$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: SSGrJ/f2i88pIR9Q1R1e10DBWEF4abnZ3AkRid0scxI= Subject key identifier: 4C:DB:C3:28:30:61:B1:18:D0:30:4A:68:76:9F:37:B6:F4:20:10:C4 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 01C7 Signing time: Mon 11 May 2026 03:50:04 +0000 Manifest this update: Mon 11 May 2026 03:50:03 +0000 Manifest next update: Mon 18 May 2026 03:50:03 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: ovfVA7U0QEqoO+gAyLJQlR+fkTZzpXEBU1X6wtYBsH4=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: alib+UnyJdcp5QK+xSWFYIjYS/kjVCRiqsWyoxYGVsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: May 11 03:50:03 2026 GMT Not After : May 18 03:50:03 2026 GMT Subject: CN=6a0151ec-7cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:c7:8f:08:6f:f2:8e:b0:b2:58:cc:53:b9: 30:37:c4:50:50:e2:cc:3c:95:c7:f8:72:b3:ef:94: 3b:33:8a:3a:03:6d:dd:53:7a:b3:22:43:cc:92:eb: 3c:c1:93:f0:d7:77:7d:46:e8:5f:cc:3e:7f:f8:55: 4e:7d:c5:24:83:80:9d:f0:50:4b:64:c0:4b:b8:7a: c5:d9:99:7c:93:80:00:46:df:49:fd:1a:86:cc:43: f3:96:42:72:b5:22:f6:2b:56:24:23:ea:2d:10:bc: f3:cf:8a:86:32:a2:71:c6:d6:b4:95:28:aa:1e:77: ff:87:55:bf:21:0a:2d:b4:71:82:54:19:a1:bb:21: a4:36:29:b8:8b:e6:e5:5f:06:9c:88:49:aa:f4:27: 7e:98:85:6c:e4:f5:7a:54:9b:30:fc:37:5a:ef:e3: 40:f2:ca:ef:84:7c:0f:3c:68:0b:31:46:ad:92:03: 58:c0:15:a8:fb:a8:7c:db:c4:53:ab:c4:66:69:1f: 38:31:41:de:98:a8:56:dc:33:94:4a:f1:29:58:cd: fb:10:aa:13:0a:b9:95:c8:60:d8:ed:3f:0d:de:6f: ed:12:25:91:f6:77:e4:67:6d:52:08:7d:0e:d8:90: 35:94:85:f0:a2:ab:09:b7:d3:5f:40:64:47:fc:22: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DB:C3:28:30:61:B1:18:D0:30:4A:68:76:9F:37:B6:F4:20:10:C4 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1d:a6:13:89:3a:0b:db:c9:20:35:c8:17:97:a3:14:4d:48: af:ba:d2:07:88:53:bc:05:a6:d0:22:ef:64:65:e0:eb:59:ae: 62:2f:b3:ab:17:0d:ae:b0:7f:48:01:3f:45:2d:be:3a:88:5e: 68:24:ba:8e:9f:12:3b:a6:cd:68:05:3a:13:6a:ea:b4:34:5c: 9f:46:10:10:23:fa:9f:dd:aa:ac:17:22:b9:ee:2e:21:cc:20: 77:01:9e:41:6e:7e:92:43:8e:54:17:6f:1a:e7:35:dd:69:bf: e4:8e:2e:f8:3b:13:79:75:f2:75:2d:fd:b7:bb:dd:ee:88:d4: 8c:63:86:74:fd:77:93:c6:52:7b:ed:32:d1:47:86:39:79:79: 37:84:06:91:61:26:8b:81:0c:f2:06:c5:44:64:9e:a6:99:ab: 9f:ba:e2:39:6a:e0:22:b4:fd:90:92:6f:31:13:6f:f6:d9:2a: cd:1f:4e:ee:92:bb:58:da:53:3e:e3:6d:a4:41:44:1b:07:a5: eb:db:62:a8:fb:0c:e4:fe:2f:2c:99:a9:38:53:06:b5:64:cb: b7:69:57:c3:3b:c6:e4:de:01:84:4c:16:6f:b5:1b:8a:60:94: 87:57:35:56:91:f0:19:e7:0c:c5:5c:e7:93:f5:80:f9:4b:25: b7:7a:86:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjYwNTExMDM1MDAzWhcNMjYwNTE4MDM1MDAzWjAYMRYwFAYD VQQDEw02YTAxNTFlYy03Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvjHjwhv8o6wsljMU7kwN8RQUOLMPJXH+HKz75Q7M4o6A23dU3qzIkPMkus8 wZPw13d9RuhfzD5/+FVOfcUkg4Cd8FBLZMBLuHrF2Zl8k4AARt9J/RqGzEPzlkJy tSL2K1YkI+otELzzz4qGMqJxxta0lSiqHnf/h1W/IQottHGCVBmhuyGkNim4i+bl XwaciEmq9Cd+mIVs5PV6VJsw/Dda7+NA8srvhHwPPGgLMUatkgNYwBWo+6h828RT q8RmaR84MUHemKhW3DOUSvEpWM37EKoTCrmVyGDY7T8N3m/tEiWR9nfkZ21SCH0O 2JA1lIXwoqsJt9NfQGRH/CJEbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzbwygw YbEY0DBKaHafN7b0IBDEMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVx2mE4k6C9vJIDXIF5ejFE1Ir7rSB4hTvAWm0CLvZGXg61muYi+zqxcNrrB/ SAE/RS2+OoheaCS6jp8SO6bNaAU6E2rqtDRcn0YQECP6n92qrBciue4uIcwgdwGe QW5+kkOOVBdvGuc13Wm/5I4u+DsTeXXydS39t7vd7ojUjGOGdP13k8ZSe+0y0UeG OXl5N4QGkWEmi4EM8gbFRGSeppmrn7riOWrgIrT9kJJvMRNv9tkqzR9O7pK7WNpT PuNtpEFEGwel69tiqPsM5P4vLJmpOFMGtWTLt2lXwzvG5N4BhEwWb7UbimCUh1c1 VpHwGecMxVznk/WA+Uslt3qGSw== -----END CERTIFICATE-----Generated at Wed May 13 06:42:38 2026 by rpki-client