$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: 6n2p7EvGI5tWY1vw8IrH1QhF/VH5kPXM4jNYG7FbUQQ= Subject key identifier: FE:1D:DC:82:DA:00:1C:25:54:CB:21:A2:CB:74:25:58:E9:39:C5:BF Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 0291 Signing time: Mon 11 May 2026 01:52:54 +0000 Manifest this update: Mon 11 May 2026 01:52:53 +0000 Manifest next update: Mon 18 May 2026 01:52:53 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: MlBTEqABKQOdt5zbDZUsIiQThOvgkRBb3P5N8FXvo9k=) 2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=) 3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: May 11 01:52:53 2026 GMT Not After : May 18 01:52:53 2026 GMT Subject: CN=6a013675-855b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:99:39:90:a5:83:dc:f9:2b:4d:dd:df:c4: 14:01:ce:1d:ed:ff:7f:94:ea:3e:53:61:ea:49:d9: 38:30:6f:09:d6:c9:da:a8:9c:87:07:44:f8:65:0e: e7:ee:9a:9c:f2:f0:ba:6a:31:c4:57:1c:0f:15:24: 23:8f:67:85:ae:70:d2:46:41:0c:ce:96:0a:b7:5b: 99:92:3a:10:f8:51:9e:f7:10:3c:71:d3:21:fa:2b: f2:b7:50:1f:84:6a:fa:67:80:a5:22:63:4b:12:f4: b2:cb:7b:c0:51:50:a4:eb:e0:5a:df:99:c5:1f:30: 2c:19:c4:9a:c0:d7:df:87:8d:76:03:3d:70:8d:81: 47:57:37:dc:df:73:2a:8f:93:0f:8b:f1:ed:3d:61: b3:39:f0:bb:7d:53:28:70:d9:fd:64:49:0d:d1:66: 06:b2:f7:57:42:3f:59:e0:dc:2a:c5:20:98:6f:4f: 64:d9:17:54:79:c2:f7:49:3f:52:05:9c:7a:b4:c4: 11:00:76:5c:75:5b:7a:f1:5e:bb:20:bb:3c:78:b3: 51:dd:94:8f:9b:2a:74:b7:40:75:92:c0:eb:74:18: 82:30:59:74:86:05:1d:65:48:3d:0c:37:57:85:62: e2:8d:ff:c4:28:df:74:38:5b:b9:03:86:dd:54:2e: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:DC:82:DA:00:1C:25:54:CB:21:A2:CB:74:25:58:E9:39:C5:BF X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:98:49:2b:3f:bf:0c:60:57:9d:49:6b:71:7d:f2:1d:a1:d2: cf:f4:59:1a:d2:7a:81:eb:13:8a:16:83:7a:e8:05:01:ea:d4: 88:8b:6d:78:3f:89:84:90:1d:c5:c8:3b:0a:6b:54:cc:e9:0d: 04:fe:18:89:90:a4:64:bd:b3:5d:c8:27:67:9c:9c:9c:23:68: e5:e1:b9:77:34:ba:90:77:24:0d:ee:c8:e2:96:d4:94:11:9e: ed:75:53:a9:82:92:89:29:0f:18:a1:44:9f:af:c9:c8:91:12: 28:20:b5:df:9f:fc:82:65:98:d5:6b:12:f5:c2:14:e4:85:ba: 57:24:f7:c5:95:85:68:b2:2f:4b:2f:3d:ad:41:8b:ee:49:28: ee:be:a8:7a:d5:ff:b4:54:dd:57:41:9e:ad:80:79:98:00:4f: bc:8b:4e:dc:d2:ab:e7:3d:14:e5:2a:f0:20:d4:94:5c:19:10: b5:c9:2b:a5:75:1d:a0:8d:e7:a7:69:f0:54:df:13:0b:a1:e6: 69:30:f4:8d:81:78:ee:f4:d8:4d:87:55:83:88:01:b0:1a:87: aa:1b:10:f6:d7:1d:14:b6:62:b3:54:bf:92:77:eb:28:7f:7e: 01:c1:5e:66:c3:33:de:b5:23:b5:59:a0:6f:b7:34:b1:ed:3d: 6f:2a:fa:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjYwNTExMDE1MjUzWhcNMjYwNTE4MDE1MjUzWjAYMRYwFAYD VQQDEw02YTAxMzY3NS04NTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj2ZOZClg9z5K03d38QUAc4d7f9/lOo+U2HqSdk4MG8J1snaqJyHB0T4ZQ7n 7pqc8vC6ajHEVxwPFSQjj2eFrnDSRkEMzpYKt1uZkjoQ+FGe9xA8cdMh+ivyt1Af hGr6Z4ClImNLEvSyy3vAUVCk6+Ba35nFHzAsGcSawNffh412Az1wjYFHVzfc33Mq j5MPi/HtPWGzOfC7fVMocNn9ZEkN0WYGsvdXQj9Z4NwqxSCYb09k2RdUecL3ST9S BZx6tMQRAHZcdVt68V67ILs8eLNR3ZSPmyp0t0B1ksDrdBiCMFl0hgUdZUg9DDdX hWLijf/EKN90OFu5A4bdVC5ekwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4d3ILa ABwlVMshost0JVjpOcW/MB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACphJKz+/DGBXnUlrcX3yHaHSz/RZGtJ6gesTihaDeugFAerUiItteD+JhJAd xcg7CmtUzOkNBP4YiZCkZL2zXcgnZ5ycnCNo5eG5dzS6kHckDe7I4pbUlBGe7XVT qYKSiSkPGKFEn6/JyJESKCC135/8gmWY1WsS9cIU5IW6VyT3xZWFaLIvSy89rUGL 7kko7r6oetX/tFTdV0GerYB5mABPvItO3NKr5z0U5SrwINSUXBkQtckrpXUdoI3n p2nwVN8TC6HmaTD0jYF47vTYTYdVg4gBsBqHqhsQ9tcdFLZis1S/knfrKH9+AcFe ZsMz3rUjtVmgb7c0se09byr6Cg== -----END CERTIFICATE-----Generated at Wed May 13 03:38:05 2026 by rpki-client