$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: 9KbHu8lqM/43RCeZr+XpwIIzEwI8ihnIrYBRyKk9GBE= Subject key identifier: 3D:25:3B:C1:9B:3D:30:51:F0:89:46:36:14:AE:0D:9F:E3:9D:B4:2E Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 173E Signing time: Tue 12 May 2026 16:51:29 +0000 Manifest this update: Tue 12 May 2026 16:51:29 +0000 Manifest next update: Tue 19 May 2026 16:51:29 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 0Wlc+hOE0vnBw8um+xeY1hq944YbJER9ukGDYkvt6Ko=) 2: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=) 3: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=) 4: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=) 5: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=) 6: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=) 7: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=) 8: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=) 9: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=) 10: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=) 11: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=) 12: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=) 13: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=) 14: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=) 15: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=) 16: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=) 17: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=) 18: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=) 19: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=) 20: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=) 22: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=) 23: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=) 24: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=) 25: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=) 26: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=) 27: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6665 (0x1a09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: May 12 16:51:29 2026 GMT Not After : May 19 16:51:29 2026 GMT Subject: CN=6a035a91-95ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:c7:e3:85:6f:59:58:7a:bd:07:bf:bf:3a: 19:04:36:3c:98:91:6f:5d:67:b2:a8:af:66:fa:e4: 68:74:75:94:26:fc:67:11:15:3c:2c:1f:a1:ee:d1: 10:d3:93:7c:65:f2:07:6f:65:80:8b:ef:11:33:97: 03:f6:42:1a:2b:b1:ba:a3:ee:11:ba:a2:15:1f:8c: 14:f3:1d:9e:a2:0d:19:67:e2:08:d1:49:e2:88:95: f9:6f:a4:26:79:87:4f:0e:3e:8e:41:7b:fe:44:41: 98:3c:e1:6b:83:1f:79:c5:ac:fd:7f:fd:a4:3e:2c: 8a:24:cc:8d:8d:0c:25:fc:f3:a7:21:9d:3d:9c:cd: 49:6d:36:64:40:d4:67:38:c3:c9:71:6a:56:ec:27: d4:d0:a4:9f:a0:79:30:77:3b:03:bd:a2:59:1d:8e: cb:1e:fb:97:13:57:ea:90:75:ca:01:99:ae:c9:04: 50:f4:5a:85:da:8a:fa:9c:c6:ca:6f:e0:35:fb:33: 7f:fc:38:11:39:f3:8f:7d:2c:6e:12:1c:b3:08:2e: de:6e:fc:11:22:a0:aa:f3:39:a3:74:58:d7:9c:71: 5f:23:3e:49:c1:6d:fe:32:eb:98:5a:23:b0:da:20: fc:8d:45:07:d5:77:13:18:e5:f9:78:be:97:d1:5c: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:25:3B:C1:9B:3D:30:51:F0:89:46:36:14:AE:0D:9F:E3:9D:B4:2E X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3d:5f:f0:90:ad:51:77:30:1a:f0:a6:07:11:8f:85:60:f5: 75:49:f9:d2:04:f5:3e:54:50:15:e3:ff:cb:16:d8:5d:fe:6c: 19:50:f7:a0:92:f2:26:13:26:f6:bc:de:04:7e:14:fc:6d:0a: 80:4b:b7:0c:76:cd:2b:15:9e:a5:cb:6d:4e:24:ff:90:1f:34: dd:c6:62:dd:b5:4c:ba:d1:ee:3c:12:f8:24:d4:9e:4e:58:09: e2:19:0c:1c:de:c2:a0:38:1a:9b:8f:75:a7:5e:10:40:91:84: f2:e2:56:74:5f:0d:7b:a3:d6:cc:9e:c9:97:01:ca:17:93:13: 4c:1c:ad:d7:cb:88:ed:33:89:67:49:9a:e6:14:0a:ab:59:6e: a5:ec:c3:fd:0c:22:fc:ec:57:10:c4:17:5c:40:ab:08:12:4b: 79:35:b4:7d:e7:10:7e:96:ae:7e:8b:6c:d7:55:5c:ea:ba:46: b5:42:6e:29:cb:b2:7d:ce:75:88:24:45:38:8b:5b:d7:68:25: f8:b7:49:63:5b:53:d6:b1:58:bd:c3:df:4f:8a:d1:8b:7b:8b: e9:d0:08:a1:25:83:d9:bc:32:35:e8:17:e2:33:8c:1f:e6:17: ed:30:91:74:c1:cf:81:5d:02:8b:e1:10:15:6f:af:9c:41:a7: cf:57:de:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwNTEyMTY1MTI5WhcNMjYwNTE5MTY1MTI5WjAYMRYwFAYD VQQDEw02YTAzNWE5MS05NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTHH44VvWVh6vQe/vzoZBDY8mJFvXWeyqK9m+uRodHWUJvxnERU8LB+h7tEQ 05N8ZfIHb2WAi+8RM5cD9kIaK7G6o+4RuqIVH4wU8x2eog0ZZ+II0UniiJX5b6Qm eYdPDj6OQXv+REGYPOFrgx95xaz9f/2kPiyKJMyNjQwl/POnIZ09nM1JbTZkQNRn OMPJcWpW7CfU0KSfoHkwdzsDvaJZHY7LHvuXE1fqkHXKAZmuyQRQ9FqF2or6nMbK b+A1+zN//DgROfOPfSxuEhyzCC7ebvwRIqCq8zmjdFjXnHFfIz5JwW3+MuuYWiOw 2iD8jUUH1XcTGOX5eL6X0VwkmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0lO8Gb PTBR8IlGNhSuDZ/jnbQuMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArz1f8JCtUXcwGvCmBxGPhWD1dUn50gT1PlRQFeP/yxbYXf5sGVD3oJLyJhMm 9rzeBH4U/G0KgEu3DHbNKxWepcttTiT/kB803cZi3bVMutHuPBL4JNSeTlgJ4hkM HN7CoDgam491p14QQJGE8uJWdF8Ne6PWzJ7JlwHKF5MTTByt18uI7TOJZ0ma5hQK q1lupezD/Qwi/OxXEMQXXECrCBJLeTW0fecQfpaufots11Vc6rpGtUJuKcuyfc51 iCRFOItb12gl+LdJY1tT1rFYvcPfT4rRi3uL6dAIoSWD2bwyNegX4jOMH+YX7TCR dMHPgV0Ci+EQFW+vnEGnz1ferg== -----END CERTIFICATE-----Generated at Wed May 13 16:21:34 2026 by rpki-client