$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: GF3VLtQN5Y+67AFIrKj3hUnULTSyD8wJX7avRcQXtC0= Subject key identifier: 9D:D1:1A:E0:42:89:46:9C:82:F8:F2:CC:A4:3C:96:85:F7:AA:13:71 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 48E5 Signing time: Tue 12 May 2026 16:57:20 +0000 Manifest this update: Tue 12 May 2026 16:57:20 +0000 Manifest next update: Tue 19 May 2026 16:57:20 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: q+PZxV17apaufy7/BzZlBk/RRyAzZq+TnF/4SfTqEiM=) 2: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=) 3: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=) 4: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=) 5: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=) 6: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=) 7: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=) 8: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=) 9: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: 7S6GqTogESgTpBUNMZpPgMS9/jS5HSy2eI/QoMqfxH8=) 10: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=) 11: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32328 (0x7e48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: May 12 16:57:20 2026 GMT Not After : May 19 16:57:20 2026 GMT Subject: CN=6a035bf0-f95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:e1:1e:47:b8:5a:d4:0a:4f:c1:59:29:94: ad:8f:d1:e3:03:3e:e2:e0:5b:ee:13:b2:65:b1:13: 07:fb:31:4b:5e:73:a7:38:da:c4:18:28:3e:b4:c1: df:41:c9:c9:2e:fc:03:ff:44:f6:95:45:9f:51:b8: 6e:f1:cb:08:d3:af:3b:4a:40:0d:91:78:c7:b6:6e: d7:f0:14:3e:44:a0:ed:4c:de:8b:91:c9:94:ba:e6: 95:b4:00:a5:90:22:8a:79:fa:f0:e1:91:27:65:5d: b8:01:15:03:e5:ff:6c:b0:56:45:17:ad:82:d3:95: 4b:04:2e:1f:ec:99:a1:91:04:3b:84:83:34:a9:53: 96:20:3e:25:ee:60:d9:7a:5b:af:ad:af:32:b0:c8: 5d:99:2f:73:70:51:be:e7:68:75:83:d2:ae:74:47: f2:79:4a:9d:41:2b:11:35:36:22:8c:04:57:d2:91: 31:2f:d1:86:c4:34:ae:3f:6c:be:67:6d:50:a9:2e: 44:a5:37:11:a3:9a:45:cd:59:e8:95:4a:30:b8:de: 4c:ea:56:cd:48:dd:9a:b3:b9:0a:8f:13:9a:03:5f: 47:14:4c:8c:9b:80:7a:b8:a8:69:fe:4c:1d:db:79: d9:3e:27:8b:12:c2:b8:a0:f9:91:e5:ab:cd:55:78: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:1A:E0:42:89:46:9C:82:F8:F2:CC:A4:3C:96:85:F7:AA:13:71 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b5:3f:99:df:7e:01:32:b4:5c:90:d3:1b:5b:d1:0a:6a:9a: 78:4e:7e:ba:65:85:24:51:6f:2b:08:87:7d:06:63:50:95:62: 77:a3:7b:25:f0:c3:61:c9:c4:2b:cb:d2:5b:a0:da:32:2d:86: 07:b0:a8:bd:50:e1:0e:74:ec:7f:3e:3e:c3:cd:ba:f1:65:eb: 88:16:23:36:f0:27:7b:52:35:30:c7:83:48:41:a1:60:c1:39: be:a4:4d:da:1a:56:c3:96:ed:55:eb:69:ad:c8:6e:6f:f9:bf: 52:5b:1c:52:5d:09:a3:62:12:19:62:62:86:bf:5d:86:16:63: 1f:76:ae:ef:eb:58:a7:1e:78:68:98:d4:f3:1e:88:4b:e0:99: da:08:52:07:1b:92:fa:c6:7b:c8:4c:29:22:47:1b:3a:fb:15: c2:b1:7f:c9:bc:ad:47:c8:3b:10:ba:a3:f8:f3:35:74:27:0b: 85:30:c6:c0:69:05:44:7c:fd:c4:2e:e8:0b:31:21:c6:38:10: f4:67:71:82:9f:cc:0b:b9:48:04:e3:29:79:27:e2:59:f0:e3: 41:97:c3:93:e1:7c:78:8f:14:fe:44:30:7a:32:55:6e:c0:8f: f0:68:8b:b0:66:4b:c1:0a:7e:8b:5e:e3:6a:89:58:ee:09:89: ac:8c:b4:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYwNTEyMTY1NzIwWhcNMjYwNTE5MTY1NzIwWjAYMRYwFAYD VQQDEw02YTAzNWJmMC1mOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwLhHke4WtQKT8FZKZStj9HjAz7i4FvuE7JlsRMH+zFLXnOnONrEGCg+tMHf QcnJLvwD/0T2lUWfUbhu8csI0687SkANkXjHtm7X8BQ+RKDtTN6LkcmUuuaVtACl kCKKefrw4ZEnZV24ARUD5f9ssFZFF62C05VLBC4f7JmhkQQ7hIM0qVOWID4l7mDZ eluvra8ysMhdmS9zcFG+52h1g9KudEfyeUqdQSsRNTYijARX0pExL9GGxDSuP2y+ Z21QqS5EpTcRo5pFzVnolUowuN5M6lbNSN2as7kKjxOaA19HFEyMm4B6uKhp/kwd 23nZPieLEsK4oPmR5avNVXidNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3RGuBC iUacgvjyzKQ8loX3qhNxMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQbU/md9+ATK0XJDTG1vRCmqaeE5+umWFJFFvKwiHfQZjUJVid6N7JfDDYcnE K8vSW6DaMi2GB7CovVDhDnTsfz4+w8268WXriBYjNvAne1I1MMeDSEGhYME5vqRN 2hpWw5btVetprchub/m/UlscUl0Jo2ISGWJihr9dhhZjH3au7+tYpx54aJjU8x6I S+CZ2ghSBxuS+sZ7yEwpIkcbOvsVwrF/ybytR8g7ELqj+PM1dCcLhTDGwGkFRHz9 xC7oCzEhxjgQ9Gdxgp/MC7lIBOMpeSfiWfDjQZfDk+F8eI8U/kQwejJVbsCP8GiL sGZLwQp+i17jaolY7gmJrIy0Fw== -----END CERTIFICATE-----Generated at Wed May 13 00:20:27 2026 by rpki-client