$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: 9UVbZXOXZ7lexsecGTwGlr2Hgn1Tpd2e9cId+r+6N5I= Subject key identifier: 55:CD:B0:EA:F9:F8:66:76:EF:9A:72:A3:AB:76:82:32:0A:8F:9C:77 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 357B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 355E Signing time: Tue 12 May 2026 14:48:11 +0000 Manifest this update: Tue 12 May 2026 14:48:10 +0000 Manifest next update: Tue 19 May 2026 14:48:10 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: mNAQqdfn/81O7/MhGNNY7GeyaI8vj9xbOLjh9a+2ZEI=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13691 (0x357b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: May 12 14:48:10 2026 GMT Not After : May 19 14:48:10 2026 GMT Subject: CN=6a033dab-6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:2a:f3:2d:a0:fe:87:71:47:cd:81:c1:a4: 1c:6b:09:c0:af:0f:63:5e:1d:df:e6:01:82:2b:62: 19:54:1a:f7:77:33:25:d9:d2:3b:9d:25:0b:48:03: 8e:39:58:f6:a5:97:b0:a4:f2:32:2e:59:6e:49:10: c0:55:87:6a:94:5c:a0:06:78:a9:0c:2d:c9:94:be: da:77:dc:36:29:46:bf:4d:35:9e:14:bf:63:09:c3: ea:1d:68:82:2b:0d:4a:cd:3b:5a:f3:34:82:e3:65: 9a:13:e8:ed:2c:24:fc:a3:94:fa:38:1c:5a:1f:34: f3:a5:24:9a:77:26:3d:f9:cd:ff:02:23:31:02:9b: 29:6e:53:c3:f5:6c:70:7d:70:50:3b:0d:72:aa:a7: e3:07:8a:00:c5:94:d5:48:0f:4f:9b:0a:c5:86:94: 5f:2e:ae:f5:34:67:0b:ec:ca:10:6c:2b:af:7b:83: c4:dc:f8:b7:54:7e:d2:60:16:6f:45:56:d4:af:98: 84:b8:c2:36:2a:b6:cf:50:45:1b:18:44:92:10:86: a5:40:53:4c:da:19:a1:62:26:23:cb:e9:d6:48:26: 87:25:31:9f:37:d8:5d:ff:13:01:42:49:c0:34:c6: 29:67:53:fb:17:1c:e3:9a:f9:d1:51:a2:5d:14:b0: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CD:B0:EA:F9:F8:66:76:EF:9A:72:A3:AB:76:82:32:0A:8F:9C:77 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:5c:36:f3:cc:c6:88:12:f5:ba:81:fc:53:2d:b8:a6:37:61: 5f:bb:24:71:5e:b9:9e:48:b4:ac:dd:84:1b:d6:46:d0:eb:8e: da:d4:f3:fa:7d:4b:31:b0:94:a7:a0:98:dd:49:e5:e7:53:82: d8:aa:e5:90:f2:ed:73:fa:3b:02:19:b4:66:99:3a:0b:f1:6c: 17:15:a9:d0:21:aa:66:88:11:f3:b9:d5:32:08:92:4f:c1:3b: ae:16:1a:87:4f:46:dc:e2:c8:0f:98:d5:c1:fb:a8:d2:2e:4d: 1f:80:19:6c:eb:57:50:0f:a9:2a:28:d9:fa:ac:2d:67:ac:0c: c4:e3:72:00:93:01:2f:98:c1:57:07:e5:bd:0c:91:19:6d:25: 0a:78:31:c2:c7:bb:99:53:07:6b:04:ce:d4:12:83:b3:60:82: f9:3d:25:4d:7a:40:d7:65:18:2d:74:f8:ce:0c:58:97:7a:97: 90:06:9c:af:83:c2:25:18:0d:f5:1a:a4:79:da:2e:50:68:12: 67:7d:22:f2:64:91:e8:61:4c:70:0e:bc:4d:2e:85:0c:de:81: d2:19:11:8d:60:ec:fb:4f:3f:9c:62:ad:ff:7d:51:af:5b:e3: 14:99:4f:b8:38:22:8d:2c:3a:ec:1c:6c:ed:9b:e0:c5:64:6c: 17:12:ba:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwNTEyMTQ0ODEwWhcNMjYwNTE5MTQ0ODEwWjAYMRYwFAYD VQQDEw02YTAzM2RhYi02MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwAq8y2g/odxR82BwaQcawnArw9jXh3f5gGCK2IZVBr3dzMl2dI7nSULSAOO OVj2pZewpPIyLlluSRDAVYdqlFygBnipDC3JlL7ad9w2KUa/TTWeFL9jCcPqHWiC Kw1KzTta8zSC42WaE+jtLCT8o5T6OBxaHzTzpSSadyY9+c3/AiMxApspblPD9Wxw fXBQOw1yqqfjB4oAxZTVSA9PmwrFhpRfLq71NGcL7MoQbCuve4PE3Pi3VH7SYBZv RVbUr5iEuMI2KrbPUEUbGESSEIalQFNM2hmhYiYjy+nWSCaHJTGfN9hd/xMBQknA NMYpZ1P7FxzjmvnRUaJdFLCOkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXNsOr5 +GZ275pyo6t2gjIKj5x3MB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAElw288zGiBL1uoH8Uy24pjdhX7skcV65nki0rN2EG9ZG0OuO2tTz+n1LMbCU p6CY3Unl51OC2KrlkPLtc/o7Ahm0Zpk6C/FsFxWp0CGqZogR87nVMgiST8E7rhYa h09G3OLID5jVwfuo0i5NH4AZbOtXUA+pKijZ+qwtZ6wMxONyAJMBL5jBVwflvQyR GW0lCngxwse7mVMHawTO1BKDs2CC+T0lTXpA12UYLXT4zgxYl3qXkAacr4PCJRgN 9RqkedouUGgSZ30i8mSR6GFMcA68TS6FDN6B0hkRjWDs+08/nGKt/31Rr1vjFJlP uDgijSw67Bxs7ZvgxWRsFxK6jA== -----END CERTIFICATE-----Generated at Wed May 13 10:41:52 2026 by rpki-client