$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: us3NF0lICnX7yKG9jgXK0CHalmV6v/zddpYinA0OR1g= Subject key identifier: CD:8E:92:EE:83:CA:76:90:99:1B:09:A3:CA:6D:3D:0F:55:9D:A3:C9 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 024C Signing time: Mon 11 May 2026 02:24:35 +0000 Manifest this update: Mon 11 May 2026 02:24:34 +0000 Manifest next update: Mon 18 May 2026 02:24:34 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: 8TggNT7g3tVgdJjf65klPPAgEBBLJBGFrwUuAKGmQ7I=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: YiM67MBOQyQiFAZiHKZnFOav4WykQTG7bAqQs/W9ABA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: May 11 02:24:34 2026 GMT Not After : May 18 02:24:34 2026 GMT Subject: CN=6a013de2-8e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:60:09:ba:65:27:81:7a:cb:2a:a8:be:34: 18:64:92:e5:59:7f:05:92:8f:7b:54:e2:85:81:93: 0b:b7:e3:36:a7:03:36:4c:64:79:d5:2d:54:01:91: 12:41:3a:fd:f6:b7:10:a1:57:13:b8:64:76:1c:63: be:15:9b:21:3e:57:fa:f4:6f:d5:27:40:b3:e8:f1: ec:1f:6d:fc:8d:21:bb:9d:9c:02:3c:e1:c1:d8:1f: 77:48:d4:70:c1:90:fc:b1:66:d4:88:c2:09:a1:25: 99:04:08:08:5d:da:da:58:46:0c:62:54:87:0a:3b: f5:b8:10:23:77:f9:6b:2b:a3:f2:df:05:3a:b3:bb: 98:f4:c0:77:b2:20:0e:a2:27:e4:5c:3c:8e:59:ba: 8a:4a:18:58:f1:3a:1b:be:76:b9:f3:39:e4:21:84: 31:44:a9:59:3e:0f:d4:97:9a:e8:1e:4a:6f:48:4d: c7:41:5a:02:2c:db:54:a6:3b:7d:bc:ab:d4:01:6c: f5:3f:58:e6:60:96:61:04:e0:d0:ea:7d:87:20:22: 3d:6c:a0:90:ee:64:1b:02:4b:f0:25:b5:8f:c2:d0: 8b:73:db:bc:53:56:54:32:bd:0a:8f:52:18:c7:82: fb:df:23:1b:82:0b:b9:89:b0:0f:0d:b8:95:ff:fa: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:92:EE:83:CA:76:90:99:1B:09:A3:CA:6D:3D:0F:55:9D:A3:C9 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6d:af:8c:ef:1d:25:9c:1f:64:1b:40:b8:83:6b:a3:d2:0c: fb:49:29:34:2e:25:e5:4d:e1:64:bc:0b:5d:2a:c1:57:0b:a6: 47:03:1a:93:8f:f1:1b:9f:e9:10:a3:cb:a8:d0:ef:41:e7:67: a5:2e:6b:fc:e3:ba:6e:ce:0c:25:0a:cf:86:b8:8c:4f:f6:21: 55:72:11:0f:5b:0e:bf:4b:4e:e9:30:87:c2:19:e2:3d:4c:93: 33:2b:e4:9a:e5:14:67:8b:46:35:ea:10:e6:1c:31:e8:64:fe: 72:76:c1:f5:aa:8b:f5:a0:98:a5:ec:a2:fc:d5:21:e9:3d:50: f0:bf:ee:1d:23:37:08:b4:02:78:a0:f5:d4:27:0a:24:99:d1: 9a:06:cf:c4:56:4b:ff:3c:40:5e:9f:6a:f2:b8:9a:ef:03:63: 05:5c:5f:67:38:7c:89:41:99:66:ec:3b:1e:7f:90:c6:1e:67: 0d:fc:fc:f5:12:d4:de:b2:be:30:25:89:01:07:94:b4:8b:5d: 17:62:11:dc:9e:5e:8a:85:e8:f6:e1:95:ce:40:01:80:d4:a4: 99:78:46:63:63:7c:86:55:94:9a:16:0c:9f:35:63:69:1e:56: 6d:b8:83:2a:fe:07:3c:54:4d:59:71:45:0c:e5:68:77:68:62: 04:77:a0:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjYwNTExMDIyNDM0WhcNMjYwNTE4MDIyNDM0WjAYMRYwFAYD VQQDEw02YTAxM2RlMi04ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymtgCbplJ4F6yyqovjQYZJLlWX8Fko97VOKFgZMLt+M2pwM2TGR51S1UAZES QTr99rcQoVcTuGR2HGO+FZshPlf69G/VJ0Cz6PHsH238jSG7nZwCPOHB2B93SNRw wZD8sWbUiMIJoSWZBAgIXdraWEYMYlSHCjv1uBAjd/lrK6Py3wU6s7uY9MB3siAO oifkXDyOWbqKShhY8Tobvna58znkIYQxRKlZPg/Ul5roHkpvSE3HQVoCLNtUpjt9 vKvUAWz1P1jmYJZhBODQ6n2HICI9bKCQ7mQbAkvwJbWPwtCLc9u8U1ZUMr0Kj1IY x4L73yMbggu5ibAPDbiV//ow+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2Oku6D ynaQmRsJo8ptPQ9VnaPJMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXG2vjO8dJZwfZBtAuINro9IM+0kpNC4l5U3hZLwLXSrBVwumRwMak4/xG5/p EKPLqNDvQednpS5r/OO6bs4MJQrPhriMT/YhVXIRD1sOv0tO6TCHwhniPUyTMyvk muUUZ4tGNeoQ5hwx6GT+cnbB9aqL9aCYpeyi/NUh6T1Q8L/uHSM3CLQCeKD11CcK JJnRmgbPxFZL/zxAXp9q8ria7wNjBVxfZzh8iUGZZuw7Hn+Qxh5nDfz89RLU3rK+ MCWJAQeUtItdF2IR3J5eioXo9uGVzkABgNSkmXhGY2N8hlWUmhYMnzVjaR5WbbiD Kv4HPFRNWXFFDOVod2hiBHeg3Q== -----END CERTIFICATE-----Generated at Wed May 13 04:13:55 2026 by rpki-client