$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: 01MTw2Kl7ehep+Bgob538HXUodoHkV4yEiIl60rmH3U= Subject key identifier: C7:7D:67:4B:CF:6A:67:14:86:1B:EB:9A:62:94:BC:72:35:37:ED:03 Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 023D Signing time: Mon 11 May 2026 02:31:43 +0000 Manifest this update: Mon 11 May 2026 02:31:42 +0000 Manifest next update: Mon 18 May 2026 02:31:42 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: LdMhMl7codifH5IXHXNBcM38jPojGH7ubbXGhVZvPQQ=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: May 11 02:31:42 2026 GMT Not After : May 18 02:31:42 2026 GMT Subject: CN=6a013f8f-3a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:a8:b4:d7:0a:ea:f7:ab:81:1d:ee:9b:4b: 43:5a:57:f4:89:b4:7b:d7:87:06:ce:bb:2b:a6:68: fb:19:29:ad:62:f4:be:d4:83:7b:9a:97:4c:c0:a8: 43:d9:19:6b:ed:19:41:24:2f:81:3c:02:22:6f:db: ea:e0:0f:aa:f7:4b:5d:cf:a5:9e:7b:83:13:56:96: d6:3c:3f:8b:13:ae:94:98:af:25:31:81:c0:9b:78: 14:9a:eb:f5:b0:60:1c:4c:b2:9e:90:f1:a4:3f:72: a8:eb:6a:ce:23:8c:09:0e:43:a5:d1:72:f2:b2:89: ee:e9:0b:0b:bc:c8:9c:84:d1:e9:06:79:84:fb:93: 4e:10:a5:7b:24:07:4a:17:2b:55:63:7e:75:29:65: 0a:92:7f:46:ee:15:54:d4:3e:b3:23:4f:f4:32:ab: 32:7e:62:8c:da:97:d9:6e:2b:72:05:d2:08:43:99: c4:0a:38:e3:c8:c8:ac:17:43:6f:ec:07:13:36:7f: 39:e8:73:d2:78:5e:72:30:16:80:6b:44:47:30:da: 72:c9:4b:bf:9e:c3:33:73:66:6f:4b:a1:36:fa:bf: cb:63:50:10:3b:f8:f9:ef:24:d4:1f:a6:01:3d:cd: bd:63:24:76:44:bc:b9:6d:09:10:9f:7d:20:d8:e4: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7D:67:4B:CF:6A:67:14:86:1B:EB:9A:62:94:BC:72:35:37:ED:03 X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e4:ac:01:60:be:08:a6:bb:47:52:46:c7:e3:be:c8:80:ae: 19:e5:77:8a:3e:7a:67:10:81:9e:4b:6e:28:4d:05:1a:1d:f3: 6c:51:04:97:1c:fe:e7:9e:d6:85:50:78:de:43:3b:41:13:ee: 74:32:7b:90:f5:49:fb:72:24:b4:6d:9a:ae:a6:f0:33:7e:42: 1b:6c:39:e2:dc:b6:5a:1d:57:29:cb:bb:d2:34:3b:40:07:3e: 16:ca:e5:d9:80:68:ea:0e:c6:1f:75:15:1c:53:cf:62:8a:59: f5:25:a0:a7:01:f1:e6:bf:9e:1e:3f:81:5f:a1:24:82:33:c9: 01:b7:8e:a3:93:5e:44:04:cd:a2:26:22:28:34:da:df:2c:6e: 5e:29:96:3e:f2:d1:44:74:d9:b9:0c:cf:80:78:a0:2e:45:ee: 2d:f2:c7:0c:ca:43:bd:a4:d4:f1:14:3e:07:1a:04:8c:21:52: e5:dd:02:a6:35:ad:cb:33:7e:e3:16:f1:27:ab:f1:3c:e5:0c: 2a:fa:b9:5b:cc:06:eb:03:91:80:0c:52:25:8c:d1:c5:71:ba: a1:27:0b:24:c9:4e:df:b7:a4:fb:41:5c:f6:26:e3:18:17:98: 3b:58:41:9b:f9:a9:49:4e:ea:bc:af:01:59:97:c5:7b:df:4e: 13:48:0f:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjYwNTExMDIzMTQyWhcNMjYwNTE4MDIzMTQyWjAYMRYwFAYD VQQDEw02YTAxM2Y4Zi0zYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BuotNcK6vergR3um0tDWlf0ibR714cGzrsrpmj7GSmtYvS+1IN7mpdMwKhD 2Rlr7RlBJC+BPAIib9vq4A+q90tdz6Wee4MTVpbWPD+LE66UmK8lMYHAm3gUmuv1 sGAcTLKekPGkP3Ko62rOI4wJDkOl0XLysonu6QsLvMichNHpBnmE+5NOEKV7JAdK FytVY351KWUKkn9G7hVU1D6zI0/0MqsyfmKM2pfZbityBdIIQ5nECjjjyMisF0Nv 7AcTNn856HPSeF5yMBaAa0RHMNpyyUu/nsMzc2ZvS6E2+r/LY1AQO/j57yTUH6YB Pc29YyR2RLy5bQkQn30g2OTGIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMd9Z0vP amcUhhvrmmKUvHI1N+0DMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAheSsAWC+CKa7R1JGx+O+yICuGeV3ij56ZxCBnktuKE0FGh3zbFEElxz+557W hVB43kM7QRPudDJ7kPVJ+3IktG2arqbwM35CG2w54ty2Wh1XKcu70jQ7QAc+Fsrl 2YBo6g7GH3UVHFPPYopZ9SWgpwHx5r+eHj+BX6EkgjPJAbeOo5NeRATNoiYiKDTa 3yxuXimWPvLRRHTZuQzPgHigLkXuLfLHDMpDvaTU8RQ+BxoEjCFS5d0CpjWtyzN+ 4xbxJ6vxPOUMKvq5W8wG6wORgAxSJYzRxXG6oScLJMlO37ek+0Fc9ibjGBeYO1hB m/mpSU7qvK8BWZfFe99OE0gPtQ== -----END CERTIFICATE-----Generated at Wed May 13 05:32:28 2026 by rpki-client