$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: pa1Nmxgj8Xmjf+/WnGqqadnny+duM9L0G9hCzDTA1QI= Subject key identifier: 9A:1B:81:E9:5A:4E:FF:6D:22:51:C8:AB:64:73:5A:6D:50:FF:1E:23 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 3537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 3535 Signing time: Tue 12 May 2026 15:08:50 +0000 Manifest this update: Tue 12 May 2026 15:08:49 +0000 Manifest next update: Tue 19 May 2026 15:08:49 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: EhMs9/PIGDt+/s61ou1Mbc+xbphQu0GUEQZ+lXVwvMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13623 (0x3537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: May 12 15:08:49 2026 GMT Not After : May 19 15:08:49 2026 GMT Subject: CN=6a034282-20f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:bf:2c:4f:20:c9:6d:87:47:49:5e:c3:75: b1:80:db:8c:be:6f:f7:91:55:59:24:db:22:3a:92: ec:0b:72:f8:a1:0f:27:54:d6:10:61:cf:2b:80:df: 48:f4:a8:c5:98:37:dd:90:f5:19:0c:00:8a:a9:2b: 7c:4f:83:34:75:fd:5a:ac:c3:58:2c:d6:71:f8:e3: 5d:c3:de:4d:84:0c:4c:97:1f:c2:d9:3e:ef:48:27: 41:38:93:c5:d1:b0:1d:01:54:96:8b:24:06:2e:29: 1e:a2:c3:85:77:86:a6:d0:a2:40:08:aa:d0:75:17: 1d:86:86:7d:14:8c:57:aa:b6:34:07:c4:5f:24:36: 53:35:a1:b3:84:c0:8e:9b:3b:15:94:26:03:06:ac: 65:ff:40:00:7f:b4:cb:5e:c0:f0:8f:4a:84:f7:61: 38:33:6b:fd:89:69:8d:57:eb:a7:1c:a8:79:09:b4: d6:aa:9e:43:4a:97:68:4c:1b:cc:9c:41:51:29:2f: e5:28:ad:69:13:13:64:90:37:8a:94:53:d8:3f:e9: 2f:eb:24:07:6c:a1:b6:a5:e6:79:c9:f5:1c:5b:62: 6e:d6:72:c2:9b:b8:31:eb:24:75:b2:5d:47:33:ca: f2:4a:f0:ba:6f:81:2c:22:0e:82:dc:aa:a3:10:d5: 94:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:81:E9:5A:4E:FF:6D:22:51:C8:AB:64:73:5A:6D:50:FF:1E:23 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e5:d6:79:b8:8e:16:a1:7a:ef:43:e9:80:7c:58:d6:cf:a2: 75:05:94:a3:0d:23:40:f7:f0:12:5d:53:46:06:0f:01:62:29: 62:ad:f0:ad:93:bc:fb:e8:b7:98:52:5c:5a:d8:4b:91:15:56: 6c:eb:57:c8:7b:f0:d1:c6:94:b0:73:51:ab:97:f1:5e:40:fe: e5:cb:c1:57:cc:ee:f3:23:e8:7a:3e:41:4b:02:d5:e2:34:69: 57:9b:c1:68:5a:62:3d:8a:a2:c0:93:4c:11:93:bd:4e:99:56: a6:54:e8:9e:a8:18:b3:c6:6b:84:83:36:a0:5b:c4:13:01:57: 9e:dd:c4:58:70:99:c2:5f:8c:55:1e:61:cb:f2:2c:11:cc:a8: 1d:8d:65:6d:9e:ee:5c:d0:76:86:53:dd:50:67:81:66:10:cd: 22:d4:d6:2c:43:09:fa:91:13:33:0a:c3:5e:61:1b:73:68:63: e2:5e:a9:cc:7d:7e:5b:cc:4e:f5:ef:aa:94:ed:30:da:b5:f9: 64:98:df:1a:d2:4b:65:98:ec:d3:72:17:8a:8d:b9:39:b4:15: 2f:71:5a:ad:5a:ca:16:1f:99:8e:e0:ea:3c:b5:78:17:89:3a: 32:ff:a7:20:4a:cb:39:5c:73:b1:bd:e8:6a:ef:1e:52:77:a1: f5:18:0a:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjYwNTEyMTUwODQ5WhcNMjYwNTE5MTUwODQ5WjAYMRYwFAYD VQQDEw02YTAzNDI4Mi0yMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1y/LE8gyW2HR0lew3WxgNuMvm/3kVVZJNsiOpLsC3L4oQ8nVNYQYc8rgN9I 9KjFmDfdkPUZDACKqSt8T4M0df1arMNYLNZx+ONdw95NhAxMlx/C2T7vSCdBOJPF 0bAdAVSWiyQGLikeosOFd4am0KJACKrQdRcdhoZ9FIxXqrY0B8RfJDZTNaGzhMCO mzsVlCYDBqxl/0AAf7TLXsDwj0qE92E4M2v9iWmNV+unHKh5CbTWqp5DSpdoTBvM nEFRKS/lKK1pExNkkDeKlFPYP+kv6yQHbKG2peZ5yfUcW2Ju1nLCm7gx6yR1sl1H M8rySvC6b4EsIg6C3KqjENWUNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJobgela Tv9tIlHIq2RzWm1Q/x4jMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa+XWebiOFqF670PpgHxY1s+idQWUow0jQPfwEl1TRgYPAWIpYq3wrZO8++i3 mFJcWthLkRVWbOtXyHvw0caUsHNRq5fxXkD+5cvBV8zu8yPoej5BSwLV4jRpV5vB aFpiPYqiwJNMEZO9TplWplTonqgYs8ZrhIM2oFvEEwFXnt3EWHCZwl+MVR5hy/Is EcyoHY1lbZ7uXNB2hlPdUGeBZhDNItTWLEMJ+pETMwrDXmEbc2hj4l6pzH1+W8xO 9e+qlO0w2rX5ZJjfGtJLZZjs03IXio25ObQVL3FarVrKFh+ZjuDqPLV4F4k6Mv+n IErLOVxzsb3oau8eUneh9RgK0w== -----END CERTIFICATE-----Generated at Wed May 13 05:20:16 2026 by rpki-client