$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: /4XR7tlA7Wulrz6QNhd9CS6jOUHQZ/K1Cg1CYwPpZL4= Subject key identifier: 4F:97:6C:F9:74:D1:5D:F8:5E:E5:F1:15:12:E9:4F:B9:1E:54:AF:1E Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0440 Signing time: Mon 11 May 2026 00:21:57 +0000 Manifest this update: Mon 11 May 2026 00:21:56 +0000 Manifest next update: Mon 18 May 2026 00:21:56 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: NHJTmzcW7r/Pdr5Njo2QOjloXRbI/Xm+BpTui/KFisY=) 2: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=) 3: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: May 11 00:21:56 2026 GMT Not After : May 18 00:21:56 2026 GMT Subject: CN=6a012124-2aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:27:20:86:15:d1:c6:22:e6:0e:04:95:2e: 51:60:4e:a5:c3:3d:20:30:11:0f:97:40:e7:2f:c4: 42:0b:91:3c:74:df:b1:81:00:42:09:de:3f:e2:40: a4:db:26:37:a8:db:d0:c9:2d:15:e0:a9:8c:bc:82: b4:bc:d4:40:10:e2:b0:73:5b:34:5f:35:40:6f:11: 9f:c8:a5:46:b8:00:74:a9:67:67:39:ce:f6:e7:2c: 0c:3d:8d:f1:b6:e0:e6:5a:54:77:57:c8:37:97:d2: aa:3b:b1:96:d5:03:a3:fd:e6:e6:a6:8e:b4:c6:88: f2:0e:5f:f3:30:c6:af:c0:66:fd:91:43:22:0d:b3: 08:78:84:28:2c:cc:58:28:a6:bf:70:61:7a:e3:87: 5b:f8:45:2f:8e:26:ce:78:e9:fc:f1:67:c0:09:c1: 3c:1d:83:1d:d4:9c:d9:a5:81:1f:03:e1:e2:2a:03: c3:d2:75:89:b9:b2:07:2e:28:2a:25:9f:22:fb:12: 8b:a2:d7:9a:a8:e4:73:90:39:aa:d5:90:b7:b2:45: 7e:af:4c:28:a5:9f:88:a4:0c:54:58:29:ed:bb:d3: 7d:0d:0e:f4:ed:51:62:79:ed:5a:10:84:76:1c:cc: 85:09:f6:0f:41:06:00:11:88:f0:69:aa:3a:40:75: 76:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:6C:F9:74:D1:5D:F8:5E:E5:F1:15:12:E9:4F:B9:1E:54:AF:1E X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:1a:15:9d:d5:3c:0d:be:83:5f:2c:7b:b7:75:d7:95:0f:78: 40:e4:8a:69:cd:5f:65:75:07:33:b3:c0:2c:ff:2f:02:ce:9f: 12:f8:96:9a:e9:c4:cf:d6:bd:73:9d:20:9a:5a:da:45:d1:5a: e3:b7:ba:0a:81:81:64:dd:90:1b:13:73:6b:fd:58:3f:7c:a6: 94:d3:56:a0:11:19:c4:d6:e0:a0:14:a4:81:2a:6d:88:32:1f: 2c:0d:16:ac:59:f3:24:1b:03:58:4c:7d:ad:e7:5f:1b:e3:f5: 70:40:80:15:18:ca:d4:f1:06:f4:2b:c4:06:e3:e6:ac:62:b7: fb:f9:26:5a:36:d3:3d:7d:48:8b:27:ed:2d:8e:eb:ff:a6:89: 78:0f:b2:ac:3e:4d:99:b2:8e:12:d0:83:24:94:dc:e4:31:69: 78:91:2a:4b:3e:00:72:db:7c:66:54:34:04:50:14:9a:c1:f0: aa:33:9d:2c:64:ce:13:82:a9:98:41:6d:8b:48:9c:2d:68:5e: bd:1c:0a:6e:e5:55:c3:82:5e:f7:c3:3e:7f:b0:aa:35:32:6e: 8c:66:5b:7f:fd:4f:2b:ae:98:e4:95:be:ac:2e:cc:f4:a9:40: c3:88:16:d2:de:f5:44:be:f4:27:9c:4e:f6:52:c6:1d:34:e1: 74:0b:1a:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwNTExMDAyMTU2WhcNMjYwNTE4MDAyMTU2WjAYMRYwFAYD VQQDEw02YTAxMjEyNC0yYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zsnIIYV0cYi5g4ElS5RYE6lwz0gMBEPl0DnL8RCC5E8dN+xgQBCCd4/4kCk 2yY3qNvQyS0V4KmMvIK0vNRAEOKwc1s0XzVAbxGfyKVGuAB0qWdnOc725ywMPY3x tuDmWlR3V8g3l9KqO7GW1QOj/ebmpo60xojyDl/zMMavwGb9kUMiDbMIeIQoLMxY KKa/cGF644db+EUvjibOeOn88WfACcE8HYMd1JzZpYEfA+HiKgPD0nWJubIHLigq JZ8i+xKLoteaqORzkDmq1ZC3skV+r0wopZ+IpAxUWCntu9N9DQ707VFiee1aEIR2 HMyFCfYPQQYAEYjwaao6QHV2zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+XbPl0 0V34XuXxFRLpT7keVK8eMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvRoVndU8Db6DXyx7t3XXlQ94QOSKac1fZXUHM7PALP8vAs6fEviWmunEz9a9 c50gmlraRdFa47e6CoGBZN2QGxNza/1YP3ymlNNWoBEZxNbgoBSkgSptiDIfLA0W rFnzJBsDWEx9redfG+P1cECAFRjK1PEG9CvEBuPmrGK3+/kmWjbTPX1IiyftLY7r /6aJeA+yrD5NmbKOEtCDJJTc5DFpeJEqSz4Actt8ZlQ0BFAUmsHwqjOdLGTOE4Kp mEFti0icLWhevRwKbuVVw4Je98M+f7CqNTJujGZbf/1PK66Y5JW+rC7M9KlAw4gW 0t71RL70J5xO9lLGHTThdAsafg== -----END CERTIFICATE-----Generated at Wed May 13 01:34:24 2026 by rpki-client