$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: +luAQwxtl6vyopOzZPBcGX4uTAKQ86cvMZ+IdGiLxy4= Subject key identifier: 1A:11:99:3D:6A:B7:AC:B9:59:2B:F8:DB:94:C1:2A:0E:B5:35:20:F4 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 021F Signing time: Mon 11 May 2026 02:57:11 +0000 Manifest this update: Mon 11 May 2026 02:57:11 +0000 Manifest next update: Mon 18 May 2026 02:57:11 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: e7zQcBKmh54MX6IxmO+mlML0xPWK+jyceCLLo5321wI=) 2: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=) 3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=) 4: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=) 5: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: May 11 02:57:11 2026 GMT Not After : May 18 02:57:11 2026 GMT Subject: CN=6a014587-c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:60:53:35:20:ec:93:b7:25:ae:74:af:80: e6:77:63:8b:82:8d:f7:f8:00:45:c6:16:91:9c:39: 2d:39:68:2a:a0:a4:6a:17:e9:de:38:05:7c:7f:bc: 23:79:d3:3c:b1:25:da:b6:d1:06:3a:ec:09:f9:c3: cd:b0:f7:99:ec:c8:e8:54:a1:c0:68:a5:6f:34:34: cd:3c:cb:cf:2c:fa:3b:e5:9d:49:15:9b:f6:9c:97: 69:65:f7:5e:05:36:31:b7:9b:9e:d2:03:92:43:38: 29:af:1c:be:7e:5c:3e:14:6d:fe:96:7a:fe:b8:b0: fd:7b:04:2b:69:da:7e:4b:f0:f5:61:58:46:f1:20: 5d:91:03:f3:15:6d:7e:91:a4:d8:e7:a6:58:4f:f6: 57:4e:19:8c:1f:d2:52:d1:db:0f:f5:56:0c:c3:3c: 6b:b0:24:5c:18:4c:d1:7f:1b:e6:75:c0:ab:d1:6e: bf:21:cf:9e:17:40:11:53:d1:9d:22:a2:56:90:4b: 21:a4:8f:f7:d7:79:ce:e6:2d:8d:ce:11:c6:8a:4b: 29:a7:5e:1c:fe:34:48:7d:bd:9a:15:f7:f7:a6:fe: c7:65:b7:c6:ff:0f:53:47:62:a9:06:ae:21:01:c8: 3a:ae:c5:d7:8d:bd:60:43:f7:70:ff:50:74:54:f9: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:99:3D:6A:B7:AC:B9:59:2B:F8:DB:94:C1:2A:0E:B5:35:20:F4 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1c:bd:bd:a3:d5:d7:64:88:4d:cd:bd:f5:1d:0f:bd:a2:59: b2:5d:5d:07:bd:c9:03:17:d6:f9:fb:e7:d6:bd:e9:ac:23:21: 3a:5b:df:9a:ff:e6:73:c0:88:ac:63:44:1c:5c:b5:ff:14:ea: 09:ed:8c:38:f4:0e:e5:1b:66:eb:0b:72:c8:8b:de:78:fa:8d: 30:50:bb:dc:9a:67:31:8e:9b:fa:48:3b:12:df:3a:de:55:24: 62:5c:d0:71:87:dc:9a:66:24:bc:a6:30:f8:89:53:b1:f6:12: 31:58:e2:0e:05:5b:f6:cb:f2:62:fd:04:51:30:15:87:a1:4c: 70:ad:9d:c9:a5:4a:9c:f6:53:08:41:73:51:b3:ed:6b:90:20: 17:e6:d0:8a:99:62:ed:68:5c:e2:4b:dc:a1:03:5b:b9:33:5e: fc:0d:02:27:8c:2f:6a:3c:68:03:77:0c:ca:db:70:a9:4c:b2: 37:d4:f9:9f:39:3a:33:26:ed:5e:67:05:72:2d:bc:1d:ca:16: 66:3b:87:d0:60:87:c2:c2:b4:2e:af:6b:2a:e3:43:f8:8f:3d: 7e:d0:f6:c6:15:b5:0f:4a:66:b0:46:9a:03:37:aa:90:3b:29: 8f:c9:88:9c:51:e2:b3:4b:86:db:c4:1b:d0:92:35:51:0e:f8: cf:a2:e7:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjYwNTExMDI1NzExWhcNMjYwNTE4MDI1NzExWjAYMRYwFAYD VQQDEw02YTAxNDU4Ny1jMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvdgUzUg7JO3Ja50r4Dmd2OLgo33+ABFxhaRnDktOWgqoKRqF+neOAV8f7wj edM8sSXattEGOuwJ+cPNsPeZ7MjoVKHAaKVvNDTNPMvPLPo75Z1JFZv2nJdpZfde BTYxt5ue0gOSQzgprxy+flw+FG3+lnr+uLD9ewQradp+S/D1YVhG8SBdkQPzFW1+ kaTY56ZYT/ZXThmMH9JS0dsP9VYMwzxrsCRcGEzRfxvmdcCr0W6/Ic+eF0ARU9Gd IqJWkEshpI/313nO5i2NzhHGikspp14c/jRIfb2aFff3pv7HZbfG/w9TR2KpBq4h Acg6rsXXjb1gQ/dw/1B0VPkopQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoRmT1q t6y5WSv425TBKg61NSD0MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMxy9vaPV12SITc299R0PvaJZsl1dB73JAxfW+fvn1r3prCMhOlvfmv/mc8CI rGNEHFy1/xTqCe2MOPQO5Rtm6wtyyIveePqNMFC73JpnMY6b+kg7Et863lUkYlzQ cYfcmmYkvKYw+IlTsfYSMVjiDgVb9svyYv0EUTAVh6FMcK2dyaVKnPZTCEFzUbPt a5AgF+bQipli7Whc4kvcoQNbuTNe/A0CJ4wvajxoA3cMyttwqUyyN9T5nzk6Mybt XmcFci28HcoWZjuH0GCHwsK0Lq9rKuND+I89ftD2xhW1D0pmsEaaAzeqkDspj8mI nFHis0uG28Qb0JI1UQ74z6Lnrg== -----END CERTIFICATE-----Generated at Wed May 13 04:39:15 2026 by rpki-client