$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: e3ZjlnqYwg1+uuTYzEGleCOtFumOq4Q3SssLhftxfDI= Subject key identifier: 59:24:28:F9:87:26:9D:AF:3E:4A:DD:09:78:54:3A:3E:71:6E:63:3F Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 0242 Signing time: Thu 21 May 2026 02:30:43 +0000 Manifest this update: Thu 21 May 2026 02:30:42 +0000 Manifest next update: Thu 28 May 2026 02:30:42 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: xZcY4+R1ZiT+/iy/aE3kvB0poP0p4mq+3wzcqbiJofs=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: May 21 02:30:42 2026 GMT Not After : May 28 02:30:42 2026 GMT Subject: CN=6a0e6e52-53ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:64:a1:ef:2d:26:23:42:d1:3c:39:0c:09: 48:fc:a3:73:c3:ab:40:52:1a:a9:cc:f6:b0:44:da: 97:c0:ca:a5:e0:69:ee:8a:93:6a:a6:6b:4b:f7:2c: fa:ff:8f:6d:ec:d3:34:f6:63:6c:03:96:e7:d6:b8: a2:6d:36:b1:3e:38:6b:32:ba:a1:12:ea:49:6e:63: f8:e6:c8:dd:d4:3b:3c:17:61:8f:2e:3a:73:50:0d: a7:2a:f3:14:d1:86:65:9a:59:69:58:ca:64:58:aa: b3:4e:7a:25:b9:12:7b:3b:6b:3a:4d:3d:0f:41:fa: 03:f9:86:6a:c1:68:46:e9:61:01:50:44:cc:6c:15: 4d:91:96:32:6e:79:24:4f:ca:f5:91:ef:fc:96:50: 9b:49:d6:55:85:fa:0b:b8:09:74:63:01:0a:e2:41: f1:25:5a:73:6e:7d:86:2d:08:0b:67:3c:7d:4c:c1: 0c:a6:88:6e:65:c9:c1:f9:8f:bd:93:26:a5:22:e2: df:d3:34:40:7d:f0:c4:58:e3:40:5e:1e:a8:5b:24: b5:7d:47:24:79:80:81:54:b6:5a:90:96:eb:23:4f: 06:9e:0c:f7:22:b0:b8:21:01:00:0a:c4:a4:4d:6c: ec:5c:51:4d:1d:1a:d6:c1:a1:07:05:5a:f0:f2:bb: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:28:F9:87:26:9D:AF:3E:4A:DD:09:78:54:3A:3E:71:6E:63:3F X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:6c:77:00:63:b3:d1:3a:1d:25:67:f5:96:0d:67:de:bb:10: 6f:56:72:b8:0e:7e:50:19:67:ae:35:eb:67:5d:ed:f1:6c:7b: 45:57:f4:7b:4b:e1:0a:46:95:3a:02:de:de:82:ef:7f:91:73: 72:06:f5:9c:eb:7d:17:55:6a:5f:5a:b8:ea:d9:46:27:e4:b1: 56:79:fa:68:b6:af:d7:40:0b:a4:ce:77:a3:1d:54:f7:45:06: cf:4f:a8:ff:c0:3c:95:18:d7:c7:d9:c1:72:a4:68:05:81:6a: 3d:a3:d1:1a:a0:ef:73:1b:a5:04:eb:41:54:00:09:42:af:4b: c9:c7:9e:af:83:df:d4:55:16:42:34:91:87:6c:83:56:12:d1: 7a:99:da:85:89:80:32:dc:61:0a:69:21:c9:a6:98:ef:ab:1e: 95:27:aa:d0:51:2a:05:1f:ce:ce:89:0c:51:6f:b5:14:0e:7b: 23:29:4c:4e:d5:ca:6d:5a:a1:83:8b:c3:4d:13:8f:63:6d:97: 97:c8:2d:0d:7d:eb:d0:9d:d8:e0:1a:4c:b2:ec:f7:30:3a:cf: 96:d1:77:4a:f9:1c:38:c1:d1:d3:91:51:07:e4:94:49:23:60: 06:62:b1:ad:e3:9b:84:99:38:c2:b8:75:59:85:fe:d2:7a:b9: c0:cc:df:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjYwNTIxMDIzMDQyWhcNMjYwNTI4MDIzMDQyWjAYMRYwFAYD VQQDEw02YTBlNmU1Mi01M2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Shkoe8tJiNC0Tw5DAlI/KNzw6tAUhqpzPawRNqXwMql4GnuipNqpmtL9yz6 /49t7NM09mNsA5bn1riibTaxPjhrMrqhEupJbmP45sjd1Ds8F2GPLjpzUA2nKvMU 0YZlmllpWMpkWKqzTnoluRJ7O2s6TT0PQfoD+YZqwWhG6WEBUETMbBVNkZYybnkk T8r1ke/8llCbSdZVhfoLuAl0YwEK4kHxJVpzbn2GLQgLZzx9TMEMpohuZcnB+Y+9 kyalIuLf0zRAffDEWONAXh6oWyS1fUckeYCBVLZakJbrI08Gngz3IrC4IQEACsSk TWzsXFFNHRrWwaEHBVrw8ruENQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkkKPmH Jp2vPkrdCXhUOj5xbmM/MB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhGx3AGOz0TodJWf1lg1n3rsQb1ZyuA5+UBlnrjXrZ13t8Wx7RVf0e0vhCkaV OgLe3oLvf5Fzcgb1nOt9F1VqX1q46tlGJ+SxVnn6aLav10ALpM53ox1U90UGz0+o /8A8lRjXx9nBcqRoBYFqPaPRGqDvcxulBOtBVAAJQq9Lyceer4Pf1FUWQjSRh2yD VhLRepnahYmAMtxhCmkhyaaY76selSeq0FEqBR/OzokMUW+1FA57IylMTtXKbVqh g4vDTROPY22Xl8gtDX3r0J3Y4BpMsuz3MDrPltF3SvkcOMHR05FRB+SUSSNgBmKx reObhJk4wrh1WYX+0nq5wMzfYA== -----END CERTIFICATE-----Generated at Thu May 21 09:37:46 2026 by rpki-client