$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: tFrScA1PLImFd14y3nPgannsH0Q/inFLjeOnzyGYvYo= Subject key identifier: 42:BD:5E:5C:B7:4D:5E:3A:A9:5D:20:68:04:B2:4D:7A:03:A2:1A:B4 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 043D Signing time: Wed 13 May 2026 00:25:40 +0000 Manifest this update: Wed 13 May 2026 00:25:40 +0000 Manifest next update: Wed 20 May 2026 00:25:40 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 23fnCqJ4oCXconv01QFa9qovN1Dhin4aVvVAg+EUG3U=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=) 3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=) 4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: May 13 00:25:40 2026 GMT Not After : May 20 00:25:40 2026 GMT Subject: CN=6a03c504-6246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:bb:bf:8f:e7:06:e9:2c:f4:86:2c:43:1b: 11:02:19:1d:0e:78:03:9d:b5:16:11:9b:29:12:08: 72:46:3f:c8:a0:cd:60:eb:fe:3f:64:fe:c4:dc:f7: ec:18:dc:55:a6:60:9c:cf:25:a1:e7:a2:ab:03:f9: 0d:49:9a:0d:bc:5f:3e:42:d4:7a:01:b7:98:c5:1f: 38:a5:1d:55:09:3e:7e:7d:d1:2c:4d:c9:a2:05:66: db:93:43:46:c0:23:50:d9:ef:9b:ff:a1:ed:00:84: 15:e0:90:22:e8:61:b0:5d:ed:a1:86:d3:39:8a:b7: c6:d6:b2:94:17:cb:42:a6:7f:61:2c:25:bf:8d:16: 7c:8b:b0:73:2f:eb:00:ba:59:06:8a:ec:ec:98:d7: a0:4d:b8:fb:a3:22:4e:79:ed:9b:2f:ca:40:cc:42: b1:dd:e5:6e:1f:98:14:1a:19:4b:7e:45:b2:cd:b9: 66:96:04:e4:4f:43:0f:d0:24:f6:b7:24:b1:cd:40: 83:d6:81:b5:5c:f2:59:ad:f6:5d:21:5a:ee:bc:94: b0:17:c7:cb:2f:8d:88:41:89:37:09:f2:72:06:48: 34:0d:4b:b1:b4:50:19:e0:eb:a0:dd:8a:78:13:62: 1e:01:6c:9b:92:e4:6e:45:bd:1a:20:17:26:ea:ba: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BD:5E:5C:B7:4D:5E:3A:A9:5D:20:68:04:B2:4D:7A:03:A2:1A:B4 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7f:b6:4e:56:12:f2:50:bf:eb:13:4d:23:37:f1:1a:45:69: 2b:d2:97:46:e1:f8:d0:68:38:80:f5:5a:ef:2a:44:01:01:63: aa:85:97:8f:d1:aa:f8:ea:05:16:2a:25:16:a6:62:07:db:e9: 5c:c1:33:d7:a2:de:ee:03:61:b9:8a:8c:71:1b:f9:5d:52:8d: 74:11:8e:fe:52:3b:e3:cf:e8:94:28:06:5d:28:44:02:a0:71: 52:7b:db:ed:68:36:c7:2f:6d:8e:ee:c3:06:37:7e:a2:67:36: 96:a2:02:c2:0b:9e:b2:23:ec:b3:bf:56:54:1a:98:5c:ab:e7: 0c:32:40:c0:bf:fe:30:be:32:e3:eb:a3:80:71:94:60:70:28: ea:d1:c3:d7:c8:c4:05:5e:76:73:70:13:44:e7:96:ac:c0:9e: c2:92:90:42:fc:76:00:a3:ea:47:d0:1b:bd:24:9a:a5:25:38: e9:0f:ad:24:50:40:23:50:1f:56:15:6b:10:17:db:3d:0a:e4: e2:16:d7:74:f9:e1:d2:d5:ee:8a:02:e5:73:e7:ba:67:54:e6: 8a:57:c3:2d:bb:8e:b1:32:ee:35:f7:4b:d6:05:0a:46:63:6b: 66:87:d7:67:93:dd:fd:58:4b:47:38:6a:f6:4a:fd:cc:08:c2: 26:52:a6:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYwNTEzMDAyNTQwWhcNMjYwNTIwMDAyNTQwWjAYMRYwFAYD VQQDEw02YTAzYzUwNC02MjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzni7v4/nBuks9IYsQxsRAhkdDngDnbUWEZspEghyRj/IoM1g6/4/ZP7E3Pfs GNxVpmCczyWh56KrA/kNSZoNvF8+QtR6AbeYxR84pR1VCT5+fdEsTcmiBWbbk0NG wCNQ2e+b/6HtAIQV4JAi6GGwXe2hhtM5irfG1rKUF8tCpn9hLCW/jRZ8i7BzL+sA ulkGiuzsmNegTbj7oyJOee2bL8pAzEKx3eVuH5gUGhlLfkWyzblmlgTkT0MP0CT2 tySxzUCD1oG1XPJZrfZdIVruvJSwF8fLL42IQYk3CfJyBkg0DUuxtFAZ4Oug3Yp4 E2IeAWybkuRuRb0aIBcm6rrpgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEK9Xly3 TV46qV0gaASyTXoDohq0MB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF3+2TlYS8lC/6xNNIzfxGkVpK9KXRuH40Gg4gPVa7ypEAQFjqoWXj9Gq+OoF FiolFqZiB9vpXMEz16Le7gNhuYqMcRv5XVKNdBGO/lI748/olCgGXShEAqBxUnvb 7Wg2xy9tju7DBjd+omc2lqICwguesiPss79WVBqYXKvnDDJAwL/+ML4y4+ujgHGU YHAo6tHD18jEBV52c3ATROeWrMCewpKQQvx2AKPqR9AbvSSapSU46Q+tJFBAI1Af VhVrEBfbPQrk4hbXdPnh0tXuigLlc+e6Z1TmilfDLbuOsTLuNfdL1gUKRmNrZofX Z5Pd/VhLRzhq9kr9zAjCJlKmeA== -----END CERTIFICATE-----Generated at Wed May 13 04:02:02 2026 by rpki-client