$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: BbyfQUawFyz5J4lMMFCVR2gJGPxm5uIHtns30z6DDJs= Subject key identifier: 3A:5E:91:EE:E6:F7:4F:20:90:43:37:D4:48:C8:8C:38:BA:4B:D5:22 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 3580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 3558 Signing time: Tue 12 May 2026 14:18:38 +0000 Manifest this update: Tue 12 May 2026 14:18:38 +0000 Manifest next update: Tue 19 May 2026 14:18:38 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: iXRRm1P/UA/HzLU53jAC+Cjcd/JurH/E513Y6d4br5M=) 2: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: uTwgdWpEtjV1ALHAM8OqP3F4AfwGv1rbWW6ZiHZWVyg=) 3: 074A1CE2F1FD11F0BDA01C59486F56BC.roa (hash: PbRvsMPaciwk4aKrh1Gz2k+CLsuW70foiScaNfZvE3I=) 4: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 5: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=) 6: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: kemAcHttVJ/67VTbPvla1uxc5lCQKg8ypYYWxu51V6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: May 12 14:18:38 2026 GMT Not After : May 19 14:18:38 2026 GMT Subject: CN=6a0336be-2d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:4c:b8:9b:15:84:94:85:7c:ba:d3:a2:2d: 7a:3d:fb:04:1a:f1:bd:10:2b:32:ab:21:fd:85:70: 1d:aa:d7:6b:59:77:4f:2c:3e:b0:d7:32:56:a0:9b: c6:7e:82:3a:4e:dd:fd:d5:ad:b9:73:99:eb:cd:39: b6:93:7a:1c:bb:23:1c:56:b3:17:f4:04:73:a7:97: ca:b0:46:ff:17:78:b5:b4:31:b3:2f:44:33:94:5c: 5d:f3:e1:00:5c:c4:e7:6f:ff:41:5c:04:88:47:b0: 01:24:7a:a3:6c:08:30:cd:1f:e6:3e:e6:0c:78:e7: 6d:f1:ec:d1:88:c1:88:08:9d:c9:94:69:14:22:b6: e2:35:e7:4a:9e:d7:51:4c:bc:69:b3:24:57:31:69: 7e:83:8f:4b:69:f2:be:10:ef:d1:95:05:5f:0a:fb: a1:61:96:4a:44:ac:eb:90:37:4b:dc:6f:c6:5a:81: 49:74:12:f5:38:01:b3:e9:c9:ca:15:7f:d7:2a:89: 8b:80:a2:0f:69:18:b5:f8:74:bb:f4:8f:07:a8:f1: 2a:3a:99:93:e9:fa:d0:9b:ab:ee:24:6c:81:48:43: 7f:e2:d4:9c:1c:61:85:06:60:2f:9f:b7:5e:79:8a: e9:03:81:8d:16:1e:08:b2:44:8c:03:1d:9e:b8:4d: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:91:EE:E6:F7:4F:20:90:43:37:D4:48:C8:8C:38:BA:4B:D5:22 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:b9:c4:33:2a:ae:26:93:bf:be:43:16:9b:f7:a4:6c:a6:dd: 37:19:7a:3a:60:87:ea:40:68:eb:e9:1f:65:a8:76:38:79:b8: 25:a5:7c:e8:da:d3:7d:b6:8b:a3:98:df:2d:58:88:de:51:74: 3f:87:63:33:ec:2d:e3:bf:19:47:ea:41:eb:a7:67:d0:a2:5d: 83:a4:c7:9f:16:e6:95:8c:04:8d:36:62:7d:00:50:bc:96:ab: f8:38:53:98:a2:84:c5:b2:ab:e6:8b:9a:26:2f:d6:dd:85:e4: 93:fc:0a:26:9d:22:d3:c8:d6:4c:64:b2:8a:5c:5c:c0:29:8a: 36:42:0c:a3:c0:5c:eb:6d:2b:24:6c:3d:c5:17:fe:5d:55:c0: ce:8a:cf:13:3b:1f:65:11:73:e3:17:81:13:aa:74:71:41:d7: 57:48:4b:21:17:b1:49:48:87:85:75:76:14:4e:2a:47:5f:b9: cd:a4:6b:c0:0a:24:d5:d0:7d:7f:10:93:a2:ee:8d:b4:f9:e3: ee:75:70:3f:cb:44:dc:92:be:54:18:6e:b1:25:c0:1a:10:44: 7b:80:f3:35:21:2c:63:ec:8d:f0:bc:26:c2:fb:e1:91:37:51: b0:d6:9a:04:62:74:47:87:4f:75:fc:0f:80:43:dd:9e:62:df: 04:5a:f1:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwNTEyMTQxODM4WhcNMjYwNTE5MTQxODM4WjAYMRYwFAYD VQQDEw02YTAzMzZiZS0yZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl1MuJsVhJSFfLrToi16PfsEGvG9ECsyqyH9hXAdqtdrWXdPLD6w1zJWoJvG foI6Tt391a25c5nrzTm2k3ocuyMcVrMX9ARzp5fKsEb/F3i1tDGzL0QzlFxd8+EA XMTnb/9BXASIR7ABJHqjbAgwzR/mPuYMeOdt8ezRiMGICJ3JlGkUIrbiNedKntdR TLxpsyRXMWl+g49LafK+EO/RlQVfCvuhYZZKRKzrkDdL3G/GWoFJdBL1OAGz6cnK FX/XKomLgKIPaRi1+HS79I8HqPEqOpmT6frQm6vuJGyBSEN/4tScHGGFBmAvn7de eYrpA4GNFh4IskSMAx2euE3lPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpeke7m 908gkEM31EjIjDi6S9UiMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArrnEMyquJpO/vkMWm/ekbKbdNxl6OmCH6kBo6+kfZah2OHm4JaV86NrTfbaL o5jfLViI3lF0P4djM+wt478ZR+pB66dn0KJdg6THnxbmlYwEjTZifQBQvJar+DhT mKKExbKr5ouaJi/W3YXkk/wKJp0i08jWTGSyilxcwCmKNkIMo8Bc620rJGw9xRf+ XVXAzorPEzsfZRFz4xeBE6p0cUHXV0hLIRexSUiHhXV2FE4qR1+5zaRrwAok1dB9 fxCTou6NtPnj7nVwP8tE3JK+VBhusSXAGhBEe4DzNSEsY+yN8LwmwvvhkTdRsNaa BGJ0R4dPdfwPgEPdnmLfBFrxQw== -----END CERTIFICATE-----Generated at Wed May 13 03:37:53 2026 by rpki-client