$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: 6pKX65aheG0QXODAqkLjuCdTQGa+xRYp9SZ7u8UC638= Subject key identifier: 6B:22:B3:80:5A:6B:F4:CF:EC:C6:4C:98:DF:32:E7:40:C4:DE:30:F3 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 028E Signing time: Wed 13 May 2026 01:47:29 +0000 Manifest this update: Wed 13 May 2026 01:47:28 +0000 Manifest next update: Wed 20 May 2026 01:47:28 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: +CQs62W0XyJds0ccseScoLUU0zueAF14OmC0zcWu1HI=) 2: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=) 3: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: May 13 01:47:28 2026 GMT Not After : May 20 01:47:28 2026 GMT Subject: CN=6a03d831-b79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:d2:18:44:d1:6b:d9:5b:41:ce:1b:43:8f: 48:c3:1b:56:25:c2:2f:f5:c4:cb:87:c2:a1:e9:a1: 07:32:bf:e5:b9:17:dc:94:d4:2f:b0:76:f9:63:13: 46:33:fa:3b:e8:60:4a:8a:48:e5:86:df:2f:f7:33: c6:31:f5:67:e9:7b:32:f9:c7:c6:77:09:ae:23:dc: 83:e1:d1:23:db:c2:ab:5a:60:f2:52:a7:22:1a:d9: cd:09:07:b2:a9:a8:08:cd:29:9f:9b:8a:ee:1f:19: 31:f6:86:9f:dd:f5:69:f1:96:93:25:e0:10:e0:34: dd:77:d8:80:a0:ba:0b:89:0d:ef:5d:1f:e0:f9:b8: da:a7:58:d3:99:26:ec:c3:32:d7:c2:44:37:a3:30: 1e:d1:8c:b8:cd:11:8a:40:d4:0e:5c:53:26:d0:d7: 9d:ee:c6:96:c7:37:99:9f:69:1e:89:71:a6:da:b6: b8:d5:a4:18:ad:6b:33:40:e5:4c:9e:13:f2:8d:72: 03:80:d4:e2:ed:42:1f:a9:1b:a4:2f:c0:44:02:83: 12:1d:4d:d1:47:8b:36:a3:50:05:b0:66:09:68:df: 37:e8:3a:d2:ea:60:07:b0:ed:f6:1b:72:42:9c:7c: ed:e6:45:c4:5e:bb:3f:3a:6e:01:3e:cd:71:dc:1a: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:22:B3:80:5A:6B:F4:CF:EC:C6:4C:98:DF:32:E7:40:C4:DE:30:F3 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:09:9f:fe:26:31:06:87:13:db:dc:99:8d:5a:1f:3a:e2:e7: b1:56:86:85:0b:c2:d8:be:05:ad:f1:3b:89:f8:1f:1d:95:63: cf:d0:59:31:c2:ef:46:a2:ee:f2:7a:0a:1d:d2:8e:a0:54:18: fc:32:af:56:c8:07:2c:3b:8c:e5:83:53:43:20:f7:a6:fe:8f: ce:45:fd:a0:71:00:ad:9e:f3:9b:82:86:3c:cf:e3:6e:aa:4c: 5c:06:5e:b3:f5:ca:0a:3c:e7:45:f1:95:dd:2d:87:87:68:cd: 23:a4:e2:47:b3:c4:70:be:dc:4d:7c:51:01:4b:42:8b:46:c3: fe:66:e9:0e:43:2e:40:c0:fd:0d:52:4f:b7:44:8f:88:97:a6: da:28:1d:e4:dc:51:f2:f6:28:0e:08:b8:c6:d3:a9:07:0a:14: 78:5e:32:f8:88:dc:fd:30:5d:1b:5a:79:d4:bd:b0:8c:b4:c6: 9d:1e:a8:7d:bc:eb:00:f7:f6:3b:4a:83:3b:a9:19:9b:1c:0c: dc:5e:30:9a:ac:1b:98:07:8a:78:fe:ac:4a:a7:e9:8e:c8:6d: ca:79:11:f8:2d:9b:03:1f:be:1b:29:6a:8a:81:d4:01:db:bc: 49:53:af:4b:d8:e5:7b:e1:32:0c:0d:94:1e:ba:85:21:93:a0: da:37:8c:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjYwNTEzMDE0NzI4WhcNMjYwNTIwMDE0NzI4WjAYMRYwFAYD VQQDEw02YTAzZDgzMS1iNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxPSGETRa9lbQc4bQ49IwxtWJcIv9cTLh8Kh6aEHMr/luRfclNQvsHb5YxNG M/o76GBKikjlht8v9zPGMfVn6Xsy+cfGdwmuI9yD4dEj28KrWmDyUqciGtnNCQey qagIzSmfm4ruHxkx9oaf3fVp8ZaTJeAQ4DTdd9iAoLoLiQ3vXR/g+bjap1jTmSbs wzLXwkQ3ozAe0Yy4zRGKQNQOXFMm0Ned7saWxzeZn2keiXGm2ra41aQYrWszQOVM nhPyjXIDgNTi7UIfqRukL8BEAoMSHU3RR4s2o1AFsGYJaN836DrS6mAHsO32G3JC nHzt5kXEXrs/Om4BPs1x3BrmMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsis4Ba a/TP7MZMmN8y50DE3jDzMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFQmf/iYxBocT29yZjVofOuLnsVaGhQvC2L4FrfE7ifgfHZVjz9BZMcLvRqLu 8noKHdKOoFQY/DKvVsgHLDuM5YNTQyD3pv6PzkX9oHEArZ7zm4KGPM/jbqpMXAZe s/XKCjznRfGV3S2Hh2jNI6TiR7PEcL7cTXxRAUtCi0bD/mbpDkMuQMD9DVJPt0SP iJem2igd5NxR8vYoDgi4xtOpBwoUeF4y+Ijc/TBdG1p51L2wjLTGnR6ofbzrAPf2 O0qDO6kZmxwM3F4wmqwbmAeKeP6sSqfpjshtynkR+C2bAx++GylqioHUAdu8SVOv S9jle+EyDA2UHrqFIZOg2jeM8w== -----END CERTIFICATE-----Generated at Wed May 13 08:38:19 2026 by rpki-client