$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: c1FNO8FJz42+KDwLQn/v6+NGajbFfDw7gaQmtb8dMb4= Subject key identifier: F5:55:ED:58:4A:28:54:E8:82:EE:B9:1E:08:83:AD:7A:A9:29:0B:58 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 024C Signing time: Mon 11 May 2026 02:29:44 +0000 Manifest this update: Mon 11 May 2026 02:29:43 +0000 Manifest next update: Mon 18 May 2026 02:29:43 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: +cAPYtL1CDH+pRYuLNCvdMMbDeZc2KgCLdmtPikltRk=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: May 11 02:29:43 2026 GMT Not After : May 18 02:29:43 2026 GMT Subject: CN=6a013f18-ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:ac:e8:eb:28:cf:52:5b:f1:84:56:1f:58: 74:48:62:5a:2a:d6:62:f1:56:cb:f2:5a:cd:b5:89: cf:49:86:75:e1:5f:c8:13:b3:a7:22:d9:82:c4:64: fd:9b:76:66:27:c1:0a:59:45:b2:bc:91:d5:9a:c4: 4d:64:ed:de:5d:b3:78:f4:bc:c1:86:d6:b8:b3:51: a3:83:56:28:e6:83:81:b0:7e:61:e8:8f:f6:61:04: 56:28:0e:38:b1:9c:1b:63:48:2a:c5:8a:c7:66:76: 18:11:f4:86:44:e1:f8:4a:a1:04:82:62:fa:7f:d5: 94:5b:d7:0a:6b:b7:49:6b:c7:e0:b1:36:3b:62:81: 8b:52:5a:01:8b:41:86:9e:c7:6a:19:66:f5:f1:d4: 4e:29:fa:9e:2a:ce:03:db:b2:d7:ce:5b:54:72:21: 2a:c5:04:66:54:f5:77:9f:3e:f3:56:a6:87:b0:44: 1d:02:d6:ca:4a:9e:a3:38:3b:47:65:ca:47:0d:78: 19:82:5f:e8:eb:60:b5:bc:84:87:7f:00:4d:6a:ad: d4:f0:51:1e:61:4f:8a:28:78:b0:ae:48:b4:7a:2e: c3:6f:48:77:ef:55:fe:fd:9c:f7:c0:35:41:ec:7d: a4:a3:0f:41:57:64:94:d8:63:95:d2:7c:9f:d1:81: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:ED:58:4A:28:54:E8:82:EE:B9:1E:08:83:AD:7A:A9:29:0B:58 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d4:43:c2:6e:b5:fd:a1:ff:df:f3:93:53:5c:a4:1c:44:a2: 51:59:84:2e:4b:79:f4:e7:23:ae:c0:45:c6:05:83:51:d2:bf: f8:50:92:01:ff:69:93:96:97:03:d8:e0:9e:01:16:68:79:07: ee:88:3b:2a:02:b5:5b:3c:41:b9:1b:5e:dc:b5:e5:9d:20:20: b1:5f:0d:2c:20:ec:8d:1e:81:64:70:14:2f:78:9c:d8:e5:1a: 96:16:38:3a:d1:df:ca:31:56:a1:32:5f:65:5b:1b:77:ad:55: 2d:47:b8:39:75:39:d6:ff:de:8e:df:be:02:f3:3c:a5:8a:20: e1:b3:b3:ec:40:cc:ba:ca:b0:e4:69:a0:67:78:ba:cf:06:ef: b5:f0:ff:77:c3:5d:2e:5d:4d:a3:32:a3:13:fc:6f:23:2a:3c: e5:2d:b3:9b:15:3d:cd:e4:9c:93:59:ff:f0:95:fd:51:00:71: 97:10:6c:05:85:57:5b:11:aa:b9:b6:6a:84:ed:9f:32:95:e0: 1a:b8:84:6b:74:b3:94:f9:8d:ba:cd:00:98:74:a1:f8:c6:e0: 9a:a3:35:4a:a3:c0:a2:52:e6:f2:26:ba:f8:72:e8:bd:59:e2: f1:d4:61:16:5c:bd:7f:ac:12:2d:18:97:dc:c5:67:23:4d:59: 12:51:b7:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwNTExMDIyOTQzWhcNMjYwNTE4MDIyOTQzWjAYMRYwFAYD VQQDEw02YTAxM2YxOC1jZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHWs6Osoz1Jb8YRWH1h0SGJaKtZi8VbL8lrNtYnPSYZ14V/IE7OnItmCxGT9 m3ZmJ8EKWUWyvJHVmsRNZO3eXbN49LzBhta4s1Gjg1Yo5oOBsH5h6I/2YQRWKA44 sZwbY0gqxYrHZnYYEfSGROH4SqEEgmL6f9WUW9cKa7dJa8fgsTY7YoGLUloBi0GG nsdqGWb18dROKfqeKs4D27LXzltUciEqxQRmVPV3nz7zVqaHsEQdAtbKSp6jODtH ZcpHDXgZgl/o62C1vISHfwBNaq3U8FEeYU+KKHiwrki0ei7Db0h371X+/Zz3wDVB 7H2kow9BV2SU2GOV0nyf0YEnVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVV7VhK KFTogu65HgiDrXqpKQtYMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt9RDwm61/aH/3/OTU1ykHESiUVmELkt59OcjrsBFxgWDUdK/+FCSAf9pk5aX A9jgngEWaHkH7og7KgK1WzxBuRte3LXlnSAgsV8NLCDsjR6BZHAUL3ic2OUalhY4 OtHfyjFWoTJfZVsbd61VLUe4OXU51v/ejt++AvM8pYog4bOz7EDMusqw5GmgZ3i6 zwbvtfD/d8NdLl1NozKjE/xvIyo85S2zmxU9zeSck1n/8JX9UQBxlxBsBYVXWxGq ubZqhO2fMpXgGriEa3SzlPmNus0AmHSh+MbgmqM1SqPAolLm8ia6+HLovVni8dRh Fly9f6wSLRiX3MVnI01ZElG3xQ== -----END CERTIFICATE-----Generated at Wed May 13 04:04:12 2026 by rpki-client