$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: BHqz6J4GwU2BBWBrV0dYREr4M6OlCj5gCL48eGjnzAE= Subject key identifier: 65:B5:71:D5:2B:CB:67:60:CD:AA:A6:5C:48:E7:B0:89:3B:39:F5:5C Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 028A Signing time: Mon 11 May 2026 01:55:29 +0000 Manifest this update: Mon 11 May 2026 01:55:29 +0000 Manifest next update: Mon 18 May 2026 01:55:29 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: /osypv9N90GUvSxdDnRgcmxT/064OoVOyf4bB6Jmp7E=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: JzIeNUelrcBSaSYEzJUiPtXr7HS7Gw0/GJK//93BhoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: May 11 01:55:29 2026 GMT Not After : May 18 01:55:29 2026 GMT Subject: CN=6a013711-d190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:81:78:a7:09:0c:df:5c:f3:c3:d0:52:08: 0f:4d:5b:33:22:23:a3:02:88:fe:87:f0:fa:93:dc: 58:b4:4b:e0:1c:5c:94:b1:d8:19:96:5f:ad:03:e9: c7:48:1c:be:91:5b:47:3e:39:95:0f:90:6d:ac:e7: 51:5e:14:05:7e:3e:bc:6b:78:4b:f4:ea:f6:ae:4f: 0d:c6:b8:fe:a4:e1:5a:dd:03:bb:e0:58:3f:92:6b: e3:d1:84:f0:5a:92:89:92:60:ed:ce:0f:8d:3c:9f: 2c:13:41:00:ea:67:1c:4d:0f:cd:8a:60:84:c0:d3: 40:19:c3:59:ab:1f:1e:5e:88:b0:4c:83:c0:1a:b7: 8b:55:b5:c3:36:cb:ac:9a:1d:bd:94:41:1e:e1:04: a3:15:b9:f2:ed:4c:c3:d6:2f:b9:65:ad:d2:53:84: cb:9f:fa:98:0f:c2:5f:f7:42:6a:f0:4e:67:41:10: e1:0d:77:2f:42:ec:b5:55:fd:b7:da:3e:3f:0b:fd: df:e2:cb:c1:62:ea:ca:68:3c:60:ad:73:b6:80:07: 18:1d:45:b3:e5:53:d3:26:d7:b8:d0:7e:23:8b:26: 74:32:6c:f6:4f:ca:c1:94:58:9f:38:3d:d6:ea:e3: 48:70:71:a8:07:1d:2f:c8:4b:b1:79:f6:53:6a:5d: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:71:D5:2B:CB:67:60:CD:AA:A6:5C:48:E7:B0:89:3B:39:F5:5C X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:32:86:f8:01:ce:57:8f:74:97:7a:b0:ee:51:92:71:ae:d9: 1a:d9:cd:ae:17:0b:d7:b9:b0:79:2f:d9:a9:ee:c3:26:ee:be: 2c:f6:b0:83:94:52:7c:e6:2e:81:e3:c1:03:f7:8d:43:5a:05: b4:68:60:d5:08:4e:e1:90:85:73:f5:27:88:22:92:8b:38:ea: 78:10:ad:93:84:9e:34:09:34:be:63:af:31:ad:53:46:20:41: 98:6e:f7:c6:7b:53:9a:cf:33:72:c0:04:26:f3:9c:52:85:16: 81:94:a3:15:db:41:ff:3d:ce:66:80:d5:f9:d3:78:0f:b3:ec: 96:59:4f:75:c3:ad:14:ef:0d:b0:17:0d:c8:f1:c9:bc:93:d9: 20:51:48:7e:c4:97:9c:4b:0b:af:5c:8f:91:c2:3a:93:de:44: fb:3b:3c:e3:dd:08:ba:88:a7:5d:de:84:1d:6f:1d:e0:c9:7f: 0d:92:31:bb:8a:7f:7d:8f:d9:e6:7b:69:37:ff:87:48:83:5e: 6a:8c:6a:0e:ee:c1:a2:7a:fc:88:d8:ac:db:db:38:69:ba:30: 00:a2:b4:a2:6a:2c:a2:6a:68:a5:f1:fb:38:20:79:15:48:f4: 49:35:f4:49:27:a4:f0:4a:f7:76:31:a6:09:19:e2:4a:8f:8f: 60:b1:b8:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjYwNTExMDE1NTI5WhcNMjYwNTE4MDE1NTI5WjAYMRYwFAYD VQQDEw02YTAxMzcxMS1kMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3uBeKcJDN9c88PQUggPTVszIiOjAoj+h/D6k9xYtEvgHFyUsdgZll+tA+nH SBy+kVtHPjmVD5BtrOdRXhQFfj68a3hL9Or2rk8Nxrj+pOFa3QO74Fg/kmvj0YTw WpKJkmDtzg+NPJ8sE0EA6mccTQ/NimCEwNNAGcNZqx8eXoiwTIPAGreLVbXDNsus mh29lEEe4QSjFbny7UzD1i+5Za3SU4TLn/qYD8Jf90Jq8E5nQRDhDXcvQuy1Vf23 2j4/C/3f4svBYurKaDxgrXO2gAcYHUWz5VPTJte40H4jiyZ0Mmz2T8rBlFifOD3W 6uNIcHGoBx0vyEuxefZTal35zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGW1cdUr y2dgzaqmXEjnsIk7OfVcMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfzKG+AHOV490l3qw7lGSca7ZGtnNrhcL17mweS/Zqe7DJu6+LPawg5RSfOYu gePBA/eNQ1oFtGhg1QhO4ZCFc/UniCKSizjqeBCtk4SeNAk0vmOvMa1TRiBBmG73 xntTms8zcsAEJvOcUoUWgZSjFdtB/z3OZoDV+dN4D7PslllPdcOtFO8NsBcNyPHJ vJPZIFFIfsSXnEsLr1yPkcI6k95E+zs8490IuoinXd6EHW8d4Ml/DZIxu4p/fY/Z 5ntpN/+HSINeaoxqDu7Bonr8iNis29s4abowAKK0omosompopfH7OCB5FUj0STX0 SSek8Er3djGmCRniSo+PYLG4tg== -----END CERTIFICATE-----Generated at Tue May 12 23:34:23 2026 by rpki-client