$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: 0lA1VmHUpAtW2Gn5HUhY9o+4s9CbsLnWAnMtJQwxu3w= Subject key identifier: C4:78:A3:5C:2B:74:F3:59:B1:1B:45:93:C8:FF:0E:0E:8F:2E:07:A8 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 018A Signing time: Wed 13 May 2026 04:36:59 +0000 Manifest this update: Wed 13 May 2026 04:36:58 +0000 Manifest next update: Wed 20 May 2026 04:36:58 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: hC3PsLuGsXuCN6tMsdlnAx+VP3SL5H21SAjCMBqm1ts=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: 1zV+/1R8NXTU00HPSWjbCXmTRWs8S22JUS1CXgvAzR4=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: GCQF0mtb8Gekl6O8/+EeLV+4PjQyO396ilHkXd+2kuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: May 13 04:36:58 2026 GMT Not After : May 20 04:36:58 2026 GMT Subject: CN=6a03ffea-d46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:7c:15:73:9d:10:d7:5e:71:ca:b3:4d:dd: cb:ca:63:f5:fa:eb:a9:dc:d9:42:1b:b4:99:21:f0: 72:9e:c9:96:e3:e8:34:11:9f:22:e8:be:c4:04:8b: 82:98:b4:04:8d:93:89:71:80:01:60:6d:07:5a:16: db:ec:4d:45:a7:f4:ee:72:d0:37:07:92:19:3b:97: 52:59:cf:5d:40:76:7d:78:24:ff:cb:ab:0d:da:3f: a6:d3:25:2f:0c:1b:d6:7d:4f:83:42:09:ac:bc:7a: ed:13:79:33:ba:34:c8:f5:8b:e6:35:25:56:db:0e: 7b:44:73:be:22:49:f5:59:bc:c1:19:ff:1d:3f:88: 6d:ee:c5:2c:5b:a4:a1:12:c0:85:cf:54:da:0c:38: d1:67:4d:fe:15:e4:26:ca:45:3a:d5:bf:76:5b:16: 77:18:a9:7d:d8:97:2d:d4:3a:c2:9f:f7:2a:20:15: 79:5c:b9:a1:6c:26:73:a5:d7:7b:95:ea:7b:4e:36: bd:c3:82:cf:9d:64:9c:39:31:79:d5:83:23:a8:28: e1:4e:a0:1e:6c:e7:2e:ea:55:1d:24:b9:ad:18:76: 98:ea:4e:b7:fc:03:c4:ec:74:83:d2:e3:6d:6b:18: 51:49:24:08:fb:bc:74:a2:be:6d:44:92:86:41:49: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:A3:5C:2B:74:F3:59:B1:1B:45:93:C8:FF:0E:0E:8F:2E:07:A8 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:87:c6:d6:f8:55:5e:6c:ec:99:df:d7:10:05:19:86:3c:90: f4:c9:40:69:b7:99:a9:d9:56:cf:53:00:79:25:f9:73:cc:7f: 6d:71:b8:02:be:a9:58:d9:08:e1:8f:f5:18:2e:e7:92:a3:15: 58:02:c7:6d:9b:a7:e7:c6:97:61:b7:46:46:86:c2:da:1f:db: a4:a0:0a:7f:35:ac:5e:c6:c8:b5:55:75:76:bf:2e:0f:ca:45: 0e:11:f4:35:70:f8:c7:66:fc:b6:9f:b1:60:3a:ab:64:5b:c0: e4:e2:9e:f2:b9:a9:a8:b0:5a:d7:17:d1:a1:c5:6c:9f:07:4e: 43:6f:38:00:a3:50:81:28:3b:b5:13:41:06:76:e7:ad:78:47: 58:4a:c5:cf:71:67:de:19:5d:5f:3d:1e:ea:57:24:f0:88:41: ce:7f:85:e9:9d:11:53:2d:fd:2e:4d:43:e5:a9:a6:cf:73:f9: e3:f1:28:e8:f1:3f:d0:1e:74:75:f9:12:81:9e:f6:7c:51:84: 86:02:89:f3:a1:80:8b:f1:e8:d9:e0:95:36:5d:c5:53:1e:25: 0d:e0:84:da:62:1c:21:32:8b:8c:84:d1:a3:cd:e6:3f:9c:83: 8e:d9:2b:a0:59:ce:a3:aa:c9:6f:f6:8f:b3:b0:68:8c:b1:6c: 0f:5d:de:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjYwNTEzMDQzNjU4WhcNMjYwNTIwMDQzNjU4WjAYMRYwFAYD VQQDEw02YTAzZmZlYS1kNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcN8FXOdENdeccqzTd3LymP1+uup3NlCG7SZIfBynsmW4+g0EZ8i6L7EBIuC mLQEjZOJcYABYG0HWhbb7E1Fp/TuctA3B5IZO5dSWc9dQHZ9eCT/y6sN2j+m0yUv DBvWfU+DQgmsvHrtE3kzujTI9YvmNSVW2w57RHO+Ikn1WbzBGf8dP4ht7sUsW6Sh EsCFz1TaDDjRZ03+FeQmykU61b92WxZ3GKl92Jct1DrCn/cqIBV5XLmhbCZzpdd7 lep7Tja9w4LPnWScOTF51YMjqCjhTqAebOcu6lUdJLmtGHaY6k63/APE7HSD0uNt axhRSSQI+7x0or5tRJKGQUldywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMR4o1wr dPNZsRtFk8j/Dg6PLgeoMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJYfG1vhVXmzsmd/XEAUZhjyQ9MlAabeZqdlWz1MAeSX5c8x/bXG4Ar6pWNkI 4Y/1GC7nkqMVWALHbZun58aXYbdGRobC2h/bpKAKfzWsXsbItVV1dr8uD8pFDhH0 NXD4x2b8tp+xYDqrZFvA5OKe8rmpqLBa1xfRocVsnwdOQ284AKNQgSg7tRNBBnbn rXhHWErFz3Fn3hldXz0e6lck8IhBzn+F6Z0RUy39Lk1D5ammz3P54/Eo6PE/0B50 dfkSgZ72fFGEhgKJ86GAi/Ho2eCVNl3FUx4lDeCE2mIcITKLjITRo83mP5yDjtkr oFnOo6rJb/aPs7BojLFsD13eTw== -----END CERTIFICATE-----Generated at Wed May 13 12:50:12 2026 by rpki-client