$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json) Hash identifier: oipj00DLmSkVgNBsEwMxSPvXJfXGCV2ugbAUkhK6vSg= Subject key identifier: 83:97:BA:1A:5B:4E:64:2F:25:6A:02:C4:E6:33:9A:31:B7:35:EC:E7 Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft Manifest number: 5C Signing time: Mon 11 May 2026 08:19:56 +0000 Manifest this update: Mon 11 May 2026 08:19:55 +0000 Manifest next update: Mon 18 May 2026 08:19:55 +0000 Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: gnPpS1mC35irr21Oh+yusYutEWxw/H/k57Z8ENwtFnY=) 2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: 89NQPcLshXPkKgPq6c+ywAb5yirtq9AA9hqm/7FcBQU=) 3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: ld7P2PELFqfVNXiU+jG2B0uLi23klkJ5bfoslPWrnms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Validity Not Before: May 11 08:19:55 2026 GMT Not After : May 18 08:19:55 2026 GMT Subject: CN=6a01912c-f49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:0c:4f:c9:7f:f2:de:8c:9d:a4:1e:57:d6: 2b:d4:0b:38:a8:a9:7b:c0:95:dc:45:b1:75:25:0e: e1:1a:f4:09:ec:a6:fd:55:76:26:11:f5:c1:24:0b: 26:61:45:69:64:60:c1:14:ed:37:4b:3d:29:63:2f: d6:0a:4a:c8:de:13:91:05:db:38:e2:e2:7f:27:cb: 07:3b:de:da:11:1c:da:6d:c1:54:da:ec:42:f0:11: 59:46:4b:9e:4a:a2:8b:20:b7:4f:ee:a8:2e:0a:f2: 88:9b:d8:1c:ab:2d:57:52:a0:aa:4d:96:1b:03:b1: 50:0e:e0:03:0f:a8:48:49:63:bd:4d:a7:17:09:3e: 2b:d0:b2:82:e5:aa:e7:d7:69:7a:85:a0:63:e2:3e: a3:e0:ed:39:c0:15:b3:e0:e9:16:bd:3b:11:de:92: 26:8b:b0:f4:72:6f:63:8c:45:29:9f:ba:0a:ca:6a: 30:ca:a0:bb:05:96:2f:f6:06:a8:64:3b:28:48:cb: fd:15:e7:3d:01:6f:64:27:ba:14:27:fa:07:39:cf: 97:33:13:88:b7:3e:f7:14:ed:e5:14:ac:e3:79:78: 39:be:c6:f6:fe:8f:e8:e4:59:8e:16:5c:b9:81:c3: 72:0c:d4:f1:fc:34:02:27:c2:fd:68:d0:71:ce:da: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:97:BA:1A:5B:4E:64:2F:25:6A:02:C4:E6:33:9A:31:B7:35:EC:E7 X509v3 Authority Key Identifier: keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:33:ac:ce:5b:d7:ba:1d:9d:75:41:9b:56:df:1e:ab:d5:8f: 7f:ab:79:42:27:d2:79:03:c1:d2:a6:7b:fb:31:13:1f:2a:8b: 3f:b9:3a:eb:69:fa:51:aa:b8:c0:17:f5:0f:6e:db:0a:15:0d: 23:ac:76:c0:66:97:0f:43:04:53:42:30:b5:86:7f:ad:ad:e0: 78:c3:0a:e2:2e:d1:00:da:11:52:14:ea:46:3f:f6:48:8b:09: 62:f5:ba:5b:ce:1d:17:91:aa:91:d5:a0:84:bc:3e:1f:c9:91: 99:5a:6d:36:2d:7f:ef:a2:53:e7:e4:73:c0:7a:58:ba:70:db: 93:6d:e4:ab:08:00:9b:1d:fe:ed:50:fd:1b:2b:1a:ea:cd:2b: 7f:fa:4a:cf:89:89:43:0a:2d:93:cc:af:db:dc:c7:b9:b7:73: a6:a0:4b:95:f0:f2:b4:c9:b0:25:ca:98:48:98:fb:c6:b6:38: f0:e1:09:6c:40:96:a2:19:3b:80:77:b2:14:3a:49:58:2a:c7: 3e:1a:00:e8:6f:98:6a:93:99:35:cd:e9:6c:f1:47:01:62:c3: 5a:a1:d1:8a:3d:df:d1:bb:a4:15:68:6f:c8:c8:18:4e:d5:e2: 67:56:03:af:d1:37:0a:0c:01:c1:95:bc:cd:67:88:93:41:f9: 68:79:43:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDBERjExMC8GA1UEBRMoRkI0NzFGODQxMzA4OUVENzAxQkRBQjQwQUU2M0M3ODhG NTI2QUI2RjAeFw0yNjA1MTEwODE5NTVaFw0yNjA1MTgwODE5NTVaMBgxFjAUBgNV BAMTDTZhMDE5MTJjLWY0OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo/QxPyX/y3oydpB5X1ivUCzioqXvAldxFsXUlDuEa9Anspv1VdiYR9cEkCyZh RWlkYMEU7TdLPSljL9YKSsjeE5EF2zji4n8nywc73toRHNptwVTa7ELwEVlGS55K oosgt0/uqC4K8oib2ByrLVdSoKpNlhsDsVAO4AMPqEhJY71NpxcJPivQsoLlqufX aXqFoGPiPqPg7TnAFbPg6Ra9OxHekiaLsPRyb2OMRSmfugrKajDKoLsFli/2Bqhk OyhIy/0V5z0Bb2QnuhQn+gc5z5czE4i3PvcU7eUUrON5eDm+xvb+j+jkWY4WXLmB w3IM1PH8NAInwv1o0HHO2lvXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUg5e6GltO ZC8lagLE5jOaMbc17OcwHwYDVR0jBBgwFoAU+0cfhBMIntcBvatArmPHiPUmq28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwMERGLzI3Nzc4RjM4Q0JE MTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRjQnZhdEFybVBIaVBVbXEy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBjZmhCTUludGNCdmF0QXJtUEhpUFVtcTI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw MERGLzI3Nzc4RjM4Q0JEMTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRj QnZhdEFybVBIaVBVbXEyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOM6zOW9e6HZ11QZtW3x6r1Y9/q3lCJ9J5A8HSpnv7MRMfKos/uTrrafpRqrjA F/UPbtsKFQ0jrHbAZpcPQwRTQjC1hn+treB4wwriLtEA2hFSFOpGP/ZIiwli9bpb zh0XkaqR1aCEvD4fyZGZWm02LX/volPn5HPAeli6cNuTbeSrCACbHf7tUP0bKxrq zSt/+krPiYlDCi2TzK/b3Me5t3OmoEuV8PK0ybAlyphImPvGtjjw4QlsQJaiGTuA d7IUOklYKsc+GgDob5hqk5k1zels8UcBYsNaodGKPd/Ru6QVaG/IyBhO1eJnVgOv 0TcKDAHBlbzNZ4iTQfloeUNU -----END CERTIFICATE-----Generated at Wed May 13 01:01:49 2026 by rpki-client