$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: 1nnd9D+2G+5jBk8sDCa3UT7XSjibwa7k5MDK6fjH3mg= Subject key identifier: 0A:16:EA:28:61:54:87:79:62:40:D8:A7:AB:AF:61:AD:45:04:83:23 Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 0710 Signing time: Tue 12 May 2026 22:05:34 +0000 Manifest this update: Tue 12 May 2026 22:05:33 +0000 Manifest next update: Tue 19 May 2026 22:05:33 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: bRuUG0xP3s4OV1d0efVDntX2GI3ES9wKgb1bgwOb+/E=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: Pg8G/Pvu/vL6s07U9VvSZMPJr+p68tGkbJJnBYeyeQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: May 12 22:05:33 2026 GMT Not After : May 19 22:05:33 2026 GMT Subject: CN=6a03a42e-171d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cf:86:fd:b4:2c:17:4f:3c:8b:ab:c3:32:1f: ee:65:b1:71:ea:1f:a3:62:cd:88:ec:bd:13:14:19: 0b:84:8d:b7:c6:25:19:fe:34:6f:fe:cd:6b:33:c2: c2:bf:12:0d:a3:fb:23:38:8b:d4:62:11:41:30:1e: 3f:94:9e:bb:43:ee:4c:f8:4c:10:2d:3e:f1:9a:a7: fd:94:2f:63:28:4c:9a:01:f6:19:f8:45:16:fa:ac: 48:0a:72:4b:4d:78:12:29:8c:e7:00:65:d5:fa:31: ff:76:96:06:24:e2:90:0d:9d:44:89:a9:c1:4d:ff: c2:71:b1:32:f9:82:10:14:9d:18:3d:97:0d:72:b3: 56:f5:02:2f:14:6d:74:e4:54:97:3b:08:13:b0:85: d9:95:ef:03:80:a8:92:63:87:41:69:68:61:5b:f2: c8:2d:10:db:9e:ed:c8:8f:76:23:91:2e:61:2a:31: 03:0b:ab:cd:6f:3d:bb:27:bf:23:57:84:3c:cf:34: 55:10:d2:a8:00:e4:7a:34:3a:21:02:28:dd:3c:54: f1:61:d0:7e:65:9c:bb:6a:01:2e:46:70:ef:c1:e4: 80:28:cc:b9:12:49:29:42:a8:6c:d8:2f:61:c7:47: c5:ed:54:0f:d4:8d:f0:b2:45:e5:0d:b8:1c:91:05: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:EA:28:61:54:87:79:62:40:D8:A7:AB:AF:61:AD:45:04:83:23 X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:6a:bb:c6:17:0c:13:7b:d1:a1:4e:4f:e1:0a:95:58:ad:d3: 2b:e4:46:61:d6:29:69:f4:1c:2b:7b:6c:6c:db:f6:26:58:0f: 65:c5:72:42:20:9e:9f:45:14:ef:ec:44:cc:78:10:95:aa:88: a1:cf:fe:ef:ff:47:82:a0:69:43:68:05:7c:69:c1:67:10:e6: 74:72:84:16:40:90:96:6b:85:cb:91:69:68:c4:4d:1a:37:46: e1:57:cc:50:61:05:24:d3:00:21:99:1b:00:e7:38:de:c2:e1: 86:93:02:a0:86:65:46:3e:71:02:46:ae:90:a3:fc:0a:69:da: 48:b9:30:b6:0f:48:01:4b:89:0d:55:e6:d1:2f:11:a5:ef:e3: 1a:74:a4:cd:dc:9d:46:0a:f7:c3:c4:ef:6d:e6:5a:f9:4b:01: 73:06:b1:ba:56:56:49:87:6a:40:91:2f:31:bc:6c:d0:96:0f: 62:5a:94:9f:c2:2c:09:2e:26:d2:a2:23:60:48:8b:36:4e:08: 14:c3:1f:3f:fe:28:90:0b:84:62:22:39:3d:72:6e:84:98:8c: 71:7c:90:41:75:b0:2b:53:6d:a3:c1:c8:80:d3:8f:78:77:5f: b5:91:e9:25:ac:f4:cf:31:71:85:d6:f0:f0:38:b2:b0:4e:c1: f2:17:b9:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjYwNTEyMjIwNTMzWhcNMjYwNTE5MjIwNTMzWjAYMRYwFAYD VQQDEw02YTAzYTQyZS0xNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5s+G/bQsF088i6vDMh/uZbFx6h+jYs2I7L0TFBkLhI23xiUZ/jRv/s1rM8LC vxINo/sjOIvUYhFBMB4/lJ67Q+5M+EwQLT7xmqf9lC9jKEyaAfYZ+EUW+qxICnJL TXgSKYznAGXV+jH/dpYGJOKQDZ1EianBTf/CcbEy+YIQFJ0YPZcNcrNW9QIvFG10 5FSXOwgTsIXZle8DgKiSY4dBaWhhW/LILRDbnu3Ij3YjkS5hKjEDC6vNbz27J78j V4Q8zzRVENKoAOR6NDohAijdPFTxYdB+ZZy7agEuRnDvweSAKMy5EkkpQqhs2C9h x0fF7VQP1I3wskXlDbgckQVihwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoW6ihh VId5YkDYp6uvYa1FBIMjMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx2q7xhcME3vRoU5P4QqVWK3TK+RGYdYpafQcK3tsbNv2JlgPZcVyQiCen0UU 7+xEzHgQlaqIoc/+7/9HgqBpQ2gFfGnBZxDmdHKEFkCQlmuFy5FpaMRNGjdG4VfM UGEFJNMAIZkbAOc43sLhhpMCoIZlRj5xAkaukKP8CmnaSLkwtg9IAUuJDVXm0S8R pe/jGnSkzdydRgr3w8TvbeZa+UsBcwaxulZWSYdqQJEvMbxs0JYPYlqUn8IsCS4m 0qIjYEiLNk4IFMMfP/4okAuEYiI5PXJuhJiMcXyQQXWwK1Nto8HIgNOPeHdftZHp Jaz0zzFxhdbw8DiysE7B8he5bg== -----END CERTIFICATE-----Generated at Wed May 13 09:59:13 2026 by rpki-client