$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: iitnayhtTgbDXkOH7ne6aEgdjU4bzelj4KrphUZyKho= Subject key identifier: A6:5E:54:E5:B2:82:10:E6:DC:B9:BC:5F:C5:E0:CD:AB:6E:9B:02:B5 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1D43 Signing time: Tue 12 May 2026 16:08:22 +0000 Manifest this update: Tue 12 May 2026 16:08:21 +0000 Manifest next update: Tue 19 May 2026 16:08:21 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: VOzBnTvr+5iw/bIqHRPAI1nmo5ltfNggt7g2XdxPOHg=) 2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 1vekZfH5YPC346cj2UThTBYzXSPYL/qmo6xjKnBtyW0=) 3: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: ZbnDvziitm1Xd7r8Nlbv4tUyUgKPSLQSV5/M7lY224A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7566 (0x1d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: May 12 16:08:21 2026 GMT Not After : May 19 16:08:21 2026 GMT Subject: CN=6a035075-0c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:72:84:54:06:9e:7f:e3:9c:68:84:c2:01: ae:52:37:a1:0d:81:18:8e:bb:3c:31:23:b1:b9:d0: 36:67:5f:28:c7:c2:89:5b:9b:1a:06:34:61:83:3f: 8c:6e:34:c0:5b:e7:e7:f8:0f:54:e7:6d:be:7c:34: 3f:2b:4d:9d:38:29:a3:e2:db:97:19:37:de:8f:96: 4f:e1:c8:90:9f:00:51:23:1a:dc:b6:90:ed:8a:86: 16:b9:47:10:19:30:c1:83:ce:b1:30:eb:c0:b7:6e: 42:9b:ee:17:61:d2:ca:9c:1c:f4:d9:6d:6e:03:82: f9:1c:27:fe:e6:7c:c7:76:c3:2a:24:fb:88:50:42: ba:c9:8a:dc:8c:da:42:14:62:a6:72:0c:9d:eb:d1: 39:06:2b:3e:9c:a3:08:0e:55:64:87:20:e7:24:b3: b3:58:36:12:99:c5:a0:65:a1:d7:c2:86:80:bd:06: f9:5d:df:d4:31:dc:80:be:62:c5:1c:c4:88:22:52: 6c:dc:41:fd:ce:17:ec:cc:e5:e0:1f:b3:0c:1d:81: fe:81:c9:6c:cf:44:23:15:a1:86:4c:46:fe:11:3f: 2a:95:d8:9a:1a:d2:02:3e:ff:4c:07:69:c3:78:d8: 72:98:65:7f:d0:99:57:02:d0:f2:d3:5c:40:fd:2e: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5E:54:E5:B2:82:10:E6:DC:B9:BC:5F:C5:E0:CD:AB:6E:9B:02:B5 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b5:69:7a:e2:f8:a8:ce:18:13:1c:54:f1:68:77:d2:78:5d: f5:86:db:a4:89:36:31:e3:fa:66:59:d5:2d:f3:90:21:eb:55: 7c:02:ac:06:32:15:c1:58:ea:52:59:12:15:82:67:fe:b8:99: 32:a6:cb:b2:ac:68:a6:b5:59:20:eb:72:26:3c:0d:64:19:23: 1d:31:6d:2a:70:4f:e9:4e:1e:27:63:d7:5e:dd:26:00:24:a3: 0a:f6:cb:cd:9b:1f:95:f1:51:74:92:de:9f:c4:ad:07:6f:6b: ee:c7:38:fe:5c:bc:65:e3:7e:03:48:de:c6:c3:61:45:38:d5: d3:87:3b:fc:6f:ef:f7:b2:37:67:1e:80:c3:a5:88:ad:d4:25: f3:b3:37:3b:3b:f3:f1:23:56:c8:eb:3b:37:62:37:e0:a8:9f: 89:24:cd:55:2e:c9:28:0e:8f:28:33:af:04:ea:42:c5:5a:a2: 1f:70:c3:94:ca:49:d0:8e:09:52:a3:a6:80:22:4e:84:e5:4f: 28:9a:07:83:9d:e9:01:47:ba:32:cb:6e:91:e9:c5:3f:9d:0f: 96:7d:61:6e:20:d8:ed:d0:ec:fd:20:50:f2:b8:4c:d3:5b:2b: 15:70:d7:a0:f6:16:dd:53:76:1d:3f:ad:d8:f6:49:a3:3a:3b: ad:63:70:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjYwNTEyMTYwODIxWhcNMjYwNTE5MTYwODIxWjAYMRYwFAYD VQQDEw02YTAzNTA3NS0wYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw9yhFQGnn/jnGiEwgGuUjehDYEYjrs8MSOxudA2Z18ox8KJW5saBjRhgz+M bjTAW+fn+A9U522+fDQ/K02dOCmj4tuXGTfej5ZP4ciQnwBRIxrctpDtioYWuUcQ GTDBg86xMOvAt25Cm+4XYdLKnBz02W1uA4L5HCf+5nzHdsMqJPuIUEK6yYrcjNpC FGKmcgyd69E5Bis+nKMIDlVkhyDnJLOzWDYSmcWgZaHXwoaAvQb5Xd/UMdyAvmLF HMSIIlJs3EH9zhfszOXgH7MMHYH+gclsz0QjFaGGTEb+ET8qldiaGtICPv9MB2nD eNhymGV/0JlXAtDy01xA/S5dbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZeVOWy ghDm3Lm8X8XgzatumwK1MB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr7VpeuL4qM4YExxU8Wh30nhd9YbbpIk2MeP6ZlnVLfOQIetVfAKsBjIVwVjq UlkSFYJn/riZMqbLsqxoprVZIOtyJjwNZBkjHTFtKnBP6U4eJ2PXXt0mACSjCvbL zZsflfFRdJLen8StB29r7sc4/ly8ZeN+A0jexsNhRTjV04c7/G/v97I3Zx6Aw6WI rdQl87M3Ozvz8SNWyOs7N2I34KifiSTNVS7JKA6PKDOvBOpCxVqiH3DDlMpJ0I4J UqOmgCJOhOVPKJoHg53pAUe6MstukenFP50Pln1hbiDY7dDs/SBQ8rhM01srFXDX oPYW3VN2HT+t2PZJozo7rWNweg== -----END CERTIFICATE-----Generated at Wed May 13 12:34:43 2026 by rpki-client