$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: EOE2A4tPTbNOjA3Dt9sK7GoGyotz7JGtIBgeSIqi6Kg= Subject key identifier: 9B:D3:09:C7:24:15:ED:1E:43:63:04:CE:F6:C0:5F:ED:24:DA:00:8C Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 057E Signing time: Tue 12 May 2026 23:22:58 +0000 Manifest this update: Tue 12 May 2026 23:22:58 +0000 Manifest next update: Tue 19 May 2026 23:22:58 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: ZTTXDclWNWwKM8ddKb2CGaUINU5d4zy7pn3fmtAEIhs=) 2: 308E4138CF7911F081AD0016C4F9AE02.roa (hash: Qe0QBeQXxDexEGZWCVceFBZ0omw7zxCKTPm8MWRJOG0=) 3: 7A88B1FCB44311F09019B577C4F9AE02.roa (hash: GVEQA+3eqIkzA9/ZGe521NeAxe7jSsSWSid0hUiNJOE=) 4: 3108D830CF7911F0861E0016C4F9AE02.roa (hash: 0gEebnFcx96IWAD0Qo+4/3MnsrXoHBiI9ORKhrPhb3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: May 12 23:22:58 2026 GMT Not After : May 19 23:22:58 2026 GMT Subject: CN=6a03b652-af57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:9d:f2:aa:40:75:ba:a5:d4:64:23:08:68: cd:72:9b:bb:ee:30:59:61:fb:c8:d4:2c:6a:3f:2f: 59:ce:b0:bc:54:58:4d:97:f0:e8:de:e6:98:75:0e: 5c:3c:54:a2:d1:92:cf:6e:a1:c6:73:cc:a2:8b:61: e2:22:4e:56:a5:2d:68:8f:04:1b:26:08:aa:f6:0e: 81:80:ec:86:0f:df:64:86:c4:5c:43:64:c2:46:9a: 8b:ea:af:b6:f8:14:a4:2d:8b:88:82:2a:ff:e4:d2: 35:29:49:48:8b:a7:fa:c3:52:70:51:67:76:1c:a4: 02:db:05:94:f7:b9:ec:8c:48:d5:b1:47:4a:53:aa: 66:36:02:1b:7d:c7:7d:5f:e5:c5:2b:62:23:54:7e: c0:f7:1d:61:27:be:23:64:90:d4:95:f6:40:b8:9f: 8a:6b:ca:89:a5:51:8b:4b:a1:dd:98:78:72:61:0c: ef:52:48:03:7a:c2:e9:50:0f:f0:79:ec:3a:a4:b1: ab:1b:ef:3d:bb:37:4f:b4:2a:6d:f7:f9:d9:aa:39: e8:ef:43:b1:3e:9a:f5:d9:00:5b:7e:8d:f3:da:b4: b9:38:07:01:e0:7a:5f:7b:f0:d9:3c:dd:44:3f:ad: 72:72:33:54:59:ef:87:8b:57:6f:b7:dc:09:78:3d: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:09:C7:24:15:ED:1E:43:63:04:CE:F6:C0:5F:ED:24:DA:00:8C X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:98:c1:57:99:75:69:5a:8b:02:35:25:0d:4d:15:92:3d:56: 67:57:ae:fd:e3:4e:1f:a3:87:f8:68:a5:ca:04:56:5d:13:c5: 1f:b6:06:24:01:f0:2e:52:cc:1f:08:ea:9d:07:6b:b6:bb:25: 32:5f:ea:7e:91:fe:9b:ca:9c:65:ef:fa:71:ee:c5:c3:e2:de: 84:1d:0a:01:2e:06:89:d1:5e:ab:98:60:93:d8:bb:e7:56:ee: b9:c8:bf:37:0c:7f:39:03:fd:06:a0:32:40:de:e9:01:f1:57: 2b:6c:be:f6:1f:92:14:a2:5f:65:7b:93:cf:e4:4f:75:3b:f1: fe:5d:d7:87:04:53:9e:91:65:25:2a:d6:d7:4c:a5:bd:66:bf: c4:3f:b1:e8:00:7e:d2:ff:3f:f9:ef:ea:c3:d0:c3:2f:1a:fb: dc:3c:a0:73:1e:d3:a5:7d:52:dc:72:b8:bf:78:fd:3f:1a:a8: 9f:aa:6d:2c:06:34:0a:34:2a:be:36:cb:93:da:60:a2:06:fa: bd:ab:af:83:b4:fd:a4:72:88:18:10:3d:6a:46:e5:e9:3f:cc: 9a:b8:ac:75:bf:4f:69:8f:93:b0:74:91:21:09:c3:0c:4c:04: 67:7a:05:95:c5:52:1f:8d:e1:89:71:b8:ba:d9:21:9e:e1:bc: 57:34:e0:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjYwNTEyMjMyMjU4WhcNMjYwNTE5MjMyMjU4WjAYMRYwFAYD VQQDEw02YTAzYjY1Mi1hZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVed8qpAdbql1GQjCGjNcpu77jBZYfvI1CxqPy9ZzrC8VFhNl/Do3uaYdQ5c PFSi0ZLPbqHGc8yii2HiIk5WpS1ojwQbJgiq9g6BgOyGD99khsRcQ2TCRpqL6q+2 +BSkLYuIgir/5NI1KUlIi6f6w1JwUWd2HKQC2wWU97nsjEjVsUdKU6pmNgIbfcd9 X+XFK2IjVH7A9x1hJ74jZJDUlfZAuJ+Ka8qJpVGLS6HdmHhyYQzvUkgDesLpUA/w eew6pLGrG+89uzdPtCpt9/nZqjno70OxPpr12QBbfo3z2rS5OAcB4Hpfe/DZPN1E P61ycjNUWe+Hi1dvt9wJeD0TtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvTCcck Fe0eQ2MEzvbAX+0k2gCMMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5jBV5l1aVqLAjUlDU0Vkj1WZ1eu/eNOH6OH+GilygRWXRPFH7YGJAHwLlLM HwjqnQdrtrslMl/qfpH+m8qcZe/6ce7Fw+LehB0KAS4GidFeq5hgk9i751buuci/ Nwx/OQP9BqAyQN7pAfFXK2y+9h+SFKJfZXuTz+RPdTvx/l3XhwRTnpFlJSrW10yl vWa/xD+x6AB+0v8/+e/qw9DDLxr73Dygcx7TpX1S3HK4v3j9Pxqon6ptLAY0CjQq vjbLk9pgogb6vauvg7T9pHKIGBA9akbl6T/Mmrisdb9PaY+TsHSRIQnDDEwEZ3oF lcVSH43hiXG4utkhnuG8VzTgqQ== -----END CERTIFICATE-----Generated at Wed May 13 05:22:14 2026 by rpki-client