$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft File: Xb7wLCg84I1tzonzkSoMMKcBkMg.mft (raw, json) Hash identifier: ahD2YZA1ghwlHIXSaY6SjtVd8RAnrKSKJRAFt5wTylc= Subject key identifier: B0:1C:50:82:F9:66:07:32:8B:2A:F5:B9:62:78:3E:DE:DC:5C:40:EF Authority key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 Certificate issuer: /CN=A91E3E8B/serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft Manifest number: 64 Signing time: Thu 21 May 2026 08:04:34 +0000 Manifest this update: Thu 21 May 2026 08:04:34 +0000 Manifest next update: Thu 28 May 2026 08:04:34 +0000 Files and hashes: 1: Xb7wLCg84I1tzonzkSoMMKcBkMg.crl (hash: UuPeIDBxgZLocoguZGV66Obtjxvcx94fBiYVhhzbuws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Validity Not Before: May 21 08:04:34 2026 GMT Not After : May 28 08:04:34 2026 GMT Subject: CN=6a0ebc92-7b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:26:d5:2d:2e:58:2b:74:0d:de:54:cf:d7: 47:0d:5d:f8:50:67:29:a4:f0:93:6d:b6:26:17:4f: b9:a9:01:4f:39:56:8c:5b:98:24:d7:25:18:04:6f: 41:19:21:c1:48:51:1f:04:c2:4d:17:0a:eb:9b:e6: 51:77:d8:0d:e9:2d:91:3d:d7:af:89:ea:64:69:16: d7:15:64:ac:70:db:86:61:dd:33:d8:ea:bd:fb:11: 86:ec:bf:b9:7e:68:ea:10:93:77:bf:6f:f8:01:f0: 55:24:87:f4:bf:bb:89:3e:cf:25:c6:d5:a1:e1:85: 29:7d:78:2e:62:75:95:f6:6e:9b:24:01:eb:69:21: 3e:79:bb:ce:0c:1d:9d:99:92:07:68:b7:31:c0:cd: 72:e7:86:5e:5f:55:33:93:9c:15:b5:d6:28:99:86: 56:37:ae:ae:14:ab:d3:f6:59:ff:59:31:3f:81:55: d3:58:96:e7:99:ed:ca:26:39:5a:7a:8a:4c:65:c9: 12:4f:e0:65:64:93:a5:ae:27:c1:a0:5c:86:dc:af: a2:6d:6e:b6:5e:4f:69:d5:b2:3e:6d:e7:db:c0:ee: 82:d5:1d:d0:63:ce:a1:57:74:cb:b5:e2:f6:54:06: 7b:a5:51:8a:03:0e:69:ab:39:df:f0:6f:dc:88:01: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1C:50:82:F9:66:07:32:8B:2A:F5:B9:62:78:3E:DE:DC:5C:40:EF X509v3 Authority Key Identifier: keyid:5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:1a:c1:f9:e2:db:39:4a:6f:b2:8d:5b:94:b8:fa:b5:29:81: 1f:d7:c6:0a:a5:91:a1:25:e0:12:3c:10:b7:4a:e6:eb:1a:89: 72:ab:94:ac:55:df:bc:b5:5c:e7:25:28:40:25:2d:b3:02:f5: 69:53:24:fe:4d:9a:4e:e1:8f:5b:2d:12:c9:9d:ec:a3:63:48: ff:5c:40:a5:27:3b:24:0e:a0:4f:c8:8a:6f:d1:9d:48:65:07: 8b:8a:7e:40:a7:72:a4:78:a5:06:17:3c:91:9d:de:82:0a:0f: f5:bc:58:7a:f1:4e:1a:ed:f3:be:b9:05:69:d0:33:06:84:ec: ed:3c:24:7c:2f:e0:94:79:67:74:d2:62:c7:fa:8f:c0:b0:99: 0a:90:76:06:5b:53:97:83:c9:80:8e:f2:7b:3c:f4:f2:b0:a1: 3d:a5:fe:34:50:30:5b:cf:ff:d6:05:df:f2:85:f8:02:b4:0a: c6:94:5a:6d:69:77:1f:aa:59:47:a7:3d:8d:a6:84:a1:51:f0: 98:df:57:ed:d8:6b:fb:9c:71:c4:32:d4:f2:cb:32:ad:bd:0d: 94:72:48:f1:8d:6e:19:67:27:69:ac:0c:6f:be:57:ee:c7:bb: 64:3f:f1:83:af:18:bb:22:4f:36:2b:e5:3b:c9:17:ae:5f:60: ec:20:61:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4QjExMC8GA1UEBRMoNURCRUYwMkMyODNDRTA4RDZEQ0U4OUYzOTEyQTBDMzBB NzAxOTBDODAeFw0yNjA1MjEwODA0MzRaFw0yNjA1MjgwODA0MzRaMBgxFjAUBgNV BAMTDTZhMGViYzkyLTdiNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxdibVLS5YK3QN3lTP10cNXfhQZymk8JNttiYXT7mpAU85VoxbmCTXJRgEb0EZ IcFIUR8Ewk0XCuub5lF32A3pLZE916+J6mRpFtcVZKxw24Zh3TPY6r37EYbsv7l+ aOoQk3e/b/gB8FUkh/S/u4k+zyXG1aHhhSl9eC5idZX2bpskAetpIT55u84MHZ2Z kgdotzHAzXLnhl5fVTOTnBW11iiZhlY3rq4Uq9P2Wf9ZMT+BVdNYlueZ7comOVp6 ikxlyRJP4GVkk6WuJ8GgXIbcr6JtbrZeT2nVsj5t59vA7oLVHdBjzqFXdMu14vZU BnulUYoDDmmrOd/wb9yIAb8dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsBxQgvlm BzKLKvW5Yng+3txcQO8wHwYDVR0jBBgwFoAUXb7wLCg84I1tzonzkSoMMKcBkMgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRThCLzA0REUyQjkyQkUy MjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkxdHpvbnprU29NTUtjQmtN Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGI3d0xDZzg0STF0em9uemtTb01NS2NCa01nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RThCLzA0REUyQjkyQkUyMjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkx dHpvbnprU29NTUtjQmtNZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC2GsH54ts5Sm+yjVuUuPq1KYEf18YKpZGhJeASPBC3SubrGolyq5SsVd+8tVzn JShAJS2zAvVpUyT+TZpO4Y9bLRLJneyjY0j/XEClJzskDqBPyIpv0Z1IZQeLin5A p3KkeKUGFzyRnd6CCg/1vFh68U4a7fO+uQVp0DMGhOztPCR8L+CUeWd00mLH+o/A sJkKkHYGW1OXg8mAjvJ7PPTysKE9pf40UDBbz//WBd/yhfgCtArGlFptaXcfqllH pz2NpoShUfCY31ft2Gv7nHHEMtTyyzKtvQ2UckjxjW4ZZydprAxvvlfux7tkP/GD rxi7Ik82K+U7yReuX2DsIGHD -----END CERTIFICATE-----Generated at Thu May 21 10:23:59 2026 by rpki-client