$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: ThkogcA9elucrWtAAJ3raHCTc3Vw366oWJf8V8X06WU= Subject key identifier: 10:28:70:25:0B:A4:5A:CB:B1:6E:57:C6:C8:A3:25:98:A3:CB:3D:2B Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 063C Signing time: Tue 12 May 2026 22:52:28 +0000 Manifest this update: Tue 12 May 2026 22:52:28 +0000 Manifest next update: Tue 19 May 2026 22:52:28 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: 2ydpXlRuku9zJ8Ea2Z3gFk8ceOdLXpTXrQenYuPELGw=) 2: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) 4: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: May 12 22:52:28 2026 GMT Not After : May 19 22:52:28 2026 GMT Subject: CN=6a03af2c-398b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:49:21:4f:16:72:f3:29:86:33:a0:b5:a1: 87:c6:c3:9f:3b:17:6c:19:27:e7:a9:ad:b3:98:16: 3b:d7:30:c0:20:09:99:6d:89:60:1d:ee:6b:2e:5d: 39:59:c9:9c:43:c0:81:d7:78:3a:1d:58:05:6b:60: f5:9a:cb:38:15:1f:c3:8f:7d:0f:6f:b9:3e:ca:46: 46:65:12:86:58:5e:91:16:fc:bf:ca:62:1b:23:77: e4:b4:7d:9e:dc:73:a1:3f:b5:1a:3d:ca:2c:c5:7e: c1:bb:eb:31:3c:cd:28:45:a1:36:ea:f9:41:7d:5d: 76:33:7f:4d:1b:96:02:fc:96:d2:0a:04:7e:e1:76: 8b:a0:14:dc:af:39:fe:fa:02:bf:f5:52:21:dc:56: 0a:16:93:00:75:d1:a3:04:36:3f:5d:73:62:8d:2e: 36:a9:b6:ca:d9:3d:96:d7:09:b2:5c:2e:a7:cb:c2: 13:c3:66:68:24:19:48:5f:d0:d5:7d:21:4a:69:9a: 8c:ed:bf:03:fd:5e:d7:dd:9d:d5:e6:60:d0:6b:b6: 5d:22:c3:a8:1a:76:0d:cb:f7:b7:44:7f:69:2e:1a: 19:8d:71:77:82:d9:7e:1f:8b:0a:a5:e6:bf:72:b5: 6a:b9:e7:5f:06:6c:db:70:e4:5f:de:cc:0d:ce:00: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:70:25:0B:A4:5A:CB:B1:6E:57:C6:C8:A3:25:98:A3:CB:3D:2B X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a9:80:5d:9e:52:67:00:11:5e:a4:cf:0f:33:a3:ae:b0:53: ca:8b:e1:14:74:92:3d:7e:88:42:b1:08:08:e6:e8:52:5e:01: 65:b9:7c:f8:30:6f:e8:29:c6:71:1c:9c:f9:f9:92:5f:b0:8d: b7:d7:a9:b6:0b:b1:65:9e:02:7a:ef:6b:f4:84:50:10:04:7d: e3:f6:0c:d9:4c:d9:f5:a3:c8:26:61:47:06:8e:70:e7:cb:b7: 75:f2:7b:d1:56:c7:b5:96:7d:95:fe:03:c4:40:ea:dd:0d:db: 41:3e:56:40:46:b4:e0:b5:92:5e:ff:a6:57:47:8e:6f:21:2c: 6a:06:5e:ef:10:8d:8f:ec:f8:1b:9b:b1:2c:25:6b:a7:43:d5: d4:0c:d5:bc:2f:40:69:d2:bc:08:c1:54:e8:c8:42:9f:30:b0: 5d:fb:95:3a:86:3e:2d:e6:96:1e:f7:c2:31:c5:fc:0c:12:14: f4:0c:7b:27:0c:d2:47:6d:92:09:66:82:e7:39:83:f5:53:18: fd:86:7e:50:7e:b8:d8:46:93:3a:0d:4d:6d:cf:3a:12:db:79: 9c:db:1d:de:b7:ec:f4:e2:cb:9a:a7:37:ac:3e:f3:1f:75:d6: d1:4c:a5:7a:bc:e8:9d:5c:07:1c:2b:d9:ec:bd:54:16:3f:af: b4:09:69:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYwNTEyMjI1MjI4WhcNMjYwNTE5MjI1MjI4WjAYMRYwFAYD VQQDEw02YTAzYWYyYy0zOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9JJIU8WcvMphjOgtaGHxsOfOxdsGSfnqa2zmBY71zDAIAmZbYlgHe5rLl05 WcmcQ8CB13g6HVgFa2D1mss4FR/Dj30Pb7k+ykZGZRKGWF6RFvy/ymIbI3fktH2e 3HOhP7UaPcosxX7Bu+sxPM0oRaE26vlBfV12M39NG5YC/JbSCgR+4XaLoBTcrzn+ +gK/9VIh3FYKFpMAddGjBDY/XXNijS42qbbK2T2W1wmyXC6ny8ITw2ZoJBlIX9DV fSFKaZqM7b8D/V7X3Z3V5mDQa7ZdIsOoGnYNy/e3RH9pLhoZjXF3gtl+H4sKpea/ crVquedfBmzbcORf3swNzgCALQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAocCUL pFrLsW5XxsijJZijyz0rMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfKmAXZ5SZwARXqTPDzOjrrBTyovhFHSSPX6IQrEICOboUl4BZbl8+DBv6CnG cRyc+fmSX7CNt9eptguxZZ4Ceu9r9IRQEAR94/YM2UzZ9aPIJmFHBo5w58u3dfJ7 0VbHtZZ9lf4DxEDq3Q3bQT5WQEa04LWSXv+mV0eObyEsagZe7xCNj+z4G5uxLCVr p0PV1AzVvC9AadK8CMFU6MhCnzCwXfuVOoY+LeaWHvfCMcX8DBIU9Ax7JwzSR22S CWaC5zmD9VMY/YZ+UH642EaTOg1Nbc86Ett5nNsd3rfs9OLLmqc3rD7zH3XW0Uyl erzonVwHHCvZ7L1UFj+vtAlpLA== -----END CERTIFICATE-----Generated at Wed May 13 11:57:33 2026 by rpki-client