$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: 7TEuh68csKVFPOp8RwhDvqfokS9PbfkhKlT+mLoFJ9c= Subject key identifier: 89:78:CA:DF:1A:03:7C:A1:A1:AA:89:6D:B8:32:E3:29:D8:8E:64:6C Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 01D6 Signing time: Wed 13 May 2026 03:49:53 +0000 Manifest this update: Wed 13 May 2026 03:49:53 +0000 Manifest next update: Wed 20 May 2026 03:49:53 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: EvhrTSWrF6q1MdJa7dLsTsrUC1a0Xk2Q/3z28S/bnBs=) 2: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) 3: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: May 13 03:49:53 2026 GMT Not After : May 20 03:49:53 2026 GMT Subject: CN=6a03f4e1-36f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:df:86:7f:b9:89:d7:c3:c9:5e:7d:a1:80: a8:97:cc:ba:3c:2a:84:d5:06:60:f8:b0:dd:c6:44: 75:de:8d:f3:2b:6f:1b:48:09:ed:c2:3e:1d:94:8b: df:70:15:d3:bd:a6:13:6f:ec:45:1c:bf:10:f8:9d: 70:2e:6d:c1:2d:c8:81:8d:81:eb:4a:86:0b:3b:99: 35:99:0e:d5:88:ce:5e:01:ce:59:1e:16:cc:4b:8e: c2:c8:21:69:0a:36:a8:f3:6b:86:44:e4:c8:6b:11: fe:cd:e0:a6:f7:19:84:fe:1e:f6:2d:b0:a0:71:fb: 57:d2:14:2f:40:50:40:9a:28:92:3b:04:b8:fe:47: 1b:15:9e:f4:f4:f5:7d:b0:07:47:75:d5:1a:2f:9b: 69:7b:6d:60:ac:54:d7:48:69:d4:fa:de:44:22:64: 63:65:74:23:77:1d:c3:86:4b:c0:12:cf:5b:40:7a: 33:c3:b5:2e:fc:cd:ff:d8:c6:0b:77:bd:a5:08:ec: f3:8a:9e:c0:68:9f:8e:b4:18:9f:90:1d:c6:0d:72: c3:22:a1:99:7a:75:e7:c5:47:d6:d8:2d:fb:3d:2a: bb:bc:00:5f:28:61:04:9d:15:00:0b:ca:d9:13:81: 31:15:b6:14:3e:77:9e:8c:19:a2:51:0c:8f:e7:ea: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:CA:DF:1A:03:7C:A1:A1:AA:89:6D:B8:32:E3:29:D8:8E:64:6C X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:68:41:76:2f:ab:ed:2c:bd:9c:90:26:7f:51:6f:8c:65:0b: 77:fa:bb:21:19:e5:bc:48:dc:ce:ab:99:b5:76:6f:86:52:e2: e0:46:09:b5:d8:0e:f4:65:25:98:f2:5b:dd:c5:f9:2c:3b:c1: 8d:d0:b6:eb:64:35:f0:86:f4:ab:25:1a:5c:74:de:ad:6a:89: d3:18:2e:9e:b3:60:9d:3e:67:98:25:a6:27:68:ab:46:30:33: 4f:c3:92:c1:1b:8b:26:09:92:55:c6:2a:96:83:ae:a7:69:e1: 82:69:59:69:6f:21:29:26:a2:99:77:7f:cf:1f:a6:79:cd:b2: cd:cd:23:9a:fa:6a:c8:b2:20:45:d8:a7:c8:01:a5:77:b5:f3: 39:f5:5f:e4:ed:07:a6:ca:b0:80:fc:f9:b5:b3:10:00:1c:fb: cc:5e:13:ab:91:81:37:fc:be:8e:ec:44:86:c7:38:e5:e8:08: 73:68:a7:72:07:8a:d9:39:4c:e3:02:eb:51:da:2e:13:55:ad: 5d:78:10:77:f7:4e:02:f7:0d:12:f5:6c:15:01:67:9e:bc:a8: c6:ba:2f:f0:e3:9c:0a:08:c6:5a:9d:21:fd:90:5d:f4:29:20: 38:52:8c:70:cd:fa:4e:52:a2:ab:d2:c1:64:34:31:2c:bd:c4: 44:f3:07:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYwNTEzMDM0OTUzWhcNMjYwNTIwMDM0OTUzWjAYMRYwFAYD VQQDEw02YTAzZjRlMS0zNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ7fhn+5idfDyV59oYCol8y6PCqE1QZg+LDdxkR13o3zK28bSAntwj4dlIvf cBXTvaYTb+xFHL8Q+J1wLm3BLciBjYHrSoYLO5k1mQ7ViM5eAc5ZHhbMS47CyCFp Cjao82uGROTIaxH+zeCm9xmE/h72LbCgcftX0hQvQFBAmiiSOwS4/kcbFZ709PV9 sAdHddUaL5tpe21grFTXSGnU+t5EImRjZXQjdx3DhkvAEs9bQHozw7Uu/M3/2MYL d72lCOzzip7AaJ+OtBifkB3GDXLDIqGZenXnxUfW2C37PSq7vABfKGEEnRUAC8rZ E4ExFbYUPneejBmiUQyP5+pI0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIl4yt8a A3yhoaqJbbgy4ynYjmRsMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp2hBdi+r7Sy9nJAmf1FvjGULd/q7IRnlvEjczquZtXZvhlLi4EYJtdgO9GUl mPJb3cX5LDvBjdC262Q18Ib0qyUaXHTerWqJ0xgunrNgnT5nmCWmJ2irRjAzT8OS wRuLJgmSVcYqloOup2nhgmlZaW8hKSaimXd/zx+mec2yzc0jmvpqyLIgRdinyAGl d7XzOfVf5O0HpsqwgPz5tbMQABz7zF4Tq5GBN/y+juxEhsc45egIc2incgeK2TlM 4wLrUdouE1WtXXgQd/dOAvcNEvVsFQFnnryoxrov8OOcCgjGWp0h/ZBd9CkgOFKM cM36TlKiq9LBZDQxLL3ERPMHBg== -----END CERTIFICATE-----Generated at Wed May 13 16:01:24 2026 by rpki-client