$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: tDC8vPV8DFcJQm3knoTJwt+wU4XlpSD/PHwkgiQWlbw= Subject key identifier: 87:15:5E:CD:84:89:58:26:7D:99:19:30:77:E9:7D:20:6E:9B:E6:B9 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 04A8 Signing time: Wed 13 May 2026 00:03:55 +0000 Manifest this update: Wed 13 May 2026 00:03:55 +0000 Manifest next update: Wed 20 May 2026 00:03:55 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: OLl6zs/SiVdSyxvSLlfWvTx1sXu075N/GlS7p+aIe4Y=) 2: 176210F23FF611F182DAE6C398833773.roa (hash: w9aUmyYLLIpCKQS6vxeVDWsnqw2NjIzSp/vkd/WGYr8=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: KU0ufVeci0w9ovxEyLq7SERtD22aftIPEj3L8PrHlJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: May 13 00:03:55 2026 GMT Not After : May 20 00:03:55 2026 GMT Subject: CN=6a03bfeb-1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:8e:9d:03:88:0a:2c:3c:98:6c:34:f7:93: d3:53:e0:f9:11:c3:78:29:67:2d:8c:5a:96:b8:48: 8a:70:70:04:f4:9e:19:96:45:8a:0c:37:d8:90:e9: d5:34:f1:21:d1:2f:76:cf:49:c8:4e:24:42:d7:38: 49:32:7e:f6:df:c3:f1:7a:52:73:b7:bf:a8:48:02: f5:7d:c1:46:5b:8f:0b:e0:c7:64:e3:6e:60:ee:96: 78:81:09:a6:df:a6:a9:84:d1:b4:23:ca:b9:77:01: a5:b8:23:48:a8:7f:77:ad:52:f9:b9:4f:d4:08:40: 91:ba:db:3c:90:57:f1:1d:71:91:3f:3e:f9:59:ec: d5:1e:bb:0f:a7:26:ed:02:e5:dd:e7:8d:ea:1b:59: b6:80:53:a6:32:42:d8:8f:cc:58:0b:91:6f:47:15: 64:f2:2c:09:d3:19:09:e3:54:b3:34:f1:00:a7:d5: 63:13:55:76:9d:22:a8:cb:82:c8:ce:f4:ff:73:59: c7:63:20:78:7c:35:c8:52:52:81:69:52:9e:8a:28: 48:5d:8d:e9:3f:e0:08:87:d1:bd:86:85:47:6f:76: 2f:c1:a1:ec:fc:e9:e1:45:ca:3f:8b:9e:e6:91:cd: c9:a6:e3:69:62:0a:8b:aa:22:4c:7f:9d:3f:3c:83: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:15:5E:CD:84:89:58:26:7D:99:19:30:77:E9:7D:20:6E:9B:E6:B9 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:de:d7:80:1f:69:15:75:84:fb:d6:fa:1e:cb:6f:15:2c:73: 14:75:6f:13:5f:60:9e:06:99:da:dc:7f:cf:c9:c5:ed:84:04: 9c:6d:a0:ba:2b:69:45:9c:ed:3b:7d:a0:31:90:6c:02:f6:0d: ba:7e:d1:af:d1:a7:76:5c:38:0b:54:1d:e7:90:33:81:e4:25: 9b:60:a2:06:39:b8:bf:62:0b:68:55:d8:88:24:ee:ce:e9:8d: 23:cb:b4:9a:a9:c2:a3:98:e0:c9:ce:f3:b5:1c:c8:db:b9:13: 34:d6:d1:5a:fc:23:58:4c:62:9f:87:c2:02:db:5b:7a:e1:71: 27:f1:29:4d:1b:e3:f9:a5:59:1e:c3:53:74:b1:b7:31:e7:f1: 73:4e:5a:d9:41:20:1e:40:33:80:c9:4f:15:70:44:f5:f6:04: 83:09:08:2e:6f:52:5a:71:b3:8c:7f:7c:db:09:c4:21:f1:aa: 13:63:d9:4e:d0:49:88:a9:d5:7e:2f:a7:e9:c0:ec:a1:b5:98: 24:56:e2:ec:c2:70:9f:ea:9f:81:f6:1b:bf:30:4f:48:53:d6: 96:71:eb:b7:b4:b5:07:ad:01:3f:ec:2d:56:b7:1c:2a:e0:00: 18:6d:32:cb:12:e7:c9:85:eb:09:31:63:70:c2:b8:6a:ee:c8: 49:5c:15:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjYwNTEzMDAwMzU1WhcNMjYwNTIwMDAwMzU1WjAYMRYwFAYD VQQDEw02YTAzYmZlYi0xYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfOOnQOICiw8mGw095PTU+D5EcN4KWctjFqWuEiKcHAE9J4ZlkWKDDfYkOnV NPEh0S92z0nITiRC1zhJMn7238PxelJzt7+oSAL1fcFGW48L4Mdk425g7pZ4gQmm 36aphNG0I8q5dwGluCNIqH93rVL5uU/UCECRuts8kFfxHXGRPz75WezVHrsPpybt AuXd543qG1m2gFOmMkLYj8xYC5FvRxVk8iwJ0xkJ41SzNPEAp9VjE1V2nSKoy4LI zvT/c1nHYyB4fDXIUlKBaVKeiihIXY3pP+AIh9G9hoVHb3YvwaHs/OnhRco/i57m kc3JpuNpYgqLqiJMf50/PIM81wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcVXs2E iVgmfZkZMHfpfSBum+a5MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWd7XgB9pFXWE+9b6HstvFSxzFHVvE19gngaZ2tx/z8nF7YQEnG2guitpRZzt O32gMZBsAvYNun7Rr9Gndlw4C1Qd55AzgeQlm2CiBjm4v2ILaFXYiCTuzumNI8u0 mqnCo5jgyc7ztRzI27kTNNbRWvwjWExin4fCAttbeuFxJ/EpTRvj+aVZHsNTdLG3 Mefxc05a2UEgHkAzgMlPFXBE9fYEgwkILm9SWnGzjH982wnEIfGqE2PZTtBJiKnV fi+n6cDsobWYJFbi7MJwn+qfgfYbvzBPSFPWlnHrt7S1B60BP+wtVrccKuAAGG0y yxLnyYXrCTFjcMK4au7ISVwVGQ== -----END CERTIFICATE-----Generated at Wed May 13 04:29:35 2026 by rpki-client