$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: Sl8+NYqB93yfPRMzoUNyr7073YsJGYvnSMqwI+wVEZ4= Subject key identifier: 40:B3:1C:8D:79:B0:58:0C:29:FC:C2:D8:06:D1:AD:3A:09:C6:18:7D Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 0424 Signing time: Fri 15 May 2026 00:28:13 +0000 Manifest this update: Fri 15 May 2026 00:28:13 +0000 Manifest next update: Fri 22 May 2026 00:28:13 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: f5pXSNoFeCkLccmJQJFlxXhulOkwwUlhs+UqWOpS6EY=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: M48TTuq9ADhSv++/MbWv3dwOfaMFDhRB8S7kdUoR+jQ=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: uIe065ouSrK1ZyYaAyKs/pdPmvRv0EpPK089oDcTECA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: May 15 00:28:13 2026 GMT Not After : May 22 00:28:13 2026 GMT Subject: CN=6a06689d-afd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:95:9b:83:0d:b5:a2:36:1f:95:8f:f6:e6: 92:26:13:e8:d6:c3:4a:13:d9:0a:57:02:e7:94:45: b8:de:7a:7a:81:ce:ce:4d:91:92:1c:da:3a:75:dd: 6d:95:21:bb:7d:b3:18:67:70:7b:6f:09:e5:b6:cd: ff:f1:f7:39:6d:47:30:eb:1a:92:36:0e:6a:95:33: 64:56:d9:3e:65:68:11:84:e2:1b:19:e4:83:cd:56: a9:27:08:67:1c:c0:40:84:bb:b1:85:e7:82:53:5c: 47:94:db:e0:a6:fd:a2:48:a3:8e:45:e3:7f:41:5c: 7a:5b:bb:ef:c3:c9:80:d9:d5:14:1a:fa:1d:5d:f7: b6:09:ef:2d:1f:6a:e3:e8:5a:e5:4b:05:26:4b:f3: ba:db:5b:84:d5:75:46:dc:cb:72:a7:5b:ee:a8:c1: 55:11:9c:39:0e:3e:60:f1:16:91:84:e7:ad:fc:af: cc:3c:c9:ae:65:79:5b:41:6c:b6:81:8e:3a:f7:2a: fc:f5:c0:9a:94:96:e8:7e:c8:eb:ad:89:4f:92:95: 50:37:d9:b7:42:d9:fd:68:1d:be:6b:3c:d5:1c:b2: 48:8f:91:3a:be:cb:73:23:06:65:c3:73:4f:22:83: f8:95:43:16:16:c2:05:bf:0c:1e:ea:20:bd:73:1a: 09:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:1C:8D:79:B0:58:0C:29:FC:C2:D8:06:D1:AD:3A:09:C6:18:7D X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c1:ff:aa:9c:13:8e:e7:fa:36:0e:2a:e2:b1:77:ba:da:23: 66:a4:ce:ed:2f:93:7f:93:9b:15:8b:af:f2:d3:31:31:f8:08: 88:98:b2:f9:52:be:7e:a1:8e:79:13:6b:7b:71:a7:e9:3a:ff: d2:63:b8:0b:0b:f6:05:e5:a0:5b:f0:c2:c0:6c:4a:c6:e5:2d: 04:14:14:7d:61:50:59:85:9c:7a:1f:dc:36:17:a0:a1:ab:78: e4:03:a0:61:b7:3a:45:63:ff:44:86:be:7f:73:17:9c:e2:5d: 55:3c:50:5d:94:f7:38:50:d9:ad:09:d1:88:d8:bb:16:0f:fb: 2a:a8:50:ba:63:87:cd:fe:56:31:c2:f1:7c:af:d0:3c:97:ee: ec:86:e0:f6:da:ec:7c:ea:3c:d4:b8:66:90:8d:73:83:b4:25: 23:9e:c4:4b:05:b2:86:95:1e:be:76:05:ae:e8:3c:9d:a0:6b: c9:24:79:df:5c:69:2e:b8:65:ae:e9:f5:b1:94:aa:2b:e5:fd: 6b:fc:5d:25:75:c7:0b:99:35:45:f9:e7:aa:2f:ad:da:2d:af: 94:aa:e4:cc:de:69:5c:d2:e6:bd:ad:04:9b:e1:65:e0:22:2b: a6:bb:17:ad:83:c8:54:14:c7:14:3b:3d:d5:08:57:29:97:94: 4e:aa:7b:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjYwNTE1MDAyODEzWhcNMjYwNTIyMDAyODEzWjAYMRYwFAYD VQQDEw02YTA2Njg5ZC1hZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7aVm4MNtaI2H5WP9uaSJhPo1sNKE9kKVwLnlEW43np6gc7OTZGSHNo6dd1t lSG7fbMYZ3B7bwnlts3/8fc5bUcw6xqSNg5qlTNkVtk+ZWgRhOIbGeSDzVapJwhn HMBAhLuxheeCU1xHlNvgpv2iSKOOReN/QVx6W7vvw8mA2dUUGvodXfe2Ce8tH2rj 6FrlSwUmS/O621uE1XVG3Mtyp1vuqMFVEZw5Dj5g8RaRhOet/K/MPMmuZXlbQWy2 gY469yr89cCalJbofsjrrYlPkpVQN9m3Qtn9aB2+azzVHLJIj5E6vstzIwZlw3NP IoP4lUMWFsIFvwwe6iC9cxoJawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECzHI15 sFgMKfzC2AbRrToJxhh9MB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmcH/qpwTjuf6Ng4q4rF3utojZqTO7S+Tf5ObFYuv8tMxMfgIiJiy+VK+fqGO eRNre3Gn6Tr/0mO4Cwv2BeWgW/DCwGxKxuUtBBQUfWFQWYWceh/cNhegoat45AOg Ybc6RWP/RIa+f3MXnOJdVTxQXZT3OFDZrQnRiNi7Fg/7KqhQumOHzf5WMcLxfK/Q PJfu7Ibg9trsfOo81LhmkI1zg7QlI57ESwWyhpUevnYFrug8naBrySR531xpLrhl run1sZSqK+X9a/xdJXXHC5k1Rfnnqi+t2i2vlKrkzN5pXNLmva0Em+Fl4CIrprsX rYPIVBTHFDs91QhXKZeUTqp7wQ== -----END CERTIFICATE-----Generated at Fri May 15 17:46:08 2026 by rpki-client