$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: ykitCT4qUERRi2WqYtP+5WUv/4RrKsLdTIbtgYFubCM= Subject key identifier: 49:5C:D2:01:F1:35:CC:14:9A:3A:50:68:7C:9C:26:9F:05:09:A4:DA Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 022A Signing time: Wed 13 May 2026 02:53:32 +0000 Manifest this update: Wed 13 May 2026 02:53:31 +0000 Manifest next update: Wed 20 May 2026 02:53:31 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: bg6jXaS7lB8ByPrWv7u7M/E8dqxXFNVSBb5Cla1QafY=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: Cs3ptyaemhbxseuccDeMnwLugAy1tEjNv7SnS6iKKQk=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) 4: D0EBD7924E6511F18436303FA8833773.roa (hash: WaOvPQhMfI1dSiyB+qCZ5EIn4a5MAxRVB+Oa9t04E0M=) 5: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: May 13 02:53:31 2026 GMT Not After : May 20 02:53:31 2026 GMT Subject: CN=6a03e7ac-caa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7d:e9:ac:8e:bd:bf:0d:5b:6d:2d:3d:78:eb: d9:5f:7e:15:9b:e3:78:89:68:62:f9:a0:59:51:27: b0:17:b4:a7:31:3d:fb:ce:a3:2c:5d:db:f9:92:04: 75:94:15:5f:5a:0a:98:cb:80:ab:8d:2b:8d:76:5e: 40:b3:c5:e8:6f:b3:0b:45:b4:fd:75:1e:2a:f8:99: 5a:91:e5:a3:95:8d:ad:89:56:aa:41:f5:9e:49:8a: ae:e6:c8:76:41:66:68:3a:f7:de:f3:ca:ce:76:05: d8:ac:c0:8b:19:f7:92:28:98:46:43:36:a1:cc:15: 00:32:20:dd:1e:14:75:30:24:8b:6f:34:a0:38:bd: 37:aa:64:31:cd:1d:34:5d:51:89:6a:c9:c8:4f:3a: 45:26:ff:c1:3f:55:61:5f:09:b2:a8:70:a0:f5:51: 3e:e9:45:69:18:ac:7a:4e:c9:de:28:ef:2b:6e:82: ff:f1:ba:43:7d:97:db:90:47:21:aa:89:db:14:e7: a3:2a:55:e6:26:c5:b1:bb:b5:ae:92:d1:1c:4e:b8: 3a:62:f2:d3:a2:db:8e:1f:71:f7:1d:69:17:78:ab: 94:a4:2f:ec:7f:3e:54:52:ab:e0:f8:28:f9:4b:f3: 4a:12:26:97:5a:27:12:6d:9e:16:08:08:82:cc:78: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5C:D2:01:F1:35:CC:14:9A:3A:50:68:7C:9C:26:9F:05:09:A4:DA X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6d:43:0c:3a:c3:98:d8:ee:60:16:17:d8:f9:2e:14:db:9a: 96:7b:96:60:95:a6:3e:e8:e6:5d:0e:ea:95:f5:cf:c5:23:68: 00:58:b1:82:f8:03:21:f6:2b:6d:13:d9:84:cf:97:da:6f:e9: 63:2d:71:d4:e6:01:7e:65:ad:07:d6:7b:81:42:96:d0:4d:6b: b5:9e:32:29:f5:1f:72:65:06:21:9e:ae:d6:21:77:0e:b9:e0: ea:1f:d6:9d:77:7f:5a:45:8e:6a:c6:36:1f:07:60:06:ac:45: 26:c6:da:af:a6:96:cd:cb:42:d9:48:cd:88:c5:cd:99:bb:06: d1:12:a1:dd:f0:67:72:d4:0c:6b:81:ce:f0:7f:cb:a0:a5:ef: f2:6d:99:58:4b:7f:1f:0d:c1:f6:0a:45:8f:b0:35:2d:8a:30: 60:fd:ac:e4:31:f1:37:6a:83:81:f1:e0:f3:e8:96:9f:f8:b3: 17:50:e2:37:8d:e9:11:f6:5a:30:5d:35:26:e6:51:8d:6c:82: 6e:b1:1d:4b:ec:ae:d4:7c:80:a5:e9:52:17:71:62:3e:f0:37: 1b:57:25:cd:00:71:53:5d:b4:9b:ae:30:65:90:24:3b:53:ca: 6e:44:5b:9b:7a:79:ba:05:80:09:cd:9b:1f:57:79:22:84:87: 05:92:53:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNTEzMDI1MzMxWhcNMjYwNTIwMDI1MzMxWjAYMRYwFAYD VQQDEw02YTAzZTdhYy1jYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh33prI69vw1bbS09eOvZX34Vm+N4iWhi+aBZUSewF7SnMT37zqMsXdv5kgR1 lBVfWgqYy4CrjSuNdl5As8Xob7MLRbT9dR4q+JlakeWjlY2tiVaqQfWeSYqu5sh2 QWZoOvfe88rOdgXYrMCLGfeSKJhGQzahzBUAMiDdHhR1MCSLbzSgOL03qmQxzR00 XVGJasnITzpFJv/BP1VhXwmyqHCg9VE+6UVpGKx6TsneKO8rboL/8bpDfZfbkEch qonbFOejKlXmJsWxu7WuktEcTrg6YvLTotuOH3H3HWkXeKuUpC/sfz5UUqvg+Cj5 S/NKEiaXWicSbZ4WCAiCzHi7lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElc0gHx NcwUmjpQaHycJp8FCaTaMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAW1DDDrDmNjuYBYX2PkuFNualnuWYJWmPujmXQ7qlfXPxSNoAFixgvgDIfYr bRPZhM+X2m/pYy1x1OYBfmWtB9Z7gUKW0E1rtZ4yKfUfcmUGIZ6u1iF3Drng6h/W nXd/WkWOasY2HwdgBqxFJsbar6aWzctC2UjNiMXNmbsG0RKh3fBnctQMa4HO8H/L oKXv8m2ZWEt/Hw3B9gpFj7A1LYowYP2s5DHxN2qDgfHg8+iWn/izF1DiN43pEfZa MF01JuZRjWyCbrEdS+yu1HyApelSF3FiPvA3G1clzQBxU120m64wZZAkO1PKbkRb m3p5ugWACc2bH1d5IoSHBZJTPg== -----END CERTIFICATE-----Generated at Wed May 13 15:17:56 2026 by rpki-client