$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json) Hash identifier: q4zu4MXCLpro9BJLWvXnpgiWFNW5TTCLlIDVJzvDCrY= Subject key identifier: 62:9C:1F:34:1E:06:6E:B1:CE:12:51:8A:AE:4A:20:07:77:66:68:B1 Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft Manifest number: 5C Signing time: Mon 11 May 2026 08:16:10 +0000 Manifest this update: Mon 11 May 2026 08:16:10 +0000 Manifest next update: Mon 18 May 2026 08:16:10 +0000 Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: Pi1zrxdA3mfnY45jwuuH5HVXnUzocksfjSZaTVc75q8=) 2: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=) 3: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=) 4: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Validity Not Before: May 11 08:16:10 2026 GMT Not After : May 18 08:16:10 2026 GMT Subject: CN=6a01904a-2f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:54:11:a2:11:e7:fa:f0:81:04:6c:9b:d5: ec:bc:57:dc:d7:7b:ff:79:73:35:08:27:b1:94:73: f3:c6:86:71:f6:b3:47:ef:70:a0:e2:2b:6d:e3:7c: 0d:ce:83:e2:96:ce:4c:b9:c9:af:81:1f:19:cc:cd: a4:f1:d3:49:5a:c7:a4:3f:96:81:56:4d:f2:33:49: 99:9a:07:90:5a:c8:d1:5f:4d:0c:5f:f7:51:c6:83: 1a:ff:13:aa:5c:f9:4d:00:d6:0c:9b:97:d2:e1:4c: cc:e7:7b:4d:7f:09:9a:f2:1a:4c:92:e0:22:68:18: ff:70:7e:9d:3e:f3:af:cd:32:ba:e1:1a:11:b7:dd: c8:73:8e:2e:c5:ed:ed:7f:95:28:f3:6a:bd:2b:40: 17:7f:79:5b:b5:94:72:6b:fb:48:4c:cb:ab:27:ad: c2:73:00:7b:31:5e:ce:72:f6:3d:c8:38:b4:58:da: 53:48:0f:fb:75:09:c1:68:cc:00:22:7f:ed:19:86: db:3f:bd:99:eb:a9:d8:35:30:3d:a4:9d:15:81:81: 3e:88:c2:8e:d5:ab:c5:27:50:e8:7b:26:61:b7:58: 60:23:ce:4b:ce:d5:b6:a1:6a:d8:46:90:e4:ee:16: 25:21:34:e0:b3:04:98:65:50:48:2a:0e:d5:f1:9b: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9C:1F:34:1E:06:6E:B1:CE:12:51:8A:AE:4A:20:07:77:66:68:B1 X509v3 Authority Key Identifier: keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:de:d4:78:21:ec:70:c6:5f:ed:e2:bc:50:c8:94:4c:6a:b5: ff:a1:10:b4:fe:f6:42:32:8d:ff:5b:cf:11:05:b7:74:ee:a4: 85:80:dd:06:ad:ce:c5:49:a3:2d:d2:5c:6b:1e:82:39:f9:b8: 1c:77:4d:ee:11:fa:9c:a0:af:c4:cb:6d:6b:b5:ec:bb:12:f0: e2:01:72:4c:6e:14:d3:b6:7b:31:a0:26:5b:8b:b7:a9:b3:fd: 36:33:e7:8c:ad:da:cb:39:a1:30:0a:b1:8e:d1:ad:61:ac:a3: 5c:6f:0a:79:d6:54:da:20:0e:46:a0:00:6d:dc:bb:5b:26:b4: 3f:58:63:4e:d1:24:5e:6a:10:99:23:9c:7a:de:b8:fd:1e:c7: 9b:66:9e:71:db:3a:70:ad:7d:72:a9:f4:e0:4c:35:c9:53:a4: 7a:1f:1a:7d:aa:22:33:c8:a5:c0:fa:dc:6f:49:fe:85:7e:16: 38:56:8d:19:08:f8:72:39:9f:e7:d2:3b:c2:e5:b3:b9:1b:4c: 56:aa:f0:34:cd:d4:cc:79:a1:b8:23:1f:89:30:83:64:c9:30: 04:f0:fb:8c:81:9d:ac:05:b1:3b:6b:fe:ab:60:c3:b0:42:6e: 45:d0:3a:32:46:b2:00:0f:3e:9a:2c:a3:47:2c:e9:7f:01:56: 21:3d:ea:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Mjk4QzExMC8GA1UEBRMoNUZDMjZCOTI4REVEQzkwQzM5MUNDNEY1MjlCQTdCOUUw OUE1MDQ2RTAeFw0yNjA1MTEwODE2MTBaFw0yNjA1MTgwODE2MTBaMBgxFjAUBgNV BAMTDTZhMDE5MDRhLTJmMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQQVQRohHn+vCBBGyb1ey8V9zXe/95czUIJ7GUc/PGhnH2s0fvcKDiK23jfA3O g+KWzky5ya+BHxnMzaTx00lax6Q/loFWTfIzSZmaB5BayNFfTQxf91HGgxr/E6pc +U0A1gybl9LhTMzne01/CZryGkyS4CJoGP9wfp0+86/NMrrhGhG33chzji7F7e1/ lSjzar0rQBd/eVu1lHJr+0hMy6snrcJzAHsxXs5y9j3IOLRY2lNID/t1CcFozAAi f+0Zhts/vZnrqdg1MD2knRWBgT6Iwo7Vq8UnUOh7JmG3WGAjzkvO1bahathGkOTu FiUhNOCzBJhlUEgqDtXxm96fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYpwfNB4G brHOElGKrkogB3dmaLEwHwYDVR0jBBgwFoAUX8Jrko3tyQw5HMT1Kbp7ngmlBG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOThDL0FDNUU4QUMyQzZE MDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhKcmtvM3R5UXc1SE1UMUticDduZ21sQkc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy OThDL0FDNUU4QUMyQzZEMDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3 NUhNVDFLYnA3bmdtbEJHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCB3tR4Iexwxl/t4rxQyJRMarX/oRC0/vZCMo3/W88RBbd07qSFgN0Grc7FSaMt 0lxrHoI5+bgcd03uEfqcoK/Ey21rtey7EvDiAXJMbhTTtnsxoCZbi7eps/02M+eM rdrLOaEwCrGO0a1hrKNcbwp51lTaIA5GoABt3LtbJrQ/WGNO0SReahCZI5x63rj9 HsebZp5x2zpwrX1yqfTgTDXJU6R6Hxp9qiIzyKXA+txvSf6FfhY4Vo0ZCPhyOZ/n 0jvC5bO5G0xWqvA0zdTMeaG4Ix+JMINkyTAE8PuMgZ2sBbE7a/6rYMOwQm5F0Doy RrIADz6aLKNHLOl/AVYhPeoo -----END CERTIFICATE-----Generated at Wed May 13 07:24:24 2026 by rpki-client