$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft File: hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json) Hash identifier: 0m+Dnii2E5jvHFg3nsR977vAeKK8IU8/ZWiGpq4xwC4= Subject key identifier: B9:D5:0C:50:77:FD:AA:23:D3:F7:20:C3:27:02:58:30:F7:98:C9:26 Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 Certificate issuer: /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft Manifest number: 0E Signing time: Mon 11 May 2026 09:20:02 +0000 Manifest this update: Mon 11 May 2026 09:20:01 +0000 Manifest next update: Mon 18 May 2026 09:20:01 +0000 Files and hashes: 1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: tFuu1zivKt/cB+57K4iv6kVY4rq5xh9gxRc4qI7BRdo=) 2: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=) 3: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Validity Not Before: May 11 09:20:01 2026 GMT Not After : May 18 09:20:01 2026 GMT Subject: CN=6a019f42-dc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:42:8a:67:ef:20:a4:4e:c0:ea:21:fe:99: 83:d5:39:cd:67:49:ed:4c:5a:db:1a:4a:ab:b6:0e: 4c:73:37:8f:8b:e6:20:d1:a7:48:a7:8b:9f:d5:ba: 27:30:39:a3:64:d8:43:fd:5b:a6:bf:74:a4:cc:b1: bb:30:9b:0b:82:64:33:1e:e4:df:4f:fd:a1:2f:79: 94:71:40:a9:4a:fe:3f:cf:4d:d2:9c:fe:87:d1:ba: 83:f6:13:0a:df:bd:89:7e:85:c4:45:4d:cf:e6:43: e5:3f:82:ff:20:5b:8b:bf:f1:0f:54:46:4c:0f:d6: 25:25:c2:f2:1c:7d:ac:df:3f:aa:95:65:98:5c:11: 64:e1:53:fd:1f:15:e7:d9:58:8d:65:c5:37:c5:a0: 85:c9:8e:81:a3:a9:6a:73:84:d3:c3:95:77:37:c1: 93:78:32:63:8b:0d:e0:f6:12:53:78:41:bd:93:35: f7:68:2e:2b:e7:05:74:98:89:4a:10:60:59:48:e8: fd:e3:19:de:82:51:ec:94:9d:89:be:da:c4:ea:a9: f0:6c:9f:35:2a:69:73:5d:ac:e9:f2:30:b1:df:77: d4:3b:49:c1:ca:d0:7c:19:74:98:aa:f5:84:13:20: c9:4d:ef:67:13:03:b2:c3:32:22:66:5a:22:8a:82: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:0C:50:77:FD:AA:23:D3:F7:20:C3:27:02:58:30:F7:98:C9:26 X509v3 Authority Key Identifier: keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:a0:1d:d3:ab:f1:88:cf:37:b1:85:58:1f:c9:fb:ee:1a: d9:a1:b2:44:cd:28:8b:ce:09:7d:f2:09:8a:db:1f:ea:1c:c4: f3:a8:3e:5f:de:18:0e:67:16:c6:b9:d6:02:2a:7c:59:46:13: 1d:7f:3f:1b:c0:cf:67:ca:eb:d1:40:d0:88:fe:6d:fc:3b:ef: 87:7d:b2:a7:e4:8b:ee:ab:e7:42:0e:5c:ec:24:b9:a0:c6:c5: 93:a8:62:6a:be:c8:de:00:e2:0a:42:d0:8a:a9:52:8a:24:44: 6e:ee:87:4f:49:a0:c2:7e:44:c9:61:8e:53:e9:4e:fd:26:60: 92:12:d1:ad:a4:72:e7:d3:81:38:49:89:65:f6:19:86:bc:71: 5f:52:03:cb:e9:96:c5:da:e0:b3:37:b9:eb:a1:5e:5f:30:96: fa:19:c3:d1:14:ed:dd:b4:3b:5e:c9:80:10:6f:a7:32:d4:e0: ac:bb:aa:8c:cf:ee:95:5e:33:4d:fd:57:e5:3f:ba:0a:c1:9c: df:d4:da:35:1c:21:9c:8a:84:71:9a:9c:7a:96:c6:2e:3b:99: 09:dc:b6:31:2e:1b:3a:a5:21:d4:58:05:d7:be:0a:a0:c9:8f: 62:0f:8a:06:8e:65:b6:57:88:4c:65:22:70:1d:99:fe:9e:98: 76:62:a0:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoODUxMkU5Njk5NTZBQ0I3RDNFNzYwRUQ5ODZFMUJFRUEz RjhBQzBGODAeFw0yNjA1MTEwOTIwMDFaFw0yNjA1MTgwOTIwMDFaMBgxFjAUBgNV BAMTDTZhMDE5ZjQyLWRjMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJLUKKZ+8gpE7A6iH+mYPVOc1nSe1MWtsaSqu2DkxzN4+L5iDRp0ini5/Vuicw OaNk2EP9W6a/dKTMsbswmwuCZDMe5N9P/aEveZRxQKlK/j/PTdKc/ofRuoP2Ewrf vYl+hcRFTc/mQ+U/gv8gW4u/8Q9URkwP1iUlwvIcfazfP6qVZZhcEWThU/0fFefZ WI1lxTfFoIXJjoGjqWpzhNPDlXc3wZN4MmOLDeD2ElN4Qb2TNfdoLivnBXSYiUoQ YFlI6P3jGd6CUeyUnYm+2sTqqfBsnzUqaXNdrOnyMLHfd9Q7ScHK0HwZdJiq9YQT IMlN72cTA7LDMiJmWiKKgt0NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUudUMUHf9 qiPT9yDDJwJYMPeYySYwHwYDVR0jBBgwFoAUhRLpaZVqy30+dg7ZhuG+6j+KwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzkxQkUyQkMwM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMwLWRnN1podUctNmotS3dQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFJMcGFaVnF5MzAtZGc3Wmh1Ry02ai1Ld1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzkxQkUyQkMwM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMw LWRnN1podUctNmotS3dQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVRKAd06vxiM83sYVYH8n77hrZobJEzSiLzgl98gmK2x/qHMTzqD5f3hgOZxbG udYCKnxZRhMdfz8bwM9nyuvRQNCI/m38O++HfbKn5Ivuq+dCDlzsJLmgxsWTqGJq vsjeAOIKQtCKqVKKJERu7odPSaDCfkTJYY5T6U79JmCSEtGtpHLn04E4SYll9hmG vHFfUgPL6ZbF2uCzN7nroV5fMJb6GcPRFO3dtDteyYAQb6cy1OCsu6qMz+6VXjNN /VflP7oKwZzf1No1HCGcioRxmpx6lsYuO5kJ3LYxLhs6pSHUWAXXvgqgyY9iD4oG jmW2V4hMZSJwHZn+nph2YqBP -----END CERTIFICATE-----Generated at Wed May 13 07:45:22 2026 by rpki-client