$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: Nl6XwF2JCfRRMRpgCtinlDH+/4acMGaR9JguksHODFU= Subject key identifier: 05:B6:09:61:E7:CD:B5:80:6C:C0:88:C5:3D:C2:62:95:CA:FE:F6:9A Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 152F Signing time: Tue 12 May 2026 19:07:23 +0000 Manifest this update: Tue 12 May 2026 19:07:23 +0000 Manifest next update: Tue 19 May 2026 19:07:23 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: GvSsoNTdxmNMFVVBpNRwRJRCCV4a4ik3+7LDSrtXEuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: May 12 19:07:23 2026 GMT Not After : May 19 19:07:23 2026 GMT Subject: CN=6a037a6b-9696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:17:01:bf:7f:f6:96:81:88:37:48:aa:28: 47:8b:8e:38:33:e9:3f:2d:c9:ca:44:e2:3d:28:e3: 16:bf:d6:d3:0a:2c:1d:3d:0e:08:24:3c:43:a1:20: ba:ab:5f:69:4f:88:05:e2:c9:36:de:5e:bb:de:fe: 7c:60:e4:0f:2e:f2:f3:3f:15:59:a0:70:3c:01:9f: f2:a7:69:39:65:35:cc:cc:f9:3d:38:91:b4:28:07: 87:16:f6:34:4d:cc:c5:6d:f2:6f:9c:b1:7e:a1:a8: 6f:e1:4a:5d:53:d4:96:df:da:51:2e:96:67:af:8f: b7:42:1c:45:1e:13:e5:77:41:62:22:15:d9:d8:bb: d6:ef:27:17:07:1e:79:ee:af:97:19:e2:b4:a4:25: e2:e1:b4:9a:6b:f6:2c:97:93:ff:cb:ee:ac:6a:27: ac:ad:0c:bc:5b:aa:56:78:e2:2c:aa:5b:33:0c:3b: 39:3b:fe:22:9b:1e:b4:9a:e8:45:6d:eb:3e:77:58: c5:0d:c6:88:77:1c:83:87:85:a8:79:4c:8a:95:cc: f1:2f:75:a2:7d:5c:55:f7:f4:0f:85:71:72:26:d3: 74:c6:8b:d5:c9:3e:e6:de:5b:7c:88:e7:9e:80:e0: aa:07:2a:39:f2:c2:3f:01:55:ee:13:6a:2f:f7:05: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:09:61:E7:CD:B5:80:6C:C0:88:C5:3D:C2:62:95:CA:FE:F6:9A X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:df:5e:d8:a9:1d:65:0d:fd:52:d4:1f:02:c0:f0:83:b9:e5: 48:f7:9c:50:46:db:d9:42:67:a4:f6:f8:14:c8:ce:be:72:c2: 94:06:13:6f:e1:9f:ac:2b:a9:fd:88:4d:3a:30:53:24:a3:d3: 50:d6:57:2a:87:a4:9e:2d:12:e9:c1:29:4a:ca:7e:18:06:fa: 74:21:b1:8d:cb:d4:bd:25:28:03:b4:90:93:cd:02:31:0a:be: ee:40:e2:bc:69:4f:8d:ad:5f:76:85:ff:48:1c:bf:73:0a:db: 21:d3:43:69:62:30:56:fb:59:01:13:20:27:a8:db:cf:f8:f9: 00:56:5e:1a:9c:ba:ad:bf:d0:7d:40:ad:42:66:0e:8a:e8:50: b5:8a:4f:86:04:c7:99:16:bb:fb:7a:11:74:55:be:c8:c4:5c: 9d:2d:8a:72:5f:2f:c1:01:74:c3:51:3b:59:6e:68:dd:74:7d: db:ae:fa:1b:b5:fa:63:9d:08:5b:aa:c0:69:5a:aa:16:1f:02: 9a:13:92:2f:fb:0b:58:44:3b:d6:b2:9f:2f:d5:bb:b2:5d:bd: 9d:83:1c:b2:0e:95:2b:61:23:09:46:a1:bf:8c:94:1e:27:ad: e3:6d:6c:ec:20:51:f3:93:fa:e5:cc:47:35:16:eb:8e:af:84: ea:82:aa:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjYwNTEyMTkwNzIzWhcNMjYwNTE5MTkwNzIzWjAYMRYwFAYD VQQDEw02YTAzN2E2Yi05Njk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjAXAb9/9paBiDdIqihHi444M+k/LcnKROI9KOMWv9bTCiwdPQ4IJDxDoSC6 q19pT4gF4sk23l673v58YOQPLvLzPxVZoHA8AZ/yp2k5ZTXMzPk9OJG0KAeHFvY0 TczFbfJvnLF+oahv4UpdU9SW39pRLpZnr4+3QhxFHhPld0FiIhXZ2LvW7ycXBx55 7q+XGeK0pCXi4bSaa/Ysl5P/y+6saiesrQy8W6pWeOIsqlszDDs5O/4imx60muhF bes+d1jFDcaIdxyDh4WoeUyKlczxL3WifVxV9/QPhXFyJtN0xovVyT7m3lt8iOee gOCqByo58sI/AVXuE2ov9wUuKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAW2CWHn zbWAbMCIxT3CYpXK/vaaMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJN9e2KkdZQ39UtQfAsDwg7nlSPecUEbb2UJnpPb4FMjOvnLClAYTb+GfrCup /YhNOjBTJKPTUNZXKoekni0S6cEpSsp+GAb6dCGxjcvUvSUoA7SQk80CMQq+7kDi vGlPja1fdoX/SBy/cwrbIdNDaWIwVvtZARMgJ6jbz/j5AFZeGpy6rb/QfUCtQmYO iuhQtYpPhgTHmRa7+3oRdFW+yMRcnS2Kcl8vwQF0w1E7WW5o3XR92676G7X6Y50I W6rAaVqqFh8CmhOSL/sLWEQ71rKfL9W7sl29nYMcsg6VK2EjCUahv4yUHiet421s 7CBR85P65cxHNRbrjq+E6oKqcg== -----END CERTIFICATE-----Generated at Wed May 13 05:17:52 2026 by rpki-client