$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: /j2aSS0APQDOWBHgGZNWlGeKWlrAqnhVEwgve4xIGXc= Subject key identifier: 12:D5:F5:2B:B1:D8:8F:02:75:9B:59:C8:66:59:89:81:34:FD:12:59 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0626 Signing time: Tue 12 May 2026 22:54:30 +0000 Manifest this update: Tue 12 May 2026 22:54:30 +0000 Manifest next update: Tue 19 May 2026 22:54:30 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: Q7MW9b77u53e75V5MZAWCZCxm4LKGfeIg5hqQzvaT7c=) 2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: KPX0rK0OaNteIMx84M4NZOMyO+pLPu817uzNmJdQ98A=) 3: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: esfW9wCIFip8anOs41Rq+ZFPyJj6Borr2LXsT9A2eN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: May 12 22:54:30 2026 GMT Not After : May 19 22:54:30 2026 GMT Subject: CN=6a03afa6-5ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:82:99:5b:81:25:9a:c7:1c:de:f5:3f:92: 4f:93:cf:89:70:89:a4:a0:c6:dc:dc:0f:2e:c0:f9: ed:e1:65:8c:89:6f:e7:cf:24:ff:49:e7:7d:24:64: a4:b1:49:f4:95:35:5a:ae:f8:81:cc:d3:6f:98:e5: 55:5f:87:d9:00:27:39:e5:1b:8b:7b:d3:ac:52:fe: 97:3a:13:3d:f8:0c:58:50:b4:67:a7:66:27:7f:40: 37:be:40:2d:7f:bd:0a:33:4f:82:72:75:c5:08:3b: 45:67:21:d5:76:c9:3f:b3:0f:29:6f:5f:a9:87:48: 11:ad:8c:56:89:6a:ac:2d:c0:c1:5c:ea:40:96:f7: 45:6b:8a:4b:41:54:e7:ff:61:a2:c2:80:ff:5b:bc: 8b:ea:18:d4:e7:80:c4:18:39:fd:c1:20:78:63:01: 93:00:2b:b7:64:b4:1e:34:5f:42:f3:d1:1e:a4:29: 40:3c:81:7f:a2:81:bc:e6:5b:69:ba:2d:5b:56:ee: f5:14:59:8c:71:ba:2a:24:4b:49:d7:db:8f:f3:c6: 64:d4:0a:99:4a:d9:a2:43:29:60:6f:58:80:33:33: 76:9e:5f:da:9f:c1:af:a3:3e:62:de:28:20:6c:25: c2:24:59:39:a6:8f:b6:ac:e7:aa:84:ab:81:f6:c6: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:F5:2B:B1:D8:8F:02:75:9B:59:C8:66:59:89:81:34:FD:12:59 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7b:c1:2c:79:3d:71:ed:6c:56:47:0a:3e:5e:3f:d6:d5:4d: 73:ac:2d:e9:3b:33:79:2e:22:e5:d8:46:59:10:00:ba:0b:de: 86:60:99:8e:d3:6f:e8:f2:4a:f0:33:64:fb:84:cd:69:a2:80: 58:0e:a4:9c:79:e9:83:7f:a4:99:60:bb:d7:55:b7:b3:cc:3d: 6e:8e:7a:2e:cc:dc:41:aa:40:bd:50:e6:cb:96:68:bc:9b:3a: 7a:64:9f:2c:77:28:df:c4:11:80:11:3f:7d:b8:3b:e9:c6:3d: 0a:83:cd:47:22:f5:39:1e:91:f8:0b:2f:53:73:ad:08:4d:de: 40:72:51:26:79:be:d8:8d:e2:e7:c6:fb:09:b9:ec:9b:00:0c: 53:17:7d:24:20:4b:e2:7f:54:67:f6:d6:be:e9:8a:ed:ee:e5: 1f:7c:ab:86:39:e7:b6:d0:70:4b:26:7f:99:70:da:5b:03:ca: 7e:eb:f4:c4:92:65:ce:28:65:74:ec:94:44:a0:2c:2c:2e:fb: a9:2c:05:7c:3d:29:55:34:98:a7:b9:6b:c3:b4:84:86:a5:a0: 48:89:d2:3a:8e:99:3d:3c:a4:0b:d2:09:15:5a:d3:7e:93:27: da:4b:58:52:e8:d1:05:00:a0:7e:d3:b9:03:79:ac:eb:f9:39: dc:5d:8f:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYwNTEyMjI1NDMwWhcNMjYwNTE5MjI1NDMwWjAYMRYwFAYD VQQDEw02YTAzYWZhNi01ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv36CmVuBJZrHHN71P5JPk8+JcImkoMbc3A8uwPnt4WWMiW/nzyT/Sed9JGSk sUn0lTVarviBzNNvmOVVX4fZACc55RuLe9OsUv6XOhM9+AxYULRnp2Ynf0A3vkAt f70KM0+CcnXFCDtFZyHVdsk/sw8pb1+ph0gRrYxWiWqsLcDBXOpAlvdFa4pLQVTn /2GiwoD/W7yL6hjU54DEGDn9wSB4YwGTACu3ZLQeNF9C89EepClAPIF/ooG85ltp ui1bVu71FFmMcboqJEtJ19uP88Zk1AqZStmiQylgb1iAMzN2nl/an8Gvoz5i3igg bCXCJFk5po+2rOeqhKuB9sY6NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLV9Sux 2I8CdZtZyGZZiYE0/RJZMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnvBLHk9ce1sVkcKPl4/1tVNc6wt6TszeS4i5dhGWRAAugvehmCZjtNv6PJK 8DNk+4TNaaKAWA6knHnpg3+kmWC711W3s8w9bo56LszcQapAvVDmy5ZovJs6emSf LHco38QRgBE/fbg76cY9CoPNRyL1OR6R+AsvU3OtCE3eQHJRJnm+2I3i58b7Cbns mwAMUxd9JCBL4n9UZ/bWvumK7e7lH3yrhjnnttBwSyZ/mXDaWwPKfuv0xJJlzihl dOyURKAsLC77qSwFfD0pVTSYp7lrw7SEhqWgSInSOo6ZPTykC9IJFVrTfpMn2ktY UujRBQCgftO5A3ms6/k53F2P+w== -----END CERTIFICATE-----Generated at Wed May 13 10:53:53 2026 by rpki-client