$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json) Hash identifier: 8aV4LTayuYqW6Y4ZS7gQTNAcAu6M3gUozf1r+kpcLJc= Subject key identifier: 2A:65:1A:B4:67:AB:1E:0B:84:3B:B7:34:28:E3:21:A1:FE:63:18:20 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft Manifest number: 06A7 Signing time: Tue 12 May 2026 22:43:35 +0000 Manifest this update: Tue 12 May 2026 22:43:35 +0000 Manifest next update: Tue 19 May 2026 22:43:35 +0000 Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: hO5smyJspumwlLvKu1zBprGmWpDZ8qgKoJnp8MsK4YU=) 2: 70A511E6ECD111F09C92E5176E6F56BC.roa (hash: 4kvY15kmoRibeYszxVkHrvlLmTn2DqrfKOexn1KZ4Sw=) 3: 9B31D1A6345C11F1B54BE2329F833773.roa (hash: O65ZieU0flTwQCli9NuypBP6hkJ+OicNVNagDUX/Pqo=) 4: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: 20QRaNN5HpjNTE0DjTJaVPeRVD8X2idK/zhTnjiKhQE=) 5: D4A6E66C184411F1A6C9F001253D8C67.roa (hash: RCo97+BQ7c4x9Y7DEYvpGWpLOBI7K1vi8X0A+4tNDLU=) 6: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: LJUjSG4B9nMQjlI/SiJALAQkrtQ8jXDsff/H6xkFjlE=) 7: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: j6RfXO6V8txTwl+e1nfWngitaMdhNY8igbMKNAWQnn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: May 12 22:43:35 2026 GMT Not After : May 19 22:43:35 2026 GMT Subject: CN=6a03ad17-582e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:6d:e1:b3:ff:08:b3:39:fd:a7:0f:02:da: 59:95:f9:20:33:55:29:53:5b:c1:fd:0c:3f:05:d3: 9f:af:34:b1:40:d1:a6:ee:7e:e4:d1:1d:6f:50:8a: 81:d7:f8:6a:5b:51:e2:10:7a:cc:19:b0:9b:f5:d5: ef:04:02:a4:a7:9e:2b:d0:c8:d5:6c:3f:a3:57:f3: 12:43:6e:19:18:ec:9c:ba:33:07:8a:2a:a4:fc:53: fa:8b:d4:da:be:b9:1f:ad:06:0b:18:7d:42:0d:c7: 28:fb:74:bf:99:14:fe:bc:e8:4a:b1:80:fc:c4:ff: 2b:09:1a:04:0c:f2:c1:ca:b4:b4:49:42:2d:90:34: 66:e2:09:78:27:ae:c3:99:89:1b:76:78:7e:d2:0e: f3:a1:63:35:43:ce:47:a6:70:29:05:eb:06:2f:82: bb:9c:8c:75:a0:29:55:e7:9d:a4:cf:60:34:c6:cf: bc:0a:47:a8:19:d2:56:77:c6:e2:8d:84:70:32:01: 6c:b5:62:f3:1f:c1:52:2a:7e:35:49:bc:b8:6e:5f: ee:0c:44:ab:ef:89:23:5f:ca:0c:06:cf:8a:27:d7: 5a:bd:29:ca:b1:c6:6c:82:6d:be:dc:77:7a:a3:b9: 77:97:63:af:9e:22:8b:7f:1f:91:96:dd:cd:2a:7c: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:65:1A:B4:67:AB:1E:0B:84:3B:B7:34:28:E3:21:A1:FE:63:18:20 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fd:93:21:5c:1c:91:51:3e:00:60:83:66:62:e2:9c:7f:f2: 31:d2:85:d9:8e:a6:6d:8c:b3:47:ed:f9:3d:64:3c:fc:c0:9f: 9a:e3:11:95:74:dc:31:cd:a9:08:3f:4d:d8:5d:23:63:d4:c4: a5:06:b8:c1:cc:a7:68:7e:fe:4b:15:b0:b0:28:a6:45:56:e9: 0a:e2:99:d8:c5:b8:53:8f:66:d5:df:48:7a:5d:e1:b1:20:03: 5a:11:67:cd:47:d4:1a:d7:02:c9:f9:64:63:a4:54:b7:ba:5b: e3:bc:5c:8c:78:77:dc:ef:ab:33:65:20:7f:70:bd:28:c3:db: 92:27:d9:f9:e9:a3:17:8e:5b:40:23:50:c9:a5:3e:fa:70:95: 36:3b:6c:4c:ae:16:db:62:42:d5:45:85:87:fa:c7:8a:d3:05: 90:d2:d3:bd:be:80:b9:3b:3c:a7:f3:91:47:f2:ff:a4:cb:2d: 87:04:71:fd:6a:8b:07:1f:c3:4b:04:b4:c3:63:ac:d1:86:b3: 49:9e:5e:ca:21:4c:7b:5b:52:f6:8a:10:2e:fb:2d:53:a3:8e: 23:08:23:98:db:c0:c7:f3:4e:4a:e5:31:2f:95:13:f3:fb:ef: 12:97:14:60:94:6a:e0:aa:06:86:a6:9f:2c:88:16:f0:2e:fd: 1a:d6:27:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjYwNTEyMjI0MzM1WhcNMjYwNTE5MjI0MzM1WjAYMRYwFAYD VQQDEw02YTAzYWQxNy01ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZZt4bP/CLM5/acPAtpZlfkgM1UpU1vB/Qw/BdOfrzSxQNGm7n7k0R1vUIqB 1/hqW1HiEHrMGbCb9dXvBAKkp54r0MjVbD+jV/MSQ24ZGOycujMHiiqk/FP6i9Ta vrkfrQYLGH1CDcco+3S/mRT+vOhKsYD8xP8rCRoEDPLByrS0SUItkDRm4gl4J67D mYkbdnh+0g7zoWM1Q85HpnApBesGL4K7nIx1oClV552kz2A0xs+8CkeoGdJWd8bi jYRwMgFstWLzH8FSKn41Sby4bl/uDESr74kjX8oMBs+KJ9davSnKscZsgm2+3Hd6 o7l3l2OvniKLfx+Rlt3NKnx9uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCplGrRn qx4LhDu3NCjjIaH+YxggMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDNGMy9CMjU0NDgxQUNBMzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXky ejJWdkpyZ29MX3VlWXZrMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmP2TIVwckVE+AGCDZmLinH/yMdKF2Y6mbYyzR+35PWQ8/MCfmuMRlXTcMc2p CD9N2F0jY9TEpQa4wcynaH7+SxWwsCimRVbpCuKZ2MW4U49m1d9Iel3hsSADWhFn zUfUGtcCyflkY6RUt7pb47xcjHh33O+rM2Ugf3C9KMPbkifZ+emjF45bQCNQyaU+ +nCVNjtsTK4W22JC1UWFh/rHitMFkNLTvb6AuTs8p/ORR/L/pMsthwRx/WqLBx/D SwS0w2Os0YazSZ5eyiFMe1tS9ooQLvstU6OOIwgjmNvAx/NOSuUxL5UT8/vvEpcU YJRq4KoGhqafLIgW8C79GtYnwA== -----END CERTIFICATE-----Generated at Wed May 13 05:18:55 2026 by rpki-client