$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: 5dJSLi+KHCdgTuIaU8joAuDOcjwNy0UebIVIsSXqao8= Subject key identifier: 12:49:B8:C9:D7:1F:7F:F9:6F:71:69:FD:E5:F3:79:08:84:6F:46:69 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 014E Signing time: Wed 13 May 2026 05:11:35 +0000 Manifest this update: Wed 13 May 2026 05:11:34 +0000 Manifest next update: Wed 20 May 2026 05:11:34 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 5VNynlZmYdP0jN3/RRH5aK7kgJLqXMJ78w86Iw0ENVw=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: May 13 05:11:34 2026 GMT Not After : May 20 05:11:34 2026 GMT Subject: CN=6a040807-f1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:b2:3a:00:ec:2e:88:82:42:31:cd:66:4f: 57:55:dc:bc:78:98:5c:30:f4:23:f7:89:ff:eb:61: 87:62:00:b2:9a:a5:b3:46:6c:de:9f:52:b8:98:f7: 00:be:71:42:45:fd:2c:cf:8e:6c:31:dd:41:0a:37: c2:4e:b3:af:5c:8c:67:ab:5a:2a:2b:fb:b8:9c:7e: 37:0e:0f:50:1f:84:6e:f5:fa:3a:2c:d1:78:c0:af: 8c:03:10:ec:28:0c:41:25:ed:97:48:e2:74:4e:7d: 5d:90:a2:12:97:97:4c:0c:9f:bb:20:e6:f0:57:45: 74:a5:87:98:ff:4d:f5:17:65:8c:7f:2c:96:35:07: f3:0d:93:87:97:92:40:cf:08:6e:85:ad:5c:3b:0c: d4:7b:43:62:f8:0b:39:58:eb:c9:b3:69:7c:8f:77: 85:f6:45:d7:15:9b:1e:6d:c4:9a:07:55:f4:a3:7a: 11:2f:dd:ab:a2:f0:13:59:c1:83:3e:99:e8:bb:4d: e0:e7:14:94:08:8f:81:a3:72:58:4d:cc:fb:44:62: c6:b7:78:2a:67:de:d7:b2:a8:0d:a9:d3:39:78:93: 22:db:91:43:5e:78:83:80:42:0b:eb:27:bb:c6:22: 0c:2c:31:bb:f2:b3:f9:f5:6e:09:e3:6e:93:d9:d1: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:49:B8:C9:D7:1F:7F:F9:6F:71:69:FD:E5:F3:79:08:84:6F:46:69 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ba:80:a4:4f:11:a5:a8:06:6a:f3:64:95:1b:e9:6b:d5:bb: 2b:49:02:e8:3a:cb:24:86:ac:ce:10:61:86:a6:f7:c3:06:95: b1:67:84:95:67:75:5b:97:4e:33:5b:35:0d:31:d6:7d:94:fc: e1:75:84:70:0d:11:8a:37:49:54:34:bb:91:1b:6b:25:13:0d: 4f:9b:be:c7:62:fe:29:3b:ee:66:1e:c4:05:c6:91:c2:ca:fc: a9:76:2f:cc:e3:bf:e7:0b:99:d2:f4:4d:27:fb:13:09:59:0f: 04:30:fe:8c:be:e6:2c:ee:89:2e:42:46:11:52:cc:6f:7e:62: bf:6d:93:8f:70:8f:17:e4:85:e0:47:ec:16:ea:a4:1f:4e:81: 4c:91:9e:1f:56:c6:e1:15:12:bd:6f:da:01:3f:d9:3c:25:4f: ae:ef:a0:4c:3a:f7:8f:21:37:53:b8:6b:64:41:8e:90:1a:d4: 1b:4b:69:e8:9b:49:34:20:1f:8c:2a:05:84:af:48:ed:8c:b2: e7:84:a9:78:07:5c:58:e2:88:8c:49:0d:62:6b:92:2c:85:81: 52:a2:f9:30:0d:0b:4c:ee:f8:4b:89:08:f4:7c:8c:79:25:68: bb:2c:2d:e0:fa:56:c5:70:f9:09:fa:ed:62:c0:2b:88:52:14: 22:29:76:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjYwNTEzMDUxMTM0WhcNMjYwNTIwMDUxMTM0WjAYMRYwFAYD VQQDEw02YTA0MDgwNy1mMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHiyOgDsLoiCQjHNZk9XVdy8eJhcMPQj94n/62GHYgCymqWzRmzen1K4mPcA vnFCRf0sz45sMd1BCjfCTrOvXIxnq1oqK/u4nH43Dg9QH4Ru9fo6LNF4wK+MAxDs KAxBJe2XSOJ0Tn1dkKISl5dMDJ+7IObwV0V0pYeY/031F2WMfyyWNQfzDZOHl5JA zwhuha1cOwzUe0Ni+As5WOvJs2l8j3eF9kXXFZsebcSaB1X0o3oRL92rovATWcGD Ppnou03g5xSUCI+Bo3JYTcz7RGLGt3gqZ97XsqgNqdM5eJMi25FDXniDgEIL6ye7 xiIMLDG78rP59W4J426T2dFPGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJJuMnX H3/5b3Fp/eXzeQiEb0ZpMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmrqApE8RpagGavNklRvpa9W7K0kC6DrLJIaszhBhhqb3wwaVsWeElWd1W5dO M1s1DTHWfZT84XWEcA0RijdJVDS7kRtrJRMNT5u+x2L+KTvuZh7EBcaRwsr8qXYv zOO/5wuZ0vRNJ/sTCVkPBDD+jL7mLO6JLkJGEVLMb35iv22Tj3CPF+SF4EfsFuqk H06BTJGeH1bG4RUSvW/aAT/ZPCVPru+gTDr3jyE3U7hrZEGOkBrUG0tp6JtJNCAf jCoFhK9I7Yyy54SpeAdcWOKIjEkNYmuSLIWBUqL5MA0LTO74S4kI9HyMeSVouywt 4PpWxXD5CfrtYsAriFIUIil22w== -----END CERTIFICATE-----Generated at Wed May 13 15:38:21 2026 by rpki-client