$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: BTrG74P4yV1VKefReCZL7C8G61MO2n9nlxYgo+PW5aU= Subject key identifier: 62:00:80:0C:66:5A:E2:E9:0B:94:19:58:2C:EE:A6:F4:B6:10:37:A7 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 0726 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 071E Signing time: Tue 12 May 2026 22:00:04 +0000 Manifest this update: Tue 12 May 2026 22:00:04 +0000 Manifest next update: Tue 19 May 2026 22:00:04 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: f26onRA1CxQ/4mkoC7zhAzYRXyJyhMRKHZJyJ7c10qo=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1830 (0x726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: May 12 22:00:04 2026 GMT Not After : May 19 22:00:04 2026 GMT Subject: CN=6a03a2e4-27e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:78:31:b0:e9:d1:ac:99:ac:53:35:81:01: 13:58:c1:7e:18:56:03:ca:a0:59:ad:ff:2c:1b:6d: ce:99:62:b7:8a:ce:c8:d4:a7:db:5b:9b:6c:5c:3e: 0a:16:fe:e9:a6:68:d8:f1:b0:0d:d5:a6:76:c6:bc: fe:f4:0e:89:ba:5f:da:52:c3:c1:ee:dd:23:32:d2: ff:c3:35:04:3c:0b:0d:bb:41:d9:79:67:42:4a:25: 31:2c:8c:8d:88:8b:1f:be:9c:12:a6:67:be:c0:02: f3:f1:1f:4d:b5:e3:7b:04:ea:d3:64:86:9d:20:0f: 27:4e:b2:ca:2f:89:22:10:89:ab:80:f5:4c:49:da: 9c:73:28:33:5e:2a:42:f8:ed:24:0a:3d:52:a0:b9: 7b:aa:e8:64:e9:20:75:ac:4b:a6:44:fc:3c:3d:be: 82:1a:92:59:7c:9b:5b:30:18:d8:ad:0a:a8:b4:32: 04:41:5f:7e:dd:f6:40:c1:ed:6b:b0:f5:cc:ae:ec: e1:7b:c4:15:a9:45:b4:2d:db:5a:c5:45:8e:21:c5: e1:2a:de:b5:5d:0e:aa:ef:cc:13:cd:b0:8a:9d:8c: 4a:c9:27:7e:0f:4d:d1:40:7b:53:59:f4:c1:23:f6: 2a:b0:39:47:90:47:1e:b3:e2:c3:a8:ae:7f:b2:13: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:00:80:0C:66:5A:E2:E9:0B:94:19:58:2C:EE:A6:F4:B6:10:37:A7 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e1:83:70:14:5b:56:14:a4:61:fb:95:58:32:0d:e6:b8:9d: eb:8a:46:9e:c7:c8:bb:c9:86:f5:20:d4:4b:bd:fb:07:04:43: 24:12:f7:71:48:11:3d:2c:fd:b2:47:2d:90:54:b0:99:5c:26: 55:83:0f:72:db:36:12:be:83:43:17:e1:c2:70:0e:3b:fe:ca: 05:53:9b:1d:84:05:f1:84:5d:dc:57:a8:be:e1:c3:66:96:99: a1:30:d2:47:79:1a:d9:03:d4:6d:b1:7b:c3:97:d2:f4:ea:05: b8:50:66:49:9d:1e:10:a9:fd:ae:d9:f4:80:0c:7b:ec:4c:27: 28:97:2f:8b:2e:5e:36:a8:87:82:56:41:b3:57:de:3b:74:9c: 1f:0b:a1:10:39:8c:07:51:0d:fd:4f:4e:4d:22:05:2c:1d:4f: 78:4c:69:7d:5a:06:dd:9d:4e:6c:6b:ba:b3:6f:6d:b0:69:69: 12:9e:9e:72:d5:96:4a:ae:c0:d8:f4:18:c6:5e:f1:75:ef:d7: 43:df:9a:dd:3a:0a:5b:be:7a:e7:16:94:6d:59:47:75:0c:a6: 2f:05:b8:44:5d:19:f8:aa:51:1c:74:a4:fc:6c:2a:26:9e:4c: 4c:a2:13:aa:ae:2f:3c:a6:8e:ed:d9:2e:c7:ed:64:00:69:73: e9:d1:aa:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjYwNTEyMjIwMDA0WhcNMjYwNTE5MjIwMDA0WjAYMRYwFAYD VQQDEw02YTAzYTJlNC0yN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth54MbDp0ayZrFM1gQETWMF+GFYDyqBZrf8sG23OmWK3is7I1KfbW5tsXD4K Fv7ppmjY8bAN1aZ2xrz+9A6Jul/aUsPB7t0jMtL/wzUEPAsNu0HZeWdCSiUxLIyN iIsfvpwSpme+wALz8R9NteN7BOrTZIadIA8nTrLKL4kiEImrgPVMSdqccygzXipC +O0kCj1SoLl7quhk6SB1rEumRPw8Pb6CGpJZfJtbMBjYrQqotDIEQV9+3fZAwe1r sPXMruzhe8QVqUW0LdtaxUWOIcXhKt61XQ6q78wTzbCKnYxKySd+D03RQHtTWfTB I/YqsDlHkEces+LDqK5/shMxswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIAgAxm WuLpC5QZWCzupvS2EDenMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ+GDcBRbVhSkYfuVWDIN5rid64pGnsfIu8mG9SDUS737BwRDJBL3cUgRPSz9 skctkFSwmVwmVYMPcts2Er6DQxfhwnAOO/7KBVObHYQF8YRd3FeovuHDZpaZoTDS R3ka2QPUbbF7w5fS9OoFuFBmSZ0eEKn9rtn0gAx77EwnKJcviy5eNqiHglZBs1fe O3ScHwuhEDmMB1EN/U9OTSIFLB1PeExpfVoG3Z1ObGu6s29tsGlpEp6ectWWSq7A 2PQYxl7xde/XQ9+a3ToKW7565xaUbVlHdQymLwW4RF0Z+KpRHHSk/GwqJp5MTKIT qq4vPKaO7dkux+1kAGlz6dGqGw== -----END CERTIFICATE-----Generated at Wed May 13 11:41:48 2026 by rpki-client