45:A2:36:A8:19:85:AE:58:3A:22:80:FD:F4:CA:CE:CB:90:BB:3F X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:98:49:a6:1e:ee:80:96:f9:7e:59:55:aa:aa:5b:fa:5a:46: 38:49:4f:76:af:93:cb:ea:97:66:33:f5:1e:3c:20:24:30:f6: 2d:a6:4a:c5:f5:eb:ed:63:db:ef:59:21:38:ab:40:0b:5d:46: fd:85:36:e2:d7:d1:2f:88:e1:b6:e8:9a:65:3b:1f:a2:7b:45: 6b:20:20:5a:62:b5:6d:7b:7e:03:f9:bd:59:43:ec:ef:51:e3: a7:03:68:e2:0e:39:e4:41:de:7b:db:85:f3:36:77:21:8f:0d: 3f:33:dc:9a:58:73:51:4b:41:9d:8d:68:e8:bd:70:4c:22:ec: 4b:ad:51:96:a5:97:a8:8a:7d:16:60:2e:ac:0a:17:74:8c:79: 9b:3f:c1:9d:b1:fd:0a:f5:ff:80:7b:d8:e7:3a:3c:28:83:20: 29:cb:5a:84:92:40:61:12:5e:60:6b:09:9b:fc:41:4d:34:e7: 6f:f8:7e:06:45:0a:8b:31:af:f8:13:c5:b6:40:17:be:40:fa: e9:28:ad:25:d6:44:9c:3a:b9:da:fb:af:2b:67:6e:c2:21:b6: 84:6c:1d:0e:8b:48:6f:7c:0f:52:12:f3:76:1f:0e:f7:37:e0: 96:e3:72:8c:fd:81:7d:38:bd:b2:15:88:46:31:e8:d8:bf:33: 07:b6:28:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYwNTIxMDM0NTI5WhcNMjYwNTI4MDM0NTI5WjAYMRYwFAYD VQQDEw02YTBlN2ZkOS00MmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3bV9uTzrgXzYqw+p8Tv1LrdH5npHc7nhm5KPusIv3HiWoRo5nwwu9kY3kmM QsHVnU6uEfP0XIMYN+Tl95zWbtWQwCh7kMgtTq8zTMIQ//kbV4i8o/RaxQWT2MbS x9Irlee2AZVEmJ1NodGpttRXk3ScKhP1ECaPATqtwW9aK2CDDCEBHc3Jb0hkPVqQ OQcvD6gZUaEOTE8he0cDkwpbqr+rX0e9KTKjcsnRsCHpvqH0+jc3uabu2Db0y/OL kxFyHcyPwH2ZYxz5RhzGXp1wqycbm3wVfkDunBXKYnP/Znlfu/a/mk1WrnKK5pxb M+5hqBPg58qptC3KV/3u+aU1TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBFojao GYWuWDoigP30ys7LkLs/MB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV5hJph7ugJb5fllVqqpb+lpGOElPdq+Ty+qXZjP1HjwgJDD2LaZKxfXr7WPb 71khOKtAC11G/YU24tfRL4jhtuiaZTsfontFayAgWmK1bXt+A/m9WUPs71HjpwNo 4g455EHee9uF8zZ3IY8NPzPcmlhzUUtBnY1o6L1wTCLsS61RlqWXqIp9FmAurAoX dIx5mz/BnbH9CvX/gHvY5zo8KIMgKctahJJAYRJeYGsJm/xBTTTnb/h+BkUKizGv +BPFtkAXvkD66SitJdZEnDq52vuvK2duwiG2hGwdDotIb3wPUhLzdh8O9zfgluNy jP2BfTi9shWIRjHo2L8zB7YonA== -----END CERTIFICATE-----Generated at Thu May 21 10:39:57 2026 by rpki-client