$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: 1UDVxp3iBO736Ep8+5uRSbgLD9anBQMvaXsxOIQ3U4Y= Subject key identifier: DB:0A:CB:6B:A7:EF:2D:CD:33:4B:AF:CB:30:8B:F3:F1:D4:54:95:17 Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 0219 Signing time: Mon 11 May 2026 02:51:34 +0000 Manifest this update: Mon 11 May 2026 02:51:33 +0000 Manifest next update: Mon 18 May 2026 02:51:33 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: 2I8LfpH3IH28mOnSFelYKomsRUmJVCczJjsexuzGdms=) 2: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: xb0+uYgRF2Qsu64pqIvTIsaUIoIoJYA9r/GFBorr/Cw=) 3: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: LOVQf/LdRjlXMFrzIgrgv8KlqIFzre3Qe7jhRSJb4JQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: May 11 02:51:33 2026 GMT Not After : May 18 02:51:33 2026 GMT Subject: CN=6a014436-91c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:14:ef:11:11:d4:2e:b7:a6:5a:7f:ed:1a: 46:c7:c4:79:75:ff:67:d8:25:2c:d4:c0:ae:a0:f9: bc:9c:bf:81:b3:65:0f:49:99:65:36:1e:1c:ee:54: 82:f9:9c:23:51:15:2c:95:db:73:c4:5d:be:23:e9: ad:0c:96:fd:8f:3f:f8:15:89:d3:1f:69:60:8e:4e: 06:82:6b:86:ba:80:68:1e:a3:57:51:4e:e5:0a:9c: d1:cc:a7:e9:f1:81:a1:34:f0:92:c7:cc:b4:84:21: f1:ab:d5:7d:e5:29:6d:6e:9e:4a:b2:9a:32:f4:2a: e9:0a:c5:72:12:de:44:4d:3e:f3:26:91:11:41:20: 26:c5:e7:d3:55:c5:b0:1e:59:10:4a:86:1a:77:79: a7:cf:f4:79:76:0a:e4:4b:03:c9:35:c1:03:e4:fa: a8:16:c8:32:e8:8f:11:3f:a8:e6:73:90:11:e0:e5: 15:07:69:54:ca:3c:39:90:79:5f:58:38:a7:a1:6a: 34:c4:cd:c6:98:d2:07:65:e0:d1:ed:f0:52:f1:26: 69:05:a1:c5:f3:43:14:fd:b7:0f:47:c2:01:e1:e3: 02:94:67:b6:d4:6a:29:f0:07:53:f6:26:48:e3:ea: 2b:39:a1:59:21:b7:f0:9e:0f:8a:4c:e6:70:25:06: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:CB:6B:A7:EF:2D:CD:33:4B:AF:CB:30:8B:F3:F1:D4:54:95:17 X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:cb:7e:1b:4b:aa:4f:a0:c0:40:2b:5d:34:4a:f0:7b:c3: 4e:1a:1b:e4:d6:1c:33:fb:a2:d7:69:47:89:e8:57:b1:10:49: 06:82:4c:ae:49:4e:02:c6:f3:af:4f:fb:4c:95:17:c7:d9:a8: ad:b2:5c:d4:af:0a:9d:d8:7c:18:a5:59:82:c2:fb:24:8a:25: d8:5c:26:4f:46:03:92:3b:fa:30:ab:bb:14:a3:56:18:83:b2: 3e:de:b1:a7:4c:4d:7f:66:4e:b6:2e:4f:5c:69:cb:95:b1:2a: cc:4a:f7:ab:22:a0:e5:8f:7c:8f:90:1e:ef:5c:4a:f6:e3:e3: c3:36:c2:4a:2c:30:0d:1e:9b:4c:14:18:ac:b6:a3:31:f5:98: 82:29:ca:bc:23:97:ec:f0:8a:fa:44:e1:b5:93:ee:6d:1a:10: a1:70:6f:a8:30:65:ef:ce:17:05:eb:8a:49:77:e7:94:56:cd: 72:a5:4a:85:6c:70:27:7a:c8:18:58:2f:eb:85:86:8b:f4:91: 6b:9d:dd:d4:29:b5:09:10:71:24:fa:f8:07:a7:25:4d:89:33: a4:ba:65:01:41:20:e0:e6:2a:1b:56:95:b4:56:64:da:a5:64: ad:cb:83:90:0a:ca:76:c2:29:ab:31:5d:fd:e0:a6:e1:11:99: 33:4a:c5:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjYwNTExMDI1MTMzWhcNMjYwNTE4MDI1MTMzWjAYMRYwFAYD VQQDEw02YTAxNDQzNi05MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xAU7xER1C63plp/7RpGx8R5df9n2CUs1MCuoPm8nL+Bs2UPSZllNh4c7lSC +ZwjURUsldtzxF2+I+mtDJb9jz/4FYnTH2lgjk4GgmuGuoBoHqNXUU7lCpzRzKfp 8YGhNPCSx8y0hCHxq9V95Sltbp5Kspoy9CrpCsVyEt5ETT7zJpERQSAmxefTVcWw HlkQSoYad3mnz/R5dgrkSwPJNcED5PqoFsgy6I8RP6jmc5AR4OUVB2lUyjw5kHlf WDinoWo0xM3GmNIHZeDR7fBS8SZpBaHF80MU/bcPR8IB4eMClGe21Gop8AdT9iZI 4+orOaFZIbfwng+KTOZwJQbmcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsKy2un 7y3NM0uvyzCL8/HUVJUXMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlFTLfhtLqk+gwEArXTRK8HvDThob5NYcM/ui12lHiehXsRBJBoJMrklOAsbz r0/7TJUXx9morbJc1K8Kndh8GKVZgsL7JIol2FwmT0YDkjv6MKu7FKNWGIOyPt6x p0xNf2ZOti5PXGnLlbEqzEr3qyKg5Y98j5Ae71xK9uPjwzbCSiwwDR6bTBQYrLaj MfWYginKvCOX7PCK+kThtZPubRoQoXBvqDBl784XBeuKSXfnlFbNcqVKhWxwJ3rI GFgv64WGi/SRa53d1Cm1CRBxJPr4B6clTYkzpLplAUEg4OYqG1aVtFZk2qVkrcuD kArKdsIpqzFd/eCm4RGZM0rFeQ== -----END CERTIFICATE-----Generated at Wed May 13 04:13:40 2026 by rpki-client