$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json) Hash identifier: hVR6d0XjD27wCfNk/ZWmZ4bzg6WHZyLt2A/XFiCInt0= Subject key identifier: 34:C5:10:A4:A8:89:40:E7:A2:D6:7F:A9:C4:9F:DD:89:AD:0C:ED:50 Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Certificate serial: 239F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft Manifest number: 2384 Signing time: Wed 20 May 2026 15:49:37 +0000 Manifest this update: Wed 20 May 2026 15:49:37 +0000 Manifest next update: Wed 27 May 2026 15:49:37 +0000 Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: y0PqlRuHKjjswrwH8YJpM3onShBTXMxYXICL8TdHd74=) 2: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (hash: R5xEKjp2COzsPx07QmJ9ZHVVMUSggpYYD3FgaBWcVMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9119 (0x239f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Validity Not Before: May 20 15:49:37 2026 GMT Not After : May 27 15:49:37 2026 GMT Subject: CN=6a0dd811-5a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:29:b0:83:ed:03:2d:6d:48:8c:4a:a6:6b: 2d:fe:47:e0:0e:e5:79:4c:2c:06:a1:78:48:89:97: aa:59:6f:45:1b:d0:7e:c1:42:94:99:6c:a1:92:ad: 2a:ca:c1:7b:90:cb:5e:88:d9:ba:67:0e:2a:d7:80: b1:e9:98:fa:a0:b4:77:cc:c4:17:81:6d:cc:3e:cf: ce:42:cc:87:9b:74:18:91:6e:09:fe:28:07:88:f4: 3b:16:7e:74:f3:13:e7:43:10:46:46:b8:c1:b6:9d: 29:30:ae:d4:03:df:15:7b:1d:c8:38:95:a2:e8:4a: 55:94:cc:64:0d:c8:4a:81:be:19:01:a6:34:c9:e8: 86:74:bc:38:10:83:9d:8e:3c:ef:85:82:f4:47:47: 1d:1d:0c:ed:9b:c1:1f:4e:5f:77:61:83:02:cf:c0: 28:32:14:b6:02:60:40:42:0f:0e:ff:30:0a:74:b8: c6:13:71:64:81:27:83:9a:86:23:a1:2e:c5:64:09: 0b:52:46:c6:ff:b2:e9:4f:d6:64:ce:10:f2:15:fd: a4:8c:5f:ef:59:43:db:60:97:bf:75:a8:d5:05:5b: 41:4c:a6:e2:d0:77:5b:26:5a:12:71:4e:0f:f3:3b: a2:56:62:01:90:ed:48:b4:25:af:0f:f2:1c:3a:8e: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:10:A4:A8:89:40:E7:A2:D6:7F:A9:C4:9F:DD:89:AD:0C:ED:50 X509v3 Authority Key Identifier: keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:09:9a:c6:ba:b4:ea:9d:9c:ae:41:1c:f6:68:73:f6:e3:2b: bf:17:1e:06:ca:1f:82:c3:ad:a4:41:4f:a4:e4:cd:05:47:48: 24:31:8a:49:24:10:01:66:7e:f8:4f:0d:a8:2f:f7:c1:16:21: e1:33:f0:67:fb:1d:10:25:9d:d3:45:03:32:6b:14:79:c4:a6: 5f:0e:48:e1:59:4e:d8:eb:07:f8:2c:60:ed:98:42:9e:48:6e: fb:85:a4:64:c2:4c:96:aa:d9:76:c4:86:18:56:6c:c9:f0:af: ac:24:02:ee:fd:ce:fe:4b:8f:b0:32:ad:08:ab:fb:7f:c1:01: b7:d8:6e:a6:57:21:7e:7d:92:ba:b0:ad:25:8a:91:73:99:d5: 67:32:6c:19:0c:5e:56:d3:c3:9e:6a:3f:15:67:fa:9d:e6:d8: 00:45:ea:2b:f7:4c:12:6e:24:37:49:de:a0:ba:35:6f:c9:43: f7:79:00:ad:9c:a0:e2:99:20:18:a0:d5:c9:59:7d:bc:40:cb: 91:bd:b7:51:3e:7e:ec:39:26:61:d5:80:39:de:b2:2e:28:4d: 6a:59:64:46:10:9d:f0:ed:cc:46:e5:0c:35:cd:8a:71:55:47: a2:3c:de:d8:d8:8a:d4:2a:8f:7b:ea:11:9c:7a:6e:a2:bc:a1: 45:b3:ed:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxMDcxMTAvBgNVBAUTKDVFNkI1QTA2ODZGNTZCQTBDMEY3N0ZCM0JGMzFCMzg1 NjMyMjA4MjQwHhcNMjYwNTIwMTU0OTM3WhcNMjYwNTI3MTU0OTM3WjAYMRYwFAYD VQQDEw02YTBkZDgxMS01YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJUpsIPtAy1tSIxKpmst/kfgDuV5TCwGoXhIiZeqWW9FG9B+wUKUmWyhkq0q ysF7kMteiNm6Zw4q14Cx6Zj6oLR3zMQXgW3MPs/OQsyHm3QYkW4J/igHiPQ7Fn50 8xPnQxBGRrjBtp0pMK7UA98Vex3IOJWi6EpVlMxkDchKgb4ZAaY0yeiGdLw4EIOd jjzvhYL0R0cdHQztm8EfTl93YYMCz8AoMhS2AmBAQg8O/zAKdLjGE3FkgSeDmoYj oS7FZAkLUkbG/7LpT9ZkzhDyFf2kjF/vWUPbYJe/dajVBVtBTKbi0HdbJloScU4P 8zuiVmIBkO1ItCWvD/IcOo5y8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTFEKSo iUDnotZ/qcSf3YmtDO1QMB8GA1UdIwQYMBaAFF5rWgaG9WugwPd/s78xs4VjIggk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTEwNy9FRTM1QzQ0NjlF NjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2REE5My16dnpHemhXTWlD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1htdGFCb2IxYTZEQTkzLXp2ekd6aFdNaUNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTEwNy9FRTM1QzQ0NjlFNjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2 REE5My16dnpHemhXTWlDQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABgmaxrq06p2crkEc9mhz9uMrvxceBsofgsOtpEFPpOTNBUdIJDGKSSQQAWZ+ +E8NqC/3wRYh4TPwZ/sdECWd00UDMmsUecSmXw5I4VlO2OsH+Cxg7ZhCnkhu+4Wk ZMJMlqrZdsSGGFZsyfCvrCQC7v3O/kuPsDKtCKv7f8EBt9huplchfn2SurCtJYqR c5nVZzJsGQxeVtPDnmo/FWf6nebYAEXqK/dMEm4kN0neoLo1b8lD93kArZyg4pkg GKDVyVl9vEDLkb23UT5+7DkmYdWAOd6yLihNallkRhCd8O3MRuUMNc2KcVVHojze 2NiK1CqPe+oRnHpuoryhRbPtSA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:23 2026 by rpki-client