$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: x1hhOYg2Wi30NkU6Evedhi5302XEWgf++VzbZwdu13s= Subject key identifier: 5B:AB:03:A1:D6:6B:BC:BC:0F:66:92:71:3D:5C:26:77:FA:7D:2B:55 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 03CD Signing time: Mon 11 May 2026 00:43:14 +0000 Manifest this update: Mon 11 May 2026 00:43:13 +0000 Manifest next update: Mon 18 May 2026 00:43:13 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: eEbBrogsecP6HSJmn7cTUqdIe1+UrRVoM5er+20jzQ4=) 2: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=) 3: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=) 4: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: May 11 00:43:13 2026 GMT Not After : May 18 00:43:13 2026 GMT Subject: CN=6a012622-f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:93:1a:d4:4a:9f:db:ee:bf:52:28:86:9f: b3:8c:ad:8e:aa:36:2c:7d:21:ab:49:d2:b7:3c:c3: 84:e2:60:28:06:30:1c:1c:69:d2:37:a4:cb:31:d9: 00:b8:61:b4:ac:37:a4:2c:b9:40:02:0a:9b:cf:23: fd:82:ae:b2:9c:4b:d2:6c:5a:17:34:12:fc:1e:3d: 66:6f:02:92:cd:a6:8d:b8:3f:9c:2c:1e:40:84:40: c8:a0:11:5a:22:83:75:d1:65:b0:e2:fb:c7:4d:58: d7:a0:bd:5d:a5:87:7b:9f:2d:27:d6:e1:f2:c5:42: 8b:31:df:3a:11:4a:2a:b9:35:3d:2a:15:26:e5:28: c7:2b:6e:fc:59:10:9c:e7:3e:a2:05:ed:f7:00:3f: 78:21:ad:77:f4:63:27:b7:d2:64:77:59:f7:f6:de: 24:ee:21:72:78:0c:5d:c0:97:7d:8e:ed:f6:b7:8e: 60:40:04:82:3b:67:36:e3:a7:06:77:7a:56:d6:a7: 70:12:4e:74:c6:d8:86:a1:8e:c0:08:50:b2:96:69: 85:5e:32:23:70:2e:0c:60:06:ec:38:fc:03:d8:3d: 8c:59:80:f2:89:89:f4:d8:ee:93:09:51:b6:e4:86: d6:a7:d8:9f:6f:c4:d8:0d:8c:c4:32:19:67:56:0d: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AB:03:A1:D6:6B:BC:BC:0F:66:92:71:3D:5C:26:77:FA:7D:2B:55 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7a:ac:fa:3f:14:c3:c0:32:6b:80:be:1a:97:01:3a:d4:a6: 71:e4:e0:19:2a:8b:5c:af:fe:bf:6b:54:ea:84:dd:9c:e3:4c: 77:ab:22:18:f8:e6:76:e7:d0:c3:3d:bf:03:10:16:0f:b1:f8: ad:45:13:42:4c:bf:e9:83:be:7d:c0:74:ee:de:d9:51:e5:ef: 27:eb:a7:a2:0f:f1:c0:8a:77:79:1c:9b:af:07:81:7c:bc:33: 67:88:33:42:dc:c6:c0:38:40:8b:e1:e2:38:1d:9d:d8:22:fc: 4a:cf:cd:58:71:83:43:d5:ff:59:67:0f:25:de:05:80:b5:e1: 75:a4:9b:50:b6:60:a8:89:c1:84:59:d5:a7:4c:70:80:c6:3a: ed:58:38:1d:2c:ee:8e:b7:c6:ff:6e:90:83:55:7a:8e:f7:0d: 64:72:ca:dc:3c:c4:e9:5c:a2:cc:fa:e8:64:4f:9a:1f:cd:10: c0:68:03:fc:7a:ec:65:ea:15:ae:55:5b:27:e3:37:22:3e:15: c1:a7:3c:51:78:0c:e6:79:53:26:b9:4f:4d:3d:26:bd:4e:1b: 5a:32:a6:bc:8f:a8:0b:f2:02:ec:58:8d:6b:40:6f:37:91:ec: e4:c4:a0:a7:93:db:4f:21:60:b7:e6:19:c1:b4:fb:8a:14:5f: 3b:fd:2c:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwNTExMDA0MzEzWhcNMjYwNTE4MDA0MzEzWjAYMRYwFAYD VQQDEw02YTAxMjYyMi1mNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB6TGtRKn9vuv1Iohp+zjK2OqjYsfSGrSdK3PMOE4mAoBjAcHGnSN6TLMdkA uGG0rDekLLlAAgqbzyP9gq6ynEvSbFoXNBL8Hj1mbwKSzaaNuD+cLB5AhEDIoBFa IoN10WWw4vvHTVjXoL1dpYd7ny0n1uHyxUKLMd86EUoquTU9KhUm5SjHK278WRCc 5z6iBe33AD94Ia139GMnt9Jkd1n39t4k7iFyeAxdwJd9ju32t45gQASCO2c246cG d3pW1qdwEk50xtiGoY7ACFCylmmFXjIjcC4MYAbsOPwD2D2MWYDyiYn02O6TCVG2 5IbWp9ifb8TYDYzEMhlnVg2T+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFurA6HW a7y8D2aScT1cJnf6fStVMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP3qs+j8Uw8Aya4C+GpcBOtSmceTgGSqLXK/+v2tU6oTdnONMd6siGPjmdufQ wz2/AxAWD7H4rUUTQky/6YO+fcB07t7ZUeXvJ+unog/xwIp3eRybrweBfLwzZ4gz QtzGwDhAi+HiOB2d2CL8Ss/NWHGDQ9X/WWcPJd4FgLXhdaSbULZgqInBhFnVp0xw gMY67Vg4HSzujrfG/26Qg1V6jvcNZHLK3DzE6VyizProZE+aH80QwGgD/HrsZeoV rlVbJ+M3Ij4Vwac8UXgM5nlTJrlPTT0mvU4bWjKmvI+oC/IC7FiNa0BvN5Hs5MSg p5PbTyFgt+YZwbT7ihRfO/0sbQ== -----END CERTIFICATE-----Generated at Wed May 13 03:12:01 2026 by rpki-client