$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: dtY8hMbzGR/ocE8KYWy/POHBeIr68Tw9Z9pCuKypmG0= Subject key identifier: 77:13:94:77:92:C0:28:31:62:30:79:82:75:56:8B:25:DD:32:D5:21 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 01CF Signing time: Mon 11 May 2026 04:08:41 +0000 Manifest this update: Mon 11 May 2026 04:08:40 +0000 Manifest next update: Mon 18 May 2026 04:08:40 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: SQK6WoREkTiTBpAgGVNxn0JoJAM+Ge88tbbh6vrRte0=) 2: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=) 3: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: A2+Rc3xoTrncaTR95Sq9MBAmQnYMit+OOLZAoM52Nuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: May 11 04:08:40 2026 GMT Not After : May 18 04:08:40 2026 GMT Subject: CN=6a015648-b1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:2d:a2:8b:4b:9f:9a:11:9e:a1:0e:1b:40: 24:66:42:98:9e:21:5e:0d:dd:6c:c8:31:d4:ac:fe: cc:17:1b:13:d4:b3:4f:61:4a:63:ff:b8:59:8c:d0: 65:a0:58:87:ec:31:ac:53:b8:00:77:11:e4:2a:03: ab:e9:8a:ba:66:19:50:ac:10:00:d6:9b:23:4e:42: 29:11:84:3f:29:02:9d:3d:1c:4b:89:b4:c8:19:d1: 33:72:25:37:de:54:d2:42:f7:9a:e4:3b:bf:e0:6f: cf:06:b1:b9:b2:e7:0b:df:72:fa:7c:45:3b:3a:89: 45:5e:2c:23:8e:30:ee:36:88:64:4c:cf:74:af:e1: 44:89:b3:52:25:59:5e:6c:3a:be:c0:0a:9c:b0:1c: 31:c2:cd:fa:96:e3:b9:8c:cd:51:d1:bc:28:ff:d8: e7:f8:1a:e4:e5:20:54:50:f7:11:49:c1:7e:64:23: f2:29:bd:c4:59:c2:2a:2b:21:6e:3f:a7:b4:69:ca: a5:3f:7d:af:d6:12:b1:64:68:31:f9:a7:a1:46:b2: 0b:ba:b6:3f:11:4e:a8:8f:e4:16:40:eb:38:cd:27: 58:1a:29:99:b4:c3:f8:15:0b:20:b2:49:5c:d8:cf: bc:f0:12:d7:bb:20:4c:c8:b3:d8:61:b3:43:5a:d7: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:13:94:77:92:C0:28:31:62:30:79:82:75:56:8B:25:DD:32:D5:21 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:60:8b:0e:ee:37:ce:c0:75:51:39:b8:1d:58:0a:c5:2a:82: 69:c7:02:22:e8:0f:01:57:24:a7:a4:a5:a2:1f:bd:e5:79:ee: bf:54:45:ff:34:bd:77:be:a3:42:49:2f:1a:80:bc:7d:e5:9c: f3:c3:5a:02:18:75:bf:8b:11:ad:99:cd:a1:a5:d6:fa:d3:52: 4d:55:34:9b:65:7a:c7:ea:b0:88:69:9a:19:23:d3:4b:03:26: 82:7b:ce:f6:32:6c:15:de:f2:6e:db:a7:95:f0:1c:d9:a3:76: ac:87:1e:58:49:83:09:86:4e:4f:67:79:41:fd:91:b5:42:6c: d2:08:36:ab:70:dd:c6:f0:fa:85:cb:8f:d7:09:9e:55:d0:b8: 98:f5:98:59:bc:79:65:64:56:3c:c4:5c:a3:cb:ba:2a:4f:90: 79:6f:d7:8e:80:f3:9d:e3:f4:c9:eb:ff:67:45:88:eb:f8:ac: 01:52:6b:ae:3c:51:5b:22:49:b3:9b:d7:b3:3d:c3:bd:dc:3d: c4:10:d9:09:79:f6:96:31:81:da:99:28:ca:3d:4b:44:63:4f: db:82:8b:09:ef:9d:8c:84:df:60:c6:11:16:4a:0f:76:7b:31: 44:83:06:20:d7:40:f6:26:37:79:6d:c7:f1:16:17:10:d8:68: 57:3a:bf:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjYwNTExMDQwODQwWhcNMjYwNTE4MDQwODQwWjAYMRYwFAYD VQQDEw02YTAxNTY0OC1iMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAststootLn5oRnqEOG0AkZkKYniFeDd1syDHUrP7MFxsT1LNPYUpj/7hZjNBl oFiH7DGsU7gAdxHkKgOr6Yq6ZhlQrBAA1psjTkIpEYQ/KQKdPRxLibTIGdEzciU3 3lTSQvea5Du/4G/PBrG5sucL33L6fEU7OolFXiwjjjDuNohkTM90r+FEibNSJVle bDq+wAqcsBwxws36luO5jM1R0bwo/9jn+Brk5SBUUPcRScF+ZCPyKb3EWcIqKyFu P6e0acqlP32v1hKxZGgx+aehRrILurY/EU6oj+QWQOs4zSdYGimZtMP4FQsgsklc 2M+88BLXuyBMyLPYYbNDWtfogQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcTlHeS wCgxYjB5gnVWiyXdMtUhMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeGCLDu43zsB1UTm4HVgKxSqCaccCIugPAVckp6Sloh+95Xnuv1RF/zS9d76j QkkvGoC8feWc88NaAhh1v4sRrZnNoaXW+tNSTVU0m2V6x+qwiGmaGSPTSwMmgnvO 9jJsFd7ybtunlfAc2aN2rIceWEmDCYZOT2d5Qf2RtUJs0gg2q3DdxvD6hcuP1wme VdC4mPWYWbx5ZWRWPMRco8u6Kk+QeW/XjoDzneP0yev/Z0WI6/isAVJrrjxRWyJJ s5vXsz3Dvdw9xBDZCXn2ljGB2pkoyj1LRGNP24KLCe+djITfYMYRFkoPdnsxRIMG INdA9iY3eW3H8RYXENhoVzq/dA== -----END CERTIFICATE-----Generated at Wed May 13 04:30:34 2026 by rpki-client