$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: wIx6VIqdaaVrxuvarWWOWBLhFMWtMh74GwqRLgMSTQs= Subject key identifier: F3:71:34:B4:38:D5:12:E4:E4:CC:E6:23:FE:11:D5:84:D6:ED:F5:0D Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 14 Signing time: Mon 11 May 2026 09:14:36 +0000 Manifest this update: Mon 11 May 2026 09:14:35 +0000 Manifest next update: Mon 18 May 2026 09:14:35 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: aWqQy8XXw+CdKULRq5Ma6GXUFYonHXkf9Obg4qg9bYY=) 2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) 3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: May 11 09:14:35 2026 GMT Not After : May 18 09:14:35 2026 GMT Subject: CN=6a019dfb-3b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:85:07:0b:ad:58:03:f0:ab:b0:80:48:51: 8c:0e:a5:fe:bf:ea:95:e2:e2:f5:07:f4:08:e6:e0: b0:d7:ba:36:71:63:9f:4e:5c:2a:80:ef:80:6e:ef: f9:b5:06:1d:b2:1b:92:07:aa:df:ee:53:af:0d:e2: 0e:1d:85:ea:c8:72:67:7f:34:a3:be:15:66:a3:44: b4:b4:37:ae:bd:d4:89:d6:62:98:f3:7c:4c:14:60: ce:10:f0:2b:85:72:ad:b3:8f:15:d5:c0:8c:79:a9: c4:af:8a:74:43:2a:cc:7b:f2:41:95:fa:65:c4:2d: 15:fd:24:0f:0b:41:c3:77:96:64:91:8a:13:17:32: b6:4a:21:d8:9d:f3:5a:54:32:39:da:61:08:84:d5: d6:9b:1e:26:94:9d:70:ff:1a:a1:98:50:20:a1:5c: 0f:0d:e8:77:16:5d:10:ad:b3:ed:1d:cc:de:47:71: 86:5d:aa:36:c0:21:15:5f:5c:0a:a0:d8:20:f0:74: 5d:d5:11:16:ff:23:6e:42:4f:af:82:68:88:e3:da: 52:a9:ba:8a:b3:74:12:9e:6d:90:63:98:9e:03:ae: dd:7a:9e:dd:3d:f3:68:3b:14:a7:4c:9d:f9:cc:7e: 24:3c:f1:65:5f:3d:e5:d7:4c:fd:ca:77:be:08:24: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:71:34:B4:38:D5:12:E4:E4:CC:E6:23:FE:11:D5:84:D6:ED:F5:0D X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:29:2e:a4:c0:a9:9d:b9:7d:76:e6:b5:a9:8a:be:16:5a:26: dc:a7:90:bb:28:a4:39:a7:8d:84:c2:58:f4:d9:d3:3c:32:52: f4:34:26:28:8b:b0:25:d4:26:b3:cc:bd:a5:c4:66:eb:89:4e: d6:18:a9:da:ee:c9:cd:15:d3:a1:6a:94:5b:2d:40:07:c3:97: 7d:c7:3c:db:2f:49:45:95:31:34:9d:37:7d:09:03:9f:52:fa: 11:b8:2e:1f:0a:b9:82:1c:05:50:13:f5:e5:f0:2e:87:b8:f3: 0b:5c:6a:46:97:4c:ca:c9:1b:43:b6:b4:d2:65:74:b6:25:59: e5:3c:de:c9:ab:10:85:14:57:50:7c:b5:13:73:33:45:2f:42: 7b:a5:cd:78:73:a8:f5:6a:9c:c2:4d:e1:2e:e6:5e:5a:bb:db: 37:4f:e4:71:6d:ba:1b:0e:eb:6f:14:df:dd:3a:d0:73:16:f7: 2a:86:c9:16:51:12:68:7d:07:e5:77:8f:06:76:c4:c0:67:c0: e2:eb:03:0f:a6:c3:8b:c2:04:6c:6a:65:94:3f:0c:f6:97:02: a9:68:19:e9:bf:2d:f9:68:a4:5a:38:1c:a1:2f:ac:4f:b0:78: 54:a3:ef:18:38:7f:4d:dc:bc:b2:0c:31:03:10:9a:eb:aa:17: 8d:88:a6:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA1MTEwOTE0MzVaFw0yNjA1MTgwOTE0MzVaMBgxFjAUBgNV BAMTDTZhMDE5ZGZiLTNiM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZHoUHC61YA/CrsIBIUYwOpf6/6pXi4vUH9Ajm4LDXujZxY59OXCqA74Bu7/m1 Bh2yG5IHqt/uU68N4g4dherIcmd/NKO+FWajRLS0N6691InWYpjzfEwUYM4Q8CuF cq2zjxXVwIx5qcSvinRDKsx78kGV+mXELRX9JA8LQcN3lmSRihMXMrZKIdid81pU MjnaYQiE1dabHiaUnXD/GqGYUCChXA8N6HcWXRCts+0dzN5HcYZdqjbAIRVfXAqg 2CDwdF3VERb/I25CT6+CaIjj2lKpuoqzdBKebZBjmJ4Drt16nt0982g7FKdMnfnM fiQ88WVfPeXXTP3Kd74IJMvFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU83E0tDjV EuTkzOYj/hHVhNbt9Q0wHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLKS6kwKmduX125rWpir4WWibcp5C7KKQ5p42Ewlj02dM8MlL0NCYoi7Al1Caz zL2lxGbriU7WGKna7snNFdOhapRbLUAHw5d9xzzbL0lFlTE0nTd9CQOfUvoRuC4f CrmCHAVQE/Xl8C6HuPMLXGpGl0zKyRtDtrTSZXS2JVnlPN7JqxCFFFdQfLUTczNF L0J7pc14c6j1apzCTeEu5l5au9s3T+RxbbobDutvFN/dOtBzFvcqhskWURJofQfl d48GdsTAZ8Di6wMPpsOLwgRsamWUPwz2lwKpaBnpvy35aKRaOByhL6xPsHhUo+8Y OH9N3LyyDDEDEJrrqheNiKaM -----END CERTIFICATE-----Generated at Wed May 13 09:12:35 2026 by rpki-client