$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: yDVvMCg9pQdsRfhOwKD6Gj6U9i2AbL7azjS00MTZjDA= Subject key identifier: E8:93:53:80:22:32:1F:A8:54:A1:74:27:6E:11:27:D2:57:92:31:F7 Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 02A0 Signing time: Wed 13 May 2026 01:48:04 +0000 Manifest this update: Wed 13 May 2026 01:48:04 +0000 Manifest next update: Wed 20 May 2026 01:48:04 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: xx1zXcRdvEcuKZiQXXeN60Q4mep6XPAh00Iogpc8P4c=) 2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: 9NOA2GTvOZu45DJO8iVx216gsk/ZwT1Y1rufuhTNiUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: May 13 01:48:04 2026 GMT Not After : May 20 01:48:04 2026 GMT Subject: CN=6a03d854-3cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:3e:59:2b:16:22:4d:73:d5:66:17:ff:2f: 29:3b:39:d7:16:cf:e3:50:39:17:fa:0e:25:34:1c: 0f:b3:da:ac:7e:8e:b6:a7:48:3c:37:4d:27:19:1f: 55:f2:cb:8c:55:b9:75:f4:65:60:9b:3f:96:bb:12: 55:7d:e5:17:4a:5c:19:aa:44:b4:26:02:aa:4b:8b: c4:54:84:ed:cb:46:85:fb:1a:1e:0d:7f:a2:5e:72: 5d:f7:2b:3d:63:30:f9:87:92:ad:7b:f0:78:35:a9: a5:ca:7f:b5:88:39:25:43:53:ff:a8:08:9d:ae:3d: 71:bb:e4:11:9e:11:92:4c:5e:0a:80:94:98:5a:9d: 24:19:2c:ae:9c:09:03:ff:0f:6e:db:12:07:0e:7b: 9d:a0:46:3e:aa:40:3f:66:92:1d:9c:63:8e:2e:2b: 86:ae:34:1d:19:fb:44:33:cb:e3:c0:e5:70:44:d3: e6:e8:79:e6:7c:a5:e4:89:57:f3:28:5d:d8:72:a5: d4:e8:5e:b7:2d:18:81:eb:79:66:b9:fb:7e:0d:e4: b3:03:18:d5:75:8d:36:c2:d9:e9:c4:cc:c7:2e:19: da:91:84:b5:77:97:36:4a:1b:1e:0b:39:1f:7a:c4: 38:66:91:79:82:90:e1:d9:d5:f8:68:43:28:00:6e: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:93:53:80:22:32:1F:A8:54:A1:74:27:6E:11:27:D2:57:92:31:F7 X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:02:b2:9c:5e:61:58:40:44:ef:62:ae:d4:85:d9:02:e8:84: 71:c5:b4:cf:1f:48:25:f3:19:74:5b:ac:99:73:d0:92:9c:52: dc:2d:21:9e:81:96:82:df:a4:a0:4d:e6:17:c5:14:1f:73:34: 5c:8d:13:47:4a:64:d3:32:0e:17:2b:8e:65:6d:13:20:18:ba: 3d:62:a4:9f:bb:3f:e3:23:0c:3a:6a:3c:94:a6:37:17:f3:5d: a0:9b:d2:47:93:c5:ba:bf:47:af:80:84:bc:c9:ee:44:d0:cc: 77:2f:e0:8a:08:05:58:74:fb:f3:68:9f:1d:ed:42:a6:76:af: 27:4f:10:da:6a:a1:e0:0f:2f:9d:ec:f9:4b:1d:1d:e9:95:7d: 26:37:4c:e9:82:23:28:e6:5d:b9:8c:19:27:b7:34:2a:8e:83: 59:1b:99:c5:e7:f2:9b:c5:80:bf:32:a5:46:7f:d1:f2:f2:2d: 71:da:9a:38:3e:24:75:c2:02:91:98:81:b0:78:3f:0f:61:7b: 83:82:fd:7e:2e:64:2d:1c:e3:b0:6e:1f:67:46:f9:65:75:13: 80:68:31:3e:ee:dc:11:75:16:36:b3:da:e8:85:3d:28:3c:3e: 78:95:c5:21:67:da:d3:76:ef:cd:10:15:b0:82:7d:7b:4f:17: 77:ed:5a:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjYwNTEzMDE0ODA0WhcNMjYwNTIwMDE0ODA0WjAYMRYwFAYD VQQDEw02YTAzZDg1NC0zY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOM+WSsWIk1z1WYX/y8pOznXFs/jUDkX+g4lNBwPs9qsfo62p0g8N00nGR9V 8suMVbl19GVgmz+WuxJVfeUXSlwZqkS0JgKqS4vEVITty0aF+xoeDX+iXnJd9ys9 YzD5h5Kte/B4Namlyn+1iDklQ1P/qAidrj1xu+QRnhGSTF4KgJSYWp0kGSyunAkD /w9u2xIHDnudoEY+qkA/ZpIdnGOOLiuGrjQdGftEM8vjwOVwRNPm6HnmfKXkiVfz KF3YcqXU6F63LRiB63lmuft+DeSzAxjVdY02wtnpxMzHLhnakYS1d5c2ShseCzkf esQ4ZpF5gpDh2dX4aEMoAG7I0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiTU4Ai Mh+oVKF0J24RJ9JXkjH3MB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdwKynF5hWEBE72Ku1IXZAuiEccW0zx9IJfMZdFusmXPQkpxS3C0hnoGWgt+k oE3mF8UUH3M0XI0TR0pk0zIOFyuOZW0TIBi6PWKkn7s/4yMMOmo8lKY3F/NdoJvS R5PFur9Hr4CEvMnuRNDMdy/giggFWHT782ifHe1CpnavJ08Q2mqh4A8vnez5Sx0d 6ZV9JjdM6YIjKOZduYwZJ7c0Ko6DWRuZxefym8WAvzKlRn/R8vItcdqaOD4kdcIC kZiBsHg/D2F7g4L9fi5kLRzjsG4fZ0b5ZXUTgGgxPu7cEXUWNrPa6IU9KDw+eJXF IWfa03bvzRAVsIJ9e08Xd+1aDQ== -----END CERTIFICATE-----Generated at Wed May 13 03:45:40 2026 by rpki-client