$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: 5wtw1kni3eky889zAVCoPYLkT+FBy7RGkEZ7sC8Xc90= Subject key identifier: 0E:9F:6D:B6:79:7C:F2:D0:FD:DF:5F:BC:24:D7:94:65:E9:1E:95:AD Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 0166 Signing time: Wed 13 May 2026 04:57:53 +0000 Manifest this update: Wed 13 May 2026 04:57:53 +0000 Manifest next update: Wed 20 May 2026 04:57:53 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: cyVG2Cx65zLOwsVWZBdcRicSizcAB/QVEIZUApsP8Dk=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: May 13 04:57:53 2026 GMT Not After : May 20 04:57:53 2026 GMT Subject: CN=6a0404d1-77f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:85:72:8c:8b:7e:6c:1a:06:59:57:b1:25: 79:0a:2b:45:5e:d6:01:29:b9:d6:56:74:38:8c:ac: 16:4f:6e:c2:2b:82:37:8e:48:84:23:61:73:69:7a: c3:52:0c:01:bb:b4:a0:4a:74:c9:ba:fc:b0:05:16: b2:cc:2f:55:1f:7a:94:f2:38:5a:1c:cc:8a:00:7e: 2a:2d:93:ff:a0:9c:8e:c8:e4:d9:a5:b5:d1:96:3f: 9c:08:72:14:47:33:68:47:5d:f4:be:a5:10:a2:fc: 89:5c:c9:11:18:5a:f1:71:ee:1e:7c:1d:7b:12:d5: 75:94:4a:62:a9:c7:b1:47:66:0c:f7:38:35:8e:cb: d2:ff:50:21:ab:cd:e5:5b:f7:7a:e2:72:23:e7:e0: 47:c4:e6:26:72:f5:72:e6:aa:c1:34:86:1e:de:c5: 80:80:bc:60:a3:8b:a2:43:5b:5f:90:fe:50:aa:d8: 6e:97:fe:fb:06:af:01:27:a3:b5:02:b0:2f:3c:df: 8c:49:c8:f7:a7:8f:67:7a:d3:94:ac:cd:7e:7c:7c: ab:a8:54:fa:fa:fc:28:21:b3:88:71:76:c1:5b:3f: 60:8d:27:5b:7a:e0:73:f3:aa:95:07:0b:0d:09:1f: 98:e5:78:3c:2a:0f:c4:54:87:89:62:d4:de:d5:20: 8a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:6D:B6:79:7C:F2:D0:FD:DF:5F:BC:24:D7:94:65:E9:1E:95:AD X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:c9:8e:9d:3d:71:91:72:71:35:82:da:10:c9:b1:17:30: 31:16:5f:72:f8:fa:a6:c0:55:4a:96:c1:8c:a9:12:a9:72:ce: 5d:8d:bb:cb:71:0d:71:fe:86:e2:d5:ba:da:33:a1:68:32:5e: 70:59:62:02:53:69:d1:5f:de:da:cf:89:cf:28:38:ca:dd:67: c1:82:e9:97:7c:12:ce:30:6f:3b:3b:bd:b2:ee:23:d7:0c:46: f9:5a:42:c4:80:cd:2b:e9:d2:66:04:00:b5:14:ce:1d:0a:24: 21:ef:0c:a6:d6:aa:df:2a:ba:93:77:2e:75:2c:49:66:e5:4c: 0f:77:e3:44:d9:4d:d8:48:70:9d:2b:24:48:be:af:9c:0b:40: d0:7a:2d:6f:5e:35:47:9c:a8:7e:3e:c9:7a:75:a1:88:ad:c5: ae:16:53:e9:d2:5f:1e:53:15:67:3d:ba:c5:84:61:52:26:39: ea:23:c6:d8:8a:e3:14:0f:88:7a:54:fc:8d:84:4c:38:15:eb: 54:c9:c1:6b:63:cd:b6:2d:da:6b:b8:21:76:56:85:42:a0:2e: a8:b9:8a:17:2e:36:52:22:b7:3d:ae:78:5a:bb:db:ca:c5:5b: a2:24:fd:b4:3b:62:f3:d6:a7:ae:73:95:50:6a:7e:10:e8:f0: 70:ba:43:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwNTEzMDQ1NzUzWhcNMjYwNTIwMDQ1NzUzWjAYMRYwFAYD VQQDEw02YTA0MDRkMS03N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjDOFcoyLfmwaBllXsSV5CitFXtYBKbnWVnQ4jKwWT27CK4I3jkiEI2FzaXrD UgwBu7SgSnTJuvywBRayzC9VH3qU8jhaHMyKAH4qLZP/oJyOyOTZpbXRlj+cCHIU RzNoR130vqUQovyJXMkRGFrxce4efB17EtV1lEpiqcexR2YM9zg1jsvS/1Ahq83l W/d64nIj5+BHxOYmcvVy5qrBNIYe3sWAgLxgo4uiQ1tfkP5Qqthul/77Bq8BJ6O1 ArAvPN+MScj3p49netOUrM1+fHyrqFT6+vwoIbOIcXbBWz9gjSdbeuBz86qVBwsN CR+Y5Xg8Kg/EVIeJYtTe1SCKiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6fbbZ5 fPLQ/d9fvCTXlGXpHpWtMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqMTJjp09cZFycTWC2hDJsRcwMRZfcvj6psBVSpbBjKkSqXLOXY27y3ENcf6G 4tW62jOhaDJecFliAlNp0V/e2s+Jzyg4yt1nwYLpl3wSzjBvOzu9su4j1wxG+VpC xIDNK+nSZgQAtRTOHQokIe8Mptaq3yq6k3cudSxJZuVMD3fjRNlN2EhwnSskSL6v nAtA0Hotb141R5yofj7JenWhiK3FrhZT6dJfHlMVZz26xYRhUiY56iPG2IrjFA+I elT8jYRMOBXrVMnBa2PNti3aa7ghdlaFQqAuqLmKFy42UiK3Pa54WrvbysVboiT9 tDti89anrnOVUGp+EOjwcLpDAg== -----END CERTIFICATE-----Generated at Wed May 13 08:47:06 2026 by rpki-client