$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json) Hash identifier: yw86uTMfDdLYUkXBLpU2hQ/2HEREkfKqbmIgHnIbiKU= Subject key identifier: 33:A1:ED:B7:DD:83:F8:C2:C6:09:7E:ED:2F:6A:3A:6F:B2:BF:DF:81 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft Manifest number: 5F Signing time: Mon 11 May 2026 08:11:18 +0000 Manifest this update: Mon 11 May 2026 08:11:18 +0000 Manifest next update: Mon 18 May 2026 08:11:18 +0000 Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: 49C1gIVn0h4N09PCA9Znu3rcYPXaPPvkZqNg6o66K10=) 2: AF2E6AE2C03B11F09EE7012FC4F9AE02.roa (hash: X+3wJMfk1XJRp+yqbhiP7HWaocFMU1AXSgdZNrsdlvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: May 11 08:11:18 2026 GMT Not After : May 18 08:11:18 2026 GMT Subject: CN=6a018f26-2493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:9f:e8:be:1b:24:7c:ef:3f:42:1c:ac:33: d7:b0:b3:81:27:94:e6:2f:3e:41:4e:af:28:06:47: c3:c7:7a:a5:f1:48:da:46:7c:24:23:cf:9c:25:1c: fc:b9:82:f5:0b:05:75:e2:18:9c:1d:17:61:a0:48: 47:d2:8e:af:6a:9f:cb:cc:c2:ea:ce:82:b7:60:47: a1:f5:ff:a7:e2:f4:85:90:85:7f:5f:52:62:44:60: cf:77:ba:6f:d4:20:85:a2:be:b6:2f:c4:3d:b3:76: dd:b3:d6:31:3a:8b:59:1b:67:89:4e:4f:cc:fe:de: a8:6f:16:c7:cb:24:a0:12:4c:17:26:1e:b2:a7:f3: 02:26:9b:56:5c:7b:1f:af:4e:95:65:be:cf:f4:9a: c8:35:34:f8:31:07:fa:e7:3d:83:13:6d:ff:4f:88: 2e:53:0f:c9:87:12:ac:b4:82:c4:ea:cb:e2:44:d2: cd:f2:d3:9e:84:87:ec:34:80:45:8e:2e:ae:8e:0b: f2:54:d2:24:05:76:2a:68:9a:cd:ff:c7:83:56:07: 97:c7:d4:e9:c8:68:d0:48:6b:8f:1e:24:d2:e5:80: cb:5d:e8:a0:1d:39:96:6e:14:70:13:e5:e0:e7:85: 90:30:29:f1:a2:9e:1e:b6:dd:8f:7d:fd:67:e7:da: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A1:ED:B7:DD:83:F8:C2:C6:09:7E:ED:2F:6A:3A:6F:B2:BF:DF:81 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:55:78:25:0b:85:4c:45:5b:72:ac:45:b9:ec:34:d0:cb:3a: aa:af:19:b9:f1:b2:58:f4:ab:97:e2:93:fa:26:12:ee:61:47: 83:d7:96:ca:ed:d5:f6:81:64:2d:7d:6d:a8:78:3a:ac:a3:c4: 33:eb:2d:fe:6b:c0:2c:60:8c:05:2a:dc:f4:ad:8f:8e:2f:3e: a4:53:b3:b8:53:17:31:06:d0:17:b6:41:98:3b:1b:98:67:1e: 1c:fe:ba:54:30:82:2a:52:61:42:a9:87:7c:16:03:96:01:83: bf:83:54:3b:f5:b6:88:1c:04:35:b6:e8:66:f7:c4:8d:74:f0: 9d:1e:31:09:42:32:f4:76:c3:a6:01:e3:b8:ac:0d:a8:d3:d0: 71:cb:d9:41:0c:3a:ab:a2:0a:db:62:4b:b9:30:d7:6b:6f:f2: db:52:cc:1e:c9:44:e9:0c:f6:fb:41:5b:62:c1:78:6b:62:c7: db:48:e5:69:50:94:2e:34:94:25:80:b3:01:5b:99:cc:78:52: 70:18:e5:db:b7:f0:d3:cb:26:7e:6c:fc:0f:1a:ba:59:7f:4e: c3:8d:07:3d:66:2c:c0:f2:1f:9e:dc:3b:db:1e:4f:5f:53:c8: a0:f0:06:b8:a9:ad:61:c8:45:48:ec:6d:7d:1e:df:03:ab:23: 5b:f7:c2:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0E1QjExMC8GA1UEBRMoNUQ0RjQxMkFFNDgwMTBGRTU0ODdGMDE4RjE3MUE5QzY0 NjlEOUFDNTAeFw0yNjA1MTEwODExMThaFw0yNjA1MTgwODExMThaMBgxFjAUBgNV BAMTDTZhMDE4ZjI2LTI0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsxp/ovhskfO8/QhysM9ews4EnlOYvPkFOrygGR8PHeqXxSNpGfCQjz5wlHPy5 gvULBXXiGJwdF2GgSEfSjq9qn8vMwurOgrdgR6H1/6fi9IWQhX9fUmJEYM93um/U IIWivrYvxD2zdt2z1jE6i1kbZ4lOT8z+3qhvFsfLJKASTBcmHrKn8wImm1Zcex+v TpVlvs/0msg1NPgxB/rnPYMTbf9PiC5TD8mHEqy0gsTqy+JE0s3y056Eh+w0gEWO Lq6OC/JU0iQFdipoms3/x4NWB5fH1OnIaNBIa48eJNLlgMtd6KAdOZZuFHAT5eDn hZAwKfGinh623Y99/Wfn2qAvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM6Htt92D +MLGCX7tL2o6b7K/34EwHwYDVR0jBBgwFoAUXU9BKuSAEP5Uh/AY8XGpxkadmsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQTVCL0QyNUQ4NjhFQzAz QTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1z VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFU5Qkt1U0FFUDVVaF9BWThYR3B4a2FkbXNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QTVCL0QyNUQ4NjhFQzAzQTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1 VWhfQVk4WEdweGthZG1zVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwVXglC4VMRVtyrEW57DTQyzqqrxm58bJY9KuX4pP6JhLuYUeD15bK7dX2gWQt fW2oeDqso8Qz6y3+a8AsYIwFKtz0rY+OLz6kU7O4UxcxBtAXtkGYOxuYZx4c/rpU MIIqUmFCqYd8FgOWAYO/g1Q79baIHAQ1tuhm98SNdPCdHjEJQjL0dsOmAeO4rA2o 09Bxy9lBDDqrogrbYku5MNdrb/LbUsweyUTpDPb7QVtiwXhrYsfbSOVpUJQuNJQl gLMBW5nMeFJwGOXbt/DTyyZ+bPwPGrpZf07DjQc9ZizA8h+e3DvbHk9fU8ig8Aa4 qa1hyEVI7G19Ht8DqyNb98IU -----END CERTIFICATE-----Generated at Wed May 13 03:03:42 2026 by rpki-client