$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: fxz0nt2WNzL7J2LSCFizwx1tI+ggd6UZhVCcep5z0N8= Subject key identifier: EA:9B:13:FD:F0:A2:66:98:C8:F3:8B:14:05:E3:37:7C:26:37:D1:DE Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: 017E Signing time: Mon 11 May 2026 04:37:10 +0000 Manifest this update: Mon 11 May 2026 04:37:09 +0000 Manifest next update: Mon 18 May 2026 04:37:09 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: E6bcEhgiiepNZ1XjBb7XF5j5GUEe/DHvHKZNnA9DyWI=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: tC7+VJT22TXj7yUL7xjBDLMNT6SajKWeU3nOU11r1Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: May 11 04:37:09 2026 GMT Not After : May 18 04:37:09 2026 GMT Subject: CN=6a015cf6-b899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:fb:14:9d:14:8e:2a:17:61:58:31:fb:99: 12:1e:4c:57:e3:2a:24:d0:d6:d0:34:76:89:5c:fe: af:11:fe:c6:d9:2d:33:45:4f:f2:19:f7:81:01:94: 74:ef:4e:52:41:06:af:d5:d1:ae:16:a5:79:e2:13: 8d:55:05:07:fe:70:d8:31:5e:1c:c4:8e:4d:01:d5: 2d:22:b8:6d:14:af:35:ad:87:50:10:f8:2e:dc:5d: 08:e7:90:39:4c:79:5c:30:1f:25:0a:ab:b3:24:1b: 78:21:8f:3c:a9:8d:3f:13:c0:4a:ba:f8:33:54:40: 15:3b:b8:e1:b0:6c:0d:19:60:75:15:5d:ec:bf:23: 04:e3:e2:a7:9a:4b:7e:da:b1:3f:ca:3a:ac:d8:1b: c7:9c:8a:af:46:b6:7d:b9:d3:75:d9:9f:2a:94:d9: 2c:24:b2:9e:15:25:11:e6:93:0f:80:2d:a2:b1:06: 78:79:2c:b8:d4:33:d5:60:a3:14:b1:50:b7:1e:e5: 9b:a6:7a:52:48:9b:7d:31:9e:ba:05:cc:4b:fc:92: d5:8b:c7:48:2a:19:08:02:d4:95:66:b5:76:d7:32: 38:93:f7:9e:29:48:60:44:ba:70:d1:0b:a8:94:0a: a3:6e:9b:bd:ba:30:aa:15:42:06:a9:73:03:9f:c4: 7c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:13:FD:F0:A2:66:98:C8:F3:8B:14:05:E3:37:7C:26:37:D1:DE X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:13:57:a2:b4:43:d3:b4:36:2f:9a:05:b9:c5:d1:44:2e: b7:49:62:b0:e3:8a:f4:89:5e:aa:64:3b:10:71:90:da:bc:b8: be:7d:5d:2f:c8:a5:bd:3d:67:1e:93:71:97:82:4e:39:ea:78: f1:70:64:e0:c7:af:d3:cf:fa:04:d3:a2:dd:fb:f4:1b:df:7f: ae:53:a9:23:a2:e2:43:79:4a:2a:92:3b:5d:e9:e0:4e:a4:9e: 8e:e8:23:20:4b:93:a8:ab:90:57:aa:9e:90:27:c4:70:e7:93: f1:06:ed:d7:20:0c:28:b8:33:9a:b4:ab:41:ae:7e:e0:b6:68: 99:9d:12:5a:37:1a:9d:78:5f:87:01:f5:68:cc:21:af:88:fe: c7:6b:5f:1f:e3:16:ce:b0:19:53:a6:0f:76:3f:ad:4f:ac:cf: 68:11:66:40:f1:4a:35:0e:bd:85:a7:a1:e6:d1:e7:54:df:5f: fd:d7:4d:48:63:a5:97:50:f5:73:e6:23:a5:72:40:bb:d4:a8: d5:0d:f4:1a:cd:ba:7e:e9:76:71:ed:dd:61:e1:0b:17:72:04: 71:85:da:8b:c6:07:bf:3d:5d:cf:9f:d4:97:97:40:ad:79:21: 06:cc:cb:2d:20:88:67:2b:fc:ad:b6:8e:ef:e7:3e:58:c7:89: e7:e5:31:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjYwNTExMDQzNzA5WhcNMjYwNTE4MDQzNzA5WjAYMRYwFAYD VQQDEw02YTAxNWNmNi1iODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcD7FJ0UjioXYVgx+5kSHkxX4yok0NbQNHaJXP6vEf7G2S0zRU/yGfeBAZR0 705SQQav1dGuFqV54hONVQUH/nDYMV4cxI5NAdUtIrhtFK81rYdQEPgu3F0I55A5 THlcMB8lCquzJBt4IY88qY0/E8BKuvgzVEAVO7jhsGwNGWB1FV3svyME4+Knmkt+ 2rE/yjqs2BvHnIqvRrZ9udN12Z8qlNksJLKeFSUR5pMPgC2isQZ4eSy41DPVYKMU sVC3HuWbpnpSSJt9MZ66BcxL/JLVi8dIKhkIAtSVZrV21zI4k/eeKUhgRLpw0Quo lAqjbpu9ujCqFUIGqXMDn8R8aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqbE/3w omaYyPOLFAXjN3wmN9HeMB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfYTV6K0Q9O0Ni+aBbnF0UQut0lisOOK9IleqmQ7EHGQ2ry4vn1dL8ilvT1n HpNxl4JOOep48XBk4Mev08/6BNOi3fv0G99/rlOpI6LiQ3lKKpI7XengTqSejugj IEuTqKuQV6qekCfEcOeT8Qbt1yAMKLgzmrSrQa5+4LZomZ0SWjcanXhfhwH1aMwh r4j+x2tfH+MWzrAZU6YPdj+tT6zPaBFmQPFKNQ69haeh5tHnVN9f/ddNSGOll1D1 c+YjpXJAu9So1Q30Gs26ful2ce3dYeELF3IEcYXai8YHvz1dz5/Ul5dArXkhBszL LSCIZyv8rbaO7+c+WMeJ5+UxoQ== -----END CERTIFICATE-----Generated at Wed May 13 06:54:53 2026 by rpki-client