$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: jL59QCSW3BamMkJc0t3puskEFEKTwGQysrjZ3MQYk58= Subject key identifier: 93:3D:43:C2:EE:F1:69:54:F7:36:AB:75:4D:0E:34:52:79:55:87:E9 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 1159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 1138 Signing time: Tue 12 May 2026 17:15:49 +0000 Manifest this update: Tue 12 May 2026 17:15:48 +0000 Manifest next update: Tue 19 May 2026 17:15:48 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: Es9i0xRunQ/ZtopT+rs2vd8oLjf3pGjzCWsq/xHd6NE=) 2: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) 3: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) 4: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4441 (0x1159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: May 12 17:15:48 2026 GMT Not After : May 19 17:15:48 2026 GMT Subject: CN=6a036045-876e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:fe:d0:d2:2a:0a:87:f9:79:9c:e6:5e:2b: 77:7c:04:fe:54:5f:54:df:7c:09:3c:20:25:49:c0: 88:9c:a8:5f:c1:e0:43:25:a6:b8:5f:3f:5e:be:33: 0b:98:84:e0:12:5a:09:57:0c:85:59:cf:2b:4b:7c: b9:10:b5:fd:c6:f0:9d:55:14:c6:ca:60:05:3c:cd: 04:ff:c8:0b:c9:05:ce:a1:0b:31:a3:91:50:5b:0d: c3:b1:cf:0b:6e:80:d3:6a:4d:72:8b:d5:87:36:8e: 2b:92:10:03:ba:75:f0:56:2f:ab:d1:38:62:a0:7b: f6:43:e3:95:80:0d:19:64:02:55:bd:52:47:d7:af: 36:8c:f8:06:4c:6d:61:ab:1e:cb:4c:80:b7:a9:55: 4d:c2:59:5b:16:cc:38:a6:66:40:82:34:6e:10:83: 38:bc:f9:ba:b4:40:8d:1a:4b:eb:84:1d:70:5f:20: 0e:1f:0a:96:07:52:8d:23:fa:e2:90:66:61:d7:a4: 45:06:3d:5a:24:68:b9:7c:06:b2:d5:dd:9d:b7:ce: 82:2c:ea:31:f6:34:29:ce:9e:59:c2:21:42:ba:3a: 79:46:72:fe:b8:b7:de:e3:a6:4c:ac:af:10:9a:80: d9:0e:d3:42:b2:e7:b7:92:2c:14:fd:09:35:a8:4c: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3D:43:C2:EE:F1:69:54:F7:36:AB:75:4D:0E:34:52:79:55:87:E9 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5c:a7:e4:14:6c:1b:4d:74:7d:62:9a:82:f0:6a:c8:9c:1e: 31:69:43:d6:3b:a8:ff:4c:9b:7e:6f:52:48:f0:3d:b1:e7:7d: b8:83:00:ac:01:bc:a2:92:ce:49:d6:60:cf:03:ca:d6:dc:53: fa:bd:ab:c6:c3:97:21:bd:b7:18:68:80:64:f5:ef:75:ee:84: c7:43:90:04:e9:a2:60:6e:40:55:e2:8f:16:48:b8:46:0d:1d: 7a:02:12:65:9c:0e:61:ae:6a:05:59:bf:a6:07:75:e2:32:cb: 19:3e:20:f5:c5:f8:e3:2f:cf:e9:f7:6f:f9:90:41:a7:9f:cf: 96:29:6a:c4:95:6e:42:36:59:c4:c8:ca:ab:ee:54:ef:87:f3: 07:3e:cc:94:e8:74:05:c1:c4:38:6e:ab:54:ac:f0:5e:5c:b8: 74:c1:dd:33:02:c1:74:cf:d9:94:31:de:d1:38:17:a9:1d:58: 4e:e5:80:ad:39:f0:b3:45:f5:d4:d8:c3:c3:9c:ad:f0:e4:0a: 15:c0:fe:56:47:35:d0:f2:19:29:84:b0:7e:6f:bf:95:3c:0e: 77:b3:05:4c:ad:6f:25:a6:e7:5f:0c:d1:1a:96:dd:9a:db:6b: a7:22:8c:04:68:aa:b7:c7:ea:30:f2:72:cc:5d:fa:b9:2c:ef: ee:78:88:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwNTEyMTcxNTQ4WhcNMjYwNTE5MTcxNTQ4WjAYMRYwFAYD VQQDEw02YTAzNjA0NS04NzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiL+0NIqCof5eZzmXit3fAT+VF9U33wJPCAlScCInKhfweBDJaa4Xz9evjML mITgEloJVwyFWc8rS3y5ELX9xvCdVRTGymAFPM0E/8gLyQXOoQsxo5FQWw3Dsc8L boDTak1yi9WHNo4rkhADunXwVi+r0ThioHv2Q+OVgA0ZZAJVvVJH1682jPgGTG1h qx7LTIC3qVVNwllbFsw4pmZAgjRuEIM4vPm6tECNGkvrhB1wXyAOHwqWB1KNI/ri kGZh16RFBj1aJGi5fAay1d2dt86CLOox9jQpzp5ZwiFCujp5RnL+uLfe46ZMrK8Q moDZDtNCsue3kiwU/Qk1qEyTiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJM9Q8Lu 8WlU9zardU0ONFJ5VYfpMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE1yn5BRsG010fWKagvBqyJweMWlD1juo/0ybfm9SSPA9sed9uIMArAG8opLO SdZgzwPK1txT+r2rxsOXIb23GGiAZPXvde6Ex0OQBOmiYG5AVeKPFki4Rg0degIS ZZwOYa5qBVm/pgd14jLLGT4g9cX44y/P6fdv+ZBBp5/PlilqxJVuQjZZxMjKq+5U 74fzBz7MlOh0BcHEOG6rVKzwXly4dMHdMwLBdM/ZlDHe0TgXqR1YTuWArTnws0X1 1NjDw5yt8OQKFcD+Vkc10PIZKYSwfm+/lTwOd7MFTK1vJabnXwzRGpbdmttrpyKM BGiqt8fqMPJyzF36uSzv7niIBQ== -----END CERTIFICATE-----Generated at Wed May 13 06:33:58 2026 by rpki-client