$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json) Hash identifier: L+xZfnHwIZXW/t2QIfYUZ4VmV+F44Xmn2l5Bp0AI7gY= Subject key identifier: F1:DA:05:F8:ED:4D:1B:B0:FC:0E:1D:91:BC:98:22:9E:D6:28:3C:B2 Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17 Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft Manifest number: 88 Signing time: Mon 11 May 2026 07:44:22 +0000 Manifest this update: Mon 11 May 2026 07:44:22 +0000 Manifest next update: Mon 18 May 2026 07:44:22 +0000 Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: Gov60C0L7QzZGwGBzS2+kyprXX+LrsyM/3sXTY5TsVU=) 2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=) 3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317 Validity Not Before: May 11 07:44:22 2026 GMT Not After : May 18 07:44:22 2026 GMT Subject: CN=6a0188d6-e964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:1c:e4:48:c6:e7:f0:0a:be:39:05:9c:cf: 8d:a8:a4:7c:87:7e:69:d3:39:7f:9a:62:f1:fb:dc: 0f:82:ec:0b:0d:71:cf:58:42:f6:63:0e:5c:53:6b: 93:b1:eb:ed:65:99:58:d9:af:cf:ab:5c:ee:b7:0e: 72:07:09:17:73:2d:00:ee:a4:07:b9:d9:6a:d0:90: b2:b6:6c:fb:b5:db:c6:7f:cb:39:02:d9:e4:b7:9b: 72:a4:f6:88:6f:ca:db:75:60:89:ba:50:1b:5c:7c: 2e:d5:3d:1a:5b:90:98:5e:6f:31:7f:93:a5:db:54: 46:27:c7:bf:6a:fa:96:94:6b:ec:d6:a6:bc:18:b0: 2d:97:69:cd:5b:11:22:fc:fa:78:3e:f2:3c:46:58: e2:93:1a:96:e0:74:ef:8d:96:c6:65:3d:50:a1:27: 04:59:37:6e:a9:dd:67:88:dc:e3:54:ef:e1:af:11: 1e:b8:8e:98:22:46:05:d4:2f:b6:3a:5b:75:3a:59: 24:82:54:b3:9e:54:f9:35:0d:8a:b4:93:da:76:33: 47:7a:96:82:f3:94:6a:90:73:d6:40:77:2b:42:e6: c7:96:51:1c:f8:36:15:3f:5d:6d:47:61:58:bb:ed: ec:dd:fe:40:51:18:57:b0:08:c1:cb:d7:4c:b9:80: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DA:05:F8:ED:4D:1B:B0:FC:0E:1D:91:BC:98:22:9E:D6:28:3C:B2 X509v3 Authority Key Identifier: keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8c:a9:fd:52:44:61:9e:6c:49:e1:63:aa:0d:a8:35:05:2d: 39:54:2d:84:92:e5:cd:1f:02:18:c4:b8:f5:ed:c0:22:02:99: 03:02:15:cf:16:44:2a:dd:78:33:7b:6a:49:d7:44:9a:24:86: e5:f7:6e:eb:d0:a3:1d:27:f1:32:e7:76:e4:ff:4c:f8:b4:b1: c4:7d:72:f9:63:e0:6c:74:58:50:0c:64:a2:ae:69:7c:d0:bd: 2c:ae:f2:e7:ff:c8:ba:52:ae:6b:88:13:3c:cd:a2:32:5a:56: ca:65:25:8f:a1:27:a0:26:4a:84:21:92:a0:d1:c7:e8:e0:a0: e4:b7:98:18:17:e2:67:23:cd:ca:28:52:87:8f:bb:b8:d9:f4: 4d:7e:fa:63:18:e3:24:1a:9c:63:b5:0b:06:b1:1f:f5:5c:ec: 09:fb:57:ad:9c:42:6a:a7:5e:64:40:e1:33:24:2c:8d:87:2e: d2:ae:33:cf:78:0b:44:95:81:e6:41:d3:d9:0c:df:c9:91:61: 0b:54:84:54:f7:e6:92:f3:9e:bf:fa:05:ab:3b:93:87:58:09: bb:fd:6b:55:67:02:c1:34:26:89:e8:d3:0d:e9:8a:31:b7:66: af:92:99:0f:a6:6f:54:a9:f9:fd:7a:cb:b9:c3:56:98:d8:ae: f1:6a:a6:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQjYxMTAvBgNVBAUTKDc1MTFDQjMxM0VCODNGMUMzOTAyQUE2M0M0M0I3QTAz NkFDQzYzMTcwHhcNMjYwNTExMDc0NDIyWhcNMjYwNTE4MDc0NDIyWjAYMRYwFAYD VQQDEw02YTAxODhkNi1lOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk0Yc5EjG5/AKvjkFnM+NqKR8h35p0zl/mmLx+9wPguwLDXHPWEL2Yw5cU2uT sevtZZlY2a/Pq1zutw5yBwkXcy0A7qQHudlq0JCytmz7tdvGf8s5Atnkt5typPaI b8rbdWCJulAbXHwu1T0aW5CYXm8xf5Ol21RGJ8e/avqWlGvs1qa8GLAtl2nNWxEi /Pp4PvI8RljikxqW4HTvjZbGZT1QoScEWTduqd1niNzjVO/hrxEeuI6YIkYF1C+2 Olt1OlkkglSznlT5NQ2KtJPadjNHepaC85RqkHPWQHcrQubHllEc+DYVP11tR2FY u+3s3f5AURhXsAjBy9dMuYAz+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHaBfjt TRuw/A4dkbyYIp7WKDyyMB8GA1UdIwQYMBaAFHURyzE+uD8cOQKqY8Q7egNqzGMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNCNi81NDgxQUZDMDgx QUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4dzVBcXBqeER0NkEyck1Z eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSExNVDY0UHh3NUFxcGp4RHQ2QTJyTVl4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNCNi81NDgxQUZDMDgxQUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4 dzVBcXBqeER0NkEyck1ZeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIyp/VJEYZ5sSeFjqg2oNQUtOVQthJLlzR8CGMS49e3AIgKZAwIVzxZEKt14 M3tqSddEmiSG5fdu69CjHSfxMud25P9M+LSxxH1y+WPgbHRYUAxkoq5pfNC9LK7y 5//IulKua4gTPM2iMlpWymUlj6EnoCZKhCGSoNHH6OCg5LeYGBfiZyPNyihSh4+7 uNn0TX76YxjjJBqcY7ULBrEf9VzsCftXrZxCaqdeZEDhMyQsjYcu0q4zz3gLRJWB 5kHT2QzfyZFhC1SEVPfmkvOev/oFqzuTh1gJu/1rVWcCwTQmiejTDemKMbdmr5KZ D6ZvVKn5/XrLucNWmNiu8Wqmyw== -----END CERTIFICATE-----Generated at Wed May 13 04:45:50 2026 by rpki-client