$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: wU3g4//ghaC+1VH8i8wiIMaesNRFhuj3bzJAdO9XugY= Subject key identifier: 1A:13:36:C8:45:86:50:2C:34:38:04:C2:45:DC:FD:2C:EC:C2:E9:3A Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 02 Signing time: Tue 12 May 2026 13:46:52 +0000 Manifest this update: Tue 12 May 2026 13:46:51 +0000 Manifest next update: Tue 19 May 2026 13:46:51 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: 9V2nNSbZE95jH6FzKaXN4jRtynSw9flZCkmzbhPcmMc=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: aSvFINVvPGG0gnxFG3kmdfj7WoAkgDA4x7vxEipsK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 13:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: May 12 13:46:51 2026 GMT Not After : May 19 13:46:51 2026 GMT Subject: CN=6a032f4c-d8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:75:25:2b:27:57:72:75:66:27:bf:02:42: 2f:fd:e9:90:07:ce:a6:60:4c:08:97:0c:04:5d:db: a3:cf:3a:c4:70:c9:56:c6:6c:d7:0d:d1:53:f4:ff: f2:6b:a5:ac:de:53:05:ee:0a:3a:be:99:53:6c:7e: da:81:bb:e3:0f:d0:6a:fd:1d:19:2a:5f:f5:58:42: 55:31:7e:aa:4d:7e:e5:2c:6e:ab:1b:40:90:6f:19: 5c:0e:3b:71:69:e6:70:28:54:01:a0:9f:08:96:77: 55:7e:a4:5c:48:99:04:e8:97:ae:01:0e:08:5c:df: 5b:93:3b:af:4f:88:62:af:9e:f4:b7:22:40:22:5a: ff:22:5c:e3:18:57:7d:e7:f8:7b:af:91:34:2e:d5: c0:8d:14:a9:a6:7b:2f:98:8e:c9:97:ae:35:6f:53: 5c:b0:12:1c:53:3c:94:e3:d1:b1:f9:2f:17:b7:00: 85:ec:c6:1e:a1:b8:f7:fd:8c:4a:2c:e6:47:5f:5e: 7d:fa:e5:a6:80:48:75:e0:2d:f2:fa:9f:e1:54:a2: 4e:3e:b5:06:07:b7:2e:1f:4e:31:8e:63:05:29:09: b0:e8:11:e1:7b:f4:c6:db:f2:8a:5a:72:27:5e:91: 7b:c1:07:4d:7c:d8:ec:49:aa:f1:d4:0f:e8:c8:66: c7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:36:C8:45:86:50:2C:34:38:04:C2:45:DC:FD:2C:EC:C2:E9:3A X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2c:68:3b:e7:ea:1e:12:09:84:ea:e4:55:81:1f:23:72:56: 59:66:cc:06:b3:f4:64:a2:46:18:7f:e8:bb:bd:d9:05:f3:06: 51:52:e3:48:bb:48:53:9e:1a:ec:fd:ab:12:c3:a8:9a:e8:3b: 14:56:fd:fd:bd:80:42:a8:81:55:7a:58:47:b7:87:8f:17:c2: 34:23:dc:77:07:bf:71:c1:b8:0e:c0:eb:d4:1f:b4:5b:df:fc: 46:0b:88:ea:1f:e3:bd:40:ad:ea:50:5c:71:d3:a8:bd:8e:0f: 98:8b:d8:cd:e9:32:01:54:38:a7:f8:f8:ce:89:b1:bd:c9:79: f0:6c:cd:75:00:80:15:d6:21:88:7c:24:96:bd:a6:db:68:e1: 41:b7:8e:72:52:90:41:4a:b8:22:7f:b2:4d:91:df:b1:fb:c9: d0:04:62:18:34:9d:88:3a:67:94:78:1d:c9:d8:49:e3:db:2f: 70:ae:6b:fa:22:65:32:60:7d:a3:46:a8:0a:ac:12:d3:de:b1: 1d:3b:b6:4f:10:44:a3:88:7e:35:26:6b:cb:4f:d8:30:80:14: 85:39:a7:6c:d3:2f:c9:b9:71:07:ba:a2:d9:a4:77:a9:95:d6: c2:da:7a:41:b9:24:2d:ca:52:af:f6:15:b7:6c:be:68:53:c0: 54:15:0b:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA1MTIxMzQ2NTFaFw0yNjA1MTkxMzQ2NTFaMBgxFjAUBgNV BAMTDTZhMDMyZjRjLWQ4YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjp3UlKydXcnVmJ78CQi/96ZAHzqZgTAiXDARd26PPOsRwyVbGbNcN0VP0//Jr pazeUwXuCjq+mVNsftqBu+MP0Gr9HRkqX/VYQlUxfqpNfuUsbqsbQJBvGVwOO3Fp 5nAoVAGgnwiWd1V+pFxImQTol64BDghc31uTO69PiGKvnvS3IkAiWv8iXOMYV33n +HuvkTQu1cCNFKmmey+YjsmXrjVvU1ywEhxTPJTj0bH5Lxe3AIXsxh6huPf9jEos 5kdfXn365aaASHXgLfL6n+FUok4+tQYHty4fTjGOYwUpCbDoEeF79Mbb8opacide kXvBB0182OxJqvHUD+jIZsc1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGhM2yEWG UCw0OATCRdz9LOzC6TowHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAILGg75+oeEgmE6uRVgR8jclZZZswGs/RkokYYf+i7vdkF8wZRUuNIu0hTnhrs /asSw6ia6DsUVv39vYBCqIFVelhHt4ePF8I0I9x3B79xwbgOwOvUH7Rb3/xGC4jq H+O9QK3qUFxx06i9jg+Yi9jN6TIBVDin+PjOibG9yXnwbM11AIAV1iGIfCSWvabb aOFBt45yUpBBSrgif7JNkd+x+8nQBGIYNJ2IOmeUeB3J2Enj2y9wrmv6ImUyYH2j RqgKrBLT3rEdO7ZPEESjiH41JmvLT9gwgBSFOads0y/JuXEHuqLZpHepldbC2npB uSQtylKv9hW3bL5oU8BUFQuT -----END CERTIFICATE-----Generated at Wed May 13 01:36:25 2026 by rpki-client