$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: O1kG9pot3TBmfMXqIXfWQGZj//2bdJNsQtPkNcKk5Rc= Subject key identifier: D2:F0:BE:66:0E:B9:74:D5:A4:80:CC:82:3E:95:43:28:3A:DA:35:ED Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 0275 Signing time: Mon 11 May 2026 02:09:43 +0000 Manifest this update: Mon 11 May 2026 02:09:42 +0000 Manifest next update: Mon 18 May 2026 02:09:42 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: XeFcYsmg3PJpzpZd8XOwfJVlmOI9Y4+X4OIuC3USgPk=) 2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: May 11 02:09:42 2026 GMT Not After : May 18 02:09:42 2026 GMT Subject: CN=6a013a67-0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:b5:ff:44:80:0a:49:fa:df:31:56:2e:71: be:8d:92:e3:af:61:eb:44:0d:b5:ec:a1:9c:f4:f5: 43:ff:f3:a0:c8:86:2e:bf:6b:43:30:af:16:24:cf: 60:03:85:d2:d6:ba:81:c4:b3:70:23:d2:7b:e3:25: 86:d2:d6:64:25:de:f6:cb:15:99:cd:cd:12:a1:09: 5f:e3:b0:cb:5e:97:de:98:2f:dd:60:e0:02:51:0d: eb:37:21:3e:ec:1e:9b:85:54:90:9d:f4:61:73:20: 4f:92:57:a9:52:de:ac:6d:e1:3b:46:bf:e5:b5:e2: fc:07:66:5b:e3:d5:be:37:b8:06:81:92:fa:14:a9: a2:e6:05:f0:5a:24:8d:32:9a:8e:e3:ba:81:94:bc: 92:f2:4f:eb:bd:9f:07:93:1b:4a:b6:9b:f8:29:c7: 91:88:f4:12:54:80:c9:69:71:19:8f:b1:bf:52:a0: 7a:b2:50:9e:67:b2:55:d7:97:31:9a:34:ab:bc:dd: df:f0:a2:88:dd:c9:a3:30:7f:52:12:9b:9c:c1:3d: 54:eb:aa:ff:9c:24:a4:dc:d4:61:04:e8:f8:97:3f: 29:25:88:02:8e:cb:15:d7:96:30:f6:66:be:47:a1: c9:90:11:b7:16:f0:ff:8a:c8:f6:f5:2b:59:ce:6c: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F0:BE:66:0E:B9:74:D5:A4:80:CC:82:3E:95:43:28:3A:DA:35:ED X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:e8:f3:9c:8f:1f:8f:6e:42:23:33:49:c9:90:86:89:2d: bb:61:98:06:63:f6:96:5a:54:e2:f6:61:71:cc:71:3c:20:3f: ae:72:48:82:60:3b:bd:9d:c6:9e:7a:23:92:a4:0d:4f:af:d6: 77:06:69:20:25:35:48:f5:fc:8e:52:c7:1a:eb:8f:96:d9:7e: c9:45:95:0a:89:54:33:f9:16:a6:64:59:d3:ab:f1:16:3b:eb: 2e:f9:7b:ab:bd:de:d6:c4:94:a7:06:3e:29:ad:ab:cf:e4:0f: 94:27:55:37:3c:dd:0c:a2:b8:bc:d1:2b:89:96:2e:70:88:ca: d1:06:6f:88:2f:80:61:9d:96:57:c0:5c:b1:5d:f1:9f:ac:9c: d2:14:6b:59:2e:3b:43:46:62:17:e8:61:cc:2e:42:b0:18:d4: b3:20:76:e6:72:c7:6e:72:77:13:ba:b7:a5:69:d8:5e:16:dc: 25:4c:31:a7:95:33:72:72:a0:11:38:08:07:9f:2f:fd:51:52: 68:ef:e4:75:21:13:47:a2:1d:22:e6:2f:01:07:51:76:54:37: 6d:2b:63:56:a5:46:82:e8:0b:d0:fa:2a:e4:0d:fb:68:4c:df: 21:e6:ac:a3:8d:2c:e3:c6:7d:6d:ae:eb:db:41:e6:9b:77:aa: fb:25:ba:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjYwNTExMDIwOTQyWhcNMjYwNTE4MDIwOTQyWjAYMRYwFAYD VQQDEw02YTAxM2E2Ny0wMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iq1/0SACkn63zFWLnG+jZLjr2HrRA217KGc9PVD//OgyIYuv2tDMK8WJM9g A4XS1rqBxLNwI9J74yWG0tZkJd72yxWZzc0SoQlf47DLXpfemC/dYOACUQ3rNyE+ 7B6bhVSQnfRhcyBPklepUt6sbeE7Rr/lteL8B2Zb49W+N7gGgZL6FKmi5gXwWiSN MpqO47qBlLyS8k/rvZ8HkxtKtpv4KceRiPQSVIDJaXEZj7G/UqB6slCeZ7JV15cx mjSrvN3f8KKI3cmjMH9SEpucwT1U66r/nCSk3NRhBOj4lz8pJYgCjssV15Yw9ma+ R6HJkBG3FvD/isj29StZzmyDTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLwvmYO uXTVpIDMgj6VQyg62jXtMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP3Do85yPH49uQiMzScmQhoktu2GYBmP2llpU4vZhccxxPCA/rnJIgmA7vZ3G nnojkqQNT6/WdwZpICU1SPX8jlLHGuuPltl+yUWVColUM/kWpmRZ06vxFjvrLvl7 q73e1sSUpwY+Ka2rz+QPlCdVNzzdDKK4vNEriZYucIjK0QZviC+AYZ2WV8BcsV3x n6yc0hRrWS47Q0ZiF+hhzC5CsBjUsyB25nLHbnJ3E7q3pWnYXhbcJUwxp5UzcnKg ETgIB58v/VFSaO/kdSETR6IdIuYvAQdRdlQ3bStjVqVGgugL0Poq5A37aEzfIeas o40s48Z9ba7r20Hmm3eq+yW69A== -----END CERTIFICATE-----Generated at Wed May 13 00:43:03 2026 by rpki-client