$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: nXMSJC1uB3oifJ1XdEc8ba63vjaKaHOukrUeuJeqD3E= Subject key identifier: AC:F7:92:54:8C:C3:B2:FC:96:BF:FC:B1:A1:05:61:1A:5B:92:00:5E Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 1508 Signing time: Tue 12 May 2026 19:02:08 +0000 Manifest this update: Tue 12 May 2026 19:02:08 +0000 Manifest next update: Tue 19 May 2026 19:02:08 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: 96VsafUkbIZPd1pO6p6a70DE03PSWIlLPcC6NFp2R8g=) 2: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: QSEFrzyHThxfsuxeqGmvUKb+41WIgQBL8rivqG2479w=) 3: A856E7621BBC11F182440C5A133D8C67.roa (hash: UIVYsay7KQVs5dzePoAdcxAtnbz74xRDDqNirYjgjg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: May 12 19:02:08 2026 GMT Not After : May 19 19:02:08 2026 GMT Subject: CN=6a037930-51a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:90:ef:ef:e8:7a:8d:5a:d2:ef:4d:f4:d2: f6:67:b4:4d:7b:9a:2d:e1:78:6a:fc:bc:e9:ef:6c: 4f:a8:c7:68:fa:28:45:e8:d9:11:7c:30:b8:71:e5: d2:bd:1e:3a:d2:be:20:98:47:5e:d2:07:62:dc:25: d9:99:03:c2:29:fe:30:fb:0e:d5:99:85:18:56:33: 77:ed:bb:a3:2a:b5:c5:7f:85:8c:4e:96:64:ea:72: b4:05:1e:b1:38:11:90:e3:5e:00:fa:84:71:39:0e: 79:d4:a3:18:26:c4:cc:d6:54:19:e9:e8:b6:1a:51: 5b:cd:78:32:38:76:2c:d3:c6:da:44:dd:f8:10:2b: 2e:a1:28:63:41:f9:d8:f8:7d:51:27:c9:2a:e9:8c: 60:57:3e:e5:c1:e0:70:4b:20:db:dd:6b:f2:e9:4a: 69:d4:17:fd:0d:be:48:44:50:5b:29:b9:48:84:36: af:6b:5c:db:5b:e8:19:58:a3:b4:c6:99:be:94:fb: 4f:d7:d9:5a:6b:fd:f8:80:42:ec:a0:67:38:0d:df: ee:01:88:5b:0e:81:30:8e:e8:cf:e5:97:d8:33:96: 24:ea:26:79:67:10:c6:98:e5:c1:ed:f0:48:fd:66: fa:f8:36:ee:ad:b7:b9:a5:8f:03:51:7c:07:92:0a: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F7:92:54:8C:C3:B2:FC:96:BF:FC:B1:A1:05:61:1A:5B:92:00:5E X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:fa:28:d6:18:df:6f:51:56:dd:ee:e3:66:0f:9b:f0:57:18: dc:68:62:53:01:aa:70:22:3d:91:93:34:0e:51:86:b9:0a:8d: 6f:f5:c0:eb:24:6f:37:09:69:26:76:6b:5d:32:58:01:b4:e2: 0b:ba:7e:2b:e6:c5:65:c7:6b:cf:00:7f:46:b4:6b:c6:0d:c4: f7:7d:2d:dd:bc:a4:5d:63:db:05:58:55:a1:00:a1:7e:04:b3: 5d:f9:25:33:a3:f6:84:14:86:e0:8c:5a:70:54:2a:69:1d:b0: 72:d9:80:9e:19:05:6e:2e:5d:37:8d:f2:76:46:7e:15:d4:39: 42:c4:28:2a:f9:a2:f3:12:a7:59:47:a1:a2:f6:9b:fa:b2:4c: 30:bd:fe:36:ce:64:8d:35:40:0c:22:f4:f2:8e:ec:19:4e:d3: 9b:d5:63:4b:2b:a6:c7:5e:c1:cb:ce:67:d3:5e:86:25:c3:62: 0b:f4:c0:b5:3e:45:44:7f:6a:b2:9e:48:93:eb:ff:e0:1b:ce: e3:92:eb:2f:e3:6a:9d:de:71:78:4e:10:9d:6d:e2:73:28:36: e5:25:99:b0:b9:c4:64:0f:30:3a:a8:e3:ca:ff:c6:49:dd:87: 6d:35:28:ab:38:73:d5:ac:cd:5a:42:8a:b5:a7:19:77:e1:ce: c0:23:7d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjYwNTEyMTkwMjA4WhcNMjYwNTE5MTkwMjA4WjAYMRYwFAYD VQQDEw02YTAzNzkzMC01MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE2Q7+/oeo1a0u9N9NL2Z7RNe5ot4Xhq/Lzp72xPqMdo+ihF6NkRfDC4ceXS vR460r4gmEde0gdi3CXZmQPCKf4w+w7VmYUYVjN37bujKrXFf4WMTpZk6nK0BR6x OBGQ414A+oRxOQ551KMYJsTM1lQZ6ei2GlFbzXgyOHYs08baRN34ECsuoShjQfnY +H1RJ8kq6YxgVz7lweBwSyDb3Wvy6Upp1Bf9Db5IRFBbKblIhDava1zbW+gZWKO0 xpm+lPtP19laa/34gELsoGc4Dd/uAYhbDoEwjujP5ZfYM5Yk6iZ5ZxDGmOXB7fBI /Wb6+Dburbe5pY8DUXwHkgoC6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKz3klSM w7L8lr/8saEFYRpbkgBeMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzfoo1hjfb1FW3e7jZg+b8FcY3GhiUwGqcCI9kZM0DlGGuQqNb/XA6yRvNwlp JnZrXTJYAbTiC7p+K+bFZcdrzwB/RrRrxg3E930t3bykXWPbBVhVoQChfgSzXfkl M6P2hBSG4IxacFQqaR2wctmAnhkFbi5dN43ydkZ+FdQ5QsQoKvmi8xKnWUehovab +rJMML3+Ns5kjTVADCL08o7sGU7Tm9VjSyumx17By85n016GJcNiC/TAtT5FRH9q sp5Ik+v/4BvO45LrL+Nqnd5xeE4QnW3icyg25SWZsLnEZA8wOqjjyv/GSd2HbTUo qzhz1azNWkKKtacZd+HOwCN9yQ== -----END CERTIFICATE-----Generated at Wed May 13 06:44:15 2026 by rpki-client