$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: TGMAhv1x0r5kNMLVCgxqeO2H7aHC66KbWugQTAfgvek= Subject key identifier: 3A:E8:7F:A0:E3:0A:40:BA:EE:78:B9:89:D5:9D:8F:98:C3:60:E8:4B Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: 0166 Signing time: Wed 13 May 2026 05:02:59 +0000 Manifest this update: Wed 13 May 2026 05:02:59 +0000 Manifest next update: Wed 20 May 2026 05:02:59 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: g4ktknZWjqySDpTJl/pKVtKp7S7NOMZ2AjFswctVLdU=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: Now9TjjE+GxtdPJprgY+7PVC9jMdsLTZtrZmdMtaZ+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Validity Not Before: May 13 05:02:59 2026 GMT Not After : May 20 05:02:59 2026 GMT Subject: CN=6a040603-d1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:40:9a:20:36:c0:ed:c1:a9:08:26:ab:03: 72:39:b8:3b:36:79:6a:18:39:60:9f:5b:32:7a:a6: 34:31:bc:8a:09:c6:54:24:b3:54:8c:fa:4c:96:b7: 29:c1:82:d9:3b:27:96:f7:5c:23:3a:ee:f1:34:99: 9e:7c:ad:4b:d9:31:68:24:ff:bd:6c:a6:a8:90:48: b6:7f:2a:88:f6:92:49:b5:0f:0f:e6:19:17:df:e1: b9:2c:0d:6f:53:3a:b6:f5:b7:8c:2c:5b:21:a7:26: 9f:a3:29:0b:2d:c8:ea:be:f9:99:27:8f:4f:0a:64: b5:c8:bf:d3:09:64:93:e7:1b:33:f0:3b:9c:d9:31: 86:68:16:58:64:51:f7:dc:22:07:ba:ae:40:0c:79: a3:3b:4a:50:13:d0:3e:59:46:17:45:f0:2c:dd:ac: 80:d2:b2:5a:61:10:f4:e4:9a:72:4c:c3:e2:d0:10: b9:d6:69:c5:33:10:f5:82:8a:23:a6:04:c8:5d:a0: f7:96:cd:57:f7:2b:ed:af:1e:ce:d4:30:3c:7f:c3: 6f:9b:0f:46:c4:86:8e:53:e5:8a:53:c9:3d:e7:08: bb:30:14:a2:c1:9c:9f:7c:a9:30:06:c7:d5:2c:94: df:05:f9:57:8f:72:16:6c:c6:44:b1:eb:81:2c:b5: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E8:7F:A0:E3:0A:40:BA:EE:78:B9:89:D5:9D:8F:98:C3:60:E8:4B X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0d:ce:4e:b2:8e:24:4a:13:e8:37:a0:5d:4a:50:3d:47:11: 3b:10:1c:08:8b:39:98:e0:86:18:46:cb:12:89:cd:68:7c:d0: 12:cb:2d:52:a7:cf:82:7c:61:02:71:27:9b:39:d2:58:d1:81: 63:8e:eb:34:38:b2:c3:f8:25:5f:9b:07:87:b6:24:97:a4:f7: 19:f2:d0:99:ca:f0:87:a4:d9:18:13:49:82:0c:d1:02:cb:bb: 1a:93:90:a4:b8:70:f2:10:c3:0c:0d:df:65:08:6a:27:48:1e: 72:16:18:5f:7a:a6:fa:59:ee:50:56:2b:9e:d2:ac:08:b9:4a: 91:71:d7:df:38:fe:c8:83:89:de:e8:f1:77:37:7a:32:b2:70: 94:ba:b0:e4:b8:a8:18:1d:2b:19:88:87:29:66:04:db:d6:82: 74:25:ee:d5:93:58:7b:0a:a8:7e:ea:3e:ef:48:a3:6d:1a:ca: 5d:31:cc:dc:1e:e8:98:32:8d:d5:e7:c5:3a:80:08:4a:c3:8d: b2:b9:cb:79:12:c6:cc:51:47:df:5d:81:26:3a:d1:7f:82:d9: 63:51:f6:50:8c:ad:4f:05:87:b7:c8:83:08:05:f8:19:0e:51: 91:3f:c5:08:ba:81:b4:40:51:d1:c7:ad:14:df:9f:02:5e:c9: 46:d7:c9:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0 RjZGMzgwNkUwHhcNMjYwNTEzMDUwMjU5WhcNMjYwNTIwMDUwMjU5WjAYMRYwFAYD VQQDEw02YTA0MDYwMy1kMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNxAmiA2wO3BqQgmqwNyObg7NnlqGDlgn1syeqY0MbyKCcZUJLNUjPpMlrcp wYLZOyeW91wjOu7xNJmefK1L2TFoJP+9bKaokEi2fyqI9pJJtQ8P5hkX3+G5LA1v Uzq29beMLFshpyafoykLLcjqvvmZJ49PCmS1yL/TCWST5xsz8Duc2TGGaBZYZFH3 3CIHuq5ADHmjO0pQE9A+WUYXRfAs3ayA0rJaYRD05JpyTMPi0BC51mnFMxD1gooj pgTIXaD3ls1X9yvtrx7O1DA8f8Nvmw9GxIaOU+WKU8k95wi7MBSiwZyffKkwBsfV LJTfBflXj3IWbMZEseuBLLWM8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrof6Dj CkC67ni5idWdj5jDYOhLMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t ekFBSmxiUjBnZVZQYnpnRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhA3OTrKOJEoT6DegXUpQPUcROxAcCIs5mOCGGEbLEonNaHzQEsstUqfPgnxh AnEnmznSWNGBY47rNDiyw/glX5sHh7Ykl6T3GfLQmcrwh6TZGBNJggzRAsu7GpOQ pLhw8hDDDA3fZQhqJ0gechYYX3qm+lnuUFYrntKsCLlKkXHX3zj+yIOJ3ujxdzd6 MrJwlLqw5LioGB0rGYiHKWYE29aCdCXu1ZNYewqofuo+70ijbRrKXTHM3B7omDKN 1efFOoAISsONsrnLeRLGzFFH312BJjrRf4LZY1H2UIytTwWHt8iDCAX4GQ5RkT/F CLqBtEBR0cetFN+fAl7JRtfJPQ== -----END CERTIFICATE-----Generated at Wed May 13 13:09:58 2026 by rpki-client