$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: Vw9iaCt4ITq0hgfLwHZIHrBw8nC5dt8nwlNR67aL6BU= Subject key identifier: AB:77:BD:16:9E:66:9E:25:FA:46:B7:BA:34:EF:A6:D0:60:C7:ED:17 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 08F4 Signing time: Tue 12 May 2026 20:23:40 +0000 Manifest this update: Tue 12 May 2026 20:23:39 +0000 Manifest next update: Tue 19 May 2026 20:23:39 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: nuW7K01mET2WRMNqhIQ4+EzK3we0xn9Au33ItEME9lo=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: qZ3PJo0PmY9ezmHmQvTDErn7qslnxEuobh+f3U89VNI=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: x5+raeLBFBsuJLXzYfMJr0ORy85GDM9eQZw+pvlyKEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2308 (0x904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: May 12 20:23:39 2026 GMT Not After : May 19 20:23:39 2026 GMT Subject: CN=6a038c4b-ca9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:7c:0f:93:d9:fb:42:96:52:a4:cf:a2:bb: ad:82:20:be:fa:14:db:81:79:bc:76:ce:1a:1d:c1: 80:0f:7e:35:9d:58:e5:a6:be:c6:9c:a1:81:4f:af: a7:c8:90:cf:43:c0:45:9c:dc:ab:3c:1c:39:f3:fb: 0c:67:38:99:05:20:e1:6e:85:de:ce:5a:cc:fe:20: 75:e1:85:e6:be:65:59:fd:83:52:1e:e6:f6:d8:5d: 94:08:99:9d:71:5f:07:5f:d3:54:49:fe:c2:6b:f2: c5:6f:8b:0a:a3:bb:31:ec:64:3d:58:d3:4c:cb:41: df:4c:f3:42:d7:5a:fe:cc:9f:b5:7d:b5:6e:32:37: 4c:07:96:9e:72:46:92:76:c3:fd:42:d0:b9:39:c1: 1e:b1:cc:0f:a5:ca:de:a5:ea:fa:3b:b2:11:ef:1d: 1c:a9:ec:38:4c:56:e3:5d:e4:c7:d0:4f:2b:b2:ab: 64:b9:c0:4f:d5:bc:75:0d:56:b8:20:e4:51:dc:9b: 57:e5:31:6d:9e:be:c9:48:a7:8b:9f:40:37:b6:98: 99:8e:28:2b:a1:32:58:07:29:42:36:be:74:ac:f7: f3:31:43:0d:23:15:3f:51:e5:2a:30:19:72:22:9b: 7e:2d:d9:b1:46:be:5f:69:f6:0b:9b:ab:8a:bc:37: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:77:BD:16:9E:66:9E:25:FA:46:B7:BA:34:EF:A6:D0:60:C7:ED:17 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:01:b2:c4:c6:d5:22:4a:04:28:fb:66:6d:9b:12:0c:8b:25: 79:6a:7e:f7:b9:d9:21:40:50:c5:bf:2b:17:d9:b8:a2:1e:c8: 0a:96:64:f7:3a:af:67:51:af:b4:3a:76:ec:e1:16:f5:bf:36: 3f:a9:3f:7e:f4:24:e6:ce:f0:f9:09:d3:55:4a:8a:e8:4c:75: c0:28:65:38:0e:76:06:3f:f6:37:46:cd:26:3b:88:c9:fa:e0: c6:21:74:cb:7d:3d:e3:e1:e8:c0:f0:3d:a4:44:23:ca:24:13: 99:d0:de:ec:e9:82:cf:5e:69:2b:d7:a0:6d:12:3a:29:31:3c: 91:6a:b5:41:49:f3:ad:26:cf:f1:24:03:6c:97:91:0c:32:a7: 37:6e:eb:2a:09:4c:a8:27:e0:55:03:52:9e:47:92:64:18:cc: eb:36:33:16:ea:1f:32:f7:0d:82:c1:bf:32:12:63:7d:2d:ab: 4f:56:e1:d7:67:13:59:1d:3f:d9:12:f6:1c:e1:be:e1:cb:ef: bd:17:6c:db:14:bc:a9:25:c4:00:3c:aa:d9:f5:65:af:e0:01: 2d:68:b0:9a:2c:04:c6:2e:ca:a7:95:a1:96:f9:f9:7f:0b:05: 9a:fa:48:94:14:1f:97:1e:bb:2e:fa:53:b8:66:5e:5c:c5:aa: ec:ba:5a:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjYwNTEyMjAyMzM5WhcNMjYwNTE5MjAyMzM5WjAYMRYwFAYD VQQDEw02YTAzOGM0Yi1jYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuB8D5PZ+0KWUqTPorutgiC++hTbgXm8ds4aHcGAD341nVjlpr7GnKGBT6+n yJDPQ8BFnNyrPBw58/sMZziZBSDhboXezlrM/iB14YXmvmVZ/YNSHub22F2UCJmd cV8HX9NUSf7Ca/LFb4sKo7sx7GQ9WNNMy0HfTPNC11r+zJ+1fbVuMjdMB5aeckaS dsP9QtC5OcEescwPpcreper6O7IR7x0cqew4TFbjXeTH0E8rsqtkucBP1bx1DVa4 IORR3JtX5TFtnr7JSKeLn0A3tpiZjigroTJYBylCNr50rPfzMUMNIxU/UeUqMBly Ipt+LdmxRr5fafYLm6uKvDejuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKt3vRae Zp4l+ka3ujTvptBgx+0XMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvwGyxMbVIkoEKPtmbZsSDIsleWp+97nZIUBQxb8rF9m4oh7ICpZk9zqvZ1Gv tDp27OEW9b82P6k/fvQk5s7w+QnTVUqK6Ex1wChlOA52Bj/2N0bNJjuIyfrgxiF0 y3094+HowPA9pEQjyiQTmdDe7OmCz15pK9egbRI6KTE8kWq1QUnzrSbP8SQDbJeR DDKnN27rKglMqCfgVQNSnkeSZBjM6zYzFuofMvcNgsG/MhJjfS2rT1bh12cTWR0/ 2RL2HOG+4cvvvRds2xS8qSXEADyq2fVlr+ABLWiwmiwExi7Kp5Whlvn5fwsFmvpI lBQflx67LvpTuGZeXMWq7Lpakg== -----END CERTIFICATE-----Generated at Wed May 13 09:46:01 2026 by rpki-client