$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: gXp9WONcNxeHHdB/sevQjDzZv+IcI4ovho22BhSCs6o= Subject key identifier: 51:F1:3F:9E:C0:45:8B:83:CE:81:07:8F:F0:F6:1C:41:B8:6A:48:72 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 0E Signing time: Fri 05 Jun 2026 09:33:21 +0000 Manifest this update: Fri 05 Jun 2026 09:33:20 +0000 Manifest next update: Fri 12 Jun 2026 09:33:20 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: 8Vv6MZDhUizC9I1pVauTNyodgIXcNkqPp9WUhlx1+GU=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: aSvFINVvPGG0gnxFG3kmdfj7WoAkgDA4x7vxEipsK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Jun 5 09:33:20 2026 GMT Not After : Jun 12 09:33:20 2026 GMT Subject: CN=6a2297e0-4bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:62:27:a0:00:a0:8e:17:4e:89:ae:dc:ab: 12:d4:fe:a9:c9:1c:d8:30:b9:8b:c5:8f:22:fe:ff: b3:48:4e:90:d1:20:a4:f3:17:84:4c:71:8b:96:e1: e7:15:a8:93:23:5c:4e:18:36:0d:42:50:db:fd:23: 1d:df:14:8c:54:98:e0:9d:e3:bd:56:37:82:58:95: 69:08:f0:cf:4d:9c:a1:54:da:f3:9b:68:02:e9:35: 78:cd:a5:f5:b9:a0:f7:44:44:9d:cb:2c:53:21:14: 41:1a:9f:55:14:91:7f:1a:4b:aa:7f:65:1c:1a:b3: ed:67:af:01:98:6a:05:64:ce:62:f8:d6:38:cc:03: 9a:59:91:09:80:0c:1f:2f:3d:e0:4f:b1:27:3f:63: e1:40:4c:6f:6c:8d:33:fc:2a:20:52:50:b5:85:f9: 1e:b8:87:9c:5e:20:f4:41:a6:8a:e6:70:24:2b:59: db:6c:3c:a5:a4:21:f6:12:3b:ad:dc:68:07:dc:67: eb:ae:da:9c:f4:1f:43:e1:24:d2:8c:3a:e8:ba:b6: dc:35:f8:35:74:14:1d:3b:23:e5:cb:10:3d:f8:56: 8c:d4:41:4e:85:4b:3b:3e:90:03:01:70:90:82:17: af:1f:17:dd:c0:7e:30:4d:bc:7f:62:6e:a1:5e:80: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:3F:9E:C0:45:8B:83:CE:81:07:8F:F0:F6:1C:41:B8:6A:48:72 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:29:f2:69:f7:82:59:72:f0:5c:4d:c9:c6:fe:f8:26:33:d2: af:6f:f3:ba:32:2a:92:1d:db:44:69:dd:99:d9:8f:1c:df:4e: 0f:52:ec:19:d5:a9:95:d5:d6:2c:64:56:37:c0:19:d0:1f:c2: 4d:43:80:d0:4e:f2:45:f6:d4:bd:29:f7:c4:15:a0:16:6e:af: ce:04:41:38:60:2a:b9:86:b7:f9:d0:3b:1e:1a:7c:c1:c2:f9: e3:f9:52:27:4b:e4:11:8f:86:d6:42:50:ca:b3:d1:88:3f:e4: 44:ac:8e:a1:96:2a:01:60:03:bb:0a:b6:b5:3e:9a:12:b3:8f: 1c:1a:57:91:1b:9f:2a:f2:d2:17:a9:18:9d:90:47:eb:ad:b9: 1e:d1:c7:3f:06:97:b0:9a:b2:b9:53:06:24:34:fa:fa:60:2e: 6d:f0:7f:c9:3d:b4:ce:a9:ba:95:1c:fb:38:7d:75:76:f7:25: 3c:50:b3:03:c7:48:a6:94:81:80:f5:6d:11:dd:36:42:15:9f: 6e:b3:4b:2b:14:1c:46:12:ba:3c:70:ee:6e:4c:75:16:ec:1a: 2d:bc:62:4a:0f:69:f4:81:6e:a5:95:8f:79:c7:76:fb:9c:6f: d8:3c:53:27:a6:1c:d7:7b:b7:fc:73:d6:ee:53:7d:d5:b5:70: 30:89:8f:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA2MDUwOTMzMjBaFw0yNjA2MTIwOTMzMjBaMBgxFjAUBgNV BAMTDTZhMjI5N2UwLTRiY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOY2InoACgjhdOia7cqxLU/qnJHNgwuYvFjyL+/7NITpDRIKTzF4RMcYuW4ecV qJMjXE4YNg1CUNv9Ix3fFIxUmOCd471WN4JYlWkI8M9NnKFU2vObaALpNXjNpfW5 oPdERJ3LLFMhFEEan1UUkX8aS6p/ZRwas+1nrwGYagVkzmL41jjMA5pZkQmADB8v PeBPsSc/Y+FATG9sjTP8KiBSULWF+R64h5xeIPRBpormcCQrWdtsPKWkIfYSO63c aAfcZ+uu2pz0H0PhJNKMOui6ttw1+DV0FB07I+XLED34VozUQU6FSzs+kAMBcJCC F68fF93AfjBNvH9ibqFegGijAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUfE/nsBF i4POgQeP8PYcQbhqSHIwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNKfJp94JZcvBcTcnG/vgmM9Kvb/O6MiqSHdtEad2Z2Y8c304PUuwZ1amV1dYs ZFY3wBnQH8JNQ4DQTvJF9tS9KffEFaAWbq/OBEE4YCq5hrf50DseGnzBwvnj+VIn S+QRj4bWQlDKs9GIP+RErI6hlioBYAO7Cra1PpoSs48cGleRG58q8tIXqRidkEfr rbke0cc/BpewmrK5UwYkNPr6YC5t8H/JPbTOqbqVHPs4fXV29yU8ULMDx0imlIGA 9W0R3TZCFZ9us0srFBxGEro8cO5uTHUW7BotvGJKD2n0gW6llY95x3b7nG/YPFMn phzXe7f8c9buU33VtXAwiY+y -----END CERTIFICATE-----Generated at Sat Jun 6 10:30:55 2026 by rpki-client