$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: kSV+P6Ka51eE2bhPgvyiGJTKvqq4UIx1YM3gYqN3hYo= Subject key identifier: C1:13:06:81:3F:7B:24:7B:98:53:92:AF:F7:61:E6:B4:7B:90:C5:FC Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 120D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 11FF Signing time: Tue 12 May 2026 17:10:21 +0000 Manifest this update: Tue 12 May 2026 17:10:20 +0000 Manifest next update: Tue 19 May 2026 17:10:20 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: s89xdjY8HtMtSNxTR4d9MwRFwytYZOFEegzHp1COVy8=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4621 (0x120d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: May 12 17:10:20 2026 GMT Not After : May 19 17:10:20 2026 GMT Subject: CN=6a035efd-caea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:0a:09:45:b1:0b:67:d6:c2:3b:34:62:0b: c3:c5:e8:6a:c0:61:9f:a4:81:a3:e0:f7:93:70:c6: 47:67:11:ec:3e:bc:47:99:88:26:fc:1b:e5:a3:d8: 21:95:e2:4f:2c:80:b1:c9:dc:f2:cb:e4:2c:3f:0a: 6d:8b:21:64:06:3e:43:4b:ea:d6:29:52:71:c0:65: 01:9c:03:a8:73:6c:13:7e:c4:d7:d3:bf:d9:32:35: 51:35:5f:23:99:f1:06:b7:10:49:31:f6:70:73:af: 28:de:2c:41:71:1f:86:c2:b1:2c:f8:9d:51:07:76: 3c:6a:e8:e9:9b:6c:5b:66:e5:33:3d:79:0f:af:43: 7d:24:2c:69:7b:e3:47:b4:2e:c4:49:35:45:c9:41: a4:b5:99:87:4d:02:2c:25:3d:25:4a:0a:b4:d9:c3: 22:f8:df:12:c2:a0:78:e9:00:ec:67:d7:31:e8:e3: ef:cb:39:2f:2b:8c:15:a2:a4:4c:bd:30:93:1c:a9: d2:60:16:b5:b8:a1:cb:d2:e0:a0:8d:88:e0:aa:57: 27:f6:15:bf:46:b6:16:88:df:84:40:be:b1:e2:f1: 86:16:e2:f2:84:85:bc:91:25:ea:75:4d:93:66:ad: 5f:3d:7d:4a:ad:8c:dd:64:0a:5f:0a:02:7e:ef:45: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:13:06:81:3F:7B:24:7B:98:53:92:AF:F7:61:E6:B4:7B:90:C5:FC X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:72:63:4f:b0:3e:e9:53:50:26:74:a7:f6:a2:48:10:f6: 1b:81:43:de:64:d0:bd:09:d0:11:00:2e:0d:22:1f:29:03:50: b6:09:03:9a:a9:32:7c:46:1f:29:fa:ba:4e:84:5d:e3:f9:df: ff:95:05:a8:ac:97:04:f2:1d:c7:2a:72:e5:60:6a:e0:80:df: 59:e4:d8:2c:ee:fc:a6:f0:c8:6c:4d:eb:c9:fd:6b:5a:da:65: d3:81:c8:d0:b8:e7:48:27:3f:db:0b:59:f1:b3:d7:95:0f:f4: ae:18:0e:a0:cd:ff:5d:16:f5:31:2d:29:7d:ba:65:98:af:97: f2:2b:93:12:ea:18:ff:41:de:c6:34:fb:76:02:a6:c0:6c:8d: 04:25:20:ba:13:3c:bf:8f:7f:b3:c7:59:59:f5:f2:62:8c:f6: 4e:d2:95:10:f8:7e:ac:e4:a6:ff:26:86:ef:ae:ac:87:f9:10: 01:4e:07:0d:bf:f6:20:5a:77:ce:81:de:97:bf:41:87:8a:9f: 07:8f:63:ab:20:b5:58:1b:c9:bd:7f:e3:8f:ba:f7:37:1f:6d: 68:30:ae:aa:64:59:d6:c0:ef:c5:91:aa:a6:cd:8d:14:6f:29: 16:18:d7:cd:a0:bf:21:80:32:9f:29:1f:29:5c:49:57:c2:24: cd:cf:df:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjYwNTEyMTcxMDIwWhcNMjYwNTE5MTcxMDIwWjAYMRYwFAYD VQQDEw02YTAzNWVmZC1jYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BIKCUWxC2fWwjs0YgvDxehqwGGfpIGj4PeTcMZHZxHsPrxHmYgm/Bvlo9gh leJPLICxydzyy+QsPwptiyFkBj5DS+rWKVJxwGUBnAOoc2wTfsTX07/ZMjVRNV8j mfEGtxBJMfZwc68o3ixBcR+GwrEs+J1RB3Y8aujpm2xbZuUzPXkPr0N9JCxpe+NH tC7ESTVFyUGktZmHTQIsJT0lSgq02cMi+N8SwqB46QDsZ9cx6OPvyzkvK4wVoqRM vTCTHKnSYBa1uKHL0uCgjYjgqlcn9hW/RrYWiN+EQL6x4vGGFuLyhIW8kSXqdU2T Zq1fPX1KrYzdZApfCgJ+70WZjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMETBoE/ eyR7mFOSr/dh5rR7kMX8MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOBJyY0+wPulTUCZ0p/aiSBD2G4FD3mTQvQnQEQAuDSIfKQNQtgkDmqkyfEYf Kfq6ToRd4/nf/5UFqKyXBPIdxypy5WBq4IDfWeTYLO78pvDIbE3ryf1rWtpl04HI 0LjnSCc/2wtZ8bPXlQ/0rhgOoM3/XRb1MS0pfbplmK+X8iuTEuoY/0HexjT7dgKm wGyNBCUguhM8v49/s8dZWfXyYoz2TtKVEPh+rOSm/yaG766sh/kQAU4HDb/2IFp3 zoHel79Bh4qfB49jqyC1WBvJvX/jj7r3Nx9taDCuqmRZ1sDvxZGqps2NFG8pFhjX zaC/IYAynykfKVxJV8Ikzc/fGQ== -----END CERTIFICATE-----Generated at Wed May 13 03:44:13 2026 by rpki-client