$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: non7f+REgxcztL6O6873zJX0q/pV8FKSeIJpKqf1G9Q= Subject key identifier: DE:41:61:97:6B:AD:71:0D:5F:EF:13:76:F2:56:EA:71:FE:C2:19:4D Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: 017A Signing time: Wed 13 May 2026 04:41:56 +0000 Manifest this update: Wed 13 May 2026 04:41:56 +0000 Manifest next update: Wed 20 May 2026 04:41:56 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: S1+bRzS1F2dBoSVkT61ccy2kPcSemy+Jm/9CRI5nnrA=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: U8i0qlU1iG7iGGOct1cXwPlwr4Q9fN1z2Du4FOYXcDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: May 13 04:41:56 2026 GMT Not After : May 20 04:41:56 2026 GMT Subject: CN=6a040114-65e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:5d:85:5b:ea:ab:77:f1:97:87:0b:b2:e2: 5b:ab:7f:b8:da:93:4d:75:ec:eb:42:a7:9c:bf:51: 1c:be:db:a0:b0:1a:dd:69:e2:bd:a3:06:cc:f2:08: de:50:76:9e:fc:45:19:9b:40:38:51:bf:3a:00:36: 48:2e:a6:1a:24:1d:0b:22:6d:42:1a:29:34:51:13: e4:b8:90:e4:96:f2:08:03:be:fc:63:ba:b8:a8:ee: 23:df:ee:a3:0d:4a:8b:7f:99:82:51:90:99:35:d7: d2:09:c1:f5:8e:2c:38:07:17:73:7a:2e:4e:d8:eb: 46:d5:69:ad:51:c3:9f:c6:c6:b5:ba:e1:d9:d2:e2: f4:5f:43:62:d6:6d:a9:76:83:03:d7:f2:0a:26:14: 19:db:67:89:4a:da:d1:ba:c6:1e:96:62:59:07:85: aa:7a:c9:0e:58:43:12:dc:7e:9c:c5:e1:44:be:e2: e8:9e:b4:d2:31:40:fe:aa:4f:a5:3a:c5:09:61:87: dc:6d:1d:ec:76:b5:0a:b4:b6:0c:3f:56:93:02:11: f5:84:89:49:ec:d7:8e:73:62:e8:36:41:c5:be:5d: 2f:79:3f:0a:4a:f6:fd:58:6c:69:88:50:1a:e9:51: a0:c5:46:b8:64:35:2c:56:d7:1e:fe:6a:75:0f:7e: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:41:61:97:6B:AD:71:0D:5F:EF:13:76:F2:56:EA:71:FE:C2:19:4D X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:28:41:4b:91:49:ae:82:7f:ba:43:40:23:62:6d:19:a2:5f: 04:a1:f1:f3:5b:07:e1:d4:d1:50:72:e0:2f:d0:ca:32:ab:59: 0e:ad:35:cc:c2:cc:c9:e9:ef:f0:d9:b3:55:17:49:30:63:32: 0c:05:1d:f9:47:c8:0a:3a:55:b3:68:7b:17:7a:28:f8:bb:a7: b1:cd:98:71:f0:e4:78:d3:f8:21:fa:9f:5d:83:69:92:fa:2d: 6a:b8:60:c5:f3:b8:68:4c:76:92:35:c2:33:7b:db:68:cb:77: 26:09:65:2c:08:d5:47:c9:94:44:be:09:b9:2e:87:e7:20:54: fe:2d:bf:a2:ab:a3:14:d4:d6:b2:e1:7c:57:bf:98:36:fd:5d: da:05:09:89:84:db:12:d9:bb:f5:1d:26:8d:89:64:67:54:0c: 7f:02:46:5d:cf:74:47:17:1a:e8:83:9d:dc:36:3b:cc:42:00: 94:4f:a9:e9:91:22:4b:a2:fb:29:4f:bd:07:5f:0a:fe:4a:ac: d2:6b:6a:9d:dd:83:50:17:92:06:b3:9b:67:55:88:ce:9b:01: 98:11:9c:6b:9e:ca:27:0d:b3:34:dd:d1:92:76:3a:60:dd:3a: ae:a6:36:83:d6:5f:d4:d0:6e:4d:a9:6f:a7:a0:8d:93:03:91: 91:fd:89:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjYwNTEzMDQ0MTU2WhcNMjYwNTIwMDQ0MTU2WjAYMRYwFAYD VQQDEw02YTA0MDExNC02NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydRdhVvqq3fxl4cLsuJbq3+42pNNdezrQqecv1EcvtugsBrdaeK9owbM8gje UHae/EUZm0A4Ub86ADZILqYaJB0LIm1CGik0URPkuJDklvIIA778Y7q4qO4j3+6j DUqLf5mCUZCZNdfSCcH1jiw4Bxdzei5O2OtG1WmtUcOfxsa1uuHZ0uL0X0Ni1m2p doMD1/IKJhQZ22eJStrRusYelmJZB4WqeskOWEMS3H6cxeFEvuLonrTSMUD+qk+l OsUJYYfcbR3sdrUKtLYMP1aTAhH1hIlJ7NeOc2LoNkHFvl0veT8KSvb9WGxpiFAa 6VGgxUa4ZDUsVtce/mp1D37UCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5BYZdr rXENX+8TdvJW6nH+whlNMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgihBS5FJroJ/ukNAI2JtGaJfBKHx81sH4dTRUHLgL9DKMqtZDq01zMLMyenv 8NmzVRdJMGMyDAUd+UfICjpVs2h7F3oo+Lunsc2YcfDkeNP4IfqfXYNpkvotarhg xfO4aEx2kjXCM3vbaMt3JgllLAjVR8mURL4JuS6H5yBU/i2/oqujFNTWsuF8V7+Y Nv1d2gUJiYTbEtm79R0mjYlkZ1QMfwJGXc90Rxca6IOd3DY7zEIAlE+p6ZEiS6L7 KU+9B18K/kqs0mtqnd2DUBeSBrObZ1WIzpsBmBGca57KJw2zNN3RknY6YN06rqY2 g9Zf1NBuTalvp6CNkwORkf2JWA== -----END CERTIFICATE-----Generated at Wed May 13 12:50:20 2026 by rpki-client